last executing test programs: 17.28089491s ago: executing program 0 (id=5410): unshare(0x6020400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) 17.152964861s ago: executing program 0 (id=5411): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x4007e7f, 0x0, 0x3, 0x10000158}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000c02}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)}) 16.990418572s ago: executing program 0 (id=5412): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 14.252633136s ago: executing program 0 (id=5420): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x8}, 0x1c) 5.6529327s ago: executing program 0 (id=5421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000340)="ab", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/14, 0xe}], 0x1}, 0xf1}], 0x1, 0x40000101, 0x0) 2.641133007s ago: executing program 0 (id=5452): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000702000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d4", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r6, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) rseq(0x0, 0x0, 0x0, 0x0) 627.594824ms ago: executing program 1 (id=5462): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001a00010028bd7000fcdbdf250a801400"], 0x34}, 0x1, 0x0, 0x0, 0x40040d1}, 0x20000050) 618.210885ms ago: executing program 1 (id=5463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x70742a85}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 491.004925ms ago: executing program 1 (id=5464): unshare(0x64000600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x129042, 0x15) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 263.994007ms ago: executing program 1 (id=5465): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 100.889479ms ago: executing program 1 (id=5466): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000007, 0x4) 0s ago: executing program 1 (id=5467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000300)={@void, @void, @arp=@ether_ipv4={0x1, 0x86dd, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @private=0xa010101}}, 0x1c) kernel console output (not intermixed with test programs): as /devices/virtual/input/input92 [ 3311.770785][ T9953] input: syz0 as /devices/virtual/input/input94 [ 3334.524119][T10006] socket: no more sockets [ 3334.524474][T10006] Failed to initialize the IGMP6 autojoin socket (err -23) [ 3339.064710][T10023] pimreg: entered allmulticast mode [ 3351.211899][T10072] input: syz0 as /devices/virtual/input/input96 [ 3359.322914][T10093] input: syz0 as /devices/virtual/input/input97 [ 3369.521962][T10177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3369.523534][T10177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3370.031335][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3370.038250][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3394.770186][T10751] input: syz0 as /devices/virtual/input/input98 [ 3423.902987][T11322] FAULT_INJECTION: forcing a failure. [ 3423.902987][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.903404][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.1.2426 Tainted: G W syzkaller #0 PREEMPT [ 3423.903612][T11322] Tainted: [W]=WARN [ 3423.903650][T11322] Hardware name: linux,dummy-virt (DT) [ 3423.903695][T11322] Call trace: [ 3423.903731][T11322] show_stack+0x18/0x24 (C) [ 3423.904041][T11322] dump_stack_lvl+0x60/0x80 [ 3423.904282][T11322] dump_stack+0x18/0x24 [ 3423.904494][T11322] should_fail_ex+0x1e0/0x238 [ 3423.904666][T11322] should_failslab+0x54/0x80 [ 3423.904873][T11322] kmem_cache_alloc_noprof+0x54/0x458 [ 3423.905056][T11322] do_getname+0x3c/0x1a0 [ 3423.905193][T11322] getname_flags+0x14/0x20 [ 3423.905355][T11322] do_sys_openat2+0x5c/0x104 [ 3423.905540][T11322] __arm64_sys_openat+0x64/0xc0 [ 3423.905727][T11322] invoke_syscall+0x54/0x10c [ 3423.906675][T11322] el0_svc_common.constprop.0+0x40/0xe0 [ 3423.906832][T11322] do_el0_svc+0x1c/0x34 [ 3423.906964][T11322] el0_svc+0x38/0x1fc [ 3423.907109][T11322] el0t_64_sync_handler+0xa0/0xe4 [ 3423.907232][T11322] el0t_64_sync+0x1a4/0x1a8 [ 3427.208554][T11344] FAULT_INJECTION: forcing a failure. [ 3427.208554][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.209959][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.1.2434 Tainted: G W syzkaller #0 PREEMPT [ 3427.210086][T11344] Tainted: [W]=WARN [ 3427.210123][T11344] Hardware name: linux,dummy-virt (DT) [ 3427.210161][T11344] Call trace: [ 3427.210193][T11344] show_stack+0x18/0x24 (C) [ 3427.210306][T11344] dump_stack_lvl+0x60/0x80 [ 3427.210382][T11344] dump_stack+0x18/0x24 [ 3427.210455][T11344] should_fail_ex+0x1e0/0x238 [ 3427.210534][T11344] should_failslab+0x54/0x80 [ 3427.210612][T11344] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3427.210700][T11344] __d_alloc+0x3c/0x280 [ 3427.210789][T11344] d_alloc_pseudo+0x10/0x50 [ 3427.210860][T11344] alloc_file_pseudo+0x7c/0x160 [ 3427.210951][T11344] sock_alloc_file+0x40/0xd8 [ 3427.211026][T11344] __sys_socket+0xe0/0x140 [ 3427.211103][T11344] __arm64_sys_socket+0x1c/0x38 [ 3427.211182][T11344] invoke_syscall+0x54/0x10c [ 3427.211259][T11344] el0_svc_common.constprop.0+0x40/0xe0 [ 3427.211333][T11344] do_el0_svc+0x1c/0x34 [ 3427.211440][T11344] el0_svc+0x38/0x1fc [ 3427.211530][T11344] el0t_64_sync_handler+0xa0/0xe4 [ 3427.211612][T11344] el0t_64_sync+0x1a4/0x1a8 [ 3427.899908][T11352] FAULT_INJECTION: forcing a failure. [ 3427.899908][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.904177][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.1.2437 Tainted: G W syzkaller #0 PREEMPT [ 3427.904357][T11352] Tainted: [W]=WARN [ 3427.904400][T11352] Hardware name: linux,dummy-virt (DT) [ 3427.904446][T11352] Call trace: [ 3427.904483][T11352] show_stack+0x18/0x24 (C) [ 3427.904608][T11352] dump_stack_lvl+0x60/0x80 [ 3427.904692][T11352] dump_stack+0x18/0x24 [ 3427.904772][T11352] should_fail_ex+0x1e0/0x238 [ 3427.904856][T11352] should_failslab+0x54/0x80 [ 3427.904953][T11352] kmem_cache_alloc_noprof+0x54/0x458 [ 3427.905041][T11352] do_getname+0x3c/0x1a0 [ 3427.905118][T11352] __arm64_sys_mknodat+0x34/0x70 [ 3427.905203][T11352] invoke_syscall+0x54/0x10c [ 3427.905284][T11352] el0_svc_common.constprop.0+0x40/0xe0 [ 3427.905364][T11352] do_el0_svc+0x1c/0x34 [ 3427.905443][T11352] el0_svc+0x38/0x1fc [ 3427.905527][T11352] el0t_64_sync_handler+0xa0/0xe4 [ 3427.905612][T11352] el0t_64_sync+0x1a4/0x1a8 [ 3437.176654][T11391] FAULT_INJECTION: forcing a failure. [ 3437.176654][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 3437.182811][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.1.2448 Tainted: G W syzkaller #0 PREEMPT [ 3437.182979][T11391] Tainted: [W]=WARN [ 3437.183022][T11391] Hardware name: linux,dummy-virt (DT) [ 3437.183065][T11391] Call trace: [ 3437.183099][T11391] show_stack+0x18/0x24 (C) [ 3437.183212][T11391] dump_stack_lvl+0x60/0x80 [ 3437.183291][T11391] dump_stack+0x18/0x24 [ 3437.183365][T11391] should_fail_ex+0x1e0/0x238 [ 3437.183501][T11391] should_failslab+0x54/0x80 [ 3437.183581][T11391] kmem_cache_alloc_noprof+0x54/0x458 [ 3437.183662][T11391] do_getname+0x3c/0x1a0 [ 3437.183735][T11391] getname_flags+0x14/0x20 [ 3437.183810][T11391] __arm64_sys_execve+0x20/0x68 [ 3437.183889][T11391] invoke_syscall+0x54/0x10c [ 3437.183973][T11391] el0_svc_common.constprop.0+0x40/0xe0 [ 3437.184049][T11391] do_el0_svc+0x1c/0x34 [ 3437.184117][T11391] el0_svc+0x38/0x1fc [ 3437.184191][T11391] el0t_64_sync_handler+0xa0/0xe4 [ 3437.184262][T11391] el0t_64_sync+0x1a4/0x1a8 [ 3539.560493][T11639] input: syz0 as /devices/virtual/input/input100 [ 3577.962198][T11769] FAULT_INJECTION: forcing a failure. [ 3577.962198][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 3577.964190][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.1.2561 Tainted: G W syzkaller #0 PREEMPT [ 3577.964300][T11769] Tainted: [W]=WARN [ 3577.964340][T11769] Hardware name: linux,dummy-virt (DT) [ 3577.964371][T11769] Call trace: [ 3577.964390][T11769] show_stack+0x18/0x24 (C) [ 3577.964451][T11769] dump_stack_lvl+0x60/0x80 [ 3577.964491][T11769] dump_stack+0x18/0x24 [ 3577.964527][T11769] should_fail_ex+0x1e0/0x238 [ 3577.964567][T11769] should_failslab+0x54/0x80 [ 3577.964605][T11769] kmem_cache_alloc_noprof+0x54/0x458 [ 3577.964646][T11769] security_inode_alloc+0x30/0x1a0 [ 3577.964686][T11769] inode_init_always_gfp+0x174/0x254 [ 3577.964725][T11769] alloc_inode+0x40/0xdc [ 3577.964798][T11769] sock_alloc+0x20/0xa0 [ 3577.964862][T11769] __sock_create+0xa4/0x260 [ 3577.964898][T11769] __sys_socket+0xa0/0x140 [ 3577.964934][T11769] __arm64_sys_socket+0x1c/0x38 [ 3577.964970][T11769] invoke_syscall+0x54/0x10c [ 3577.965008][T11769] el0_svc_common.constprop.0+0x40/0xe0 [ 3577.965045][T11769] do_el0_svc+0x1c/0x34 [ 3577.965081][T11769] el0_svc+0x38/0x1fc [ 3577.965122][T11769] el0t_64_sync_handler+0xa0/0xe4 [ 3577.965194][T11769] el0t_64_sync+0x1a4/0x1a8 [ 3577.992421][T11769] socket: no more sockets [ 3585.130971][T11793] input: syz0 as /devices/virtual/input/input101 [ 3611.512537][T11871] fuse: Bad value for 'fd' [ 3622.434200][T11918] fuse: Bad value for 'fd' [ 3634.973606][T11987] FAULT_INJECTION: forcing a failure. [ 3634.973606][T11987] name failslab, interval 1, probability 0, space 0, times 0 [ 3634.976363][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.1.2636 Tainted: G W syzkaller #0 PREEMPT [ 3634.976537][T11987] Tainted: [W]=WARN [ 3634.976578][T11987] Hardware name: linux,dummy-virt (DT) [ 3634.976622][T11987] Call trace: [ 3634.976657][T11987] show_stack+0x18/0x24 (C) [ 3634.976774][T11987] dump_stack_lvl+0x60/0x80 [ 3634.976855][T11987] dump_stack+0x18/0x24 [ 3634.976933][T11987] should_fail_ex+0x1e0/0x238 [ 3634.977015][T11987] should_failslab+0x54/0x80 [ 3634.977093][T11987] kmem_cache_alloc_noprof+0x54/0x458 [ 3634.977221][T11987] do_getname+0x3c/0x1a0 [ 3634.977296][T11987] getname_uflags+0x1c/0x28 [ 3634.977378][T11987] __arm64_sys_name_to_handle_at+0x58/0x410 [ 3634.977453][T11987] invoke_syscall+0x54/0x10c [ 3634.977521][T11987] el0_svc_common.constprop.0+0x40/0xe0 [ 3634.977590][T11987] do_el0_svc+0x1c/0x34 [ 3634.977651][T11987] el0_svc+0x38/0x1fc [ 3634.977724][T11987] el0t_64_sync_handler+0xa0/0xe4 [ 3634.977795][T11987] el0t_64_sync+0x1a4/0x1a8 [ 3647.121915][T12034] FAULT_INJECTION: forcing a failure. [ 3647.121915][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3647.124417][T12034] CPU: 1 UID: 0 PID: 12034 Comm: syz.1.2652 Tainted: G W syzkaller #0 PREEMPT [ 3647.124610][T12034] Tainted: [W]=WARN [ 3647.124654][T12034] Hardware name: linux,dummy-virt (DT) [ 3647.124701][T12034] Call trace: [ 3647.124740][T12034] show_stack+0x18/0x24 (C) [ 3647.124883][T12034] dump_stack_lvl+0x60/0x80 [ 3647.124966][T12034] dump_stack+0x18/0x24 [ 3647.125041][T12034] should_fail_ex+0x1e0/0x238 [ 3647.125124][T12034] should_fail+0x14/0x40 [ 3647.125202][T12034] should_fail_usercopy+0x1c/0x40 [ 3647.125280][T12034] strncpy_from_user+0x24/0x1c0 [ 3647.125362][T12034] do_getname+0x5c/0x1a0 [ 3647.125438][T12034] getname_flags+0x14/0x20 [ 3647.125511][T12034] do_sys_openat2+0x5c/0x104 [ 3647.125589][T12034] __arm64_sys_openat+0x64/0xc0 [ 3647.125667][T12034] invoke_syscall+0x54/0x10c [ 3647.125747][T12034] el0_svc_common.constprop.0+0x40/0xe0 [ 3647.125830][T12034] do_el0_svc+0x1c/0x34 [ 3647.125903][T12034] el0_svc+0x38/0x1fc [ 3647.125996][T12034] el0t_64_sync_handler+0xa0/0xe4 [ 3647.126070][T12034] el0t_64_sync+0x1a4/0x1a8 [ 3647.913235][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3647.914712][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3650.221768][T12062] fuse: Bad value for 'fd' [ 3651.429659][T12076] input: syz0 as /devices/virtual/input/input102 [ 3652.060454][T12079] fuse: Bad value for 'fd' [ 3664.092019][T12108] fuse: Bad value for 'fd' [ 3671.194146][T12138] fuse: Bad value for 'fd' [ 3676.921781][T12168] fuse: Bad value for 'fd' [ 3676.936483][T12169] input: syz0 as /devices/virtual/input/input103 [ 3691.858286][T12212] input: syz0 as /devices/virtual/input/input104 [ 3706.211876][T12249] fuse: Bad value for 'fd' [ 3706.360906][T12254] fuse: Bad value for 'fd' [ 3719.713338][T12295] input: syz1 as /devices/virtual/input/input105 [ 3750.491109][T12372] input: syz1 as /devices/virtual/input/input106 [ 3774.623387][T12432] input: syz0 as /devices/virtual/input/input107 [ 3818.490991][T12473] input: syz0 as /devices/virtual/input/input108 [ 3889.498421][T12551] syz.0.2802 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3889.499252][T12551] CPU: 0 UID: 0 PID: 12551 Comm: syz.0.2802 Tainted: G W syzkaller #0 PREEMPT [ 3889.499377][T12551] Tainted: [W]=WARN [ 3889.499440][T12551] Hardware name: linux,dummy-virt (DT) [ 3889.499487][T12551] Call trace: [ 3889.499523][T12551] show_stack+0x18/0x24 (C) [ 3889.499640][T12551] dump_stack_lvl+0x60/0x80 [ 3889.499715][T12551] dump_stack+0x18/0x24 [ 3889.499802][T12551] dump_header+0x40/0x170 [ 3889.499878][T12551] oom_kill_process+0x220/0x2a0 [ 3889.499969][T12551] out_of_memory+0xec/0x58c [ 3889.500045][T12551] mem_cgroup_out_of_memory+0x108/0x118 [ 3889.500123][T12551] try_charge_memcg+0x3b4/0x590 [ 3889.500195][T12551] charge_memcg+0xe0/0x23c [ 3889.500269][T12551] __mem_cgroup_charge+0x38/0x128 [ 3889.500341][T12551] shmem_alloc_and_add_folio+0x140/0x628 [ 3889.500413][T12551] shmem_get_folio_gfp+0x114/0x758 [ 3889.500480][T12551] shmem_write_begin+0x6c/0x158 [ 3889.500549][T12551] generic_perform_write+0xb4/0x24c [ 3889.500614][T12551] shmem_file_write_iter+0xa0/0xa8 [ 3889.500680][T12551] __kernel_write_iter+0xfc/0x27c [ 3889.500753][T12551] dump_user_range+0xe4/0x304 [ 3889.500850][T12551] elf_core_dump+0xc68/0xf44 [ 3889.500930][T12551] vfs_coredump+0xf04/0x1de0 [ 3889.501009][T12551] get_signal+0x604/0x860 [ 3889.501080][T12551] arch_do_signal_or_restart+0x11c/0x3dc [ 3889.501151][T12551] exit_to_user_mode_loop+0x114/0x19c [ 3889.501227][T12551] el0_da+0xe8/0xf0 [ 3889.501307][T12551] el0t_64_sync_handler+0xd0/0xe4 [ 3889.501382][T12551] el0t_64_sync+0x1a4/0x1a8 [ 3889.501735][T12551] memory: usage 307200kB, limit 307200kB, failcnt 91211 [ 3889.501836][T12551] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 3889.501926][T12551] kmem: usage 2056kB, limit 9007199254740988kB, failcnt 0 [ 3889.502025][T12551] Memory cgroup stats for /syz0: [ 3889.502651][T12551] cache 174108672 [ 3889.502747][T12551] rss 138358784 [ 3889.502825][T12551] rss_huge 0 [ 3889.502899][T12551] shmem 167747584 [ 3889.502986][T12551] mapped_file 6328320 [ 3889.503063][T12551] dirty 8192 [ 3889.503138][T12551] writeback 0 [ 3889.503214][T12551] workingset_refault_anon 1983 [ 3889.503291][T12551] workingset_refault_file 9 [ 3889.503367][T12551] swap 127987712 [ 3889.503511][T12551] swapcached 467234816 [ 3889.503593][T12551] pgpgin 10816057 [ 3889.503669][T12551] pgpgout 10740282 [ 3889.503745][T12551] pgfault 6054561 [ 3889.503820][T12551] pgmajfault 285 [ 3889.503895][T12551] inactive_anon 192909312 [ 3889.503991][T12551] active_anon 36864 [ 3889.504070][T12551] inactive_file 32768 [ 3889.504146][T12551] active_file 0 [ 3889.504221][T12551] unevictable 119435264 [ 3889.504297][T12551] hierarchical_memory_limit 314572800 [ 3889.504373][T12551] hierarchical_memsw_limit 9223372036854771712 [ 3889.504450][T12551] total_cache 174108672 [ 3889.504528][T12551] total_rss 138358784 [ 3889.504604][T12551] total_rss_huge 0 [ 3889.504682][T12551] total_shmem 167747584 [ 3889.504770][T12551] total_mapped_file 6328320 [ 3889.504846][T12551] total_dirty 8192 [ 3889.504919][T12551] total_writeback 0 [ 3889.505004][T12551] total_workingset_refault_anon 1983 [ 3889.505080][T12551] total_workingset_refault_file 9 [ 3889.505156][T12551] total_swap 127987712 [ 3889.505228][T12551] total_swapcached 467234816 [ 3889.505298][T12551] total_pgpgin 10816059 [ 3889.505368][T12551] total_pgpgout 10740284 [ 3889.505442][T12551] total_pgfault 6054563 [ 3889.505520][T12551] total_pgmajfault 285 [ 3889.505597][T12551] total_inactive_anon 192909312 [ 3889.505676][T12551] total_active_anon 36864 [ 3889.505756][T12551] total_inactive_file 32768 [ 3889.505836][T12551] total_active_file 0 [ 3889.505918][T12551] total_unevictable 119435264 [ 3889.506026][T12551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2802,pid=12542,uid=0 [ 3889.507148][T12551] Memory cgroup out of memory: Killed process 12542 (syz.0.2802) total-vm:124980kB, anon-rss:111652kB, file-rss:12892kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:0 [ 3892.184876][ T31] oom_reaper: reaped process 12542 (syz.0.2802), now anon-rss:0kB, file-rss:10240kB, shmem-rss:0kB [ 3906.807289][T12575] fuse: fd is not a fuse device [ 3908.425021][T12580] input: syz0 as /devices/virtual/input/input109 [ 3974.083377][T12649] input: syz1 as /devices/virtual/input/input110 [ 4030.092565][T12706] fuse: fd is not a fuse device [ 4046.049944][T12733] input: syz0 as /devices/virtual/input/input111 [ 4070.107263][T12759] input: syz0 as /devices/virtual/input/input112 [ 4083.701375][T12775] fuse: fd is not a fuse device [ 4097.939900][T12795] input: syz0 as /devices/virtual/input/input113 [ 4101.160856][T12801] fuse: fd is not a fuse device [ 4106.523836][T12811] input: syz0 as /devices/virtual/input/input114 [ 4115.292833][T12823] input: syz1 as /devices/virtual/input/input115 [ 4135.471259][T12843] input: syz0 as /devices/virtual/input/input116 [ 4182.813338][T12915] fuse: fd is not a fuse device [ 4183.092148][T12919] fuse: fd is not a fuse device [ 4186.056988][T12935] FAULT_INJECTION: forcing a failure. [ 4186.056988][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 4186.059914][T12935] CPU: 0 UID: 0 PID: 12935 Comm: syz.1.2898 Tainted: G W syzkaller #0 PREEMPT [ 4186.060064][T12935] Tainted: [W]=WARN [ 4186.060098][T12935] Hardware name: linux,dummy-virt (DT) [ 4186.060138][T12935] Call trace: [ 4186.060170][T12935] show_stack+0x18/0x24 (C) [ 4186.060276][T12935] dump_stack_lvl+0x60/0x80 [ 4186.060347][T12935] dump_stack+0x18/0x24 [ 4186.060412][T12935] should_fail_ex+0x1e0/0x238 [ 4186.060477][T12935] should_failslab+0x54/0x80 [ 4186.060542][T12935] __kmalloc_noprof+0xac/0x520 [ 4186.060611][T12935] tomoyo_encode2+0x7c/0x13c [ 4186.060683][T12935] tomoyo_encode+0x28/0x40 [ 4186.060751][T12935] tomoyo_realpath_from_path+0x100/0x1d4 [ 4186.060818][T12935] tomoyo_check_open_permission+0x128/0x190 [ 4186.060893][T12935] tomoyo_file_open+0x30/0x3c [ 4186.060963][T12935] security_file_open+0x74/0x148 [ 4186.061030][T12935] do_dentry_open+0xe0/0x4fc [ 4186.061100][T12935] vfs_open+0x2c/0xe8 [ 4186.061164][T12935] path_openat+0x5b4/0x960 [ 4186.061235][T12935] do_file_open+0xb0/0x168 [ 4186.061304][T12935] do_sys_openat2+0x84/0x104 [ 4186.061375][T12935] __arm64_sys_openat+0x64/0xc0 [ 4186.061454][T12935] invoke_syscall+0x54/0x10c [ 4186.061523][T12935] el0_svc_common.constprop.0+0x40/0xe0 [ 4186.061597][T12935] do_el0_svc+0x1c/0x34 [ 4186.061668][T12935] el0_svc+0x38/0x1fc [ 4186.061750][T12935] el0t_64_sync_handler+0xa0/0xe4 [ 4186.061821][T12935] el0t_64_sync+0x1a4/0x1a8 [ 4186.078361][T12935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4186.145638][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 4186.187007][ T9449] smc: removing ib device syz1 [ 4202.715624][T12972] input: syz1 as /devices/virtual/input/input117 [ 4213.042616][T12991] input: syz0 as /devices/virtual/input/input118 [ 4220.262992][T12999] input: syz1 as /devices/virtual/input/input119 [ 4230.675071][T13009] fuse: fd is not a fuse device [ 4234.536872][T13021] fuse: fd is not a fuse device [ 4234.658461][T13023] fuse: fd is not a fuse device [ 4234.786111][T13025] fuse: fd is not a fuse device [ 4242.429980][T13033] fuse: fd is not a fuse device [ 4242.501488][T13035] fuse: fd is not a fuse device [ 4242.603339][T13037] fuse: fd is not a fuse device [ 4242.695605][T13039] fuse: fd is not a fuse device [ 4242.786781][T13041] fuse: fd is not a fuse device [ 4242.865528][T13043] fuse: fd is not a fuse device [ 4242.931772][T13045] fuse: fd is not a fuse device [ 4243.008417][T13047] fuse: fd is not a fuse device [ 4243.082262][T13049] fuse: fd is not a fuse device [ 4243.642137][T13055] fuse: fd is not a fuse device [ 4243.740928][T13057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2938'. [ 4244.499648][T13061] fuse: fd is not a fuse device [ 4244.552765][T13063] fuse: fd is not a fuse device [ 4244.616669][T13065] fuse: fd is not a fuse device [ 4244.687817][T13067] fuse: fd is not a fuse device [ 4244.936856][T13073] fuse: fd is not a fuse device [ 4245.063509][T13076] fuse: fd is not a fuse device [ 4248.448094][T13090] fuse: fd is not a fuse device [ 4248.546052][T13092] fuse: fd is not a fuse device [ 4248.815676][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'. [ 4259.152343][T13133] fuse: fd is not a fuse device [ 4259.259401][T13135] fuse: fd is not a fuse device [ 4266.754108][T13146] fuse: fd is not a fuse device [ 4267.006763][T13148] fuse: fd is not a fuse device [ 4267.250238][T13150] fuse: fd is not a fuse device [ 4267.552287][T13152] fuse: fd is not a fuse device [ 4267.584660][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2970'. [ 4275.768342][T13177] fuse: fd is not a fuse device [ 4276.951162][T13181] fuse: fd is not a fuse device [ 4283.528562][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4283.532892][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4300.378047][T13373] FAULT_INJECTION: forcing a failure. [ 4300.378047][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 4300.380825][T13373] CPU: 1 UID: 0 PID: 13373 Comm: syz.1.3067 Tainted: G W syzkaller #0 PREEMPT [ 4300.380953][T13373] Tainted: [W]=WARN [ 4300.380972][T13373] Hardware name: linux,dummy-virt (DT) [ 4300.380995][T13373] Call trace: [ 4300.381013][T13373] show_stack+0x18/0x24 (C) [ 4300.381081][T13373] dump_stack_lvl+0x60/0x80 [ 4300.381121][T13373] dump_stack+0x18/0x24 [ 4300.381157][T13373] should_fail_ex+0x1e0/0x238 [ 4300.381198][T13373] should_failslab+0x54/0x80 [ 4300.381235][T13373] kmem_cache_alloc_noprof+0x54/0x458 [ 4300.381277][T13373] do_getname+0x3c/0x1a0 [ 4300.381342][T13373] getname_flags+0x14/0x20 [ 4300.381425][T13373] do_sys_openat2+0x5c/0x104 [ 4300.381573][T13373] __arm64_sys_openat+0x64/0xc0 [ 4300.381835][T13373] invoke_syscall+0x54/0x10c [ 4300.382247][T13373] el0_svc_common.constprop.0+0x40/0xe0 [ 4300.382345][T13373] do_el0_svc+0x1c/0x34 [ 4300.382438][T13373] el0_svc+0x38/0x1fc [ 4300.382525][T13373] el0t_64_sync_handler+0xa0/0xe4 [ 4300.382861][T13373] el0t_64_sync+0x1a4/0x1a8 [ 4306.052224][T13398] FAULT_INJECTION: forcing a failure. [ 4306.052224][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 4306.054475][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.1.3077 Tainted: G W syzkaller #0 PREEMPT [ 4306.054643][T13398] Tainted: [W]=WARN [ 4306.054690][T13398] Hardware name: linux,dummy-virt (DT) [ 4306.054737][T13398] Call trace: [ 4306.054774][T13398] show_stack+0x18/0x24 (C) [ 4306.054893][T13398] dump_stack_lvl+0x60/0x80 [ 4306.054978][T13398] dump_stack+0x18/0x24 [ 4306.055057][T13398] should_fail_ex+0x1e0/0x238 [ 4306.055142][T13398] should_failslab+0x54/0x80 [ 4306.055222][T13398] kmem_cache_alloc_noprof+0x54/0x458 [ 4306.055308][T13398] security_file_alloc+0x30/0x1a0 [ 4306.055401][T13398] init_file+0x3c/0x10c [ 4306.055512][T13398] alloc_empty_file+0x74/0x130 [ 4306.055586][T13398] path_openat+0x48/0x960 [ 4306.055668][T13398] do_file_open+0xb0/0x168 [ 4306.055746][T13398] do_sys_openat2+0x84/0x104 [ 4306.055822][T13398] __arm64_sys_openat+0x64/0xc0 [ 4306.055896][T13398] invoke_syscall+0x54/0x10c [ 4306.055970][T13398] el0_svc_common.constprop.0+0x40/0xe0 [ 4306.056043][T13398] do_el0_svc+0x1c/0x34 [ 4306.056116][T13398] el0_svc+0x38/0x1fc [ 4306.056191][T13398] el0t_64_sync_handler+0xa0/0xe4 [ 4306.056270][T13398] el0t_64_sync+0x1a4/0x1a8 [ 4316.355396][T12678] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 4316.461787][T12678] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 4327.382390][T13466] FAULT_INJECTION: forcing a failure. [ 4327.382390][T13466] name failslab, interval 1, probability 0, space 0, times 0 [ 4327.382778][T13466] CPU: 1 UID: 0 PID: 13466 Comm: syz.1.3098 Tainted: G W syzkaller #0 PREEMPT [ 4327.382898][T13466] Tainted: [W]=WARN [ 4327.382931][T13466] Hardware name: linux,dummy-virt (DT) [ 4327.382980][T13466] Call trace: [ 4327.383012][T13466] show_stack+0x18/0x24 (C) [ 4327.383114][T13466] dump_stack_lvl+0x60/0x80 [ 4327.383182][T13466] dump_stack+0x18/0x24 [ 4327.383248][T13466] should_fail_ex+0x1e0/0x238 [ 4327.383318][T13466] should_failslab+0x54/0x80 [ 4327.383383][T13466] kmem_cache_alloc_noprof+0x54/0x458 [ 4327.383500][T13466] do_getname+0x3c/0x1a0 [ 4327.383564][T13466] getname_flags+0x14/0x20 [ 4327.383628][T13466] do_sys_openat2+0x5c/0x104 [ 4327.383695][T13466] __arm64_sys_openat+0x64/0xc0 [ 4327.383760][T13466] invoke_syscall+0x54/0x10c [ 4327.383823][T13466] el0_svc_common.constprop.0+0x40/0xe0 [ 4327.383887][T13466] do_el0_svc+0x1c/0x34 [ 4327.383956][T13466] el0_svc+0x38/0x1fc [ 4327.384031][T13466] el0t_64_sync_handler+0xa0/0xe4 [ 4327.384111][T13466] el0t_64_sync+0x1a4/0x1a8 [ 4327.678562][T13388] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 4327.732838][T13388] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 4330.309542][T13475] FAULT_INJECTION: forcing a failure. [ 4330.309542][T13475] name failslab, interval 1, probability 0, space 0, times 0 [ 4330.309888][T13475] CPU: 1 UID: 0 PID: 13475 Comm: syz.1.3101 Tainted: G W syzkaller #0 PREEMPT [ 4330.310004][T13475] Tainted: [W]=WARN [ 4330.310040][T13475] Hardware name: linux,dummy-virt (DT) [ 4330.310079][T13475] Call trace: [ 4330.310112][T13475] show_stack+0x18/0x24 (C) [ 4330.310218][T13475] dump_stack_lvl+0x60/0x80 [ 4330.310294][T13475] dump_stack+0x18/0x24 [ 4330.310375][T13475] should_fail_ex+0x1e0/0x238 [ 4330.310454][T13475] should_failslab+0x54/0x80 [ 4330.310529][T13475] kmem_cache_alloc_noprof+0x54/0x458 [ 4330.310608][T13475] do_getname+0x3c/0x1a0 [ 4330.310678][T13475] getname_flags+0x14/0x20 [ 4330.310751][T13475] path_setxattrat+0x1a0/0x1e0 [ 4330.310822][T13475] __arm64_sys_setxattr+0x2c/0x40 [ 4330.310919][T13475] invoke_syscall+0x54/0x10c [ 4330.311032][T13475] el0_svc_common.constprop.0+0x40/0xe0 [ 4330.311134][T13475] do_el0_svc+0x1c/0x34 [ 4330.311207][T13475] el0_svc+0x38/0x1fc [ 4330.311291][T13475] el0t_64_sync_handler+0xa0/0xe4 [ 4330.311377][T13475] el0t_64_sync+0x1a4/0x1a8 [ 4351.611002][T13562] fuse: fd is not a fuse device [ 4361.296155][T13605] FAULT_INJECTION: forcing a failure. [ 4361.296155][T13605] name failslab, interval 1, probability 0, space 0, times 0 [ 4361.296569][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.1.3145 Tainted: G W syzkaller #0 PREEMPT [ 4361.296688][T13605] Tainted: [W]=WARN [ 4361.296725][T13605] Hardware name: linux,dummy-virt (DT) [ 4361.296766][T13605] Call trace: [ 4361.296799][T13605] show_stack+0x18/0x24 (C) [ 4361.296915][T13605] dump_stack_lvl+0x60/0x80 [ 4361.296990][T13605] dump_stack+0x18/0x24 [ 4361.297063][T13605] should_fail_ex+0x1e0/0x238 [ 4361.297196][T13605] should_failslab+0x54/0x80 [ 4361.297341][T13605] kmem_cache_alloc_noprof+0x54/0x458 [ 4361.297457][T13605] do_getname+0x3c/0x1a0 [ 4361.297529][T13605] getname_flags+0x14/0x20 [ 4361.297686][T13605] do_sys_openat2+0x5c/0x104 [ 4361.297773][T13605] __arm64_sys_openat+0x64/0xc0 [ 4361.297850][T13605] invoke_syscall+0x54/0x10c [ 4361.297928][T13605] el0_svc_common.constprop.0+0x40/0xe0 [ 4361.298016][T13605] do_el0_svc+0x1c/0x34 [ 4361.298083][T13605] el0_svc+0x38/0x1fc [ 4361.298162][T13605] el0t_64_sync_handler+0xa0/0xe4 [ 4361.298256][T13605] el0t_64_sync+0x1a4/0x1a8 [ 4362.172733][T13627] fuse: fd is not a fuse device [ 4362.254422][T13629] fuse: fd is not a fuse device [ 4364.534493][T13643] FAULT_INJECTION: forcing a failure. [ 4364.534493][T13643] name failslab, interval 1, probability 0, space 0, times 0 [ 4364.534825][T13643] CPU: 0 UID: 0 PID: 13643 Comm: syz.1.3162 Tainted: G W syzkaller #0 PREEMPT [ 4364.534939][T13643] Tainted: [W]=WARN [ 4364.534975][T13643] Hardware name: linux,dummy-virt (DT) [ 4364.535022][T13643] Call trace: [ 4364.535054][T13643] show_stack+0x18/0x24 (C) [ 4364.535154][T13643] dump_stack_lvl+0x60/0x80 [ 4364.535224][T13643] dump_stack+0x18/0x24 [ 4364.535291][T13643] should_fail_ex+0x1e0/0x238 [ 4364.535362][T13643] should_failslab+0x54/0x80 [ 4364.535482][T13643] kmem_cache_alloc_noprof+0x54/0x458 [ 4364.535558][T13643] fcntl_setlk+0x50/0x33c [ 4364.535631][T13643] do_fcntl+0x134/0x7b8 [ 4364.535700][T13643] __arm64_sys_fcntl+0x88/0xfc [ 4364.535769][T13643] invoke_syscall+0x54/0x10c [ 4364.535836][T13643] el0_svc_common.constprop.0+0x40/0xe0 [ 4364.535903][T13643] do_el0_svc+0x1c/0x34 [ 4364.535967][T13643] el0_svc+0x38/0x1fc [ 4364.536041][T13643] el0t_64_sync_handler+0xa0/0xe4 [ 4364.536110][T13643] el0t_64_sync+0x1a4/0x1a8 [ 4364.663173][T13645] input: syz0 as /devices/virtual/input/input120 [ 4374.487687][T13673] fuse: fd is not a fuse device [ 4374.768281][T13679] fuse: fd is not a fuse device [ 4382.442249][T13706] fuse: fd is not a fuse device [ 4385.704351][T13713] fuse: fd is not a fuse device [ 4386.934054][T13723] input: syz0 as /devices/virtual/input/input121 [ 4410.523733][T13762] fuse: fd is not a fuse device [ 4410.665652][T13764] fuse: fd is not a fuse device [ 4410.858003][T13766] fuse: fd is not a fuse device [ 4435.477264][T13813] fuse: fd is not a fuse device [ 4435.687037][T13817] fuse: fd is not a fuse device [ 4439.860097][T13833] input: syz0 as /devices/virtual/input/input122 [ 4450.903907][T13844] input: syz0 as /devices/virtual/input/input123 [ 4462.225350][T13858] fuse: fd is not a fuse device [ 4465.861731][T13869] fuse: fd is not a fuse device [ 4471.311651][T13886] input: syz0 as /devices/virtual/input/input124 [ 4482.435702][T13902] fuse: fd is not a fuse device [ 4482.665569][T13908] fuse: fd is not a fuse device [ 4482.740207][T13910] fuse: fd is not a fuse device [ 4485.412198][T13923] fuse: fd is not a fuse device [ 4487.944197][T13930] fuse: fd is not a fuse device [ 4498.656179][T13968] fuse: fd is not a fuse device [ 4498.727102][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3265'. [ 4498.954504][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 4502.204377][T13982] fuse: fd is not a fuse device [ 4502.324377][T13984] fuse: fd is not a fuse device [ 4502.445758][T13986] fuse: fd is not a fuse device [ 4505.145918][T13991] fuse: fd is not a fuse device [ 4505.158221][T13991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 4505.367842][T13993] fuse: fd is not a fuse device [ 4505.521602][T13995] fuse: fd is not a fuse device [ 4505.677738][T13997] fuse: fd is not a fuse device [ 4508.417994][T14006] fuse: fd is not a fuse device [ 4511.697582][T14022] fuse: fd is not a fuse device [ 4514.917445][T14044] fuse: fd is not a fuse device [ 4515.350310][T14058] fuse: fd is not a fuse device [ 4515.387548][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3290'. [ 4516.082464][T14082] fuse: fd is not a fuse device [ 4524.685769][T14104] fuse: fd is not a fuse device [ 4549.975842][T14202] fuse: fd is not a fuse device [ 4551.000269][T14207] FAULT_INJECTION: forcing a failure. [ 4551.000269][T14207] name failslab, interval 1, probability 0, space 0, times 0 [ 4551.002207][T14207] CPU: 1 UID: 0 PID: 14207 Comm: syz.1.3361 Tainted: G W syzkaller #0 PREEMPT [ 4551.002361][T14207] Tainted: [W]=WARN [ 4551.002398][T14207] Hardware name: linux,dummy-virt (DT) [ 4551.002446][T14207] Call trace: [ 4551.002481][T14207] show_stack+0x18/0x24 (C) [ 4551.002589][T14207] dump_stack_lvl+0x60/0x80 [ 4551.002664][T14207] dump_stack+0x18/0x24 [ 4551.002735][T14207] should_fail_ex+0x1e0/0x238 [ 4551.002819][T14207] should_failslab+0x54/0x80 [ 4551.002887][T14207] kmem_cache_alloc_noprof+0x54/0x458 [ 4551.002959][T14207] security_file_alloc+0x30/0x1a0 [ 4551.003031][T14207] init_file+0x3c/0x10c [ 4551.003108][T14207] alloc_empty_file+0x74/0x130 [ 4551.003175][T14207] alloc_file_pseudo+0xb0/0x160 [ 4551.003241][T14207] sock_alloc_file+0x40/0xd8 [ 4551.003316][T14207] do_accept+0xb4/0x1a8 [ 4551.003387][T14207] __sys_accept4+0x84/0x118 [ 4551.003518][T14207] __arm64_sys_accept+0x1c/0x2c [ 4551.003590][T14207] invoke_syscall+0x54/0x10c [ 4551.003661][T14207] el0_svc_common.constprop.0+0x40/0xe0 [ 4551.003733][T14207] do_el0_svc+0x1c/0x34 [ 4551.003812][T14207] el0_svc+0x38/0x1fc [ 4551.003896][T14207] el0t_64_sync_handler+0xa0/0xe4 [ 4551.003973][T14207] el0t_64_sync+0x1a4/0x1a8 [ 4556.480970][T14234] fuse: fd is not a fuse device [ 4556.577291][T14236] fuse: fd is not a fuse device [ 4560.863534][T14250] input: syz0 as /devices/virtual/input/input125 [ 4564.804958][T14260] fuse: fd is not a fuse device [ 4567.228438][T14284] fuse: fd is not a fuse device [ 4576.219622][T14300] input: syz0 as /devices/virtual/input/input126 [ 4583.620544][T14313] input: syz1 as /devices/virtual/input/input127 [ 4590.371955][T14321] input: syz1 as /devices/virtual/input/input128 [ 4590.391546][T14322] fuse: fd is not a fuse device [ 4601.885566][T14343] fuse: fd is not a fuse device [ 4602.168012][T14349] fuse: fd is not a fuse device [ 4602.361961][T14354] fuse: fd is not a fuse device [ 4602.473908][T14356] fuse: fd is not a fuse device [ 4602.575222][T14358] fuse: fd is not a fuse device [ 4603.503546][T14365] fuse: fd is not a fuse device [ 4603.606894][T14363] input: syz1 as /devices/virtual/input/input129 [ 4603.632902][T14367] fuse: fd is not a fuse device [ 4603.925468][T14369] fuse: fd is not a fuse device [ 4603.941879][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 4604.143296][T14371] fuse: fd is not a fuse device [ 4604.690360][T14372] ======================================================= [ 4604.690360][T14372] WARNING: The mand mount option has been deprecated and [ 4604.690360][T14372] and is ignored by this kernel. Remove the mand [ 4604.690360][T14372] option from the mount to silence this warning. [ 4604.690360][T14372] ======================================================= [ 4606.783999][T14375] fuse: fd is not a fuse device [ 4607.185873][T14379] fuse: fd is not a fuse device [ 4607.316263][T14381] fuse: fd is not a fuse device [ 4607.831582][T14385] fuse: fd is not a fuse device [ 4608.011777][T14387] fuse: fd is not a fuse device [ 4608.241285][T14389] fuse: fd is not a fuse device [ 4608.376285][T14391] fuse: fd is not a fuse device [ 4608.512546][T14393] fuse: fd is not a fuse device [ 4608.612725][T14395] fuse: fd is not a fuse device [ 4608.717513][T14397] fuse: fd is not a fuse device [ 4608.934419][T14401] fuse: fd is not a fuse device [ 4609.042506][T14403] fuse: fd is not a fuse device [ 4609.200457][T14405] fuse: fd is not a fuse device [ 4609.420467][T14409] fuse: fd is not a fuse device [ 4609.511078][T14411] fuse: fd is not a fuse device [ 4609.747923][T14415] fuse: fd is not a fuse device [ 4609.887101][T14417] fuse: fd is not a fuse device [ 4609.997435][T14419] fuse: fd is not a fuse device [ 4610.116851][T14421] fuse: fd is not a fuse device [ 4610.220890][T14423] fuse: fd is not a fuse device [ 4610.326146][T14425] fuse: fd is not a fuse device [ 4610.482692][T14427] fuse: fd is not a fuse device [ 4610.602975][T14429] fuse: fd is not a fuse device [ 4610.785859][T14431] fuse: fd is not a fuse device [ 4610.905521][T14434] fuse: fd is not a fuse device [ 4611.013726][T14439] fuse: fd is not a fuse device [ 4611.120202][T14442] fuse: fd is not a fuse device [ 4611.322671][T14446] input: syz0 as /devices/virtual/input/input130 [ 4611.806292][T14452] fuse: fd is not a fuse device [ 4612.033593][T14457] fuse: fd is not a fuse device [ 4620.999849][T14474] input: syz0 as /devices/virtual/input/input131 [ 4624.847738][T14481] fuse: fd is not a fuse device [ 4624.923776][T14483] fuse: fd is not a fuse device [ 4625.343651][T14491] fuse: fd is not a fuse device [ 4629.063744][T14526] FAULT_INJECTION: forcing a failure. [ 4629.063744][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4629.064219][T14526] CPU: 1 UID: 0 PID: 14526 Comm: syz.1.3485 Tainted: G W syzkaller #0 PREEMPT [ 4629.064325][T14526] Tainted: [W]=WARN [ 4629.064355][T14526] Hardware name: linux,dummy-virt (DT) [ 4629.064392][T14526] Call trace: [ 4629.064424][T14526] show_stack+0x18/0x24 (C) [ 4629.064523][T14526] dump_stack_lvl+0x60/0x80 [ 4629.064589][T14526] dump_stack+0x18/0x24 [ 4629.064719][T14526] should_fail_ex+0x1e0/0x238 [ 4629.064804][T14526] should_fail+0x14/0x40 [ 4629.064905][T14526] should_fail_usercopy+0x1c/0x40 [ 4629.065002][T14526] simple_read_from_buffer+0x5c/0x12c [ 4629.065098][T14526] proc_fail_nth_read+0xb4/0x140 [ 4629.065177][T14526] vfs_read+0xc4/0x31c [ 4629.065280][T14526] ksys_read+0x70/0x110 [ 4629.065361][T14526] __arm64_sys_read+0x18/0x24 [ 4629.065441][T14526] invoke_syscall+0x54/0x10c [ 4629.065510][T14526] el0_svc_common.constprop.0+0x40/0xe0 [ 4629.065612][T14526] do_el0_svc+0x1c/0x34 [ 4629.065713][T14526] el0_svc+0x38/0x1fc [ 4629.065839][T14526] el0t_64_sync_handler+0xa0/0xe4 [ 4629.065928][T14526] el0t_64_sync+0x1a4/0x1a8 [ 4631.527605][T14586] input: syz1 as /devices/virtual/input/input132 [ 4632.594668][T14593] FAULT_INJECTION: forcing a failure. [ 4632.594668][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 4632.595098][T14593] CPU: 1 UID: 0 PID: 14593 Comm: syz.1.3489 Tainted: G W syzkaller #0 PREEMPT [ 4632.595226][T14593] Tainted: [W]=WARN [ 4632.595267][T14593] Hardware name: linux,dummy-virt (DT) [ 4632.595323][T14593] Call trace: [ 4632.595399][T14593] show_stack+0x18/0x24 (C) [ 4632.595543][T14593] dump_stack_lvl+0x60/0x80 [ 4632.595625][T14593] dump_stack+0x18/0x24 [ 4632.595725][T14593] should_fail_ex+0x1e0/0x238 [ 4632.595827][T14593] should_failslab+0x54/0x80 [ 4632.595935][T14593] __kmalloc_noprof+0xac/0x520 [ 4632.596022][T14593] tomoyo_realpath_from_path+0x44/0x1d4 [ 4632.596129][T14593] tomoyo_path_number_perm+0xe0/0x21c [ 4632.596236][T14593] tomoyo_file_ioctl+0x1c/0x30 [ 4632.596353][T14593] security_file_ioctl+0x8c/0x19c [ 4632.596466][T14593] __arm64_sys_ioctl+0x44/0x100 [ 4632.596554][T14593] invoke_syscall+0x54/0x10c [ 4632.596640][T14593] el0_svc_common.constprop.0+0x40/0xe0 [ 4632.596742][T14593] do_el0_svc+0x1c/0x34 [ 4632.596822][T14593] el0_svc+0x38/0x1fc [ 4632.596934][T14593] el0t_64_sync_handler+0xa0/0xe4 [ 4632.597022][T14593] el0t_64_sync+0x1a4/0x1a8 [ 4632.611457][T14593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4640.954242][T14662] FAULT_INJECTION: forcing a failure. [ 4640.954242][T14662] name failslab, interval 1, probability 0, space 0, times 0 [ 4640.954599][T14662] CPU: 1 UID: 0 PID: 14662 Comm: syz.1.3512 Tainted: G W syzkaller #0 PREEMPT [ 4640.954719][T14662] Tainted: [W]=WARN [ 4640.954756][T14662] Hardware name: linux,dummy-virt (DT) [ 4640.954795][T14662] Call trace: [ 4640.954841][T14662] show_stack+0x18/0x24 (C) [ 4640.954955][T14662] dump_stack_lvl+0x60/0x80 [ 4640.955040][T14662] dump_stack+0x18/0x24 [ 4640.955137][T14662] should_fail_ex+0x1e0/0x238 [ 4640.955226][T14662] should_failslab+0x54/0x80 [ 4640.955323][T14662] kmem_cache_alloc_noprof+0x54/0x458 [ 4640.955439][T14662] alloc_empty_file+0x60/0x130 [ 4640.955540][T14662] path_openat+0x48/0x960 [ 4640.955698][T14662] do_file_open+0xb0/0x168 [ 4640.955781][T14662] do_sys_openat2+0x84/0x104 [ 4640.955888][T14662] __arm64_sys_openat+0x64/0xc0 [ 4640.955969][T14662] invoke_syscall+0x54/0x10c [ 4640.956066][T14662] el0_svc_common.constprop.0+0x40/0xe0 [ 4640.956173][T14662] do_el0_svc+0x1c/0x34 [ 4640.956253][T14662] el0_svc+0x38/0x1fc [ 4640.956348][T14662] el0t_64_sync_handler+0xa0/0xe4 [ 4640.956429][T14662] el0t_64_sync+0x1a4/0x1a8 [ 4649.057436][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4649.061885][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4650.117791][T14745] input: syz0 as /devices/virtual/input/input133 [ 4656.161216][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4656.167084][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4656.178183][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4656.181336][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4656.191946][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4656.194104][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4664.560543][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4664.562310][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4664.600668][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4664.602191][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4665.809508][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4665.816402][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4665.838131][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4665.846838][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4667.622659][T14920] input: syz1 as /devices/virtual/input/input134 [ 4678.656291][T14982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4678.671373][T14982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4684.124236][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4684.125636][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4684.195722][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4684.197195][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4685.161504][T15047] x_tables: duplicate underflow at hook 2 [ 4685.925104][T15067] input: syz0 as /devices/virtual/input/input136 [ 4701.793873][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4701.794912][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4701.813131][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4701.814584][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4713.785618][T15209] FAULT_INJECTION: forcing a failure. [ 4713.785618][T15209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4713.787781][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.1.3707 Tainted: G W syzkaller #0 PREEMPT [ 4713.787928][T15209] Tainted: [W]=WARN [ 4713.787975][T15209] Hardware name: linux,dummy-virt (DT) [ 4713.788013][T15209] Call trace: [ 4713.788046][T15209] show_stack+0x18/0x24 (C) [ 4713.788158][T15209] dump_stack_lvl+0x60/0x80 [ 4713.788232][T15209] dump_stack+0x18/0x24 [ 4713.788307][T15209] should_fail_ex+0x1e0/0x238 [ 4713.788381][T15209] should_fail+0x14/0x40 [ 4713.788445][T15209] should_fail_usercopy+0x1c/0x40 [ 4713.788521][T15209] _inline_copy_from_user+0x24/0xa8 [ 4713.788650][T15209] copy_msghdr_from_user+0x58/0x160 [ 4713.788741][T15209] ___sys_sendmsg+0x90/0x108 [ 4713.788847][T15209] __sys_sendmsg+0x9c/0x100 [ 4713.788926][T15209] __arm64_sys_sendmsg+0x20/0x38 [ 4713.789015][T15209] invoke_syscall+0x54/0x10c [ 4713.789085][T15209] el0_svc_common.constprop.0+0x40/0xe0 [ 4713.789151][T15209] do_el0_svc+0x1c/0x34 [ 4713.789217][T15209] el0_svc+0x38/0x1fc [ 4713.789294][T15209] el0t_64_sync_handler+0xa0/0xe4 [ 4713.789366][T15209] el0t_64_sync+0x1a4/0x1a8 [ 4718.229835][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4718.230923][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4719.705877][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3733'. [ 4720.970055][T15291] input: syz0 as /devices/virtual/input/input137 [ 4725.500686][T15302] mmap: syz.0.3743 (15302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 4728.724922][T15340] FAULT_INJECTION: forcing a failure. [ 4728.724922][T15340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4728.726938][T15340] CPU: 0 UID: 0 PID: 15340 Comm: syz.1.3758 Tainted: G W syzkaller #0 PREEMPT [ 4728.727078][T15340] Tainted: [W]=WARN [ 4728.727110][T15340] Hardware name: linux,dummy-virt (DT) [ 4728.727146][T15340] Call trace: [ 4728.727210][T15340] show_stack+0x18/0x24 (C) [ 4728.727307][T15340] dump_stack_lvl+0x60/0x80 [ 4728.727434][T15340] dump_stack+0x18/0x24 [ 4728.727503][T15340] should_fail_ex+0x1e0/0x238 [ 4728.727602][T15340] should_fail+0x14/0x40 [ 4728.727664][T15340] should_fail_usercopy+0x1c/0x40 [ 4728.727727][T15340] simple_read_from_buffer+0x5c/0x12c [ 4728.727801][T15340] proc_fail_nth_read+0xb4/0x140 [ 4728.727868][T15340] vfs_read+0xc4/0x31c [ 4728.727938][T15340] ksys_read+0x70/0x110 [ 4728.728005][T15340] __arm64_sys_read+0x18/0x24 [ 4728.728083][T15340] invoke_syscall+0x54/0x10c [ 4728.728146][T15340] el0_svc_common.constprop.0+0x40/0xe0 [ 4728.728208][T15340] do_el0_svc+0x1c/0x34 [ 4728.728268][T15340] el0_svc+0x38/0x1fc [ 4728.728337][T15340] el0t_64_sync_handler+0xa0/0xe4 [ 4728.728411][T15340] el0t_64_sync+0x1a4/0x1a8 [ 4729.900478][T15381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3773'. [ 4732.829738][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4732.831292][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4744.283812][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4744.285045][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4744.409856][T15442] input: syz0 as /devices/virtual/input/input138 [ 4757.674441][T15514] autofs4:pid:15514:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 4761.560339][T15525] autofs4:pid:15525:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 4783.700268][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4783.702960][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4783.796188][T15592] mmap: syz.1.3833 (15592): VmData 29241344 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 4784.246777][T15599] input: syz1 as /devices/virtual/input/input139 [ 4791.810265][T15630] Restarting kernel threads ... [ 4791.812704][T15630] Done restarting kernel threads. [ 4792.239827][T15640] input: syz0 as /devices/virtual/input/input140 [ 4798.726009][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4798.730926][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4799.838217][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4799.840387][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4814.272382][T15861] fuse: fd is not a fuse device [ 4818.526415][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4818.528061][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4818.539290][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4818.540723][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4818.556692][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4818.558152][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4818.567357][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4818.575950][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4818.604534][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4818.606002][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4825.050541][T15958] input: syz0 as /devices/virtual/input/input142 [ 4838.301788][T16036] FAULT_INJECTION: forcing a failure. [ 4838.301788][T16036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4838.302104][T16036] CPU: 1 UID: 0 PID: 16036 Comm: syz.1.3984 Tainted: G W syzkaller #0 PREEMPT [ 4838.302206][T16036] Tainted: [W]=WARN [ 4838.302236][T16036] Hardware name: linux,dummy-virt (DT) [ 4838.302271][T16036] Call trace: [ 4838.302300][T16036] show_stack+0x18/0x24 (C) [ 4838.302441][T16036] dump_stack_lvl+0x60/0x80 [ 4838.302511][T16036] dump_stack+0x18/0x24 [ 4838.302575][T16036] should_fail_ex+0x1e0/0x238 [ 4838.302642][T16036] should_fail+0x14/0x40 [ 4838.302751][T16036] should_fail_usercopy+0x1c/0x40 [ 4838.302857][T16036] simple_read_from_buffer+0x5c/0x12c [ 4838.302958][T16036] proc_fail_nth_read+0xb4/0x140 [ 4838.303078][T16036] vfs_read+0xc4/0x31c [ 4838.303178][T16036] ksys_read+0x70/0x110 [ 4838.303275][T16036] __arm64_sys_read+0x18/0x24 [ 4838.303351][T16036] invoke_syscall+0x54/0x10c [ 4838.303532][T16036] el0_svc_common.constprop.0+0x40/0xe0 [ 4838.303607][T16036] do_el0_svc+0x1c/0x34 [ 4838.303704][T16036] el0_svc+0x38/0x1fc [ 4838.303805][T16036] el0t_64_sync_handler+0xa0/0xe4 [ 4838.303903][T16036] el0t_64_sync+0x1a4/0x1a8 [ 4839.175040][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4839.190646][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4839.222685][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4839.224214][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4863.987669][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4009'. [ 4877.016844][T12929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4877.135562][T12929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4877.285040][T12929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4877.422646][T12929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4878.488441][T12929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4878.530634][T12929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4878.576567][T12929] bond0 (unregistering): Released all slaves [ 4879.030218][T12929] hsr_slave_0: left promiscuous mode [ 4879.035029][T12929] hsr_slave_1: left promiscuous mode [ 4879.054085][T12929] veth1_macvtap: left promiscuous mode [ 4879.058187][T12929] veth0_macvtap: left promiscuous mode [ 4879.063142][T12929] veth1_vlan: left promiscuous mode [ 4879.066080][T12929] veth0_vlan: left promiscuous mode [ 4881.093588][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 4881.885060][T16260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4881.899694][T16260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4882.233772][ T3219] 8021q: adding VLAN 0 to HW filter on device eth2 [ 4883.020845][T16260] hsr_slave_0: entered promiscuous mode [ 4883.028382][T16260] hsr_slave_1: entered promiscuous mode [ 4883.548573][ T3219] 8021q: adding VLAN 0 to HW filter on device eth3 [ 4884.877859][T16260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4884.910712][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4884.916373][T16260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4884.954671][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4884.962947][T16260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4884.996264][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4885.008533][T16260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4885.052289][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4886.504043][T16260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4892.535583][T16260] veth0_vlan: entered promiscuous mode [ 4892.610042][T16260] veth1_vlan: entered promiscuous mode [ 4892.796995][T16260] veth0_macvtap: entered promiscuous mode [ 4892.844479][T16260] veth1_macvtap: entered promiscuous mode [ 4893.063610][T15036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4893.064208][T15036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4893.064639][T15036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4893.064853][T15036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4894.984052][ T9454] pimreg: left allmulticast mode [ 4895.640232][ T9454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4895.693222][ T9454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4895.734863][ T9454] bond0 (unregistering): Released all slaves [ 4895.975931][ T9454] hsr_slave_0: left promiscuous mode [ 4895.979539][ T9454] hsr_slave_1: left promiscuous mode [ 4898.555506][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 4899.612606][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4899.641201][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4900.535357][ T3219] 8021q: adding VLAN 0 to HW filter on device eth2 [ 4901.524053][T16465] hsr_slave_0: entered promiscuous mode [ 4901.535191][T16465] hsr_slave_1: entered promiscuous mode [ 4901.543373][T16465] debugfs: 'hsr0' already exists in 'hsr' [ 4901.543833][T16465] Cannot create hsr debugfs directory [ 4901.825897][ T3219] 8021q: adding VLAN 0 to HW filter on device eth4 [ 4903.514964][T16465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 4903.557508][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4903.570981][T16465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 4903.599303][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4903.613397][T16465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 4903.661570][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4903.671894][T16465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 4903.698275][T16465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4904.993243][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4908.126987][T16465] veth0_vlan: entered promiscuous mode [ 4908.184699][T16465] veth1_vlan: entered promiscuous mode [ 4908.356752][T16465] veth0_macvtap: entered promiscuous mode [ 4908.378032][T16465] veth1_macvtap: entered promiscuous mode [ 4908.539617][T12929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4908.540094][T12929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4908.540262][T12929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4908.630453][T16101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4941.285327][T16902] Injecting memory failure for pfn 0x41f48 at process virtual address 0x204e9000 [ 4941.322312][T16902] Memory failure: 0x41f48: unhandlable page. [ 4941.325095][T16902] Memory failure: 0x41f48: recovery action for reserved kernel page: Ignored [ 4968.113374][T17140] Injecting memory failure for pfn 0x41f48 at process virtual address 0x20ffa000 [ 4968.116230][T17140] Memory failure: 0x41f48: Sending SIGBUS to syz.1.4304:17140 due to hardware memory corruption [ 4968.119778][T17140] Memory failure: 0x41f48: recovery action for already poisoned page: Failed [ 5000.584468][T17323] FAULT_INJECTION: forcing a failure. [ 5000.584468][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 5000.591528][T17323] CPU: 0 UID: 0 PID: 17323 Comm: syz.0.4385 Tainted: G W syzkaller #0 PREEMPT [ 5000.591733][T17323] Tainted: [W]=WARN [ 5000.591776][T17323] Hardware name: linux,dummy-virt (DT) [ 5000.591825][T17323] Call trace: [ 5000.591864][T17323] show_stack+0x18/0x24 (C) [ 5000.591999][T17323] dump_stack_lvl+0x60/0x80 [ 5000.592085][T17323] dump_stack+0x18/0x24 [ 5000.592164][T17323] should_fail_ex+0x1e0/0x238 [ 5000.592254][T17323] should_failslab+0x54/0x80 [ 5000.592329][T17323] kmem_cache_alloc_noprof+0x54/0x458 [ 5000.592418][T17323] ioctx_alloc+0x94/0x6c0 [ 5000.592503][T17323] __arm64_sys_io_setup+0x5c/0x104 [ 5000.592592][T17323] invoke_syscall+0x54/0x10c [ 5000.592674][T17323] el0_svc_common.constprop.0+0x40/0xe0 [ 5000.592758][T17323] do_el0_svc+0x1c/0x34 [ 5000.592838][T17323] el0_svc+0x38/0x1fc [ 5000.592932][T17323] el0t_64_sync_handler+0xa0/0xe4 [ 5000.593022][T17323] el0t_64_sync+0x1a4/0x1a8 [ 5002.653046][T17343] FAULT_INJECTION: forcing a failure. [ 5002.653046][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 5002.655141][T17343] CPU: 0 UID: 0 PID: 17343 Comm: syz.0.4393 Tainted: G W syzkaller #0 PREEMPT [ 5002.655284][T17343] Tainted: [W]=WARN [ 5002.655319][T17343] Hardware name: linux,dummy-virt (DT) [ 5002.655363][T17343] Call trace: [ 5002.655398][T17343] show_stack+0x18/0x24 (C) [ 5002.655553][T17343] dump_stack_lvl+0x60/0x80 [ 5002.655630][T17343] dump_stack+0x18/0x24 [ 5002.655702][T17343] should_fail_ex+0x1e0/0x238 [ 5002.655767][T17343] should_failslab+0x54/0x80 [ 5002.655804][T17343] kmem_cache_alloc_noprof+0x54/0x458 [ 5002.655843][T17343] prepare_creds+0x24/0x33c [ 5002.655880][T17343] cap_task_prctl+0x194/0x2b8 [ 5002.655921][T17343] security_task_prctl+0x74/0xdc [ 5002.655970][T17343] __arm64_sys_prctl+0x5c/0xba0 [ 5002.656009][T17343] invoke_syscall+0x54/0x10c [ 5002.656045][T17343] el0_svc_common.constprop.0+0x40/0xe0 [ 5002.656080][T17343] do_el0_svc+0x1c/0x34 [ 5002.656114][T17343] el0_svc+0x38/0x1fc [ 5002.656155][T17343] el0t_64_sync_handler+0xa0/0xe4 [ 5002.656235][T17343] el0t_64_sync+0x1a4/0x1a8 [ 5005.819799][T17364] ./file0: Can't lookup blockdev [ 5008.091191][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 5008.251737][T17396] FAULT_INJECTION: forcing a failure. [ 5008.251737][T17396] name failslab, interval 1, probability 0, space 0, times 0 [ 5008.253057][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.1.4419 Tainted: G W syzkaller #0 PREEMPT [ 5008.253147][T17396] Tainted: [W]=WARN [ 5008.253166][T17396] Hardware name: linux,dummy-virt (DT) [ 5008.253188][T17396] Call trace: [ 5008.253206][T17396] show_stack+0x18/0x24 (C) [ 5008.253268][T17396] dump_stack_lvl+0x60/0x80 [ 5008.253308][T17396] dump_stack+0x18/0x24 [ 5008.253348][T17396] should_fail_ex+0x1e0/0x238 [ 5008.253422][T17396] should_failslab+0x54/0x80 [ 5008.253466][T17396] kmem_cache_alloc_noprof+0x54/0x458 [ 5008.253507][T17396] do_getname+0x3c/0x1a0 [ 5008.253542][T17396] getname_flags+0x14/0x20 [ 5008.253579][T17396] do_sys_openat2+0x5c/0x104 [ 5008.253623][T17396] __arm64_sys_openat+0x64/0xc0 [ 5008.253697][T17396] invoke_syscall+0x54/0x10c [ 5008.253763][T17396] el0_svc_common.constprop.0+0x40/0xe0 [ 5008.253801][T17396] do_el0_svc+0x1c/0x34 [ 5008.253836][T17396] el0_svc+0x38/0x1fc [ 5008.253882][T17396] el0t_64_sync_handler+0xa0/0xe4 [ 5008.253975][T17396] el0t_64_sync+0x1a4/0x1a8 [ 5008.341969][T17398] tun0: tun_chr_ioctl cmd 35108 [ 5008.847803][T17416] FAULT_INJECTION: forcing a failure. [ 5008.847803][T17416] name failslab, interval 1, probability 0, space 0, times 0 [ 5008.848209][T17416] CPU: 1 UID: 0 PID: 17416 Comm: syz.1.4429 Tainted: G W syzkaller #0 PREEMPT [ 5008.848330][T17416] Tainted: [W]=WARN [ 5008.848366][T17416] Hardware name: linux,dummy-virt (DT) [ 5008.848406][T17416] Call trace: [ 5008.848436][T17416] show_stack+0x18/0x24 (C) [ 5008.848544][T17416] dump_stack_lvl+0x60/0x80 [ 5008.848667][T17416] dump_stack+0x18/0x24 [ 5008.848746][T17416] should_fail_ex+0x1e0/0x238 [ 5008.848843][T17416] should_failslab+0x54/0x80 [ 5008.848968][T17416] kmem_cache_alloc_noprof+0x54/0x458 [ 5008.849094][T17416] security_inode_alloc+0x30/0x1a0 [ 5008.849193][T17416] inode_init_always_gfp+0x174/0x254 [ 5008.849289][T17416] alloc_inode+0x40/0xdc [ 5008.849423][T17416] sock_alloc+0x20/0xa0 [ 5008.849506][T17416] __sock_create+0xa4/0x260 [ 5008.849622][T17416] __sys_socket+0xa0/0x140 [ 5008.849718][T17416] __arm64_sys_socket+0x1c/0x38 [ 5008.849790][T17416] invoke_syscall+0x54/0x10c [ 5008.849898][T17416] el0_svc_common.constprop.0+0x40/0xe0 [ 5008.849974][T17416] do_el0_svc+0x1c/0x34 [ 5008.850039][T17416] el0_svc+0x38/0x1fc [ 5008.850180][T17416] el0t_64_sync_handler+0xa0/0xe4 [ 5008.850261][T17416] el0t_64_sync+0x1a4/0x1a8 [ 5008.857388][T17416] socket: no more sockets [ 5011.231960][T17437] FAULT_INJECTION: forcing a failure. [ 5011.231960][T17437] name failslab, interval 1, probability 0, space 0, times 0 [ 5011.232212][T17437] CPU: 1 UID: 0 PID: 17437 Comm: syz.1.4437 Tainted: G W syzkaller #0 PREEMPT [ 5011.232327][T17437] Tainted: [W]=WARN [ 5011.232362][T17437] Hardware name: linux,dummy-virt (DT) [ 5011.232396][T17437] Call trace: [ 5011.232428][T17437] show_stack+0x18/0x24 (C) [ 5011.232582][T17437] dump_stack_lvl+0x60/0x80 [ 5011.232750][T17437] dump_stack+0x18/0x24 [ 5011.232871][T17437] should_fail_ex+0x1e0/0x238 [ 5011.233033][T17437] should_failslab+0x54/0x80 [ 5011.233193][T17437] kmem_cache_alloc_noprof+0x54/0x458 [ 5011.233352][T17437] security_inode_alloc+0x30/0x1a0 [ 5011.233483][T17437] inode_init_always_gfp+0x174/0x254 [ 5011.233647][T17437] alloc_inode+0x40/0xdc [ 5011.233769][T17437] sock_alloc+0x20/0xa0 [ 5011.233953][T17437] do_accept+0x78/0x1a8 [ 5011.234114][T17437] __sys_accept4+0x84/0x118 [ 5011.234234][T17437] __arm64_sys_accept+0x1c/0x2c [ 5011.234348][T17437] invoke_syscall+0x54/0x10c [ 5011.234500][T17437] el0_svc_common.constprop.0+0x40/0xe0 [ 5011.234640][T17437] do_el0_svc+0x1c/0x34 [ 5011.234748][T17437] el0_svc+0x38/0x1fc [ 5011.234865][T17437] el0t_64_sync_handler+0xa0/0xe4 [ 5011.234976][T17437] el0t_64_sync+0x1a4/0x1a8 [ 5011.394599][T17441] FAULT_INJECTION: forcing a failure. [ 5011.394599][T17441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5011.396112][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.1.4439 Tainted: G W syzkaller #0 PREEMPT [ 5011.396202][T17441] Tainted: [W]=WARN [ 5011.396226][T17441] Hardware name: linux,dummy-virt (DT) [ 5011.396247][T17441] Call trace: [ 5011.396265][T17441] show_stack+0x18/0x24 (C) [ 5011.396325][T17441] dump_stack_lvl+0x60/0x80 [ 5011.396363][T17441] dump_stack+0x18/0x24 [ 5011.396402][T17441] should_fail_ex+0x1e0/0x238 [ 5011.396441][T17441] should_fail+0x14/0x40 [ 5011.396475][T17441] should_fail_usercopy+0x1c/0x40 [ 5011.396518][T17441] _inline_copy_from_user+0x24/0xa8 [ 5011.396559][T17441] __arm64_sys_prlimit64+0x64/0x370 [ 5011.396606][T17441] invoke_syscall+0x54/0x10c [ 5011.396643][T17441] el0_svc_common.constprop.0+0x40/0xe0 [ 5011.396678][T17441] do_el0_svc+0x1c/0x34 [ 5011.396713][T17441] el0_svc+0x38/0x1fc [ 5011.396761][T17441] el0t_64_sync_handler+0xa0/0xe4 [ 5011.396832][T17441] el0t_64_sync+0x1a4/0x1a8 [ 5011.703087][T17451] FAULT_INJECTION: forcing a failure. [ 5011.703087][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 5011.705067][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.0.4444 Tainted: G W syzkaller #0 PREEMPT [ 5011.705229][T17451] Tainted: [W]=WARN [ 5011.705271][T17451] Hardware name: linux,dummy-virt (DT) [ 5011.705314][T17451] Call trace: [ 5011.705351][T17451] show_stack+0x18/0x24 (C) [ 5011.705467][T17451] dump_stack_lvl+0x60/0x80 [ 5011.705546][T17451] dump_stack+0x18/0x24 [ 5011.705626][T17451] should_fail_ex+0x1e0/0x238 [ 5011.705709][T17451] should_failslab+0x54/0x80 [ 5011.705786][T17451] __kmalloc_cache_noprof+0x58/0x470 [ 5011.705865][T17451] do_inotify_init+0x64/0x160 [ 5011.705938][T17451] __arm64_sys_inotify_init1+0x14/0x24 [ 5011.705973][T17451] invoke_syscall+0x54/0x10c [ 5011.706026][T17451] el0_svc_common.constprop.0+0x40/0xe0 [ 5011.706102][T17451] do_el0_svc+0x1c/0x34 [ 5011.706177][T17451] el0_svc+0x38/0x1fc [ 5011.706245][T17451] el0t_64_sync_handler+0xa0/0xe4 [ 5011.706282][T17451] el0t_64_sync+0x1a4/0x1a8 [ 5012.356489][T17473] Injecting memory failure for pfn 0xa0b30 at process virtual address 0x20002000 [ 5012.375087][T17473] Memory failure: 0xa0b30: recovery action for clean LRU page: Recovered [ 5012.375917][T17473] Injecting memory failure for pfn 0xa1853 at process virtual address 0x20003000 [ 5012.382438][T17473] Memory failure: 0xa1853: recovery action for clean LRU page: Recovered [ 5012.383030][T17473] Injecting memory failure for pfn 0xa757a at process virtual address 0x20004000 [ 5012.391769][T17473] Memory failure: 0xa757a: recovery action for clean LRU page: Recovered [ 5012.394302][T17473] Injecting memory failure for pfn 0x4d570 at process virtual address 0x20005000 [ 5012.401356][T17473] Memory failure: 0x4d570: recovery action for clean LRU page: Recovered [ 5012.824575][T17480] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 5013.601751][ T28] audit: type=1326 audit(2000002342.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17490 comm="syz.0.4463" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x0 [ 5014.610060][T17492] FAULT_INJECTION: forcing a failure. [ 5014.610060][T17492] name failslab, interval 1, probability 0, space 0, times 0 [ 5014.610414][T17492] CPU: 1 UID: 0 PID: 17492 Comm: syz.0.4463 Tainted: G W syzkaller #0 PREEMPT [ 5014.610531][T17492] Tainted: [W]=WARN [ 5014.610568][T17492] Hardware name: linux,dummy-virt (DT) [ 5014.610640][T17492] Call trace: [ 5014.610677][T17492] show_stack+0x18/0x24 (C) [ 5014.610785][T17492] dump_stack_lvl+0x60/0x80 [ 5014.610867][T17492] dump_stack+0x18/0x24 [ 5014.611254][T17492] should_fail_ex+0x1e0/0x238 [ 5014.612331][T17492] should_failslab+0x54/0x80 [ 5014.612463][T17492] __kmalloc_noprof+0xac/0x520 [ 5014.612596][T17492] fanotify_handle_event+0x370/0x12d8 [ 5014.612711][T17492] fsnotify+0x3f4/0x11fc [ 5014.612808][T17492] __fsnotify_parent+0x254/0x360 [ 5014.612968][T17492] __fput+0x94/0x2f8 [ 5014.613038][T17492] ____fput+0x14/0x20 [ 5014.613105][T17492] task_work_run+0x70/0xe0 [ 5014.613177][T17492] exit_to_user_mode_loop+0x168/0x19c [ 5014.613250][T17492] el0_svc+0x1f0/0x1fc [ 5014.613329][T17492] el0t_64_sync_handler+0xa0/0xe4 [ 5014.613407][T17492] el0t_64_sync+0x1a4/0x1a8 [ 5015.788191][T17511] FAULT_INJECTION: forcing a failure. [ 5015.788191][T17511] name failslab, interval 1, probability 0, space 0, times 0 [ 5015.789416][T17511] CPU: 1 UID: 0 PID: 17511 Comm: syz.1.4471 Tainted: G W syzkaller #0 PREEMPT [ 5015.789533][T17511] Tainted: [W]=WARN [ 5015.789650][T17511] Hardware name: linux,dummy-virt (DT) [ 5015.789695][T17511] Call trace: [ 5015.789727][T17511] show_stack+0x18/0x24 (C) [ 5015.789834][T17511] dump_stack_lvl+0x60/0x80 [ 5015.789919][T17511] dump_stack+0x18/0x24 [ 5015.789992][T17511] should_fail_ex+0x1e0/0x238 [ 5015.790071][T17511] should_failslab+0x54/0x80 [ 5015.790143][T17511] kmem_cache_alloc_noprof+0x54/0x458 [ 5015.790221][T17511] security_file_alloc+0x30/0x1a0 [ 5015.790302][T17511] init_file+0x3c/0x10c [ 5015.790446][T17511] alloc_empty_file+0x74/0x130 [ 5015.790524][T17511] alloc_file_pseudo+0xb0/0x160 [ 5015.790593][T17511] sock_alloc_file+0x40/0xd8 [ 5015.790670][T17511] do_accept+0xb4/0x1a8 [ 5015.790740][T17511] __sys_accept4+0x84/0x118 [ 5015.790809][T17511] __arm64_sys_accept+0x1c/0x2c [ 5015.790882][T17511] invoke_syscall+0x54/0x10c [ 5015.790954][T17511] el0_svc_common.constprop.0+0x40/0xe0 [ 5015.791027][T17511] do_el0_svc+0x1c/0x34 [ 5015.791096][T17511] el0_svc+0x38/0x1fc [ 5015.791175][T17511] el0t_64_sync_handler+0xa0/0xe4 [ 5015.791252][T17511] el0t_64_sync+0x1a4/0x1a8 [ 5016.228026][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4477'. [ 5016.310510][T17527] FAULT_INJECTION: forcing a failure. [ 5016.310510][T17527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5016.310870][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz.0.4479 Tainted: G W syzkaller #0 PREEMPT [ 5016.310979][T17527] Tainted: [W]=WARN [ 5016.311015][T17527] Hardware name: linux,dummy-virt (DT) [ 5016.311055][T17527] Call trace: [ 5016.311088][T17527] show_stack+0x18/0x24 (C) [ 5016.311227][T17527] dump_stack_lvl+0x60/0x80 [ 5016.311309][T17527] dump_stack+0x18/0x24 [ 5016.311388][T17527] should_fail_ex+0x1e0/0x238 [ 5016.311491][T17527] should_fail+0x14/0x40 [ 5016.311588][T17527] should_fail_usercopy+0x1c/0x40 [ 5016.311671][T17527] move_addr_to_user+0xa8/0x150 [ 5016.311749][T17527] do_getsockname+0x88/0xc4 [ 5016.311820][T17527] __sys_getsockname+0x60/0xd0 [ 5016.311893][T17527] __arm64_sys_getsockname+0x1c/0x2c [ 5016.311981][T17527] invoke_syscall+0x54/0x10c [ 5016.312058][T17527] el0_svc_common.constprop.0+0x40/0xe0 [ 5016.312130][T17527] do_el0_svc+0x1c/0x34 [ 5016.312198][T17527] el0_svc+0x38/0x1fc [ 5016.312291][T17527] el0t_64_sync_handler+0xa0/0xe4 [ 5016.312380][T17527] el0t_64_sync+0x1a4/0x1a8 [ 5019.434211][T17544] netlink: 996 bytes leftover after parsing attributes in process `syz.0.4485'. [ 5020.132813][T17561] FAULT_INJECTION: forcing a failure. [ 5020.132813][T17561] name failslab, interval 1, probability 0, space 0, times 0 [ 5020.135552][T17561] CPU: 0 UID: 0 PID: 17561 Comm: syz.1.4492 Tainted: G W syzkaller #0 PREEMPT [ 5020.135704][T17561] Tainted: [W]=WARN [ 5020.135743][T17561] Hardware name: linux,dummy-virt (DT) [ 5020.135786][T17561] Call trace: [ 5020.135840][T17561] show_stack+0x18/0x24 (C) [ 5020.135954][T17561] dump_stack_lvl+0x60/0x80 [ 5020.136022][T17561] dump_stack+0x18/0x24 [ 5020.136087][T17561] should_fail_ex+0x1e0/0x238 [ 5020.136153][T17561] should_failslab+0x54/0x80 [ 5020.136217][T17561] __kmalloc_noprof+0xac/0x520 [ 5020.136287][T17561] sk_prot_alloc+0xf4/0x140 [ 5020.136354][T17561] sk_alloc+0x3c/0x288 [ 5020.136421][T17561] __netlink_create+0x44/0xac [ 5020.136496][T17561] netlink_create+0x100/0x30c [ 5020.136564][T17561] __sock_create+0x130/0x260 [ 5020.136628][T17561] __sys_socket+0xa0/0x140 [ 5020.136697][T17561] __arm64_sys_socket+0x1c/0x38 [ 5020.136761][T17561] invoke_syscall+0x54/0x10c [ 5020.136830][T17561] el0_svc_common.constprop.0+0x40/0xe0 [ 5020.136911][T17561] do_el0_svc+0x1c/0x34 [ 5020.136975][T17561] el0_svc+0x38/0x1fc [ 5020.137047][T17561] el0t_64_sync_handler+0xa0/0xe4 [ 5020.137113][T17561] el0t_64_sync+0x1a4/0x1a8 [ 5020.668172][T17576] bridge_slave_0: entered promiscuous mode [ 5020.779271][T17579] FAULT_INJECTION: forcing a failure. [ 5020.779271][T17579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5020.779671][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.1.4501 Tainted: G W syzkaller #0 PREEMPT [ 5020.779786][T17579] Tainted: [W]=WARN [ 5020.779821][T17579] Hardware name: linux,dummy-virt (DT) [ 5020.779859][T17579] Call trace: [ 5020.779902][T17579] show_stack+0x18/0x24 (C) [ 5020.780003][T17579] dump_stack_lvl+0x60/0x80 [ 5020.780074][T17579] dump_stack+0x18/0x24 [ 5020.780141][T17579] should_fail_ex+0x1e0/0x238 [ 5020.780215][T17579] should_fail+0x14/0x40 [ 5020.780287][T17579] get_futex_key+0xdc/0x620 [ 5020.780358][T17579] futex_wait_setup+0x54/0x240 [ 5020.780430][T17579] __futex_wait+0xd4/0x180 [ 5020.780498][T17579] futex_wait+0x88/0x110 [ 5020.780567][T17579] do_futex+0x1a0/0x210 [ 5020.780634][T17579] __arm64_sys_futex+0x100/0x1a0 [ 5020.780703][T17579] invoke_syscall+0x54/0x10c [ 5020.780770][T17579] el0_svc_common.constprop.0+0x40/0xe0 [ 5020.780835][T17579] do_el0_svc+0x1c/0x34 [ 5020.780910][T17579] el0_svc+0x38/0x1fc [ 5020.780982][T17579] el0t_64_sync_handler+0xa0/0xe4 [ 5020.781053][T17579] el0t_64_sync+0x1a4/0x1a8 [ 5021.293953][T17596] bridge_slave_1: default FDB implementation only supports local addresses [ 5021.735203][T17602] FAULT_INJECTION: forcing a failure. [ 5021.735203][T17602] name failslab, interval 1, probability 0, space 0, times 0 [ 5021.735571][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz.0.4512 Tainted: G W syzkaller #0 PREEMPT [ 5021.735781][T17602] Tainted: [W]=WARN [ 5021.735822][T17602] Hardware name: linux,dummy-virt (DT) [ 5021.736101][T17602] Call trace: [ 5021.736259][T17602] show_stack+0x18/0x24 (C) [ 5021.736474][T17602] dump_stack_lvl+0x60/0x80 [ 5021.736638][T17602] dump_stack+0x18/0x24 [ 5021.736859][T17602] should_fail_ex+0x1e0/0x238 [ 5021.737039][T17602] should_failslab+0x54/0x80 [ 5021.737210][T17602] __kvmalloc_node_noprof+0xc8/0x65c [ 5021.737388][T17602] io_uring_setup+0x150/0x7ec [ 5021.737516][T17602] __arm64_sys_io_uring_setup+0x60/0xb4 [ 5021.737663][T17602] invoke_syscall+0x54/0x10c [ 5021.737776][T17602] el0_svc_common.constprop.0+0x40/0xe0 [ 5021.737931][T17602] do_el0_svc+0x1c/0x34 [ 5021.738034][T17602] el0_svc+0x38/0x1fc [ 5021.738158][T17602] el0t_64_sync_handler+0xa0/0xe4 [ 5021.738270][T17602] el0t_64_sync+0x1a4/0x1a8 [ 5027.470635][T17655] FAULT_INJECTION: forcing a failure. [ 5027.470635][T17655] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 5027.471647][T17655] CPU: 1 UID: 0 PID: 17655 Comm: syz.1.4534 Tainted: G W syzkaller #0 PREEMPT [ 5027.471756][T17655] Tainted: [W]=WARN [ 5027.471795][T17655] Hardware name: linux,dummy-virt (DT) [ 5027.471834][T17655] Call trace: [ 5027.471852][T17655] show_stack+0x18/0x24 (C) [ 5027.471912][T17655] dump_stack_lvl+0x60/0x80 [ 5027.471959][T17655] dump_stack+0x18/0x24 [ 5027.471995][T17655] should_fail_ex+0x1e0/0x238 [ 5027.472033][T17655] should_fail_alloc_page+0x60/0x80 [ 5027.472069][T17655] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 5027.472109][T17655] alloc_pages_mpol+0x74/0x1b8 [ 5027.472166][T17655] folio_alloc_mpol_noprof+0x14/0x68 [ 5027.472219][T17655] vma_alloc_folio_noprof+0x80/0xcc [ 5027.472287][T17655] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 5027.472343][T17655] do_anonymous_page+0x2b0/0x9b8 [ 5027.472384][T17655] __handle_mm_fault+0xa5c/0xec0 [ 5027.472424][T17655] handle_mm_fault+0x98/0x338 [ 5027.472462][T17655] __get_user_pages+0x3bc/0xc70 [ 5027.472496][T17655] __gup_longterm_locked+0xe0/0x700 [ 5027.472530][T17655] gup_fast_fallback+0xbc0/0xca0 [ 5027.472564][T17655] pin_user_pages_fast+0x48/0x60 [ 5027.472599][T17655] io_pin_pages+0x80/0x140 [ 5027.472637][T17655] io_create_region+0x10c/0x468 [ 5027.472673][T17655] io_uring_setup+0x51c/0x7ec [ 5027.472708][T17655] __arm64_sys_io_uring_setup+0x60/0xb4 [ 5027.472744][T17655] invoke_syscall+0x54/0x10c [ 5027.472809][T17655] el0_svc_common.constprop.0+0x40/0xe0 [ 5027.472855][T17655] do_el0_svc+0x1c/0x34 [ 5027.472931][T17655] el0_svc+0x38/0x1fc [ 5027.472976][T17655] el0t_64_sync_handler+0xa0/0xe4 [ 5027.473013][T17655] el0t_64_sync+0x1a4/0x1a8 [ 5027.972443][T17669] FAULT_INJECTION: forcing a failure. [ 5027.972443][T17669] name failslab, interval 1, probability 0, space 0, times 0 [ 5027.972777][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.1.4541 Tainted: G W syzkaller #0 PREEMPT [ 5027.972889][T17669] Tainted: [W]=WARN [ 5027.972922][T17669] Hardware name: linux,dummy-virt (DT) [ 5027.972958][T17669] Call trace: [ 5027.972987][T17669] show_stack+0x18/0x24 (C) [ 5027.973081][T17669] dump_stack_lvl+0x60/0x80 [ 5027.973146][T17669] dump_stack+0x18/0x24 [ 5027.973209][T17669] should_fail_ex+0x1e0/0x238 [ 5027.973276][T17669] should_failslab+0x54/0x80 [ 5027.973338][T17669] __kmalloc_noprof+0xac/0x520 [ 5027.973412][T17669] tomoyo_realpath_from_path+0x44/0x1d4 [ 5027.973483][T17669] tomoyo_path_number_perm+0xe0/0x21c [ 5027.973547][T17669] tomoyo_file_ioctl+0x1c/0x30 [ 5027.973613][T17669] security_file_ioctl+0x8c/0x19c [ 5027.973673][T17669] __arm64_sys_ioctl+0x44/0x100 [ 5027.973741][T17669] invoke_syscall+0x54/0x10c [ 5027.973803][T17669] el0_svc_common.constprop.0+0x40/0xe0 [ 5027.973866][T17669] do_el0_svc+0x1c/0x34 [ 5027.973927][T17669] el0_svc+0x38/0x1fc [ 5027.973998][T17669] el0t_64_sync_handler+0xa0/0xe4 [ 5027.974065][T17669] el0t_64_sync+0x1a4/0x1a8 [ 5027.974317][T17669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5028.818324][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4558'. [ 5028.823214][T17705] bridge_slave_0: default FDB implementation only supports local addresses [ 5029.555612][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 5031.115040][T17738] FAULT_INJECTION: forcing a failure. [ 5031.115040][T17738] name failslab, interval 1, probability 0, space 0, times 0 [ 5031.115580][T17738] CPU: 1 UID: 0 PID: 17738 Comm: syz.0.4573 Tainted: G W syzkaller #0 PREEMPT [ 5031.115694][T17738] Tainted: [W]=WARN [ 5031.115730][T17738] Hardware name: linux,dummy-virt (DT) [ 5031.115848][T17738] Call trace: [ 5031.115921][T17738] show_stack+0x18/0x24 (C) [ 5031.116052][T17738] dump_stack_lvl+0x60/0x80 [ 5031.116230][T17738] dump_stack+0x18/0x24 [ 5031.116325][T17738] should_fail_ex+0x1e0/0x238 [ 5031.116424][T17738] should_failslab+0x54/0x80 [ 5031.116504][T17738] kmem_cache_alloc_noprof+0x54/0x458 [ 5031.116578][T17738] security_file_alloc+0x30/0x1a0 [ 5031.116657][T17738] init_file+0x3c/0x10c [ 5031.116731][T17738] alloc_empty_file+0x74/0x130 [ 5031.116798][T17738] path_openat+0x48/0x960 [ 5031.116870][T17738] do_file_open+0xb0/0x168 [ 5031.116949][T17738] do_sys_openat2+0x84/0x104 [ 5031.117034][T17738] __arm64_sys_openat+0x64/0xc0 [ 5031.117113][T17738] invoke_syscall+0x54/0x10c [ 5031.117188][T17738] el0_svc_common.constprop.0+0x40/0xe0 [ 5031.117260][T17738] do_el0_svc+0x1c/0x34 [ 5031.117326][T17738] el0_svc+0x38/0x1fc [ 5031.117405][T17738] el0t_64_sync_handler+0xa0/0xe4 [ 5031.117483][T17738] el0t_64_sync+0x1a4/0x1a8 [ 5031.851826][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'. [ 5036.499804][T17820] netlink: 'syz.0.4609': attribute type 4 has an invalid length. [ 5038.218024][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4615'. [ 5039.996177][T17855] FAULT_INJECTION: forcing a failure. [ 5039.996177][T17855] name failslab, interval 1, probability 0, space 0, times 0 [ 5039.996488][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.0.4624 Tainted: G W syzkaller #0 PREEMPT [ 5039.996595][T17855] Tainted: [W]=WARN [ 5039.996626][T17855] Hardware name: linux,dummy-virt (DT) [ 5039.996661][T17855] Call trace: [ 5039.996721][T17855] show_stack+0x18/0x24 (C) [ 5039.996889][T17855] dump_stack_lvl+0x60/0x80 [ 5039.996990][T17855] dump_stack+0x18/0x24 [ 5039.997065][T17855] should_fail_ex+0x1e0/0x238 [ 5039.997133][T17855] should_failslab+0x54/0x80 [ 5039.997208][T17855] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5039.997278][T17855] sock_alloc_inode+0x24/0x94 [ 5039.997342][T17855] alloc_inode+0x28/0xdc [ 5039.997411][T17855] sock_alloc+0x20/0xa0 [ 5039.997469][T17855] __sock_create+0xa4/0x260 [ 5039.997536][T17855] __sys_socket+0xa0/0x140 [ 5039.997598][T17855] __arm64_sys_socket+0x1c/0x38 [ 5039.997670][T17855] invoke_syscall+0x54/0x10c [ 5039.997752][T17855] el0_svc_common.constprop.0+0x40/0xe0 [ 5039.997818][T17855] do_el0_svc+0x1c/0x34 [ 5039.997890][T17855] el0_svc+0x38/0x1fc [ 5039.997966][T17855] el0t_64_sync_handler+0xa0/0xe4 [ 5039.998034][T17855] el0t_64_sync+0x1a4/0x1a8 [ 5039.999893][T17855] socket: no more sockets [ 5044.446166][T17894] FAULT_INJECTION: forcing a failure. [ 5044.446166][T17894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5044.448635][T17894] CPU: 0 UID: 0 PID: 17894 Comm: syz.1.4640 Tainted: G W syzkaller #0 PREEMPT [ 5044.448779][T17894] Tainted: [W]=WARN [ 5044.448814][T17894] Hardware name: linux,dummy-virt (DT) [ 5044.448854][T17894] Call trace: [ 5044.448904][T17894] show_stack+0x18/0x24 (C) [ 5044.449033][T17894] dump_stack_lvl+0x60/0x80 [ 5044.449112][T17894] dump_stack+0x18/0x24 [ 5044.449182][T17894] should_fail_ex+0x1e0/0x238 [ 5044.449251][T17894] should_fail+0x14/0x40 [ 5044.449329][T17894] should_fail_usercopy+0x1c/0x40 [ 5044.449407][T17894] _copy_from_iter+0x60/0x6a0 [ 5044.449490][T17894] skb_copy_datagram_from_iter+0x70/0x200 [ 5044.449577][T17894] tun_get_user+0x8ac/0xf70 [ 5044.449662][T17894] tun_chr_write_iter+0x5c/0xf0 [ 5044.449737][T17894] vfs_write+0x244/0x36c [ 5044.449816][T17894] ksys_write+0x70/0x108 [ 5044.449889][T17894] __arm64_sys_write+0x18/0x24 [ 5044.449962][T17894] invoke_syscall+0x54/0x10c [ 5044.450069][T17894] el0_svc_common.constprop.0+0x40/0xe0 [ 5044.450145][T17894] do_el0_svc+0x1c/0x34 [ 5044.450212][T17894] el0_svc+0x38/0x1fc [ 5044.450292][T17894] el0t_64_sync_handler+0xa0/0xe4 [ 5044.450367][T17894] el0t_64_sync+0x1a4/0x1a8 [ 5048.188532][T17920] FAULT_INJECTION: forcing a failure. [ 5048.188532][T17920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5048.189448][T17920] CPU: 0 UID: 0 PID: 17920 Comm: syz.0.4652 Tainted: G W syzkaller #0 PREEMPT [ 5048.189557][T17920] Tainted: [W]=WARN [ 5048.189592][T17920] Hardware name: linux,dummy-virt (DT) [ 5048.189634][T17920] Call trace: [ 5048.189666][T17920] show_stack+0x18/0x24 (C) [ 5048.189776][T17920] dump_stack_lvl+0x60/0x80 [ 5048.189849][T17920] dump_stack+0x18/0x24 [ 5048.189943][T17920] should_fail_ex+0x1e0/0x238 [ 5048.190022][T17920] should_fail+0x14/0x40 [ 5048.190093][T17920] should_fail_usercopy+0x1c/0x40 [ 5048.190189][T17920] bpf_vlog_reverse_ubuf+0xc0/0x320 [ 5048.190272][T17920] bpf_vlog_finalize+0xec/0x100 [ 5048.190345][T17920] bpf_log_attr_finalize+0x38/0x100 [ 5048.190487][T17920] btf_new_fd+0xb54/0x167c [ 5048.190566][T17920] __sys_bpf+0xb28/0x1d1c [ 5048.190672][T17920] __arm64_sys_bpf+0x2c/0x40 [ 5048.190774][T17920] invoke_syscall+0x54/0x10c [ 5048.190866][T17920] el0_svc_common.constprop.0+0x40/0xe0 [ 5048.190940][T17920] do_el0_svc+0x1c/0x34 [ 5048.191004][T17920] el0_svc+0x38/0x1fc [ 5048.191096][T17920] el0t_64_sync_handler+0xa0/0xe4 [ 5048.191190][T17920] el0t_64_sync+0x1a4/0x1a8 [ 5048.334235][T17924] bond0: option arp_interval: invalid value (usb) [ 5048.334792][T17924] bond0: option arp_interval: allowed values 0 - 2147483647 [ 5051.855721][T17954] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 5052.490787][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 5052.498486][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 5052.505472][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 5052.509804][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 5052.597137][T17970] fuse: Bad value for 'fd' [ 5054.747358][T17993] FAULT_INJECTION: forcing a failure. [ 5054.747358][T17993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5054.747727][T17993] CPU: 0 UID: 0 PID: 17993 Comm: syz.1.4684 Tainted: G W syzkaller #0 PREEMPT [ 5054.747850][T17993] Tainted: [W]=WARN [ 5054.747913][T17993] Hardware name: linux,dummy-virt (DT) [ 5054.747957][T17993] Call trace: [ 5054.747993][T17993] show_stack+0x18/0x24 (C) [ 5054.748187][T17993] dump_stack_lvl+0x60/0x80 [ 5054.748289][T17993] dump_stack+0x18/0x24 [ 5054.748382][T17993] should_fail_ex+0x1e0/0x238 [ 5054.748499][T17993] should_fail+0x14/0x40 [ 5054.748601][T17993] should_fail_usercopy+0x1c/0x40 [ 5054.748783][T17993] _inline_copy_from_user+0x24/0xb0 [ 5054.748893][T17993] __arm64_sys_mq_notify+0x54/0xa8 [ 5054.748988][T17993] invoke_syscall+0x54/0x10c [ 5054.749087][T17993] el0_svc_common.constprop.0+0x40/0xe0 [ 5054.749181][T17993] do_el0_svc+0x1c/0x34 [ 5054.749260][T17993] el0_svc+0x38/0x1fc [ 5054.749386][T17993] el0t_64_sync_handler+0xa0/0xe4 [ 5054.749492][T17993] el0t_64_sync+0x1a4/0x1a8 [ 5056.119653][T18010] FAULT_INJECTION: forcing a failure. [ 5056.119653][T18010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5056.121928][T18010] CPU: 1 UID: 0 PID: 18010 Comm: syz.1.4689 Tainted: G W syzkaller #0 PREEMPT [ 5056.122079][T18010] Tainted: [W]=WARN [ 5056.122116][T18010] Hardware name: linux,dummy-virt (DT) [ 5056.122157][T18010] Call trace: [ 5056.122191][T18010] show_stack+0x18/0x24 (C) [ 5056.122302][T18010] dump_stack_lvl+0x60/0x80 [ 5056.122382][T18010] dump_stack+0x18/0x24 [ 5056.122456][T18010] should_fail_ex+0x1e0/0x238 [ 5056.122531][T18010] should_fail+0x14/0x40 [ 5056.122641][T18010] should_fail_usercopy+0x1c/0x40 [ 5056.122712][T18010] _inline_copy_from_user+0x24/0xb0 [ 5056.122804][T18010] __arm64_sys_mq_notify+0x54/0xa8 [ 5056.122887][T18010] invoke_syscall+0x54/0x10c [ 5056.122960][T18010] el0_svc_common.constprop.0+0x40/0xe0 [ 5056.123069][T18010] do_el0_svc+0x1c/0x34 [ 5056.123174][T18010] el0_svc+0x38/0x1fc [ 5056.123265][T18010] el0t_64_sync_handler+0xa0/0xe4 [ 5056.123379][T18010] el0t_64_sync+0x1a4/0x1a8 [ 5056.467790][T18023] FAULT_INJECTION: forcing a failure. [ 5056.467790][T18023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5056.471317][T18023] CPU: 0 UID: 0 PID: 18023 Comm: syz.1.4694 Tainted: G W syzkaller #0 PREEMPT [ 5056.471628][T18023] Tainted: [W]=WARN [ 5056.471704][T18023] Hardware name: linux,dummy-virt (DT) [ 5056.471753][T18023] Call trace: [ 5056.471789][T18023] show_stack+0x18/0x24 (C) [ 5056.471909][T18023] dump_stack_lvl+0x60/0x80 [ 5056.471989][T18023] dump_stack+0x18/0x24 [ 5056.472061][T18023] should_fail_ex+0x1e0/0x238 [ 5056.472138][T18023] should_fail+0x14/0x40 [ 5056.472258][T18023] should_fail_usercopy+0x1c/0x40 [ 5056.472334][T18023] _inline_copy_from_user+0x24/0xb0 [ 5056.472428][T18023] __arm64_sys_mq_notify+0x54/0xa8 [ 5056.472509][T18023] invoke_syscall+0x54/0x10c [ 5056.472581][T18023] el0_svc_common.constprop.0+0x40/0xe0 [ 5056.472652][T18023] do_el0_svc+0x1c/0x34 [ 5056.472721][T18023] el0_svc+0x38/0x1fc [ 5056.472801][T18023] el0t_64_sync_handler+0xa0/0xe4 [ 5056.472965][T18023] el0t_64_sync+0x1a4/0x1a8 [ 5065.688670][T18040] FAULT_INJECTION: forcing a failure. [ 5065.688670][T18040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5065.690634][T18040] CPU: 1 UID: 0 PID: 18040 Comm: syz.1.4699 Tainted: G W syzkaller #0 PREEMPT [ 5065.690724][T18040] Tainted: [W]=WARN [ 5065.690743][T18040] Hardware name: linux,dummy-virt (DT) [ 5065.690765][T18040] Call trace: [ 5065.690782][T18040] show_stack+0x18/0x24 (C) [ 5065.690849][T18040] dump_stack_lvl+0x60/0x80 [ 5065.690887][T18040] dump_stack+0x18/0x24 [ 5065.690922][T18040] should_fail_ex+0x1e0/0x238 [ 5065.690961][T18040] should_fail+0x14/0x40 [ 5065.690995][T18040] should_fail_usercopy+0x1c/0x40 [ 5065.691031][T18040] _inline_copy_from_user+0x24/0xb0 [ 5065.691072][T18040] __arm64_sys_mq_notify+0x54/0xa8 [ 5065.691131][T18040] invoke_syscall+0x54/0x10c [ 5065.691197][T18040] el0_svc_common.constprop.0+0x40/0xe0 [ 5065.691266][T18040] do_el0_svc+0x1c/0x34 [ 5065.691302][T18040] el0_svc+0x38/0x1fc [ 5065.691354][T18040] el0t_64_sync_handler+0xa0/0xe4 [ 5065.691391][T18040] el0t_64_sync+0x1a4/0x1a8 [ 5066.632120][T18057] FAULT_INJECTION: forcing a failure. [ 5066.632120][T18057] name failslab, interval 1, probability 0, space 0, times 0 [ 5066.632397][T18057] CPU: 0 UID: 0 PID: 18057 Comm: syz.0.4704 Tainted: G W syzkaller #0 PREEMPT [ 5066.632509][T18057] Tainted: [W]=WARN [ 5066.632541][T18057] Hardware name: linux,dummy-virt (DT) [ 5066.632576][T18057] Call trace: [ 5066.632607][T18057] show_stack+0x18/0x24 (C) [ 5066.632723][T18057] dump_stack_lvl+0x60/0x80 [ 5066.632838][T18057] dump_stack+0x18/0x24 [ 5066.632936][T18057] should_fail_ex+0x1e0/0x238 [ 5066.633027][T18057] should_failslab+0x54/0x80 [ 5066.633110][T18057] __kmalloc_cache_noprof+0x58/0x470 [ 5066.633193][T18057] do_epoll_create+0x34/0x1cc [ 5066.633268][T18057] __arm64_sys_epoll_create1+0x14/0x24 [ 5066.633380][T18057] invoke_syscall+0x54/0x10c [ 5066.633488][T18057] el0_svc_common.constprop.0+0x40/0xe0 [ 5066.633595][T18057] do_el0_svc+0x1c/0x34 [ 5066.633704][T18057] el0_svc+0x38/0x1fc [ 5066.633804][T18057] el0t_64_sync_handler+0xa0/0xe4 [ 5066.633883][T18057] el0t_64_sync+0x1a4/0x1a8 [ 5075.003631][T18136] ip_tables: iptables: counters copy to user failed while replacing table [ 5075.736656][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5075.738239][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5077.573623][T18161] xt_policy: output policy not valid in PREROUTING and INPUT [ 5080.838483][ T28] audit: type=1326 audit(2000002410.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.852337][ T28] audit: type=1326 audit(2000002410.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.857059][ T28] audit: type=1326 audit(2000002410.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.861772][ T28] audit: type=1326 audit(2000002410.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.866725][ T28] audit: type=1326 audit(2000002410.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.870937][ T28] audit: type=1326 audit(2000002410.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.881512][ T28] audit: type=1326 audit(2000002410.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.885076][ T28] audit: type=1326 audit(2000002410.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.890739][ T28] audit: type=1326 audit(2000002410.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5080.895680][ T28] audit: type=1326 audit(2000002410.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.1.4751" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5081.578517][T18189] Console: switching to colour dummy device 80x25 [ 5081.663581][T18189] Console: switching to colour frame buffer device 128x48 [ 5081.808147][T18191] FAULT_INJECTION: forcing a failure. [ 5081.808147][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 5081.808544][T18191] CPU: 1 UID: 0 PID: 18191 Comm: syz.0.4754 Tainted: G W syzkaller #0 PREEMPT [ 5081.808722][T18191] Tainted: [W]=WARN [ 5081.808759][T18191] Hardware name: linux,dummy-virt (DT) [ 5081.808799][T18191] Call trace: [ 5081.808924][T18191] show_stack+0x18/0x24 (C) [ 5081.809041][T18191] dump_stack_lvl+0x60/0x80 [ 5081.809116][T18191] dump_stack+0x18/0x24 [ 5081.809187][T18191] should_fail_ex+0x1e0/0x238 [ 5081.809263][T18191] should_failslab+0x54/0x80 [ 5081.809335][T18191] kmem_cache_alloc_noprof+0x54/0x458 [ 5081.809455][T18191] do_getname+0x3c/0x1a0 [ 5081.809538][T18191] getname_flags+0x14/0x20 [ 5081.809632][T18191] do_sys_openat2+0x5c/0x104 [ 5081.809712][T18191] __arm64_sys_openat+0x64/0xc0 [ 5081.809931][T18191] invoke_syscall+0x54/0x10c [ 5081.810389][T18191] el0_svc_common.constprop.0+0x40/0xe0 [ 5081.810580][T18191] do_el0_svc+0x1c/0x34 [ 5081.810658][T18191] el0_svc+0x38/0x1fc [ 5081.810742][T18191] el0t_64_sync_handler+0xa0/0xe4 [ 5081.810819][T18191] el0t_64_sync+0x1a4/0x1a8 [ 5081.914085][T18194] ip_tables: iptables: counters copy to user failed while replacing table [ 5082.931109][T18209] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 5083.860159][T18214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5083.862032][T18214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5090.365647][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5090.370900][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5090.585551][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5090.590680][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5090.966494][T18242] tmpfs: Bad value for 'mpol' [ 5092.243791][T18246] UDC core: g1: couldn't find an available UDC or it's busy [ 5094.500928][T18257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5094.502644][T18257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5094.594767][T18259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5094.596529][T18259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5094.675311][T18261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5094.682643][T18261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5098.994582][T18277] UDC core: g1: couldn't find an available UDC or it's busy [ 5101.033038][T18282] Console: switching to colour dummy device 80x25 [ 5101.097209][T18282] Console: switching to colour frame buffer device 128x48 [ 5117.243899][T18344] fuse: Bad value for 'fd' [ 5117.557350][T18352] fuse: Bad value for 'fd' [ 5118.173606][T18366] fuse: Bad value for 'fd' [ 5118.285180][T18368] FAULT_INJECTION: forcing a failure. [ 5118.285180][T18368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 5118.285602][T18368] CPU: 0 UID: 0 PID: 18368 Comm: syz.1.4818 Tainted: G W syzkaller #0 PREEMPT [ 5118.285725][T18368] Tainted: [W]=WARN [ 5118.285764][T18368] Hardware name: linux,dummy-virt (DT) [ 5118.285816][T18368] Call trace: [ 5118.285851][T18368] show_stack+0x18/0x24 (C) [ 5118.285956][T18368] dump_stack_lvl+0x60/0x80 [ 5118.286030][T18368] dump_stack+0x18/0x24 [ 5118.286100][T18368] should_fail_ex+0x1e0/0x238 [ 5118.286191][T18368] should_fail_alloc_page+0x60/0x80 [ 5118.286301][T18368] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 5118.286382][T18368] alloc_pages_mpol+0x74/0x1b8 [ 5118.286501][T18368] folio_alloc_mpol_noprof+0x14/0x68 [ 5118.286614][T18368] shmem_alloc_folio+0xc0/0xe0 [ 5118.286695][T18368] shmem_alloc_and_add_folio+0x100/0x628 [ 5118.286792][T18368] shmem_get_folio_gfp+0x114/0x758 [ 5118.286878][T18368] shmem_fault+0x74/0x330 [ 5118.286950][T18368] __do_fault+0x3c/0x218 [ 5118.287058][T18368] do_fault+0x390/0x5e0 [ 5118.287144][T18368] __handle_mm_fault+0x3b8/0xec0 [ 5118.287220][T18368] handle_mm_fault+0x98/0x338 [ 5118.287310][T18368] __get_user_pages+0x3bc/0xc70 [ 5118.287386][T18368] populate_vma_page_range+0x88/0xe0 [ 5118.287600][T18368] __mm_populate+0xbc/0x180 [ 5118.287693][T18368] vm_mmap_pgoff+0x164/0x198 [ 5118.287800][T18368] ksys_mmap_pgoff+0x50/0x1f8 [ 5118.287891][T18368] __arm64_sys_mmap+0x2c/0x40 [ 5118.287991][T18368] invoke_syscall+0x54/0x10c [ 5118.288084][T18368] el0_svc_common.constprop.0+0x40/0xe0 [ 5118.288156][T18368] do_el0_svc+0x1c/0x34 [ 5118.288222][T18368] el0_svc+0x38/0x1fc [ 5118.288304][T18368] el0t_64_sync_handler+0xa0/0xe4 [ 5118.288381][T18368] el0t_64_sync+0x1a4/0x1a8 [ 5121.002697][T18382] binder: 18381:18382 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5121.003223][T18382] binder: 18382 RLIMIT_NICE not set [ 5122.009330][T18400] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4829'. [ 5124.105856][T18455] FAULT_INJECTION: forcing a failure. [ 5124.105856][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 5124.106237][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.1.4851 Tainted: G W syzkaller #0 PREEMPT [ 5124.106368][T18455] Tainted: [W]=WARN [ 5124.106405][T18455] Hardware name: linux,dummy-virt (DT) [ 5124.106444][T18455] Call trace: [ 5124.106473][T18455] show_stack+0x18/0x24 (C) [ 5124.106580][T18455] dump_stack_lvl+0x60/0x80 [ 5124.106658][T18455] dump_stack+0x18/0x24 [ 5124.106743][T18455] should_fail_ex+0x1e0/0x238 [ 5124.106850][T18455] should_failslab+0x54/0x80 [ 5124.106952][T18455] __kmalloc_cache_noprof+0x58/0x470 [ 5124.107066][T18455] proc_fill_super+0x34/0x244 [ 5124.107165][T18455] get_tree_nodev+0x70/0xb8 [ 5124.107235][T18455] proc_get_tree+0x18/0x24 [ 5124.107310][T18455] vfs_get_tree+0x28/0x100 [ 5124.107401][T18455] vfs_cmd_create+0x50/0xe0 [ 5124.107503][T18455] __arm64_sys_fsconfig+0x2a8/0x4f8 [ 5124.107610][T18455] invoke_syscall+0x54/0x10c [ 5124.107696][T18455] el0_svc_common.constprop.0+0x40/0xe0 [ 5124.107768][T18455] do_el0_svc+0x1c/0x34 [ 5124.107838][T18455] el0_svc+0x38/0x1fc [ 5124.107948][T18455] el0t_64_sync_handler+0xa0/0xe4 [ 5124.108025][T18455] el0t_64_sync+0x1a4/0x1a8 [ 5124.305916][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'. [ 5124.865568][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 5124.866148][ T28] audit: type=1326 audit(2000002454.070:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.866475][ T28] audit: type=1326 audit(2000002454.070:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.866678][ T28] audit: type=1326 audit(2000002454.070:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.866850][ T28] audit: type=1326 audit(2000002454.070:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.866987][ T28] audit: type=1326 audit(2000002454.070:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.873407][ T28] audit: type=1326 audit(2000002454.080:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.873670][ T28] audit: type=1326 audit(2000002454.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.879838][ T28] audit: type=1326 audit(2000002454.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.888368][ T28] audit: type=1326 audit(2000002454.090:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.900657][ T28] audit: type=1326 audit(2000002454.100:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18470 comm="syz.1.4858" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817792a8 code=0x7ffc0000 [ 5124.928467][T18471] FAULT_INJECTION: forcing a failure. [ 5124.928467][T18471] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5124.930092][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.1.4858 Tainted: G W syzkaller #0 PREEMPT [ 5124.930256][T18471] Tainted: [W]=WARN [ 5124.930294][T18471] Hardware name: linux,dummy-virt (DT) [ 5124.930336][T18471] Call trace: [ 5124.930372][T18471] show_stack+0x18/0x24 (C) [ 5124.930509][T18471] dump_stack_lvl+0x60/0x80 [ 5124.930892][T18471] dump_stack+0x18/0x24 [ 5124.931006][T18471] should_fail_ex+0x1e0/0x238 [ 5124.931088][T18471] should_fail+0x14/0x40 [ 5124.931175][T18471] get_futex_key+0xdc/0x620 [ 5124.931291][T18471] futex_wait_setup+0x54/0x240 [ 5124.931375][T18471] __futex_wait+0xd4/0x180 [ 5124.931475][T18471] futex_wait+0x88/0x110 [ 5124.931581][T18471] do_futex+0x1a0/0x210 [ 5124.931658][T18471] __arm64_sys_futex+0x100/0x1a0 [ 5124.931793][T18471] invoke_syscall+0x54/0x10c [ 5124.931880][T18471] el0_svc_common.constprop.0+0xc0/0xe0 [ 5124.931953][T18471] do_el0_svc+0x1c/0x34 [ 5124.932049][T18471] el0_svc+0x38/0x1fc [ 5124.932161][T18471] el0t_64_sync_handler+0xa0/0xe4 [ 5124.932293][T18471] el0t_64_sync+0x1a4/0x1a8 [ 5125.043654][T18473] misc userio: Invalid payload size [ 5125.044872][T18473] misc userio: No port type given on /dev/userio [ 5125.045672][T18473] misc userio: Invalid payload size [ 5125.267553][T18479] FAULT_INJECTION: forcing a failure. [ 5125.267553][T18479] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5125.267766][T18479] CPU: 0 UID: 0 PID: 18479 Comm: syz.1.4862 Tainted: G W syzkaller #0 PREEMPT [ 5125.267877][T18479] Tainted: [W]=WARN [ 5125.267915][T18479] Hardware name: linux,dummy-virt (DT) [ 5125.267951][T18479] Call trace: [ 5125.267981][T18479] show_stack+0x18/0x24 (C) [ 5125.268099][T18479] dump_stack_lvl+0x60/0x80 [ 5125.268203][T18479] dump_stack+0x18/0x24 [ 5125.268313][T18479] should_fail_ex+0x1e0/0x238 [ 5125.268422][T18479] should_fail+0x14/0x40 [ 5125.268495][T18479] get_futex_key+0xdc/0x620 [ 5125.268615][T18479] futex_wake+0x68/0x240 [ 5125.268693][T18479] do_futex+0x178/0x210 [ 5125.268760][T18479] __arm64_sys_futex+0x100/0x1a0 [ 5125.268842][T18479] invoke_syscall+0x54/0x10c [ 5125.268931][T18479] el0_svc_common.constprop.0+0x40/0xe0 [ 5125.269033][T18479] do_el0_svc+0x1c/0x34 [ 5125.269104][T18479] el0_svc+0x38/0x1fc [ 5125.269275][T18479] el0t_64_sync_handler+0xa0/0xe4 [ 5125.269379][T18479] el0t_64_sync+0x1a4/0x1a8 [ 5126.000333][T18486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5126.012332][T18486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5126.115257][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5126.116695][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5126.235086][T18490] FAULT_INJECTION: forcing a failure. [ 5126.235086][T18490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5126.235583][T18490] CPU: 0 UID: 0 PID: 18490 Comm: syz.1.4867 Tainted: G W syzkaller #0 PREEMPT [ 5126.235742][T18490] Tainted: [W]=WARN [ 5126.235840][T18490] Hardware name: linux,dummy-virt (DT) [ 5126.235890][T18490] Call trace: [ 5126.235929][T18490] show_stack+0x18/0x24 (C) [ 5126.236038][T18490] dump_stack_lvl+0x60/0x80 [ 5126.236346][T18490] dump_stack+0x18/0x24 [ 5126.236480][T18490] should_fail_ex+0x1e0/0x238 [ 5126.236570][T18490] should_fail+0x14/0x40 [ 5126.236664][T18490] get_futex_key+0xdc/0x620 [ 5126.236764][T18490] futex_wake+0x68/0x240 [ 5126.236865][T18490] do_futex+0x178/0x210 [ 5126.236962][T18490] __arm64_sys_futex+0x100/0x1a0 [ 5126.237102][T18490] invoke_syscall+0x54/0x10c [ 5126.237174][T18490] el0_svc_common.constprop.0+0x40/0xe0 [ 5126.237236][T18490] do_el0_svc+0x1c/0x34 [ 5126.237296][T18490] el0_svc+0x38/0x1fc [ 5126.237383][T18490] el0t_64_sync_handler+0xa0/0xe4 [ 5126.237468][T18490] el0t_64_sync+0x1a4/0x1a8 [ 5130.656431][T18533] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4886'. [ 5135.779948][T18533] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5136.296282][T18548] syzkaller0: entered promiscuous mode [ 5136.296541][T18548] syzkaller0: entered allmulticast mode [ 5137.110319][T18567] binder: 18566:18567 tried to acquire reference to desc 0, got 1 instead [ 5137.110900][T18567] binder: 18566:18567 ioctl c0306201 200003c0 returned -14 [ 5137.114572][T18567] binder: tried to use weak ref as strong ref [ 5137.115047][T18567] binder: 18566:18567 got transaction to invalid handle, 1 [ 5137.118050][T18567] binder: 18566:18567 cannot find target node [ 5137.119292][T18567] binder: 18566:18567 transaction call to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3252 [ 5137.134884][T13388] binder: undelivered TRANSACTION_ERROR: 29201 [ 5137.842843][T18580] block nbd1: Cannot add socket to a running device [ 5138.829851][T18575] block nbd1: shutting down sockets [ 5141.121112][T18652] netlink: 'syz.0.4934': attribute type 1 has an invalid length. [ 5141.187213][T18652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5141.224203][T18652] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 5141.330247][T18657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4936'. [ 5141.361409][T18662] fuse: Bad value for 'fd' [ 5141.872262][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4941'. [ 5141.982622][T18674] fuse: Bad value for 'fd' [ 5142.265142][T18686] fuse: Bad value for 'fd' [ 5146.157661][T18717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4959'. [ 5146.158136][T18717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4959'. [ 5146.158448][T18717] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 5146.253579][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5146.255028][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5146.479282][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4962'. [ 5146.624068][T18732] binder: 18731:18732 tried to acquire reference to desc 0, got 1 instead [ 5146.633019][T18732] binder: 18731:18732 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5146.634150][T18732] binder: 18732 RLIMIT_NICE not set [ 5146.636639][T18732] binder: 18732 RLIMIT_NICE not set [ 5146.641611][T18732] binder: 18732 RLIMIT_NICE not set [ 5146.642642][T18732] binder_alloc: 18731: binder_alloc_buf, no vma [ 5146.643670][T18732] binder: cannot allocate buffer: vma cleared, target dead or dying [ 5146.644414][T18732] binder: 18731:18732 transaction reply to 18731:18732 failed 13/29189/-3, code 0 size 0-0 line 3408 [ 5146.646486][T18732] binder: send failed reply for transaction 12 to 18731:18732 [ 5146.650825][T13388] binder: undelivered TRANSACTION_COMPLETE [ 5146.651070][T13388] binder: undelivered TRANSACTION_ERROR: 29189 [ 5146.656853][T13388] binder: undelivered TRANSACTION_ERROR: 29190 [ 5149.908156][T18772] FAULT_INJECTION: forcing a failure. [ 5149.908156][T18772] name failslab, interval 1, probability 0, space 0, times 0 [ 5149.910710][T18772] CPU: 0 UID: 0 PID: 18772 Comm: syz.0.4980 Tainted: G W syzkaller #0 PREEMPT [ 5149.910869][T18772] Tainted: [W]=WARN [ 5149.910911][T18772] Hardware name: linux,dummy-virt (DT) [ 5149.910957][T18772] Call trace: [ 5149.910995][T18772] show_stack+0x18/0x24 (C) [ 5149.911113][T18772] dump_stack_lvl+0x60/0x80 [ 5149.911193][T18772] dump_stack+0x18/0x24 [ 5149.911278][T18772] should_fail_ex+0x1e0/0x238 [ 5149.911375][T18772] should_failslab+0x54/0x80 [ 5149.911488][T18772] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5149.911575][T18772] __d_alloc+0x3c/0x280 [ 5149.911660][T18772] d_alloc+0x1c/0x80 [ 5149.911739][T18772] d_alloc_name+0x44/0x80 [ 5149.911819][T18772] devpts_pty_new+0xd4/0x1c8 [ 5149.911905][T18772] ptmx_open+0x130/0x1d0 [ 5149.912073][T18772] chrdev_open+0xac/0x220 [ 5149.912231][T18772] do_dentry_open+0x128/0x4fc [ 5149.912315][T18772] vfs_open+0x2c/0xe8 [ 5149.912401][T18772] path_openat+0x5b4/0x960 [ 5149.912482][T18772] do_file_open+0xb0/0x168 [ 5149.912556][T18772] do_sys_openat2+0x84/0x104 [ 5149.912637][T18772] __arm64_sys_openat+0x64/0xc0 [ 5149.912716][T18772] invoke_syscall+0x54/0x10c [ 5149.912795][T18772] el0_svc_common.constprop.0+0x40/0xe0 [ 5149.912874][T18772] do_el0_svc+0x1c/0x34 [ 5149.912947][T18772] el0_svc+0x38/0x1fc [ 5149.913033][T18772] el0t_64_sync_handler+0xa0/0xe4 [ 5149.913113][T18772] el0t_64_sync+0x1a4/0x1a8 [ 5151.332646][T18814] tmpfs: Bad value for 'mpol' [ 5152.614323][T18845] erspan0: entered promiscuous mode [ 5152.615162][T18845] erspan0: entered allmulticast mode [ 5153.060245][T18856] binder: 18855:18856 context manager tried to acquire desc 0 [ 5153.060501][T18856] binder: 18855:18856 ioctl c0306201 20000e80 returned -22 [ 5153.246830][T18860] binder: 18859:18860 ioctl c00c6211 0 returned -14 [ 5154.268262][T18872] binder: 18871:18872 ioctl c00c6211 0 returned -14 [ 5202.523515][T19202] fuse: Unknown parameter 'group_i00000000000000000000' [ 5203.109966][T19212] fuse: Unknown parameter 'group_i00000000000000000000' [ 5208.293280][T19245] netlink: 'syz.0.5166': attribute type 1 has an invalid length. [ 5209.889602][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 5209.890009][ T28] audit: type=1326 audit(2000002539.090:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.890295][ T28] audit: type=1326 audit(2000002539.100:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.898322][ T28] audit: type=1326 audit(2000002539.100:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.898568][ T28] audit: type=1326 audit(2000002539.100:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.900782][ T28] audit: type=1326 audit(2000002539.110:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.901014][ T28] audit: type=1326 audit(2000002539.110:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.907353][ T28] audit: type=1326 audit(2000002539.110:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.907853][ T28] audit: type=1326 audit(2000002539.110:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.908088][ T28] audit: type=1326 audit(2000002539.110:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5209.908279][ T28] audit: type=1326 audit(2000002539.110:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19264 comm="syz.0.5175" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5225.187628][T19415] fuse: Invalid rootmode [ 5238.420486][T19432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5238.443826][T19432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5239.354676][T19432] hsr_slave_0: entered promiscuous mode [ 5239.363688][T19432] hsr_slave_1: entered promiscuous mode [ 5239.367920][T19432] debugfs: 'hsr0' already exists in 'hsr' [ 5239.370263][T19432] Cannot create hsr debugfs directory [ 5239.821032][T19432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5239.941972][T19432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5240.041404][T19432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5240.154298][T19432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5240.525904][T19432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5240.549760][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5240.556058][T19432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5240.575118][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5240.583143][T19432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5240.598275][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5240.606486][T19432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5240.624314][T19432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5241.356542][T19432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5244.136063][T19432] veth0_vlan: entered promiscuous mode [ 5244.176352][T19432] veth1_vlan: entered promiscuous mode [ 5244.302784][T19432] veth0_macvtap: entered promiscuous mode [ 5244.324668][T19432] veth1_macvtap: entered promiscuous mode [ 5244.530171][ T9449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5244.530567][ T9449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5244.530949][ T9449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5244.531133][ T9449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5245.723917][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5257'. [ 5247.621624][T13439] atkbd serio2: keyboard reset failed on [ 5249.633974][T19550] syzkaller0: entered promiscuous mode [ 5249.636623][T19550] syzkaller0: entered allmulticast mode [ 5250.033342][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5265'. [ 5250.132618][T19557] fuse: Bad value for 'fd' [ 5250.221754][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5267'. [ 5250.221997][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5267'. [ 5250.246854][T19559] gretap0: entered promiscuous mode [ 5250.247488][T19559] macvlan2: entered allmulticast mode [ 5250.247763][T19559] gretap0: entered allmulticast mode [ 5251.148209][T19568] fuse: Bad value for 'fd' [ 5251.952984][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5277'. [ 5251.954434][T19581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5277'. [ 5258.153736][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 5258.157017][ T28] audit: type=1326 audit(2000002587.360:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.160289][ T28] audit: type=1326 audit(2000002587.360:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.163233][ T28] audit: type=1326 audit(2000002587.360:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.166084][ T28] audit: type=1326 audit(2000002587.360:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.170295][ T28] audit: type=1326 audit(2000002587.360:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.174104][ T28] audit: type=1326 audit(2000002587.360:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.177872][ T28] audit: type=1326 audit(2000002587.360:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.183987][ T28] audit: type=1326 audit(2000002587.360:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.187343][ T28] audit: type=1326 audit(2000002587.370:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5258.189653][ T28] audit: type=1326 audit(2000002587.370:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19627 comm="syz.0.5294" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e9792a8 code=0x7ffc0000 [ 5259.755154][T19641] netlink: 'syz.1.5298': attribute type 34 has an invalid length. [ 5259.835896][T19643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5259.843819][T19643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5260.944523][T19661] fuse: Unknown parameter 'fd0x0000000000000003' [ 5261.071039][T19665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5261.085417][T19665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5263.548542][T19676] fuse: Unknown parameter 'fd0x0000000000000003' [ 5266.483633][T19723] ip_tables: iptables: counters copy to user failed while replacing table [ 5269.682372][T19737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5339'. [ 5269.684634][T19737] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5339'. [ 5270.008464][T19742] gre1: entered allmulticast mode [ 5271.492641][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 5271.495568][ T28] audit: type=1326 audit(2000002600.700:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.498420][ T28] audit: type=1326 audit(2000002600.700:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.501700][ T28] audit: type=1326 audit(2000002600.700:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.505226][ T28] audit: type=1326 audit(2000002600.700:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.510352][ T28] audit: type=1326 audit(2000002600.700:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.514123][ T28] audit: type=1326 audit(2000002600.710:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.516571][ T28] audit: type=1326 audit(2000002600.710:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5271.542872][ T28] audit: type=1326 audit(2000002600.750:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19755 comm="syz.1.5346" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5272.231589][T19772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5272.232853][T19772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5278.565034][T19829] trusted_key: encrypted_key: keyword 'updGte' not recognized [ 5279.732621][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5381'. [ 5280.593338][T19861] syzkaller0: entered promiscuous mode [ 5280.594609][T19861] syzkaller0: entered allmulticast mode [ 5280.859463][ T28] audit: type=1326 audit(2000002610.060:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.860018][ T28] audit: type=1326 audit(2000002610.060:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.860356][ T28] audit: type=1326 audit(2000002610.060:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.860558][ T28] audit: type=1326 audit(2000002610.060:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.860754][ T28] audit: type=1326 audit(2000002610.060:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.860973][ T28] audit: type=1326 audit(2000002610.060:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.861138][ T28] audit: type=1326 audit(2000002610.060:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=444 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.861293][ T28] audit: type=1326 audit(2000002610.060:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.861454][ T28] audit: type=1326 audit(2000002610.060:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5280.861592][ T28] audit: type=1326 audit(2000002610.060:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19865 comm="syz.1.5390" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5282.517571][T19889] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5398'. [ 5282.529437][T19889] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5398'. [ 5282.536208][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5398'. [ 5286.193797][T19952] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 5286.205938][T19952] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 5286.665653][T19964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5286.667158][T19964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5289.758934][T20012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5289.764734][T20012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5290.488524][T20012] hsr_slave_0: entered promiscuous mode [ 5290.495222][T20012] hsr_slave_1: entered promiscuous mode [ 5290.502515][T20012] debugfs: 'hsr0' already exists in 'hsr' [ 5290.502919][T20012] Cannot create hsr debugfs directory [ 5291.065126][T20012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5291.194510][T20012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5291.305907][T20012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5291.427978][T20012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5291.753470][T20012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5291.782521][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5291.786710][T20012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5291.835021][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5291.843739][T20012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5291.867632][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5291.884264][T20012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5291.917064][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5292.041881][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 5292.042475][ T28] audit: type=1326 audit(2000002621.250:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20070 comm="syz.1.5432" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x0 [ 5292.723884][T20012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5294.782570][ T28] audit: type=1326 audit(2000002623.990:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5294.784090][ T28] audit: type=1326 audit(2000002623.990:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5294.821322][ T28] audit: type=1326 audit(2000002624.020:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5294.830712][ T28] audit: type=1326 audit(2000002624.040:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5294.835855][ T28] audit: type=1326 audit(2000002624.040:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5294.837384][ T28] audit: type=1326 audit(2000002624.040:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20106 comm="syz.1.5434" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6f792a8 code=0x7ffc0000 [ 5295.275337][T20012] veth0_vlan: entered promiscuous mode [ 5295.360834][T20012] veth1_vlan: entered promiscuous mode [ 5295.527114][T20012] veth0_macvtap: entered promiscuous mode [ 5295.582691][T20012] veth1_macvtap: entered promiscuous mode [ 5295.840250][T19997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5295.840683][T19997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5295.866781][T19997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5295.929162][T19999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5296.777076][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5296.777999][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5296.902165][T20142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5446'. [ 5297.406786][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'. [ 5299.093205][ T28] audit: type=1326 audit(2000002628.300:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.095862][ T28] audit: type=1326 audit(2000002628.300:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.102556][ T28] audit: type=1326 audit(2000002628.310:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.105297][ T28] audit: type=1326 audit(2000002628.310:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.110721][ T28] audit: type=1326 audit(2000002628.320:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.111653][ T28] audit: type=1326 audit(2000002628.320:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.123457][ T28] audit: type=1326 audit(2000002628.330:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.124030][ T28] audit: type=1326 audit(2000002628.330:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.124347][ T28] audit: type=1326 audit(2000002628.330:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5299.124551][ T28] audit: type=1326 audit(2000002628.330:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20154 comm="syz.0.5452" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99b792a8 code=0x7ffc0000 [ 5301.203152][T20180] binder: 20179:20180 tried to acquire reference to desc 0, got 1 instead [ 5301.207387][T20180] binder: 20179:20180 got transaction with invalid offset (48, min 48 max 72) or object. [ 5301.210572][T20180] binder: 20179:20180 transaction call to 20179:0 failed 19/29201/-22, code 0 size 72-24 line 3524 [ 5301.214745][T16285] binder: undelivered TRANSACTION_ERROR: 29201 [ 5301.794411][T20188] ------------[ cut here ]------------ [ 5301.794984][T20188] WARNING: ./include/linux/skbuff.h:3243 at tcf_skbmod_act+0x4b0/0x4e0, CPU#1: syz.1.5467/20188 [ 5301.799290][T20188] Modules linked in: [ 5301.801322][T20188] CPU: 1 UID: 0 PID: 20188 Comm: syz.1.5467 Tainted: G W syzkaller #0 PREEMPT [ 5301.802263][T20188] Tainted: [W]=WARN [ 5301.802510][T20188] Hardware name: linux,dummy-virt (DT) [ 5301.803027][T20188] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 5301.803437][T20188] pc : tcf_skbmod_act+0x4b0/0x4e0 [ 5301.803720][T20188] lr : tcf_action_exec+0xb0/0x1d4 [ 5301.804001][T20188] sp : ffff800083883850 [ 5301.804253][T20188] x29: ffff800083883850 x28: f3f000002fbc5608 x27: f3f000002fbc5600 [ 5301.804958][T20188] x26: 0000000000000001 x25: 0000000020000000 x24: 0000000010000000 [ 5301.805442][T20188] x23: 0000000000000000 x22: 0000000000000010 x21: f2f00000099dc040 [ 5301.805888][T20188] x20: f1f000002fbc5500 x19: fbf000000695e000 x18: 0000000000000000 [ 5301.806375][T20188] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000304 [ 5301.806771][T20188] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 5301.807150][T20188] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 5301.807608][T20188] x8 : ffff800083883ac8 x7 : 0000000000000000 x6 : fff07ffffcd20000 [ 5301.807990][T20188] x5 : 0000000000000000 x4 : 0000000000000001 x3 : f7f0000006b77540 [ 5301.808369][T20188] x2 : ffffc1ffbf7827b0 x1 : 000000000000ffff x0 : 000000000000ffff [ 5301.809111][T20188] Call trace: [ 5301.809580][T20188] tcf_skbmod_act+0x4b0/0x4e0 (P) [ 5301.810028][T20188] tcf_action_exec+0xb0/0x1d4 [ 5301.810251][T20188] basic_classify+0x80/0xc4 [ 5301.810469][T20188] tcf_classify+0x1dc/0x410 [ 5301.810746][T20188] tc_run+0x108/0x1e0 [ 5301.810970][T20188] __netif_receive_skb_core.constprop.0+0x4d8/0xc40 [ 5301.811312][T20188] __netif_receive_skb_one_core+0x40/0x8c [ 5301.811596][T20188] __netif_receive_skb+0x18/0x60 [ 5301.811807][T20188] netif_receive_skb+0x3c/0xd8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 5301.812030][T20188] tun_get_user+0xbbc/0xf70 [ 5301.812521][T20188] tun_chr_write_iter+0x5c/0xf0 [ 5301.812783][T20188] vfs_write+0x244/0x36c [ 5301.813006][T20188] ksys_write+0x70/0x108 [ 5301.813207][T20188] __arm64_sys_write+0x18/0x24 [ 5301.813422][T20188] invoke_syscall+0x54/0x10c [ 5301.813643][T20188] el0_svc_common.constprop.0+0x40/0xe0 [ 5301.813945][T20188] do_el0_svc+0x1c/0x34 [ 5301.814151][T20188] el0_svc+0x38/0x1fc [ 5301.814377][T20188] el0t_64_sync_handler+0xa0/0xe4 [ 5301.814607][T20188] el0t_64_sync+0x1a4/0x1a8 [ 5301.815140][T20188] ---[ end trace 0000000000000000 ]--- [ 5302.239835][T19997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5302.389935][T19997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5302.483581][T19997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5302.600684][T19997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5303.188297][T19997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5303.224663][T19997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5303.264661][T19997] bond0 (unregistering): Released all slaves [ 5303.368279][T19997] hsr_slave_0: left promiscuous mode [ 5303.374340][T19997] hsr_slave_1: left promiscuous mode [ 5303.392420][T19997] veth1_macvtap: left promiscuous mode [ 5303.392821][T19997] veth0_macvtap: left promiscuous mode [ 5303.393174][T19997] veth1_vlan: left promiscuous mode [ 5303.393443][T19997] veth0_vlan: left promiscuous mode [ 5304.254855][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 5304.983806][ T3219] 8021q: adding VLAN 0 to HW filter on device eth2 [ 5305.713366][ T3219] 8021q: adding VLAN 0 to HW filter on device eth3 [ 5306.449812][ T3219] 8021q: adding VLAN 0 to HW filter on device eth4