last executing test programs: 15m39.61805443s ago: executing program 0 (id=3794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x31) 15m39.519830613s ago: executing program 0 (id=3795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a687337ce816ca484e8bacdb1f07bacd5e6f9d3a9ce7a660c134123499d0eeca30d27a068a011eacd599ac2e8cbb3dee42c5c9ce52be0742f4e710e82c9694c3626a2ccdde", 0x45, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="5856f96e9420396151a140e646dd0f4e094614d625fe1c", 0x17, 0x20000000, 0x0, 0x0) 15m39.425475935s ago: executing program 0 (id=3796): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00W'], 0x24}, 0x1, 0x8000000}, 0x0) 15m39.335332068s ago: executing program 0 (id=3797): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 15m39.24969628s ago: executing program 0 (id=3798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0xffffff7f, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="1c", 0x1, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno', 0x4) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) 15m38.899332789s ago: executing program 0 (id=3799): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') fanotify_init(0x4, 0x101000) socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES64=r2], 0x20) 15m38.899180669s ago: executing program 32 (id=3799): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') fanotify_init(0x4, 0x101000) socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES64=r2], 0x20) 10m54.5594302s ago: executing program 2 (id=4603): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340), 0x40802, 0x0) readv(r0, &(0x7f00000039c0)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1) 10m54.469633213s ago: executing program 2 (id=4604): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ppoll(&(0x7f0000002a80)=[{r0, 0x1523}], 0x1, 0x0, 0x0, 0x0) 10m54.396251575s ago: executing program 2 (id=4605): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x7) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 10m54.327602767s ago: executing program 2 (id=4606): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 10m54.21966787s ago: executing program 2 (id=4607): r0 = io_uring_setup(0x3772, &(0x7f0000000000)={0x0, 0x2331, 0x0, 0x1, 0xea}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001400)={0x1, 0x0, &(0x7f00000013c0)=[r0]}, 0x1) 10m53.796108061s ago: executing program 2 (id=4609): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') lseek(r0, 0xfff, 0x0) 10m53.795906431s ago: executing program 33 (id=4609): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') lseek(r0, 0xfff, 0x0) 9m25.708747523s ago: executing program 1 (id=4809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_setup(0x3ab6, &(0x7f0000000000)={0x0, 0x1e8a, 0x10000, 0x1, 0x20000323}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9m25.45058927s ago: executing program 1 (id=4811): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m23.447279205s ago: executing program 1 (id=4816): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 9m22.603450147s ago: executing program 1 (id=4817): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 9m21.298511662s ago: executing program 1 (id=4818): r0 = socket(0x1e, 0x805, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) 9m20.957010681s ago: executing program 1 (id=4819): setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = getuid() setresuid(0x0, r1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) 9m20.956828121s ago: executing program 34 (id=4819): setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = getuid() setresuid(0x0, r1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) 7.517860928s ago: executing program 4 (id=6342): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000780)=@add_del={0x2, &(0x7f0000000740)='team0\x00'}) 7.339720453s ago: executing program 4 (id=6343): process_mrelease(0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 4.338366554s ago: executing program 4 (id=6344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x24048040) r2 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) getrlimit(0xf, &(0x7f0000000000)) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.338091064s ago: executing program 3 (id=6345): openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.931925364s ago: executing program 4 (id=6346): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000640)=@gcm_256={{0x303}, "272bd2e21fbc971b", "a83f6f9ce07ab567c78432500d714d199483d7b60ea6881bddb1a0a9ee83e939", "9af6b7b2", "2d87824a7af100"}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x5, 0xb4, 0x5, 0x0, 0x1, 0x81}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x4}, {0x4, 0x3}, {0x3, 0xa3}, {0x1, 0x8}, {0x401, 0xf}]}) 3.35911788s ago: executing program 3 (id=6347): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.226624324s ago: executing program 3 (id=6348): timer_create(0xfffffffc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 499.691217ms ago: executing program 4 (id=6349): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xdffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 206.994285ms ago: executing program 4 (id=6350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 206.730975ms ago: executing program 3 (id=6351): r0 = socket$kcm(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x200000}, 0x80, 0x0}, 0x4cc54) 78.628319ms ago: executing program 3 (id=6352): setresuid(0x0, 0xee00, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 0s ago: executing program 3 (id=6353): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x8, &(0x7f0000000000)="fdffffffffffffff"}) kernel console output (not intermixed with test programs): et_register_driver returned -16 [ 2022.074761][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.076305][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.772446][T12750] veth0_vlan: entered promiscuous mode [ 2023.790348][T12750] veth1_vlan: entered promiscuous mode [ 2023.878000][T12750] veth0_macvtap: entered promiscuous mode [ 2023.899801][T12750] veth1_macvtap: entered promiscuous mode [ 2024.044047][T12485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.045289][T12485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.045487][T12485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.045625][T12485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2032.435370][ T5535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.555820][ T5535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.688422][ T5535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.858765][ T5535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.145912][ T5535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2034.182983][ T5535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2034.235598][ T5535] bond0 (unregistering): Released all slaves [ 2034.612790][ T5535] hsr_slave_0: left promiscuous mode [ 2034.626145][ T5535] hsr_slave_1: left promiscuous mode [ 2034.663479][ T5535] veth1_macvtap: left promiscuous mode [ 2034.663989][ T5535] veth0_macvtap: left promiscuous mode [ 2034.673876][ T5535] veth1_vlan: left promiscuous mode [ 2034.675229][ T5535] veth0_vlan: left promiscuous mode [ 2036.128104][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2036.763969][T12986] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3540'. [ 2037.048282][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.059818][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.112491][ T3442] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 2037.293633][ T3442] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2037.293872][ T3442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.463004][ T3216] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2037.584628][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3541'. [ 2038.044176][T12990] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 2038.237316][T12930] hsr_slave_0: entered promiscuous mode [ 2038.245251][T12930] hsr_slave_1: entered promiscuous mode [ 2038.616104][T12685] usb 1-1: USB disconnect, device number 3 [ 2038.860494][T13017] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3542'. [ 2038.873930][T13017] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3542'. [ 2039.196965][T13025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3545'. [ 2039.541711][T12685] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 2039.650647][T12930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2039.677801][T12930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2039.683685][T12930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2039.704809][T12685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2039.706552][T12685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 2039.710545][T12685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2039.714070][T12685] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 2039.716410][T12685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.734816][T12685] usb 1-1: config 0 descriptor?? [ 2039.736964][T12930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2039.755172][T12930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2039.764942][T13025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2039.823749][T12930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2039.836282][T12930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2039.856423][T12930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2040.213540][T12685] hid (null): unknown global tag 0xe [ 2040.214878][T12685] hid (null): unknown global tag 0xe [ 2040.233814][T12685] hid-generic 0003:1B1C:1C1F.0003: unknown main item tag 0x3 [ 2040.235688][T12685] hid-generic 0003:1B1C:1C1F.0003: unknown global tag 0xe [ 2040.237122][T12685] hid-generic 0003:1B1C:1C1F.0003: item 0 1 1 14 parsing failed [ 2040.239550][T12685] hid-generic 0003:1B1C:1C1F.0003: probe with driver hid-generic failed with error -22 [ 2040.441892][ T38] usb 1-1: USB disconnect, device number 4 [ 2041.009941][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.917852][T13087] netlink: 'syz.0.3551': attribute type 34 has an invalid length. [ 2042.918151][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 2042.989888][T13087] bond1: option lacp_strict: invalid value (110) [ 2042.998672][T13087] bond1 (unregistering): Released all slaves [ 2044.506185][T12930] veth0_vlan: entered promiscuous mode [ 2044.545817][T12930] veth1_vlan: entered promiscuous mode [ 2044.677196][T12930] veth0_macvtap: entered promiscuous mode [ 2044.697755][T12930] veth1_macvtap: entered promiscuous mode [ 2044.824983][ T996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2044.826489][ T996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2044.826659][ T996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2044.826802][ T996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.299095][T13137] syz.0.3561 (13137): drop_caches: 1 [ 2048.476860][T13137] syz.0.3561 (13137): drop_caches: 1 [ 2049.459840][T13185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3579'. [ 2050.713279][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 2051.190558][T13204] syzkaller0: entered promiscuous mode [ 2051.193322][T13204] syzkaller0: entered allmulticast mode [ 2053.019155][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.020698][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.238461][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3598'. [ 2053.443506][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.444984][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.076751][T13245] syzkaller0: entered promiscuous mode [ 2054.078663][T13245] syzkaller0: entered allmulticast mode [ 2057.259238][T13273] syzkaller0: entered promiscuous mode [ 2057.260632][T13273] syzkaller0: entered allmulticast mode [ 2057.354854][T13273] sch_fq: defrate 11 ignored. [ 2060.047155][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3625'. [ 2061.635810][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'. [ 2061.637159][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'. [ 2061.820224][T13318] syzkaller0: entered promiscuous mode [ 2061.820543][T13318] syzkaller0: entered allmulticast mode [ 2063.078553][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.079989][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.370420][T13409] ======================================================= [ 2066.370420][T13409] WARNING: The mand mount option has been deprecated and [ 2066.370420][T13409] and is ignored by this kernel. Remove the mand [ 2066.370420][T13409] option from the mount to silence this warning. [ 2066.370420][T13409] ======================================================= [ 2067.300817][T13431] futex_wake_op: syz.1.3675 tries to shift op by 35; fix this program [ 2070.351767][T12685] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2070.514547][T12685] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2070.514902][T12685] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2070.515264][T12685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.528430][T12685] usb 1-1: config 0 descriptor?? [ 2070.546445][T12685] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2070.745073][T12685] usb 1-1: USB disconnect, device number 5 [ 2071.292155][T12179] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2071.350978][T13489] syzkaller0: entered promiscuous mode [ 2071.352953][T13489] syzkaller0: entered allmulticast mode [ 2071.452594][T12179] usb 1-1: Using ep0 maxpacket: 32 [ 2071.465268][T12179] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2071.476323][T12179] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 2071.478039][T12179] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 2071.480843][T12179] usb 1-1: config 14 has no interface number 0 [ 2071.483614][T12179] usb 1-1: config 14 has no interface number 1 [ 2071.485017][T12179] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2071.486876][T12179] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2071.489616][T12179] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2071.493559][T12179] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2071.494942][T12179] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2071.496640][T12179] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2071.498266][T12179] usb 1-1: config 14 interface 57 has no altsetting 0 [ 2071.500263][T12179] usb 1-1: config 14 interface 228 has no altsetting 0 [ 2071.520008][T12179] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2071.523921][T12179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.526513][T12179] usb 1-1: Product: syz [ 2071.528386][T12179] usb 1-1: Manufacturer: syz [ 2071.529961][T12179] usb 1-1: SerialNumber: syz [ 2071.984546][T12179] legousbtower 1-1:14.57: interrupt endpoints not found [ 2072.393103][T12179] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 2072.403337][T12179] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2072.597165][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.604720][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.743998][T13493] binder: 13492:13493 tried to acquire reference to desc 0, got 1 instead [ 2072.758865][T13493] binder: tried to use weak ref as strong ref [ 2072.759336][T13493] binder: 13492:13493 got transaction with invalid handle, 0 [ 2072.762871][T13493] binder: 13493:13492 translate handle failed [ 2072.768077][T13493] binder: 13492:13493 transaction call to 13492:0 failed 5/29201/-22, code 0 size 120-24 line 3571 [ 2072.770387][T12685] binder: undelivered TRANSACTION_ERROR: 29201 [ 2076.400586][T10128] usb 1-1: USB disconnect, device number 6 [ 2076.447698][T10128] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 2076.896764][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'. [ 2076.900234][T13528] block nbd0: not configured, cannot reconfigure [ 2077.384529][T13537] IPv6: NLM_F_CREATE should be specified when creating new route [ 2077.922995][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 2077.968018][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 2077.968106][ T996] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.968424][ T996] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.968579][ T996] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2077.968727][ T996] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.062509][T13634] xt_hashlimit: size too large, truncated to 1048576 [ 2082.132431][ T3442] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2082.323986][ T3442] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 2082.324352][ T3442] usb 1-1: config 0 has no interface number 0 [ 2082.327124][ T3442] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2082.346448][ T3442] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2082.348328][ T3442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.352762][ T3442] usb 1-1: Product: syz [ 2082.355318][ T3442] usb 1-1: Manufacturer: syz [ 2082.357860][ T3442] usb 1-1: SerialNumber: syz [ 2082.374381][ T3442] usb 1-1: config 0 descriptor?? [ 2082.425063][ T3442] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 2082.627558][ T3442] usb 1-1: USB disconnect, device number 7 [ 2082.665318][ T3442] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 2089.394594][T13697] Soft offlining pfn 0x43294 at process virtual address 0x20000000 [ 2089.418862][T13697] Soft offlining pfn 0x5dd2c at process virtual address 0x20001000 [ 2089.422368][T13697] Soft offlining pfn 0x5dd2b at process virtual address 0x20002000 [ 2089.425149][T13697] Soft offlining pfn 0x5dd2a at process virtual address 0x20003000 [ 2089.434657][T13697] Soft offlining pfn 0x5dd29 at process virtual address 0x20004000 [ 2089.455971][T13697] Soft offlining pfn 0x5dd26 at process virtual address 0x20005000 [ 2089.521183][T13697] Soft offlining pfn 0x5dd25 at process virtual address 0x20006000 [ 2089.528004][T13697] Soft offlining pfn 0x5dd24 at process virtual address 0x20007000 [ 2089.612329][T13697] Soft offlining pfn 0x5dd23 at process virtual address 0x20008000 [ 2089.647686][T13697] Soft offlining pfn 0x5dd22 at process virtual address 0x20009000 [ 2089.736555][T13697] Soft offlining pfn 0x4fdba at process virtual address 0x2000a000 [ 2089.798169][T13697] Soft offlining pfn 0x4fdbb at process virtual address 0x2000b000 [ 2089.850872][T13697] Soft offlining pfn 0x5dd21 at process virtual address 0x2000c000 [ 2089.931794][T13697] Soft offlining pfn 0x5dd20 at process virtual address 0x2000d000 [ 2089.979872][T13697] Soft offlining pfn 0x5cfbf at process virtual address 0x2000e000 [ 2090.040511][T13697] Soft offlining pfn 0x5cfbe at process virtual address 0x2000f000 [ 2090.116311][T13697] Soft offlining pfn 0x5dd38 at process virtual address 0x20010000 [ 2090.199444][T13697] Soft offlining pfn 0x5cfbd at process virtual address 0x20011000 [ 2091.192198][T13710] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 2091.253461][T13710] bond1: entered promiscuous mode [ 2091.256292][T13710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2091.316236][T13710] veth3: entered allmulticast mode [ 2091.333470][T13710] bond1: (slave veth3): making interface the new active one [ 2091.335242][T13710] veth3: entered promiscuous mode [ 2091.342315][T13710] bond1: (slave veth3): Enslaving as an active interface with an up link [ 2091.381738][T13710] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2091.383320][T13710] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2097.258030][T13740] Illegal XDP return value 2281930752 on prog (id 59) dev syz_tun, expect packet loss! [ 2100.046274][T13752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2100.054702][T13752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2100.797942][T13752] hsr_slave_0: entered promiscuous mode [ 2100.801682][T13752] hsr_slave_1: entered promiscuous mode [ 2100.804006][T13752] debugfs: 'hsr0' already exists in 'hsr' [ 2100.805370][T13752] Cannot create hsr debugfs directory [ 2101.206039][T13752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2101.216477][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2101.219095][T13752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2101.236486][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2101.247933][T13752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2101.266022][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2101.276972][T13752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2101.290121][T13752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2101.884696][T13752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2104.322984][T13752] veth0_vlan: entered promiscuous mode [ 2104.348068][T13752] veth1_vlan: entered promiscuous mode [ 2104.430721][T13752] veth0_macvtap: entered promiscuous mode [ 2104.455279][T13752] veth1_macvtap: entered promiscuous mode [ 2104.580360][ T5535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.585501][ T5535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.590439][ T5535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.597570][ T5535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.550166][T13828] Injecting memory failure for pfn 0x41ef5 at process virtual address 0x20ff7000 [ 2105.945488][T13828] Memory failure: 0x41ef5: unhandlable page. [ 2105.945903][T13828] Memory failure: 0x41ef5: recovery action for get hwpoison page: Ignored [ 2109.750861][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 2109.763262][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 2113.476526][T13874] Injecting memory failure for pfn 0x4b885 at process virtual address 0x20001000 [ 2113.487841][T13874] Memory failure: 0x4b885: unhandlable page. [ 2113.488148][T13874] Memory failure: 0x4b885: recovery action for get hwpoison page: Ignored [ 2115.415076][T13910] netlink: 'syz.2.3833': attribute type 3 has an invalid length. [ 2116.296561][T13924] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3840'. [ 2120.713852][T13960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2124.310831][T13993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3870'. [ 2131.482466][ T28] audit: type=1326 audit(2131.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.486963][ T28] audit: type=1326 audit(2131.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.494038][ T28] audit: type=1326 audit(2131.340:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.498176][ T28] audit: type=1326 audit(2131.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.506043][ T28] audit: type=1326 audit(2131.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.511829][ T28] audit: type=1326 audit(2131.350:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.519247][ T28] audit: type=1326 audit(2131.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.526075][ T28] audit: type=1326 audit(2131.350:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.532163][ T28] audit: type=1326 audit(2131.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2131.534637][ T28] audit: type=1326 audit(2131.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14045 comm="syz.1.3893" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2134.113413][T14077] capability: warning: `syz.2.3903' uses 32-bit capabilities (legacy support in use) [ 2136.540897][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 2136.542055][ T28] audit: type=1326 audit(2136.380:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.542409][ T28] audit: type=1326 audit(2136.380:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.556938][ T28] audit: type=1326 audit(2136.390:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.562249][ T28] audit: type=1326 audit(2136.390:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.562788][ T28] audit: type=1326 audit(2136.390:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.563006][ T28] audit: type=1326 audit(2136.390:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.563215][ T28] audit: type=1326 audit(2136.390:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.563434][ T28] audit: type=1326 audit(2136.390:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.563669][ T28] audit: type=1326 audit(2136.390:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.563887][ T28] audit: type=1326 audit(2136.390:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14092 comm="syz.1.3910" exe="/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2136.687336][T14097] syzkaller0: entered promiscuous mode [ 2136.688411][T14097] syzkaller0: entered allmulticast mode [ 2140.763937][T14156] netlink: 'syz.2.3938': attribute type 1 has an invalid length. [ 2140.892114][T14156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2141.004410][T14156] bond1: (slave dummy0): making interface the new active one [ 2141.008170][T14156] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2146.099023][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2146.105256][ T28] audit: type=1326 audit(2145.940:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.108734][ T28] audit: type=1326 audit(2145.950:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.116741][ T28] audit: type=1326 audit(2145.960:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.123174][ T28] audit: type=1326 audit(2145.970:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.128843][ T28] audit: type=1326 audit(2145.970:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.136112][ T28] audit: type=1326 audit(2145.980:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.142050][ T28] audit: type=1326 audit(2145.980:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.147679][ T28] audit: type=1326 audit(2145.990:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.154489][ T28] audit: type=1326 audit(2146.000:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2146.160786][ T28] audit: type=1326 audit(2146.000:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14195 comm="syz.1.3956" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2149.777004][T14218] syzkaller0: entered promiscuous mode [ 2149.779371][T14218] syzkaller0: entered allmulticast mode [ 2153.335808][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 2153.338928][ T28] audit: type=1326 audit(2153.180:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.342421][ T28] audit: type=1326 audit(2153.180:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.345049][ T28] audit: type=1326 audit(2153.180:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.348098][ T28] audit: type=1326 audit(2153.190:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=65 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.352396][ T28] audit: type=1326 audit(2153.200:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.360608][ T28] audit: type=1326 audit(2153.200:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2153.364851][ T28] audit: type=1326 audit(2153.210:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14237 comm="syz.1.3974" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff84d78f68 code=0x7ffc0000 [ 2160.048485][ T996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.048813][ T996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.137757][ T996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.138081][ T996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.240850][ T996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.242846][ T996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.344640][ T996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2160.346484][ T996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2161.109077][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2161.138530][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2161.176274][ T996] bond0 (unregistering): Released all slaves [ 2161.336821][ T996] hsr_slave_0: left promiscuous mode [ 2161.346471][ T996] hsr_slave_1: left promiscuous mode [ 2161.375621][ T996] veth1_macvtap: left promiscuous mode [ 2161.376144][ T996] veth0_macvtap: left promiscuous mode [ 2161.378983][ T996] veth1_vlan: left promiscuous mode [ 2161.379579][ T996] veth0_vlan: left promiscuous mode [ 2163.028169][T14300] xt_connbytes: Forcing CT accounting to be enabled [ 2163.800491][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2164.855825][ T3216] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2166.078145][ T3216] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2166.148948][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.150424][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.490211][T14368] syzkaller0: entered promiscuous mode [ 2166.491899][T14368] syzkaller0: entered allmulticast mode [ 2167.045631][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2167.054435][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.720478][ T3216] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2169.950380][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.963140][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.137097][T14434] fuse: Bad value for 'fd' [ 2170.624110][T14447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.625541][T14447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.834237][T14452] fuse: Bad value for 'fd' [ 2171.489220][T14467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.493129][T14467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.058094][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.059546][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.287031][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.295186][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.316021][T14483] syzkaller1: entered promiscuous mode [ 2172.317331][T14483] syzkaller1: entered allmulticast mode [ 2172.467995][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.471976][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.767276][T14507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4065'. [ 2176.713018][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.720848][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.059036][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.065169][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.076053][T14534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.079299][T14534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.360608][T14540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.366978][T14540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.128483][T14551] ŽÂ: renamed from veth0_vlan [ 2180.197633][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.199408][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.713069][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.714368][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.812567][T14645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.825845][T14645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.266951][T14672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.274315][T14672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.280658][T14672] netlink: 66 bytes leftover after parsing attributes in process `syz.1.4120'. [ 2189.475165][T14689] pim6reg1: entered promiscuous mode [ 2189.476512][T14689] pim6reg1: entered allmulticast mode [ 2198.535395][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.536844][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.853491][T14735] erspan0: entered promiscuous mode [ 2199.592683][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'. [ 2199.853171][T14763] syzkaller0: entered promiscuous mode [ 2199.854589][T14763] syzkaller0: entered allmulticast mode [ 2200.523107][T14774] syzkaller0: entered promiscuous mode [ 2200.524522][T14774] syzkaller0: entered allmulticast mode [ 2201.329654][T14781] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2206.222376][T14788] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2206.377342][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4172'. [ 2206.379915][T14812] block nbd0: not configured, cannot reconfigure [ 2206.750389][T14822] fuse: Bad value for 'fd' [ 2207.197541][T14832] fuse: Bad value for 'fd' [ 2207.986168][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4185'. [ 2210.538554][ T996] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2212.490082][T14864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2212.714363][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.715929][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.522834][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.524506][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.436865][T14907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.440492][T14907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.414339][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.423661][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.319513][T14947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.323415][T14947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.428000][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.430506][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.400273][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.416224][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.349046][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.350689][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.616714][T14993] input: syz0 as /devices/virtual/input/input47 [ 2235.672355][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.673787][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.789257][T15012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.796943][T15012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.892947][T15013] fuse: Bad value for 'group_id' [ 2235.893325][T15013] fuse: Bad value for 'group_id' [ 2239.097929][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.099355][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.610951][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.619703][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.725649][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.728379][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.803112][T15064] netlink: 'syz.2.4262': attribute type 27 has an invalid length. [ 2253.089330][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.090286][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.110535][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.112191][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.530310][T15095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.539812][T15095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.973140][T15110] udevd[15110]: setting mode of /dev/gsmtty23 to 020600 failed: No such file or directory [ 2259.974050][T15110] udevd[15110]: setting owner of /dev/gsmtty23 to uid=0, gid=0 failed: No such file or directory [ 2265.753911][T15157] binder: 15156:15157 ioctl c0306201 20000080 returned -14 [ 2265.768436][T15157] binder: 15156:15157 tried to acquire reference to desc 0, got 1 instead [ 2265.768891][T15157] binder: 15156:15157 ioctl c0306201 200003c0 returned -14 [ 2265.770933][T15157] binder: 15156:15157 got transaction with invalid offset (81, min 0 max 96) or object. [ 2265.778418][T15157] binder: 15156:15157 transaction call to 15156:0 failed 10/29201/-22, code 0 size 96-24 line 3524 [ 2265.779940][ T3442] binder: undelivered TRANSACTION_ERROR: 29201 [ 2266.539389][T15170] binder: 15169:15170 tried to acquire reference to desc 0, got 1 instead [ 2266.544422][T15170] binder: 15169:15170 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2528 [ 2267.354471][T15178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.358252][T15178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.680247][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.695101][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2269.698667][T15225] fuse: Unknown parameter 'grou00000000000000000000' [ 2272.048528][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.072217][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.421010][T15241] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4329'. [ 2273.069256][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.074425][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.012803][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.022592][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.110790][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.119697][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.228485][T15263] fuse: Unknown parameter 'group_i00000000000000000000' [ 2275.159810][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.168185][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.575285][T15275] fuse: Unknown parameter 'group_id00000000000000000000' [ 2277.931854][T15287] fuse: Unknown parameter 'group_id00000000000000000000' [ 2278.024270][T15290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.025742][T15290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2280.010483][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2280.026737][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.024155][T15344] xt_hashlimit: size too large, truncated to 1048576 [ 2284.112095][T15347] xt_hashlimit: size too large, truncated to 1048576 [ 2284.425488][T15350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.426890][T15350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2285.129133][T15358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.130718][T15358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2285.142186][T15358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.145156][T15358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2286.389860][T15363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2286.394982][T15363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.070591][T15354] binfmt_misc: register: failed to install interpreter file ./file0 [ 2287.170572][T15368] xt_hashlimit: size too large, truncated to 1048576 [ 2288.159041][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2288.160373][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2292.260207][T15411] fuse: Bad value for 'fd' [ 2296.154605][T15419] netlink: 'syz.1.4398': attribute type 13 has an invalid length. [ 2296.343772][T15419] netlink: 'syz.1.4398': attribute type 1 has an invalid length. [ 2296.584071][T15423] fuse: Bad value for 'fd' [ 2299.998902][T15436] fuse: Bad value for 'fd' [ 2300.475128][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4409'. [ 2300.555838][T15446] fuse: Bad value for 'fd' [ 2306.197120][T15465] fuse: Invalid rootmode [ 2306.675220][T15478] fuse: Invalid rootmode [ 2307.255232][T15493] fuse: Invalid rootmode [ 2307.808194][T15506] fuse: Bad value for 'rootmode' [ 2308.269578][ T28] audit: type=1326 audit(2308.110:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15512 comm="syz.1.4435" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84d78f68 code=0x0 [ 2310.287863][T15523] fuse: Bad value for 'rootmode' [ 2311.122232][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 2311.230896][T15533] fuse: Bad value for 'rootmode' [ 2314.765526][T15547] fuse: Unknown parameter 'use00000000000000000000' [ 2318.462854][T15562] netlink: 'syz.2.4452': attribute type 16 has an invalid length. [ 2318.478505][T15562] netlink: 'syz.2.4452': attribute type 17 has an invalid length. [ 2318.514835][T15562] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2327.371800][T15605] rdma_op 000000000a26e3d5 conn xmit_rdma 0000000000000000 [ 2327.503824][T15607] syzkaller0: entered promiscuous mode [ 2327.505194][T15607] syzkaller0: entered allmulticast mode [ 2327.778222][T15610] netlink: 'syz.1.4468': attribute type 13 has an invalid length. [ 2333.470011][ T28] audit: type=1400 audit(2333.310:103): lsm=SMACK fn=smack_file_send_sigiotask action=denied subject="_" object="w" requested=w pid=15642 comm="syz.2.4484" opid=15642 ocomm="syz.2.4484" [ 2341.287904][T15676] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2341.307170][T15676] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2341.584404][T15680] tmpfs: Bad value for 'mpol' [ 2355.128488][T15768] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 2356.189127][T15779] syzkaller0: entered promiscuous mode [ 2356.192256][T15779] syzkaller0: entered allmulticast mode [ 2358.450285][T15791] syzkaller0: entered promiscuous mode [ 2358.453370][T15791] syzkaller0: entered allmulticast mode [ 2363.426268][T15828] syzkaller0: entered promiscuous mode [ 2363.426593][T15828] syzkaller0: entered allmulticast mode [ 2364.685938][T15838] syzkaller0: entered promiscuous mode [ 2364.686241][T15838] syzkaller0: entered allmulticast mode [ 2366.352737][T15853] input: syz0 as /devices/virtual/input/input48 [ 2372.912654][T15884] loop8: detected capacity change from 0 to 7 [ 2378.439223][T15923] syzkaller0: entered promiscuous mode [ 2378.440222][T15923] syzkaller0: entered allmulticast mode [ 2378.473977][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'. [ 2378.730774][T15927] syzkaller0: entered promiscuous mode [ 2378.731819][T15927] syzkaller0: entered allmulticast mode [ 2378.907279][T15929] syzkaller0: entered promiscuous mode [ 2378.907577][T15929] syzkaller0: entered allmulticast mode [ 2379.149928][T15933] tmpfs: Unknown parameter 'rootmode' [ 2383.228960][T12484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2383.383402][T12484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2383.536537][T12484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2383.627021][T12484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2384.570498][T12484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2384.624588][T12484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2384.657719][T12484] bond0 (unregistering): Released all slaves [ 2384.676497][T12484] bond1 (unregistering): (slave dummy0): Releasing active interface [ 2384.710561][T12484] bond1 (unregistering): Released all slaves [ 2384.738199][T12484] bond2 (unregistering): Released all slaves [ 2384.949073][T12484] hsr_slave_0: left promiscuous mode [ 2384.952735][T12484] hsr_slave_1: left promiscuous mode [ 2384.958918][T12484] veth1_macvtap: left promiscuous mode [ 2384.959197][T12484] veth0_macvtap: left promiscuous mode [ 2384.959594][T12484] veth1_vlan: left promiscuous mode [ 2384.959807][T12484] veth0_vlan: left promiscuous mode [ 2385.866733][ T3216] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2387.197414][ T3216] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2387.695106][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2387.716676][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2388.142023][ T3216] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2388.886738][T16000] hsr_slave_0: entered promiscuous mode [ 2388.894403][T16000] hsr_slave_1: entered promiscuous mode [ 2388.899398][T16000] debugfs: 'hsr0' already exists in 'hsr' [ 2388.904067][T16000] Cannot create hsr debugfs directory [ 2389.383067][ T3216] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2389.615832][T16000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2389.638823][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2389.647700][T16000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2389.665173][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2389.670871][T16000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2389.696883][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2389.704212][T16000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2389.722336][T16000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2390.740339][T16000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.455530][T16000] veth0_vlan: entered promiscuous mode [ 2393.489052][T16000] veth1_vlan: entered promiscuous mode [ 2393.612800][T16000] veth0_macvtap: entered promiscuous mode [ 2393.634737][T16000] veth1_macvtap: entered promiscuous mode [ 2393.730559][T11302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.730893][T11302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.731868][T11302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.731997][T11302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2394.108736][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 2395.372506][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.375549][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.499690][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.505866][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.643457][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.662976][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.807550][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.820099][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.834315][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.837442][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2395.935513][T16187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.943217][T16187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.056522][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.057919][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.243974][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.245593][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.377146][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.378592][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.564570][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.568244][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.786178][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.789582][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.809257][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.810692][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.028893][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.033017][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.169357][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.186472][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.225383][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.226889][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.483331][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.487357][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.964342][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.965902][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.975888][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.977295][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.187086][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.189750][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.202453][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.203547][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.222964][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.224805][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.925750][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2398.929622][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.053473][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.058362][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.066560][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.072145][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.172565][T16218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.176236][T16218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.260863][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.265281][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.805425][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.806439][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.842046][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.845824][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.064148][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.074611][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.093451][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.096331][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.119571][T16220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.137440][T16220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.639031][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.642613][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.654590][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.658223][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.877641][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.879499][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.370140][T16240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4664'. [ 2401.457694][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.460582][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.500824][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.507602][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.538823][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.540345][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.582485][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.583304][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2401.637549][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.654227][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.935784][T16289] tmpfs: Unknown parameter 'fs Yntext' [ 2409.159831][T16294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2409.546443][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.548145][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2409.694628][T16311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4688'. [ 2409.795286][T16314] lo: Caught tx_queue_len zero misconfig [ 2411.564919][T16319] macsec1: entered promiscuous mode [ 2413.093848][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.096206][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2413.643354][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4702'. [ 2413.657487][T11302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.798244][T11302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.898996][T11302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.995533][T11302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.076162][T16357] xt_hashlimit: size too large, truncated to 1048576 [ 2414.917999][T11302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2414.939106][T11302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2414.975524][T11302] bond0 (unregistering): Released all slaves [ 2414.988903][T11302] bond1 (unregistering): (slave veth3): Releasing backup interface [ 2414.989242][T11302] veth3: left promiscuous mode [ 2415.018359][T11302] bond1 (unregistering): Released all slaves [ 2415.168797][T11302] hsr_slave_0: left promiscuous mode [ 2415.179365][T11302] hsr_slave_1: left promiscuous mode [ 2415.185849][T11302] veth1_macvtap: left promiscuous mode [ 2415.186168][T11302] veth0_macvtap: left promiscuous mode [ 2415.980585][ T3216] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2417.256564][ T3216] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2417.630295][T16342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.666450][T16342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2418.347853][T16423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.353294][T16423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.570759][ T3216] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2418.780172][T16342] hsr_slave_0: entered promiscuous mode [ 2418.790103][T16342] hsr_slave_1: entered promiscuous mode [ 2419.264620][ T3216] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2419.886466][T16342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2419.919009][T16342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2419.927733][T16342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2419.945384][T16342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2419.953997][T16342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2419.979378][T16342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2419.989550][T16342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2420.022551][T16342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2421.064340][T16342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2424.367200][T16342] veth0_vlan: entered promiscuous mode [ 2424.403279][T16342] veth1_vlan: entered promiscuous mode [ 2424.537988][T16342] veth0_macvtap: entered promiscuous mode [ 2424.570321][T16342] veth1_macvtap: entered promiscuous mode [ 2424.714804][T15716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.715265][T15716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.716185][T15716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.719889][T15716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.059421][T16515] loop3: detected capacity change from 0 to 7 [ 2429.067207][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2429.067688][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2429.072624][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2429.073053][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2429.076166][T16515] loop3: unable to read partition table [ 2429.077239][T16515] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 2432.519020][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2432.534195][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2434.662418][T16580] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 2435.793360][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2435.798446][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2439.539584][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.540977][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2450.405941][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4769'. [ 2450.406302][T16670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4769'. [ 2451.214729][T16674] mmap: syz.1.4771 (16674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2456.576670][T15716] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.586367][T15716] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.596938][T15716] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.602039][T15716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.608680][T16695] netlink: 1331 bytes leftover after parsing attributes in process `syz.3.4778'. [ 2457.463133][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4780'. [ 2461.179068][T16750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2461.180634][T16750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.423988][T16803] xt_hashlimit: size too large, truncated to 1048576 [ 2471.262895][ T28] audit: type=1326 audit(2471.060:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.263413][ T28] audit: type=1326 audit(2471.060:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.263758][ T28] audit: type=1326 audit(2471.060:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.263975][ T28] audit: type=1326 audit(2471.060:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.264175][ T28] audit: type=1326 audit(2471.070:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.264377][ T28] audit: type=1326 audit(2471.070:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.264743][ T28] audit: type=1326 audit(2471.070:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.264942][ T28] audit: type=1326 audit(2471.070:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.265122][ T28] audit: type=1326 audit(2471.070:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2471.265305][ T28] audit: type=1326 audit(2471.070:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16832 comm="syz.1.4808" exe="/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffbad78f68 code=0x7ffc0000 [ 2477.165761][T16789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2477.200619][T16789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2477.646472][T16789] bond0 (unregistering): Released all slaves [ 2479.456311][T16789] hsr_slave_0: left promiscuous mode [ 2479.491914][T16789] hsr_slave_1: left promiscuous mode [ 2479.612775][T16880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2479.633344][T16880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2481.525472][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2481.528830][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.072532][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.077623][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.329130][ T3216] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2482.864002][T16860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2482.886581][T16860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.580750][ T3216] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2484.157430][T16860] hsr_slave_0: entered promiscuous mode [ 2484.165015][T16860] hsr_slave_1: entered promiscuous mode [ 2484.557763][ T3216] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2484.884424][T16860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2484.905218][T16860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2484.911816][T16860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2484.928410][T16860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2484.936439][T16860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2484.953204][T16860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2484.959905][T16860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2484.983601][T16860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2485.844731][ T3216] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2485.903276][T16860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2489.444958][T16860] veth0_vlan: entered promiscuous mode [ 2489.482518][T16860] veth1_vlan: entered promiscuous mode [ 2489.620912][T16860] veth0_macvtap: entered promiscuous mode [ 2489.653421][T16860] veth1_macvtap: entered promiscuous mode [ 2489.795131][ T29] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.795818][ T29] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.796063][ T29] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.796313][ T29] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.568620][T17012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2490.570099][T17012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2492.383905][T17030] veth0: entered promiscuous mode [ 2492.386517][T17029] veth0: left promiscuous mode [ 2509.098419][T17165] netlink: 'syz.4.4874': attribute type 12 has an invalid length. [ 2510.108506][T17177] syzkaller0: entered promiscuous mode [ 2510.108850][T17177] syzkaller0: entered allmulticast mode [ 2510.125977][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2516.015424][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2516.020002][ T28] audit: type=1326 audit(2515.860:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.028677][ T28] audit: type=1326 audit(2515.860:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.029090][ T28] audit: type=1326 audit(2515.870:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.052835][ T28] audit: type=1326 audit(2515.890:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.056325][ T28] audit: type=1326 audit(2515.890:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.065318][ T28] audit: type=1326 audit(2515.910:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.070415][ T28] audit: type=1326 audit(2515.910:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.080010][ T28] audit: type=1326 audit(2515.910:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.090999][ T28] audit: type=1326 audit(2515.930:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99578f68 code=0x7ffc0000 [ 2516.091976][ T28] audit: type=1326 audit(2515.930:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17202 comm="syz.4.4886" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9955be2c code=0x7ffc0000 [ 2516.109076][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.113806][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.689173][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.694766][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.707291][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.710339][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.418564][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'. [ 2532.628120][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2532.630449][ T28] audit: type=1107 audit(2532.470:142): pid=17293 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='.' [ 2532.820158][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2532.824460][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2542.190459][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4947'. [ 2544.075067][T17384] futex_wake_op: syz.3.4950 tries to shift op by 144; fix this program [ 2550.342795][T17412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.344474][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2550.790188][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.823859][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2551.093406][T17426] binder: 17425:17426 tried to acquire reference to desc 0, got 1 instead [ 2551.095456][T17426] binder: 17425:17426 got transaction with invalid handle, 3 [ 2551.098478][T17426] binder: 17426:17425 translate handle failed [ 2551.100658][T17426] binder: 17425:17426 transaction async to 17425:0 failed 21/29201/-22, code 0 size 96-24 line 3571 [ 2551.118657][T12063] binder: undelivered TRANSACTION_ERROR: 29201 [ 2551.593252][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2551.603686][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.770288][T17440] syzkaller0: entered promiscuous mode [ 2554.772487][T17440] syzkaller0: entered allmulticast mode [ 2559.483920][T17457] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2559.484528][T17457] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 2560.339576][T17467] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 2561.621836][T17474] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4986'. [ 2562.101494][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.102858][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2565.304207][T17504] netlink: 'syz.3.4999': attribute type 1 has an invalid length. [ 2565.384790][T17504] bond1: entered promiscuous mode [ 2565.388630][T17504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2565.437654][T17504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2565.444484][T17504] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 2565.447759][T17504] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 2565.467318][T17504] bond1: (slave ipip0): making interface the new active one [ 2565.468928][T17504] ipip0: entered promiscuous mode [ 2565.479584][T17504] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 2569.510321][T17515] syzkaller0: entered promiscuous mode [ 2569.510690][T17515] syzkaller0: entered allmulticast mode [ 2569.546659][T17515] simple: basic_9 [ 2570.347759][T17525] netlink: 'syz.4.5007': attribute type 1 has an invalid length. [ 2570.492116][T17527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.496130][T17527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2572.556233][T17535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5011'. [ 2572.556934][T17535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5011'. [ 2573.617179][ T28] audit: type=1326 audit(2573.460:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.622377][ T28] audit: type=1326 audit(2573.460:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.633427][ T28] audit: type=1326 audit(2573.470:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.643260][ T28] audit: type=1326 audit(2573.480:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.643839][ T28] audit: type=1326 audit(2573.480:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.644036][ T28] audit: type=1326 audit(2573.480:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2573.648333][ T28] audit: type=1326 audit(2573.480:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17541 comm="syz.3.5013" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x7ffc0000 [ 2576.842065][T17566] syzkaller0: entered promiscuous mode [ 2576.842424][T17566] syzkaller0: entered allmulticast mode [ 2578.243245][T17569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.245861][T17569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2578.256567][T17569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.259335][T17569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2578.269438][T17569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.279415][T17569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2578.305322][T17569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5023'. [ 2579.465487][T17588] binder: 17587:17588 ioctl c0306201 20000080 returned -14 [ 2579.496616][T17588] binder: 17587:17588 tried to acquire reference to desc 0, got 1 instead [ 2579.497046][T17588] binder: 17587:17588 ioctl c0306201 200003c0 returned -14 [ 2579.521921][T14800] binder: undelivered TRANSACTION_COMPLETE [ 2579.563922][T14800] binder: undelivered transaction 26, process died. [ 2581.069372][T17604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.070882][T17604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.296960][T17609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.436718][T17609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.826354][T17609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.836964][T17609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.476396][T17684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5059'. [ 2590.175381][T17704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5068'. [ 2590.976133][T17726] input: syz0 as /devices/virtual/input/input50 [ 2594.942497][ T28] audit: type=1326 audit(2594.780:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17757 comm="syz.3.5088" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d78f68 code=0x0 [ 2597.553927][T17777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.555372][T17777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.875483][T17783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.877121][T17783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2601.697064][T17797] syz.3.5100 (17797): drop_caches: 3 [ 2604.203560][T17827] input: syz1 as /devices/virtual/input/input51 [ 2605.489508][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5115'. [ 2608.973522][T17865] binder: 17864:17865 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2608.974042][T17865] binder: 17865 RLIMIT_NICE not set [ 2611.398019][T17870] syz.4.5131 (17870): drop_caches: 2 [ 2612.376428][T17889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.515934][T17889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.644547][T17889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.763426][T17889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.966287][T16791] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.010366][T16791] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.070397][T16791] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.117627][T12484] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2615.895345][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.904508][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2617.853153][T17918] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5151'. [ 2619.067075][T17932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5156'. [ 2619.878238][T17941] ip6gre1: entered promiscuous mode [ 2619.878505][T17941] ip6gre1: entered allmulticast mode [ 2622.296549][T17972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5171'. [ 2623.305889][T17978] syzkaller0: entered promiscuous mode [ 2623.311688][T17978] syzkaller0: entered allmulticast mode [ 2623.965723][T17980] syz.3.5174 (17980): drop_caches: 2 [ 2624.245257][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5176'. [ 2646.942291][T18061] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2649.533572][ T28] audit: type=1400 audit(2649.340:151): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534138][ T28] audit: type=1400 audit(2649.340:152): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534320][ T28] audit: type=1400 audit(2649.340:153): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534545][ T28] audit: type=1400 audit(2649.340:154): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534682][ T28] audit: type=1400 audit(2649.340:155): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534854][ T28] audit: type=1400 audit(2649.340:156): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.534998][ T28] audit: type=1400 audit(2649.340:157): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.535143][ T28] audit: type=1400 audit(2649.340:158): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.535280][ T28] audit: type=1400 audit(2649.340:159): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2649.535415][ T28] audit: type=1400 audit(2649.340:160): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18103 comm="syz.3.5210" dest=20000 netif=lo [ 2653.196815][T10762] hsr0: entered promiscuous mode [ 2654.181862][T18137] syzkaller0: entered promiscuous mode [ 2654.183504][T18137] syzkaller0: entered allmulticast mode [ 2661.262917][T18141] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2661.446146][ T28] kauditd_printk_skb: 3319 callbacks suppressed [ 2661.446566][ T28] audit: type=1400 audit(2661.260:3480): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.446860][ T28] audit: type=1400 audit(2661.260:3481): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.447056][ T28] audit: type=1400 audit(2661.260:3482): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.447242][ T28] audit: type=1400 audit(2661.260:3483): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.447416][ T28] audit: type=1400 audit(2661.260:3484): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.447615][ T28] audit: type=1400 audit(2661.260:3485): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.447850][ T28] audit: type=1400 audit(2661.260:3486): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.448029][ T28] audit: type=1400 audit(2661.260:3487): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.448207][ T28] audit: type=1400 audit(2661.260:3488): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2661.448393][ T28] audit: type=1400 audit(2661.270:3489): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18157 comm="syz.3.5230" daddr=224.0.0.1 dest=20000 netif=lo [ 2664.862174][T18174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5234'. [ 2665.549590][T18185] Unknown options in mask 6faf [ 2669.504058][T18214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2669.505526][T18214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2669.969125][T18222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2669.984746][T18222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2675.643962][T18271] loop5: detected capacity change from 0 to 7 [ 2675.932198][T18273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2675.948368][T18273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.538892][T18282] netlink: 'syz.3.5274': attribute type 4 has an invalid length. [ 2676.595270][T18282] netlink: 'syz.3.5274': attribute type 4 has an invalid length. [ 2677.073571][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.076292][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2677.087592][T18289] binder: 18288:18289 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2677.089196][T18289] binder: 18289 RLIMIT_NICE not set [ 2677.093977][T18289] binder: 18288:18289 BC_FREEZE_NOTIFICATION_DONE 10b816d000000000 not found [ 2677.096162][T18289] binder: 18288:18289 ioctl c0306201 20000640 returned -22 [ 2677.145528][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.146937][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2677.800006][T18301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.805950][T18301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2678.977214][T18312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2678.999301][T18312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2679.025687][T18315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2679.028476][T18315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.514142][T18338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2681.515664][T18338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.916177][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 2681.920667][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 2683.179467][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2683.184955][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2686.262447][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2686.265828][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.338060][T18386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.339569][T18386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.619444][T18388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.623890][T18388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2691.689157][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2691.710486][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2695.915907][T18419] syzkaller1: entered promiscuous mode [ 2695.916280][T18419] syzkaller1: entered allmulticast mode [ 2696.984975][T18430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.995903][T18430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.129869][T18445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2700.147510][T18445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.347272][T18448] loop5: detected capacity change from 0 to 7 [ 2701.167245][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.168864][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2701.266248][T18446] udevd[18446]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 2701.388285][T18463] binder: 18462:18463 tried to acquire reference to desc 0, got 1 instead [ 2701.394232][T18463] binder: 18462:18463 got transaction with invalid parent offset [ 2701.394602][T18463] binder: 18463:18462 failed to fixup parent [ 2701.395365][T18463] binder: 18462:18463 transaction call to 18462:0 failed 35/29201/-22, code 0 size 120-24 line 3717 [ 2701.400621][ T3435] binder: undelivered TRANSACTION_ERROR: 29201 [ 2701.495448][T18465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.497085][T18465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2701.613730][T18467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.615201][T18467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2701.909850][ T3435] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 2701.966691][ T3435] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2702.905332][T18475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2702.906709][T18475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2703.012569][T18477] binder: 18476:18477 tried to acquire reference to desc 0, got 1 instead [ 2703.017613][T18477] binder: 18476:18477 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2703.022611][T10762] binder: release 18476:18477 transaction 40 out, still active [ 2703.022860][T10762] binder: undelivered TRANSACTION_COMPLETE [ 2703.030805][T14800] binder: send failed reply for transaction 40, target dead [ 2704.735792][T18484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.737216][T18484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.149760][T18497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.157167][T18497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.654408][T18513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2705.660872][T18513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.804143][T18517] fuse: Unknown parameter 'grou00000000000000000000' [ 2706.069304][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.075303][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.215223][T18528] fuse: Unknown parameter 'grou00000000000000000000' [ 2706.684456][T18539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.692966][T18539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.804636][T18541] fuse: Unknown parameter 'grou00000000000000000000' [ 2707.294475][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2707.303143][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.447835][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2708.449477][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.544163][T18563] fuse: Unknown parameter 'group_i00000000000000000000' [ 2708.568771][T18565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2708.590639][T18565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.715148][T18567] binder: 18566:18567 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 2708.717058][T18567] binder: 18566:18567 ioctl c0306201 20000640 returned -22 [ 2711.896120][T18641] netlink: 'syz.4.5414': attribute type 29 has an invalid length. [ 2713.995247][T18649] fuse: Unknown parameter 'group_id00000000000000000000' [ 2714.830320][T18662] fuse: Unknown parameter 'group_id00000000000000000000' [ 2716.923452][T18669] tunl0: entered promiscuous mode [ 2716.935775][T18669] netlink: 'syz.3.5425': attribute type 4 has an invalid length. [ 2716.939044][T18669] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5425'. [ 2717.196834][T18676] fuse: Bad value for 'user_id' [ 2717.197107][T18676] fuse: Bad value for 'user_id' [ 2718.324024][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5430'. [ 2718.717122][T18687] fuse: Bad value for 'user_id' [ 2718.717421][T18687] fuse: Bad value for 'user_id' [ 2725.672312][T18726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2725.676627][T18726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2729.229163][T18752] xt_hashlimit: size too large, truncated to 1048576 [ 2730.620132][T18791] sit0: entered promiscuous mode [ 2730.663234][T18791] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5470'. [ 2742.137852][T18880] fuse: fd is not a fuse device [ 2742.899522][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5509'. [ 2744.038834][T18923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2744.040485][T18923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2744.103049][T18925] xt_hashlimit: size too large, truncated to 1048576 [ 2744.539086][T18930] netlink: 'syz.3.5519': attribute type 1 has an invalid length. [ 2744.539338][T18930] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5519'. [ 2747.686010][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 2747.769399][T18964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5529'. [ 2748.002694][ T28] kauditd_printk_skb: 5943 callbacks suppressed [ 2748.003126][ T28] audit: type=1400 audit(2747.850:5497): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=18970 comm="syz.3.5532" dest=20002 netif=gretap0 [ 2748.106473][T18975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2748.107973][T18975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2754.230757][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 2754.638744][T19013] hsr0: left promiscuous mode [ 2754.843567][T19013] ip6gre1: left allmulticast mode [ 2756.793458][T19032] fuse: fd is not a fuse device [ 2758.286823][T19074] fuse: Unknown parameter '0x0000000000000004' [ 2758.403256][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.404796][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2758.582760][T19083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.589214][T19083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2758.917602][T19089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.918925][T19089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.006942][T19091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.008949][T19091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.347250][T19099] fuse: Unknown parameter '0x0000000000000004' [ 2760.112476][T19110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2760.114167][T19110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2760.690808][T19118] fuse: Unknown parameter '0x0000000000000004' [ 2765.371615][T19156] input: syz0 as /devices/virtual/input/input53 [ 2765.618967][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5609'. [ 2765.620918][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5609'. [ 2766.222242][T19191] input: syz1 as /devices/virtual/input/input54 [ 2770.006704][T19230] binder: 19229:19230 tried to acquire reference to desc 0, got 1 instead [ 2770.008211][T19230] binder: 19229:19230 unknown command 0 [ 2770.008372][T19230] binder: 19229:19230 ioctl c0306201 200001c0 returned -22 [ 2770.010809][T19230] binder: 19229:19230 got transaction with invalid data ptr [ 2770.011542][T19230] binder: 19229:19230 transaction call to 19229:0 failed 60/29201/-14, code 0 size 72-24 line 3511 [ 2770.018009][T12063] binder: release 19229:19230 transaction 53 out, still active [ 2770.018185][T12063] binder: undelivered TRANSACTION_COMPLETE [ 2770.019240][T12063] binder: undelivered TRANSACTION_ERROR: 29201 [ 2770.019707][T12063] binder: send failed reply for transaction 53, target dead [ 2770.223416][T19234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2770.228779][T19234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2770.315994][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2770.317394][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2772.304487][T19251] bond1: entered allmulticast mode [ 2772.304864][T19251] ipip0: entered allmulticast mode [ 2774.806842][T19279] binder: 19278:19279 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2774.807106][T19279] binder: 19279 RLIMIT_NICE not set [ 2782.504423][T19331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2782.506421][T19331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.036818][T19373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.042114][T19373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.132907][T19375] binder: 19374:19375 BC_FREE_BUFFER no match for buffer at offset 0 [ 2787.572781][T19391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.574101][T19391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.825950][T19395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.827670][T19395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2789.076936][T19410] fuse: fd is not a fuse device [ 2792.096038][T19438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5720'. [ 2798.763165][T19500] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 2798.846208][T19500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2798.894465][T19500] bond2: (slave dummy0): making interface the new active one [ 2798.900657][T19500] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2802.673063][T19530] binder: 19528:19530 tried to acquire reference to desc 0, got 1 instead [ 2804.644904][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'. [ 2805.366095][T19557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5763'. [ 2805.522529][T19559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.525592][T19559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.453141][T19579] binder: 19578:19579 ioctl c0306201 0 returned -14 [ 2808.469896][T19579] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 2808.473941][T19579] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 2808.479580][T19579] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2809.003054][T18557] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.587026][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5782'. [ 2811.386195][T18557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.516664][T18557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.648612][T18557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.195479][T18557] bond1: left allmulticast mode [ 2812.195772][T18557] ipip0: left allmulticast mode [ 2812.920836][T18557] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 2812.922889][T18557] ipip0 (unregistering): left promiscuous mode [ 2812.993158][T18557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2813.039787][T18557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2813.076442][T18557] bond0 (unregistering): Released all slaves [ 2813.091582][T18557] bond1 (unregistering): Released all slaves [ 2813.110171][T18557] bond2 (unregistering): (slave dummy0): Releasing active interface [ 2813.145422][T18557] bond2 (unregistering): Released all slaves [ 2813.402251][T18557] hsr_slave_0: left promiscuous mode [ 2813.406088][T18557] hsr_slave_1: left promiscuous mode [ 2813.418980][T18557] veth1_macvtap: left promiscuous mode [ 2813.419432][T18557] veth0_macvtap: left promiscuous mode [ 2813.420020][T18557] veth1_vlan: left promiscuous mode [ 2813.420774][T18557] veth0_vlan: left promiscuous mode [ 2815.656126][ T3216] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2816.008499][T19681] netlink: 'syz.4.5801': attribute type 13 has an invalid length. [ 2816.390993][T19621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2816.402286][T19621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2816.643101][ T3216] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2817.620784][T19621] hsr_slave_0: entered promiscuous mode [ 2817.627858][T19621] hsr_slave_1: entered promiscuous mode [ 2817.637900][T19621] debugfs: 'hsr0' already exists in 'hsr' [ 2817.638195][T19621] Cannot create hsr debugfs directory [ 2817.849117][ T3216] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2820.309121][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5807'. [ 2820.450950][T19621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2820.482040][T19621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2820.504709][T19621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2820.563436][T19621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2820.568068][T19621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2820.597385][T19621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2820.614480][T19621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2820.650150][T19621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2822.150314][T19621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2826.333978][T19621] veth0_vlan: entered promiscuous mode [ 2826.399177][T19621] veth1_vlan: entered promiscuous mode [ 2826.524058][T19621] veth0_macvtap: entered promiscuous mode [ 2826.545020][T19621] veth1_macvtap: entered promiscuous mode [ 2826.670165][T18555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.672337][T18555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.677006][T18555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.677347][T18555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.267852][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5788'. [ 2827.629190][T19837] netlink: 'syz.4.5819': attribute type 34 has an invalid length. [ 2827.630651][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5819'. [ 2827.709308][T19837] bond1: option lacp_strict: invalid value (71) [ 2827.719011][T19837] bond1 (unregistering): Released all slaves [ 2837.815713][T19948] ptrace attach of "/syz-executor exec"[19949] was attempted by "/syz-executor exec"[19948] [ 2837.878250][T19951] tunl0: Caught tx_queue_len zero misconfig [ 2838.150141][T19959] netlink: 'syz.4.5870': attribute type 46 has an invalid length. [ 2838.153039][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5870'. [ 2838.336994][T19963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5872'. [ 2841.734114][T19996] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 2844.132966][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5893'. [ 2846.585783][T20048] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 2846.589892][T20048] syzkaller0: entered promiscuous mode [ 2846.592408][T20048] syzkaller0: entered allmulticast mode [ 2846.910370][ T28] audit: type=1326 audit(2846.750:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2846.917956][ T28] audit: type=1326 audit(2846.760:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2846.919326][ T28] audit: type=1326 audit(2846.760:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2846.925718][ T28] audit: type=1326 audit(2846.750:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2846.929544][ T28] audit: type=1326 audit(2846.770:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2847.423429][ T28] audit: type=1326 audit(2847.260:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa9d5be2c code=0x7ffc0000 [ 2847.442879][ T28] audit: type=1326 audit(2847.280:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa9d5be2c code=0x7ffc0000 [ 2847.457249][ T28] audit: type=1326 audit(2847.300:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa9d5be2c code=0x7ffc0000 [ 2847.469794][ T28] audit: type=1326 audit(2847.310:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa9d5be2c code=0x7ffc0000 [ 2847.481631][ T28] audit: type=1326 audit(2847.320:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.3.5914" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa9d5be2c code=0x7ffc0000 [ 2849.804179][T20061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 2854.455162][T20112] netlink: 'syz.4.5938': attribute type 5 has an invalid length. [ 2855.324945][T20124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5943'. [ 2855.706231][T20130] netlink: 'syz.4.5946': attribute type 9 has an invalid length. [ 2855.708637][T20130] netlink: 'syz.4.5946': attribute type 6 has an invalid length. [ 2855.712030][T20130] netlink: 'syz.4.5946': attribute type 7 has an invalid length. [ 2855.714018][T20130] netlink: 'syz.4.5946': attribute type 8 has an invalid length. [ 2857.039835][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5963'. [ 2859.319055][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 2859.319488][ T28] audit: type=1400 audit(2859.120:5652): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.319797][ T28] audit: type=1400 audit(2859.130:5653): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320004][ T28] audit: type=1400 audit(2859.130:5654): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320196][ T28] audit: type=1400 audit(2859.130:5655): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320384][ T28] audit: type=1400 audit(2859.130:5656): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320574][ T28] audit: type=1400 audit(2859.130:5657): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320754][ T28] audit: type=1400 audit(2859.130:5658): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.320950][ T28] audit: type=1400 audit(2859.130:5659): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.321572][ T28] audit: type=1400 audit(2859.130:5660): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2859.321770][ T28] audit: type=1400 audit(2859.130:5661): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20203 comm="syz.3.5981" dest=20000 netif=lo [ 2864.762212][T20228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2864.777219][T20228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2865.688248][T20228] hsr_slave_0: entered promiscuous mode [ 2865.692570][T20228] hsr_slave_1: entered promiscuous mode [ 2865.695023][T20228] debugfs: 'hsr0' already exists in 'hsr' [ 2865.695206][T20228] Cannot create hsr debugfs directory [ 2866.067420][T20228] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.147029][T20228] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.220123][T20228] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.332491][T20228] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2866.643152][T20228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2866.674105][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2866.679997][T20228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2866.695079][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2866.700809][T20228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2866.715535][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2866.722220][T20228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2866.736528][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2867.398000][T20228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2870.464765][T20228] veth0_vlan: entered promiscuous mode [ 2870.499207][T20228] veth1_vlan: entered promiscuous mode [ 2870.614938][T20228] veth0_macvtap: entered promiscuous mode [ 2870.640668][T20228] veth1_macvtap: entered promiscuous mode [ 2870.796337][T16787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.797953][T16787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.798163][T16787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.798346][T16787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.340395][T20326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2873.343824][T20326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.839151][T20355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.846082][T20355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.867695][T20358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.870536][T20358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.240015][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6015'. [ 2883.175074][T20378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2883.187714][T20378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.726366][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'. [ 2892.727336][T20409] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2892.882209][T20411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2892.886299][T20411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.339185][T20414] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2898.233491][T20421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.239687][T20421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2898.267057][T20421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.279544][T20421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2910.828081][T20445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2910.829896][T20445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2913.238405][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6040'. [ 2913.238913][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6040'. [ 2915.718907][T20473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2915.725096][T20473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2915.917131][T19763] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2915.936289][T19763] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2917.082116][T20487] binder: 20486:20487 tried to acquire reference to desc 0, got 1 instead [ 2917.086567][T20487] binder: 20486:20487 got transaction with invalid data ptr [ 2917.089313][T20487] binder: 20486:20487 transaction call to 20486:0 failed 70/29201/-14, code 0 size 0-24 line 3511 [ 2917.127130][T20487] syz.3.6050 (20487): drop_caches: 2 [ 2917.146207][T19763] binder: undelivered TRANSACTION_ERROR: 29201 [ 2920.868123][T20502] binder: 20501:20502 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 2920.869720][T20502] binder: 20501:20502 ioctl c0306201 20000300 returned -22 [ 2921.128299][T20508] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6058'. [ 2921.332465][T20515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2921.336469][T20515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2924.356989][T20532] veth1_to_team: entered promiscuous mode [ 2924.368529][T20532] veth1_to_bond: entered allmulticast mode [ 2924.369371][T20531] veth1_to_bond: left allmulticast mode [ 2924.369540][T20531] veth1_to_team: left promiscuous mode [ 2926.069070][ T28] kauditd_printk_skb: 3319 callbacks suppressed [ 2926.072143][ T28] audit: type=1326 audit(2925.910:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.072365][ T28] audit: type=1326 audit(2925.910:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.073610][ T28] audit: type=1326 audit(2925.920:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.073880][ T28] audit: type=1326 audit(2925.920:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.078039][ T28] audit: type=1326 audit(2925.920:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.079095][ T28] audit: type=1326 audit(2925.920:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.081573][ T28] audit: type=1326 audit(2925.920:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.081820][ T28] audit: type=1326 audit(2925.920:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.085283][ T28] audit: type=1326 audit(2925.930:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.090099][ T28] audit: type=1326 audit(2925.930:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20537 comm="syz.3.6069" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa9d78f68 code=0x7ffc0000 [ 2926.643612][T20552] netlink: 'syz.3.6074': attribute type 13 has an invalid length. [ 2929.750371][T20565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2930.108810][T20569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2930.119373][T20569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2930.732611][T20582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2930.734252][T20582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2931.203829][T20591] nvme_fabrics: missing parameter 'transport=%s' [ 2931.205461][T20591] nvme_fabrics: missing parameter 'nqn=%s' [ 2935.152583][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2935.158110][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2936.247377][ T28] audit: type=1326 audit(2936.090:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.247910][ T28] audit: type=1326 audit(2936.090:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.256331][ T28] audit: type=1326 audit(2936.100:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.256850][ T28] audit: type=1326 audit(2936.100:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.261829][ T28] audit: type=1326 audit(2936.100:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.267001][ T28] audit: type=1326 audit(2936.110:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.270981][ T28] audit: type=1326 audit(2936.110:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.278285][ T28] audit: type=1326 audit(2936.110:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.281558][ T28] audit: type=1326 audit(2936.110:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2936.284190][ T28] audit: type=1326 audit(2936.120:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20630 comm="syz.4.6105" exe="/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffff8b178f68 code=0x7ffc0000 [ 2940.087593][T20671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2940.094163][T20671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2941.045601][T20683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2941.048214][T20683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2944.567448][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6136'. [ 2944.860093][T20709] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6137'. [ 2950.629468][T20734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.638666][T20734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.702360][T20737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.707832][T20737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.924056][T12063] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 2950.935382][T12063] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2955.794572][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'. [ 2960.934035][T20787] binder: 20787 RLIMIT_NICE not set [ 2963.107532][T20814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.109033][T20814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2963.485763][T20822] input: syz1 as /devices/virtual/input/input55 [ 2963.486266][T20822] input: failed to attach handler leds to device input55, error: -6 [ 2964.776848][T20835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2964.779693][T20835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.405163][T20869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6195'. [ 2972.220310][T20907] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6214'. [ 2973.131409][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2973.265159][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.652563][T20932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2973.655971][T20932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2974.856629][T20940] IPv6: NLM_F_CREATE should be specified when creating new route [ 2974.857376][T20940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2974.857604][T20940] IPv6: NLM_F_CREATE should be set when creating new route [ 2974.857858][T20940] IPv6: NLM_F_CREATE should be set when creating new route [ 2975.619297][T20942] binder: 20941:20942 tried to acquire reference to desc 0, got 1 instead [ 2975.628038][T20942] binder: 20941:20942 unknown command 0 [ 2975.628324][T20942] binder: 20941:20942 ioctl c0306201 200001c0 returned -22 [ 2975.635127][T20942] binder: 20941:20942 got transaction with invalid data ptr [ 2975.639077][T20942] binder: 20941:20942 transaction call to 20941:0 failed 82/29201/-14, code 0 size 72-24 line 3511 [ 2975.655482][T10762] binder: release 20941:20942 transaction 75 out, still active [ 2975.656015][T10762] binder: undelivered TRANSACTION_COMPLETE [ 2975.658638][T10762] binder: undelivered TRANSACTION_ERROR: 29201 [ 2975.660189][T10762] binder: send failed reply for transaction 75, target dead [ 2976.181792][T20948] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2976.309370][T20951] netlink: 'syz.3.6226': attribute type 13 has an invalid length. [ 2978.827743][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2978.833609][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2982.689872][T14800] binder: undelivered death notification, 0000000000000000 [ 2986.612090][T21039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2986.615086][T21039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.655770][T21041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2986.662536][T21041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.682269][T21077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2990.685238][T21077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.215691][T21086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2991.219799][T21086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.361771][T21088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2991.364517][T21088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2998.775185][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2998.775516][ T28] audit: type=1326 audit(2998.620:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21129 comm="syz.4.6289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7fc00000 [ 2998.788717][ T28] audit: type=1326 audit(2998.630:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21129 comm="syz.4.6289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8b178f68 code=0x7fc00000 [ 2998.793766][ T28] audit: type=1326 audit(2998.630:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21129 comm="syz.4.6289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7fc00000 [ 2998.793937][ T28] audit: type=1326 audit(2998.630:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21129 comm="syz.4.6289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7fc00000 [ 2998.795093][ T28] audit: type=1326 audit(2998.640:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21129 comm="syz.4.6289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b178f68 code=0x7fc00000 [ 3011.272129][T21181] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 3012.986536][T21187] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3019.105412][T21203] binder: 21202:21203 BC_INCREFS_DONE node 87 has no pending increfs request [ 3020.503014][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3020.504658][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3023.370801][ T28] audit: type=1400 audit(3023.210:9010): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=21258 comm="syz.4.6329" dest=20000 netif=gretap0 [ 3029.160707][T21295] binder: 21294:21295 ioctl c0306201 0 returned -14 [ 3033.717178][T21315] netlink: 'syz.3.6347': attribute type 4 has an invalid length. [ 3037.039953][T21329] mtd partition "ss_mixer" doesn't have enough space: 0x8000003 < 0x7261632f646e756f, disabled [ 3037.044350][T21329] ------------[ cut here ]------------ [ 3037.047203][T21329] WARNING: drivers/mtd/mtdcore.c:719 at add_mtd_device+0x678/0x740, CPU#1: syz.3.6353/21329 [ 3037.054848][T21329] Modules linked in: [ 3037.056955][T21329] CPU: 1 UID: 0 PID: 21329 Comm: syz.3.6353 Tainted: G L syzkaller #0 PREEMPT [ 3037.057673][T21329] Tainted: [L]=SOFTLOCKUP [ 3037.057881][T21329] Hardware name: linux,dummy-virt (DT) [ 3037.058540][T21329] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3037.059170][T21329] pc : add_mtd_device+0x678/0x740 [ 3037.059553][T21329] lr : mtd_add_partition+0x110/0x208 [ 3037.059986][T21329] sp : ffff80008bda3a50 [ 3037.060255][T21329] x29: ffff80008bda3a90 x28: f1f000001e5a4800 x27: 0000000000000000 [ 3037.061153][T21329] x26: fcf0000008981af0 x25: fcf000000cb29600 x24: f1f000001e5a4cf8 [ 3037.061713][T21329] x23: f7f00000055d6800 x22: f7f00000055d6ce8 x21: f1f000001e5a4800 [ 3037.062216][T21329] x20: 0000000000000000 x19: f1f000001e5a49a0 x18: 00000000ffffffff [ 3037.062991][T21329] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008326bb4d [ 3037.063492][T21329] x14: 000000000000032d x13: 00000000f5257d14 x12: 000094c2ecc397f4 [ 3037.064127][T21329] x11: 00000000000000c0 x10: 377f145c746ed67a x9 : bc2d73c38c703213 [ 3037.064811][T21329] x8 : fdf0000032dce578 x7 : 0000000000000000 x6 : 0000000000000000 [ 3037.065260][T21329] x5 : fff000007f8d2188 x4 : 0000000000000001 x3 : f7f00000055d6ce8 [ 3037.065895][T21329] x2 : fdf0000032dcd500 x1 : 0000000000000000 x0 : 0000000000000c00 [ 3037.066623][T21329] Call trace: [ 3037.067148][T21329] add_mtd_device+0x678/0x740 (P) [ 3037.067932][T21329] mtd_add_partition+0x110/0x208 [ 3037.068314][T21329] mtdchar_blkpg_ioctl+0xd0/0xf4 [ 3037.068598][T21329] mtdchar_ioctl+0x1b8/0xe14 [ 3037.068828][T21329] mtdchar_unlocked_ioctl+0x50/0x80 [ 3037.069084][T21329] __arm64_sys_ioctl+0xac/0x104 [ 3037.069394][T21329] invoke_syscall+0x54/0x10c [ 3037.069719][T21329] el0_svc_common.constprop.0+0x40/0xe0 [ 3037.069982][T21329] do_el0_svc+0x1c/0x34 [ 3037.070173][T21329] el0_svc+0x38/0x1fc [ 3037.070368][T21329] el0t_64_sync_handler+0xa0/0xf0 [ 3037.070577][T21329] el0t_64_sync+0x1a4/0x1a8 [ 3037.071107][T21329] ---[ end trace 0000000000000000 ]--- [ 3037.355990][T21330] sch_tbf: burst 19872 is lower than device lo mtu (65550) !