last executing test programs: 830.661706ms ago: executing program 1 (id=8845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 627.160649ms ago: executing program 1 (id=8846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 500.610693ms ago: executing program 0 (id=8849): r0 = syz_usb_connect(0x5, 0x58, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) 500.493223ms ago: executing program 1 (id=8850): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x5e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000004"], 0x18}, 0x4000010) 422.901072ms ago: executing program 0 (id=8851): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001000002000000000034f7a6"], 0x28}], 0x1}, 0x4000800) 422.619272ms ago: executing program 1 (id=8852): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 419.693852ms ago: executing program 0 (id=8853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037004000000008000200", @ANYRES32=r3], 0x40}, 0x4, 0x700000000000000}, 0x0) 291.011507ms ago: executing program 1 (id=8854): r0 = io_uring_setup(0x57e8, &(0x7f0000000080)={0x0, 0xda55, 0x2, 0x2, 0x1b4}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x6}, 0x7f692030ea0c639e}, 0x1) 221.449955ms ago: executing program 0 (id=8855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 221.213155ms ago: executing program 1 (id=8856): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) ppoll(&(0x7f00000000c0)=[{r0, 0x90}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@unlock_all, 0xb) 72.084592ms ago: executing program 0 (id=8857): unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 0s ago: executing program 0 (id=8858): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43380' (ED25519) to the list of known hosts. syzkaller login: [ 84.021175][ T3366] cgroup: Unknown subsys name 'net' [ 84.188776][ T3366] cgroup: Unknown subsys name 'cpuset' [ 84.209993][ T3366] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.693289][ T3366] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.456483][ T3371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.512148][ T3371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.529660][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.591848][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.522852][ T3371] hsr_slave_0: entered promiscuous mode [ 93.529608][ T3371] hsr_slave_1: entered promiscuous mode [ 93.693398][ T3372] hsr_slave_0: entered promiscuous mode [ 93.699537][ T3372] hsr_slave_1: entered promiscuous mode [ 93.702056][ T3372] debugfs: 'hsr0' already exists in 'hsr' [ 93.704756][ T3372] Cannot create hsr debugfs directory [ 94.506067][ T3371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.538207][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.566982][ T3371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.580962][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.587573][ T3371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.607032][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.636329][ T3371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.650492][ T3371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.763284][ T3372] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.781165][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.786981][ T3372] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.802368][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.826093][ T3372] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.840340][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.848325][ T3372] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.862917][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.710825][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.792226][ T3371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.569380][ T3372] veth0_vlan: entered promiscuous mode [ 98.609615][ T3372] veth1_vlan: entered promiscuous mode [ 98.760655][ T3372] veth0_macvtap: entered promiscuous mode [ 98.785371][ T3372] veth1_macvtap: entered promiscuous mode [ 98.980033][ T3371] veth0_vlan: entered promiscuous mode [ 99.031614][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.033484][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.040824][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.042585][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.067120][ T3371] veth1_vlan: entered promiscuous mode [ 99.321529][ T3371] veth0_macvtap: entered promiscuous mode [ 99.343466][ T3371] veth1_macvtap: entered promiscuous mode [ 99.457143][ T3372] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.510876][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511455][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511654][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.511909][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.719042][ T3613] Zero length message leads to an empty skb [ 122.146084][ C1] sched: DL replenish lagged too much [ 129.067619][ T3689] input: syz0 as /devices/virtual/input/input1 [ 213.806834][ T4046] fuse: root generation should be zero [ 215.671510][ T4066] input: syz0 as /devices/virtual/input/input2 [ 221.415222][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 277.935996][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 278.693450][ T4465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 284.531658][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.536566][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.268356][ T4516] input: syz1 as /devices/virtual/input/input3 [ 294.662265][ T4568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 337.106153][ T4817] input: syz0 as /devices/virtual/input/input4 [ 355.921827][ T4928] input: syz1 as /devices/virtual/input/input5 [ 361.860845][ T4938] input: syz1 as /devices/virtual/input/input6 [ 377.202611][ T4999] input: syz1 as /devices/virtual/input/input7 [ 386.312319][ T5071] input: syz0 as /devices/virtual/input/input8 [ 424.658650][ T5291] syz.1.628 uses obsolete (PF_INET,SOCK_PACKET) [ 460.917275][ T5439] input: syz0 as /devices/virtual/input/input9 [ 494.412810][ T5623] input: syz0 as /devices/virtual/input/input10 [ 528.825314][ T5761] ======================================================= [ 528.825314][ T5761] WARNING: The mand mount option has been deprecated and [ 528.825314][ T5761] and is ignored by this kernel. Remove the mand [ 528.825314][ T5761] option from the mount to silence this warning. [ 528.825314][ T5761] ======================================================= [ 557.700239][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 581.786683][ T6031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 593.881978][ T6074] input: syz0 as /devices/virtual/input/input11 [ 609.426322][ T6167] input: syz0 as /devices/virtual/input/input12 [ 613.884990][ T6195] input: syz0 as /devices/virtual/input/input13 [ 639.613082][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 678.715356][ T6506] input: syz0 as /devices/virtual/input/input14 [ 684.793771][ T6533] input: syz0 as /devices/virtual/input/input15 [ 710.069942][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 712.441641][ T6649] input: syz0 as /devices/virtual/input/input16 [ 718.542178][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1078'. [ 740.193045][ T6719] syz.0.1085 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 740.194083][ T6719] CPU: 1 UID: 0 PID: 6719 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT [ 740.194252][ T6719] Hardware name: linux,dummy-virt (DT) [ 740.194482][ T6719] Call trace: [ 740.194713][ T6719] show_stack+0x18/0x24 (C) [ 740.195400][ T6719] dump_stack_lvl+0x60/0x80 [ 740.195476][ T6719] dump_stack+0x18/0x24 [ 740.195529][ T6719] dump_header+0x40/0x170 [ 740.195572][ T6719] oom_kill_process+0x220/0x29c [ 740.195662][ T6719] out_of_memory+0xec/0x58c [ 740.195706][ T6719] mem_cgroup_out_of_memory+0x108/0x118 [ 740.195748][ T6719] try_charge_memcg+0x3b4/0x58c [ 740.195787][ T6719] charge_memcg+0x58/0x14c [ 740.195827][ T6719] __mem_cgroup_charge+0x38/0x128 [ 740.195869][ T6719] shmem_alloc_and_add_folio+0x140/0x628 [ 740.195908][ T6719] shmem_get_folio_gfp+0x220/0x778 [ 740.195944][ T6719] shmem_write_begin+0x6c/0x158 [ 740.195980][ T6719] generic_perform_write+0xc0/0x25c [ 740.196019][ T6719] shmem_file_write_iter+0xa0/0xa8 [ 740.196059][ T6719] __kernel_write_iter+0xfc/0x27c [ 740.196102][ T6719] dump_user_range+0xf0/0x310 [ 740.196141][ T6719] elf_core_dump+0xc68/0xf44 [ 740.196190][ T6719] vfs_coredump+0xf04/0x1e34 [ 740.196226][ T6719] get_signal+0x604/0x860 [ 740.196269][ T6719] arch_do_signal_or_restart+0x11c/0x3dc [ 740.196308][ T6719] exit_to_user_mode_loop+0x114/0x19c [ 740.196346][ T6719] el0_da+0xe8/0xf0 [ 740.196387][ T6719] el0t_64_sync_handler+0xd0/0xf0 [ 740.196424][ T6719] el0t_64_sync+0x1a4/0x1a8 [ 740.197127][ T6719] memory: usage 307200kB, limit 307200kB, failcnt 21696 [ 740.197233][ T6719] memory+swap: usage 432024kB, limit 9007199254740988kB, failcnt 0 [ 740.197301][ T6719] kmem: usage 1300kB, limit 9007199254740988kB, failcnt 0 [ 740.197356][ T6719] Memory cgroup stats for /syz0: [ 740.199352][ T6719] cache 195686400 [ 740.199455][ T6719] rss 117374976 [ 740.199498][ T6719] rss_huge 0 [ 740.199557][ T6719] shmem 195686400 [ 740.199631][ T6719] mapped_file 0 [ 740.199671][ T6719] dirty 0 [ 740.199712][ T6719] writeback 0 [ 740.199747][ T6719] workingset_refault_anon 361 [ 740.199782][ T6719] workingset_refault_file 5 [ 740.199817][ T6719] swap 127819776 [ 740.199851][ T6719] swapcached 129474560 [ 740.199918][ T6719] pgpgin 1565372 [ 740.199962][ T6719] pgpgout 1488897 [ 740.199998][ T6719] pgfault 952009 [ 740.200032][ T6719] pgmajfault 64 [ 740.200067][ T6719] inactive_anon 312655872 [ 740.200103][ T6719] active_anon 581632 [ 740.200140][ T6719] inactive_file 0 [ 740.200184][ T6719] active_file 0 [ 740.200222][ T6719] unevictable 0 [ 740.200257][ T6719] hierarchical_memory_limit 314572800 [ 740.200293][ T6719] hierarchical_memsw_limit 9223372036854771712 [ 740.200329][ T6719] total_cache 195686400 [ 740.200364][ T6719] total_rss 117374976 [ 740.200416][ T6719] total_rss_huge 0 [ 740.200456][ T6719] total_shmem 195686400 [ 740.200520][ T6719] total_mapped_file 0 [ 740.200570][ T6719] total_dirty 0 [ 740.200608][ T6719] total_writeback 0 [ 740.200644][ T6719] total_workingset_refault_anon 361 [ 740.200683][ T6719] total_workingset_refault_file 5 [ 740.200721][ T6719] total_swap 127819776 [ 740.200757][ T6719] total_swapcached 129474560 [ 740.200824][ T6719] total_pgpgin 1565372 [ 740.200890][ T6719] total_pgpgout 1488897 [ 740.200928][ T6719] total_pgfault 952009 [ 740.200963][ T6719] total_pgmajfault 64 [ 740.200998][ T6719] total_inactive_anon 312655872 [ 740.201034][ T6719] total_active_anon 581632 [ 740.201069][ T6719] total_inactive_file 0 [ 740.201103][ T6719] total_active_file 0 [ 740.201145][ T6719] total_unevictable 0 [ 740.201337][ T6719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1083,pid=6700,uid=0 [ 740.203327][ T6719] Memory cgroup out of memory: Killed process 6700 (syz.0.1083) total-vm:122920kB, anon-rss:5288kB, file-rss:4484kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 759.076073][ T6813] input: syz0 as /devices/virtual/input/input17 [ 785.445158][ T6889] input: syz1 as /devices/virtual/input/input18 [ 802.068864][ T6948] input: syz0 as /devices/virtual/input/input19 [ 872.077443][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1238'. [ 885.296000][ T7273] input: syz0 as /devices/virtual/input/input20 [ 939.833757][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 947.205903][ T7527] input: syz0 as /devices/virtual/input/input21 [ 1015.558562][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1401'. [ 1018.627080][ T7749] input: syz0 as /devices/virtual/input/input22 [ 1025.476996][ T7786] input: syz0 as /devices/virtual/input/input23 [ 1101.415219][ T8134] input: syz0 as /devices/virtual/input/input24 [ 1107.958583][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1546'. [ 1117.226756][ T8224] input: syz0 as /devices/virtual/input/input25 [ 1179.349949][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1643'. [ 1196.887837][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 1197.130787][ T8553] input: syz0 as /devices/virtual/input/input26 [ 1278.356288][ T8887] input: syz0 as /devices/virtual/input/input27 [ 1309.967439][ T9038] input: syz0 as /devices/virtual/input/input28 [ 1318.682274][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1824'. [ 1357.182937][ T9163] input: syz1 as /devices/virtual/input/input29 [ 1404.503801][ T9326] input: syz0 as /devices/virtual/input/input30 [ 1413.063237][ T9346] input: syz0 as /devices/virtual/input/input31 [ 1420.763564][ T9381] input: syz0 as /devices/virtual/input/input32 [ 1423.017641][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 1428.893542][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1428.932377][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1431.400341][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 1434.409014][ T9448] input: syz0 as /devices/virtual/input/input33 [ 1451.277144][ T9519] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1458.289088][ T9566] input: syz0 as /devices/virtual/input/input34 [ 1539.049373][ T9930] input: syz0 as /devices/virtual/input/input35 [ 1551.897894][ T9982] input: syz0 as /devices/virtual/input/input36 [ 1646.765272][ T1961] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1647.305112][ T1961] usb 1-1: Using ep0 maxpacket: 16 [ 1647.322272][ T1961] usb 1-1: config 0 has no interfaces? [ 1647.341422][ T1961] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1647.341817][ T1961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.342385][ T1961] usb 1-1: Product: syz [ 1647.342495][ T1961] usb 1-1: Manufacturer: syz [ 1647.342578][ T1961] usb 1-1: SerialNumber: syz [ 1647.356079][ T1961] usb 1-1: config 0 descriptor?? [ 1651.442092][ T3442] usb 1-1: USB disconnect, device number 2 [ 1698.724925][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 1699.346427][T10586] input: syz0 as /devices/virtual/input/input37 [ 1705.126746][T10615] input: syz0 as /devices/virtual/input/input38 [ 1742.892999][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2342'. [ 1822.902368][T11074] input: syz1 as /devices/virtual/input/input39 [ 1830.337115][T11087] input: syz0 as /devices/virtual/input/input40 [ 1838.521556][T11121] input: syz0 as /devices/virtual/input/input41 [ 1904.426860][T11441] input: syz0 as /devices/virtual/input/input42 [ 1915.511660][T11516] input: syz0 as /devices/virtual/input/input43 [ 1951.895778][T11648] input: syz0 as /devices/virtual/input/input44 [ 1999.617102][T11902] lo: entered promiscuous mode [ 1999.649688][T11901] lo: left promiscuous mode [ 2002.827502][T11917] input: syz0 as /devices/virtual/input/input45 [ 2006.473270][T11927] input: syz0 as /devices/virtual/input/input46 [ 2034.469668][T12021] input: syz0 as /devices/virtual/input/input47 [ 2068.033835][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2792'. [ 2130.329557][T12529] input: syz1 as /devices/virtual/input/input48 [ 2201.006884][T12832] input: syz0 as /devices/virtual/input/input49 [ 2238.524347][T12958] input: syz0 as /devices/virtual/input/input50 [ 2283.492048][T13159] input: syz0 as /devices/virtual/input/input51 [ 2304.967965][T13233] input: syz0 as /devices/virtual/input/input52 [ 2330.044917][T13404] input: syz0 as /devices/virtual/input/input53 [ 2352.702667][T13483] input: syz0 as /devices/virtual/input/input54 [ 2390.410123][T13674] input: syz0 as /devices/virtual/input/input55 [ 2444.855165][T13906] input: syz0 as /devices/virtual/input/input56 [ 2450.478518][T13909] input: syz0 as /devices/virtual/input/input57 [ 2461.240792][T13964] input: syz0 as /devices/virtual/input/input58 [ 2497.688252][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3437'. [ 2522.757361][T14244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3478'. [ 2598.426154][T14571] input: syz0 as /devices/virtual/input/input59 [ 2624.849456][T14651] input: syz0 as /devices/virtual/input/input60 [ 2638.115534][T14688] input: syz0 as /devices/virtual/input/input61 [ 2702.417337][T14941] input: syz1 as /devices/virtual/input/input62 [ 2754.433968][T15146] input: syz0 as /devices/virtual/input/input63 [ 2775.677156][T15206] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2777.671076][T15226] input: syz0 as /devices/virtual/input/input64 [ 2799.504780][T15322] input: syz0 as /devices/virtual/input/input65 [ 2855.527932][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3875'. [ 2884.968625][T15599] input: syz0 as /devices/virtual/input/input66 [ 2898.678338][T15682] input: syz0 as /devices/virtual/input/input67 [ 2902.832365][T15696] input: syz0 as /devices/virtual/input/input68 [ 2913.207001][T15766] input: syz0 as /devices/virtual/input/input69 [ 2940.772635][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3994'. [ 3003.956097][T16248] input: syz0 as /devices/virtual/input/input70 [ 3005.535671][T16258] input: syz1 as /devices/virtual/input/input71 [ 3017.877004][T16321] input: syz0 as /devices/virtual/input/input72 [ 3083.452384][T16590] input: syz1 as /devices/virtual/input/input73 [ 3095.540749][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4241'. [ 3111.243463][T16737] process 'syz.0.4269' launched './file0' with NULL argv: empty string added [ 3174.638580][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4358'. [ 3185.537666][T17107] input: syz1 as /devices/virtual/input/input74 [ 3209.197749][T17230] input: syz0 as /devices/virtual/input/input75 [ 3209.487843][T17233] input: syz0 as /devices/virtual/input/input76 [ 3226.760879][T17301] input: syz0 as /devices/virtual/input/input77 [ 3249.958270][T17351] input: syz0 as /devices/virtual/input/input78 [ 3268.765524][T17398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4482'. [ 3279.009618][T17411] input: syz0 as /devices/virtual/input/input79 [ 3289.275380][T17453] input: syz0 as /devices/virtual/input/input80 [ 3367.436386][T17854] input: syz0 as /devices/virtual/input/input81 [ 3368.986949][T17863] input: syz0 as /devices/virtual/input/input82 [ 3482.176102][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'. [ 3491.610896][T18372] input: syz0 as /devices/virtual/input/input83 [ 3512.575587][T18414] input: syz1 as /devices/virtual/input/input84 [ 3532.309098][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4826'. [ 3596.048686][T18818] syzkaller0: entered promiscuous mode [ 3596.049246][T18818] syzkaller0: entered allmulticast mode [ 3604.695575][T18861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4944'. [ 3606.492010][T18867] 8021q: VLANs not supported on ip6_vti0 [ 3610.226211][T18887] binder: 18886:18887 ioctl 4018620d 0 returned -22 [ 3610.250706][T18887] binder: 18886:18887 got transaction to context manager from process owning it [ 3610.255822][T18887] binder: 18886:18887 transaction call to 18886:0 failed 3/29201/-22, code 0 size 0-0 line 3227 [ 3610.265257][T15834] binder: undelivered TRANSACTION_ERROR: 29201 [ 3630.072863][T19012] input: syz1 as /devices/virtual/input/input85 [ 3642.599072][T19072] capability: warning: `syz.0.5014' uses 32-bit capabilities (legacy support in use) [ 3650.885011][T19114] lo: entered promiscuous mode [ 3650.887402][T19113] lo: left promiscuous mode [ 3674.983399][T19266] input: syz0 as /devices/virtual/input/input86 [ 3686.446402][T19310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3686.448154][T19310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3707.207479][T19415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5129'. [ 3738.826591][T19595] : renamed from ipvlan1 [ 3746.646991][T19638] serio: Serial port pts0 [ 3749.988663][T19652] input: syz0 as /devices/virtual/input/input87 [ 3764.988739][T19710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5226'. [ 3778.797769][T19817] input: syz0 as /devices/virtual/input/input88 [ 3794.242308][T19902] lo: entered promiscuous mode [ 3794.252602][T19894] lo: left promiscuous mode [ 3853.740255][T20167] input: syz0 as /devices/virtual/input/input89 [ 3856.823306][T20173] lo: entered promiscuous mode [ 3856.835817][T20172] lo: left promiscuous mode [ 3869.877078][T20239] input: syz1 as /devices/virtual/input/input90 [ 3913.288183][T20454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3939.516896][T20596] syzkaller0: entered promiscuous mode [ 3939.518649][T20596] syzkaller0: entered allmulticast mode [ 3940.069362][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5516'. [ 3989.834905][T20830] serio: Serial port pts0 [ 4056.406489][T21242] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5732'. [ 4056.439411][T21242] macsec1: entered allmulticast mode [ 4056.445842][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'. [ 4126.390880][T19739] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 4126.581911][T19739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 4126.588162][T19739] usb 1-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 4126.594701][T19739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4126.618946][T19739] usb 1-1: config 0 descriptor?? [ 4126.647437][T19739] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 4126.867121][T19739] usb 1-1: USB disconnect, device number 3 [ 4127.109959][T21586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5845'. [ 4226.432313][T22023] input: syz0 as /devices/virtual/input/input91 [ 4253.610447][T22142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6023'. [ 4262.050626][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6039'. [ 4307.945154][T22395] input: syz1 as /devices/virtual/input/input92 [ 4329.676011][T22488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6132'. [ 4333.358118][T22496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6134'. [ 4341.111933][T22532] "syz.1.6146" (22532) uses obsolete ecb(arc4) skcipher [ 4342.793216][T22542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6148'. [ 4357.584939][T22582] input: syz1 as /devices/virtual/input/input93 [ 4375.922988][T22640] serio: Serial port pts0 [ 4408.211875][T22747] syz.0.6201 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 4408.212394][T22747] CPU: 1 UID: 0 PID: 22747 Comm: syz.0.6201 Not tainted syzkaller #0 PREEMPT [ 4408.212521][T22747] Hardware name: linux,dummy-virt (DT) [ 4408.212584][T22747] Call trace: [ 4408.212630][T22747] show_stack+0x18/0x24 (C) [ 4408.212758][T22747] dump_stack_lvl+0x60/0x80 [ 4408.212842][T22747] dump_stack+0x18/0x24 [ 4408.212928][T22747] dump_header+0x40/0x170 [ 4408.213020][T22747] oom_kill_process+0x220/0x29c [ 4408.213114][T22747] out_of_memory+0xec/0x58c [ 4408.213270][T22747] mem_cgroup_out_of_memory+0x108/0x118 [ 4408.213414][T22747] try_charge_memcg+0x3b4/0x58c [ 4408.213542][T22747] charge_memcg+0x58/0x14c [ 4408.213651][T22747] __mem_cgroup_charge+0x38/0x128 [ 4408.213753][T22747] shmem_alloc_and_add_folio+0x140/0x628 [ 4408.213847][T22747] shmem_get_folio_gfp+0x220/0x778 [ 4408.213994][T22747] shmem_write_begin+0x6c/0x158 [ 4408.214086][T22747] generic_perform_write+0xc0/0x25c [ 4408.214197][T22747] shmem_file_write_iter+0xa0/0xa8 [ 4408.214283][T22747] __kernel_write_iter+0xfc/0x27c [ 4408.214367][T22747] dump_user_range+0xf0/0x310 [ 4408.214477][T22747] elf_core_dump+0xc68/0xf44 [ 4408.214630][T22747] vfs_coredump+0xf04/0x1e34 [ 4408.214709][T22747] get_signal+0x604/0x860 [ 4408.214798][T22747] arch_do_signal_or_restart+0x11c/0x3dc [ 4408.214874][T22747] exit_to_user_mode_loop+0x114/0x19c [ 4408.214953][T22747] el0_da+0xe8/0xf0 [ 4408.215032][T22747] el0t_64_sync_handler+0xd0/0xf0 [ 4408.215111][T22747] el0t_64_sync+0x1a4/0x1a8 [ 4408.215906][T22747] memory: usage 307200kB, limit 307200kB, failcnt 51316 [ 4408.216019][T22747] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 4408.216115][T22747] kmem: usage 1860kB, limit 9007199254740988kB, failcnt 0 [ 4408.216206][T22747] Memory cgroup stats for /syz0: [ 4408.216830][T22747] cache 198967296 [ 4408.216928][T22747] rss 113676288 [ 4408.217007][T22747] rss_huge 0 [ 4408.217093][T22747] shmem 192675840 [ 4408.217175][T22747] mapped_file 6291456 [ 4408.217267][T22747] dirty 12288 [ 4408.217345][T22747] writeback 0 [ 4408.217435][T22747] workingset_refault_anon 433 [ 4408.217514][T22747] workingset_refault_file 1836 [ 4408.217606][T22747] swap 127967232 [ 4408.217685][T22747] swapcached 314212352 [ 4408.217772][T22747] pgpgin 11263415 [ 4408.217864][T22747] pgpgout 11188102 [ 4408.217955][T22747] pgfault 6215231 [ 4408.218080][T22747] pgmajfault 104 [ 4408.218163][T22747] inactive_anon 193085440 [ 4408.218254][T22747] active_anon 57344 [ 4408.218330][T22747] inactive_file 0 [ 4408.218405][T22747] active_file 0 [ 4408.218480][T22747] unevictable 119394304 [ 4408.218555][T22747] hierarchical_memory_limit 314572800 [ 4408.218648][T22747] hierarchical_memsw_limit 9223372036854771712 [ 4408.218726][T22747] total_cache 198967296 [ 4408.218802][T22747] total_rss 113676288 [ 4408.218878][T22747] total_rss_huge 0 [ 4408.218958][T22747] total_shmem 192675840 [ 4408.219036][T22747] total_mapped_file 6291456 [ 4408.219114][T22747] total_dirty 12288 [ 4408.219214][T22747] total_writeback 0 [ 4408.219291][T22747] total_workingset_refault_anon 433 [ 4408.219367][T22747] total_workingset_refault_file 1836 [ 4408.219446][T22747] total_swap 127967232 [ 4408.219520][T22747] total_swapcached 314212352 [ 4408.219606][T22747] total_pgpgin 11263415 [ 4408.219682][T22747] total_pgpgout 11188102 [ 4408.219759][T22747] total_pgfault 6215231 [ 4408.219833][T22747] total_pgmajfault 104 [ 4408.219908][T22747] total_inactive_anon 193085440 [ 4408.219985][T22747] total_active_anon 57344 [ 4408.220060][T22747] total_inactive_file 0 [ 4408.220136][T22747] total_active_file 0 [ 4408.220211][T22747] total_unevictable 119394304 [ 4408.220294][T22747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6201,pid=22724,uid=0 [ 4408.221291][T22747] Memory cgroup out of memory: Killed process 22725 (syz.0.6201) total-vm:124964kB, anon-rss:111644kB, file-rss:12872kB, shmem-rss:0kB, UID:0 pgtables:300kB oom_score_adj:1000 [ 4411.546417][ T31] oom_reaper: reaped process 22725 (syz.0.6201), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 4438.485791][T22905] input: syz1 as /devices/virtual/input/input94 [ 4459.265788][T22987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6278'. [ 4495.841425][T23163] input: syz0 as /devices/virtual/input/input95 [ 4512.277587][T23222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6351'. [ 4533.468666][T23354] serio: Serial port pts0 [ 4546.888167][T23404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6410'. [ 4551.738448][T23429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6418'. [ 4551.915467][T23427] input: syz0 as /devices/virtual/input/input96 [ 4589.193611][T23576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6466'. [ 4620.405045][T23683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6500'. [ 4644.489186][T23788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6531'. [ 4680.565189][T23891] serio: Serial port pts0 [ 4731.410583][T24066] input: syz0 as /devices/virtual/input/input99 [ 4741.154773][T24099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6626'. [ 4772.348394][T24222] 8021q: VLANs not supported on vcan0 [ 4781.831592][T24279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6686'. [ 4786.108515][ T28] audit: type=1326 audit(4785.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24297 comm="syz.1.6691" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4377b68 code=0x0 [ 4797.158585][T24341] infiniband syz1: set active [ 4797.159600][T24341] infiniband syz1: added syz_tun [ 4797.278616][T24341] RDS/IB: syz1: added [ 4797.279410][T24341] smc: adding ib device syz1 with port count 1 [ 4797.279644][T24341] smc: ib device syz1 port 1 has no pnetid [ 4824.239315][T24451] pimreg: entered allmulticast mode [ 4830.790871][T24477] input: syz0 as /devices/virtual/input/input100 [ 4895.746762][T24672] input: syz1 as /devices/virtual/input/input102 [ 4915.901054][T24723] input: syz1 as /devices/virtual/input/input103 [ 4951.044970][T24777] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4957.995163][T24850] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4964.795011][T24948] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4970.853218][T25115] veth0_virt_wifi: entered allmulticast mode [ 4976.310965][T25125] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4977.275329][T25165] input: syz0 as /devices/virtual/input/input104 [ 4986.431541][T19008] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 4986.449106][T19008] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 4992.671396][T25226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 4999.407829][T23370] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 4999.421015][T23370] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 4999.825251][T25274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 5000.641805][T19008] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 5000.653462][T19008] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5000.858045][T25331] fido_id[25331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 5006.875226][T25363] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5008.499511][T25429] capability: warning: `syz.1.7082' uses deprecated v2 capabilities in a way that may be insecure [ 5008.508826][ T28] audit: type=1400 audit(5008.350:3): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=25428 comm="syz.1.7082" path="/sys/kernel/debug/binder/transactions" dev="debugfs" ino=1924 [ 5015.845004][T25472] serio: Serial port ptm0 [ 5021.152591][T25501] input: syz0 as /devices/virtual/input/input105 [ 5021.829468][T25507] input: syz0 as /devices/virtual/input/input106 [ 5031.605699][T25516] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5031.780540][T25542] random: crng reseeded on system resumption [ 5039.833591][T25568] input: syz0 as /devices/virtual/input/input107 [ 5052.465382][T25602] input: syz0 as /devices/virtual/input/input108 [ 5061.571980][T25625] input: syz0 as /devices/virtual/input/input109 [ 5077.028413][T25669] input: syz0 as /devices/virtual/input/input110 [ 5081.595995][T25663] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5088.612794][T25388] syz1: Port: 1 Link DOWN [ 5088.621803][T18485] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5088.629601][T18485] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5088.660433][T18485] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5088.661744][T18485] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5099.986816][T25734] input: syz0 as /devices/virtual/input/input111 [ 5105.962511][T25752] input: syz0 as /devices/virtual/input/input112 [ 5111.180855][T25776] input: syz0 as /devices/virtual/input/input113 [ 5121.606420][T25822] fuse: Bad value for 'fd' [ 5122.793813][T25832] fuse: Bad value for 'fd' [ 5126.667760][T25846] fuse: Bad value for 'fd' [ 5135.183581][T25892] input: syz0 as /devices/virtual/input/input114 [ 5153.928926][T25986] input: syz0 as /devices/virtual/input/input115 [ 5173.585130][T26033] input: syz0 as /devices/virtual/input/input116 [ 5179.382083][T26052] input: syz0 as /devices/virtual/input/input117 [ 5179.423688][T26054] input: syz0 as /devices/virtual/input/input118 [ 5184.953176][T26060] serio: Serial port pts0 [ 5185.183579][T26062] input: syz0 as /devices/virtual/input/input119 [ 5192.822418][T26081] input: syz0 as /devices/virtual/input/input120 [ 5197.553471][T26089] input: syz0 as /devices/virtual/input/input121 [ 5199.951582][T26099] input: syz0 as /devices/virtual/input/input122 [ 5210.106213][T26131] input: syz0 as /devices/virtual/input/input123 [ 5230.196167][T26182] input: syz0 as /devices/virtual/input/input124 [ 5232.517646][T26188] input: syz0 as /devices/virtual/input/input125 [ 5236.240169][T26193] input: syz0 as /devices/virtual/input/input126 [ 5241.967071][T26202] input: syz0 as /devices/virtual/input/input127 [ 5255.036972][T26218] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5256.426860][T26253] input: syz0 as /devices/virtual/input/input128 [ 5258.482553][T26256] input: syz0 as /devices/virtual/input/input129 [ 5262.015676][T26262] input: syz0 as /devices/virtual/input/input130 [ 5269.629626][T26284] input: syz1 as /devices/virtual/input/input131 [ 5283.370040][T26323] input: syz0 as /devices/virtual/input/input132 [ 5294.129787][T26351] input: syz0 as /devices/virtual/input/input133 [ 5310.335319][T26394] input: syz0 as /devices/virtual/input/input134 [ 5316.645962][T26407] input: syz0 as /devices/virtual/input/input135 [ 5333.053423][T26452] input: syz0 as /devices/virtual/input/input136 [ 5333.722907][T26456] input: syz0 as /devices/virtual/input/input137 [ 5339.293721][T26464] input: syz0 as /devices/virtual/input/input138 [ 5342.643776][T26474] input: syz0 as /devices/virtual/input/input139 [ 5353.115564][T26482] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5354.065278][T26521] veth0_vlan: entered allmulticast mode [ 5354.070334][T26521] vlan1: entered allmulticast mode [ 5354.158035][T26523] input: syz0 as /devices/virtual/input/input140 [ 5358.729002][T26511] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5368.122236][T26554] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5369.906653][T23924] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5369.908386][T23924] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5369.909760][T23924] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5369.911218][T23924] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5378.272764][T26629] input: syz1 as /devices/virtual/input/input141 [ 5386.147605][T26646] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 5393.878583][T26676] input: syz0 as /devices/virtual/input/input142 [ 5409.359134][T26716] input: syz1 as /devices/virtual/input/input143 [ 5421.485205][T26745] input: syz0 as /devices/virtual/input/input144 [ 5423.898314][T26752] input: syz0 as /devices/virtual/input/input145 [ 5431.772329][T26783] input: syz1 as /devices/virtual/input/input146 [ 5442.443236][T26796] fuse: Bad value for 'fd' [ 5451.851627][T26815] input: syz0 as /devices/virtual/input/input147 [ 5463.774636][T26834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 5478.548247][T26866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 5478.734955][T26882] input: syz0 as /devices/virtual/input/input148 [ 5497.534789][T26900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 5512.810908][T26939] input: syz1 as /devices/virtual/input/input149 [ 5520.978979][T26948] input: syz0 as /devices/virtual/input/input150 [ 5526.586740][T26944] syz.0.7494 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 5547.662130][T26980] input: syz0 as /devices/virtual/input/input151 [ 5568.407112][T27002] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5587.106705][T27054] input: syz1 as /devices/virtual/input/input152 [ 5592.514985][T27074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5592.516889][T27074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5602.364972][T27099] input: syz0 as /devices/virtual/input/input153 [ 5649.284922][T27198] input: syz1 as /devices/virtual/input/input154 [ 5660.571392][T27224] udevd[27224]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 5663.446305][T27294] misc userio: Begin command sent, but we're already running [ 5665.450348][T25703] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5665.463005][T25703] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5665.737978][T27363] fido_id[27363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 5666.266273][T27368] ucma_write: process 11108 (syz.0.7635) changed security contexts after opening file descriptor, this is not allowed. [ 5670.684333][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 5672.588132][T27580] can: request_module (can-proto-0) failed. [ 5674.272128][T19739] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 5674.285282][T19739] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5676.037746][T27679] input: syz0 as /devices/virtual/input/input157 [ 5676.572826][T27691] input: syz1 as /devices/virtual/input/input158 [ 5681.575843][T27697] fuse: Unknown parameter '00000000000000000003' [ 5686.473207][T27769] input: syz0 as /devices/virtual/input/input159 [ 5691.210169][ T46] block nbd0: Receive control failed (result -107) [ 5691.396932][T27695] block nbd0: shutting down sockets [ 5691.682985][T27794] netlink: 'syz.0.7827': attribute type 4 has an invalid length. [ 5691.691696][T27794] netlink: 'syz.0.7827': attribute type 4 has an invalid length. [ 5691.717091][T27795] input: syz0 as /devices/virtual/input/input160 [ 5691.898664][T27799] input: syz0 as /devices/virtual/input/input161 [ 5697.764944][T27817] input: syz0 as /devices/virtual/input/input162 [ 5698.052556][T27823] fuse: Unknown parameter '00000000000000000003' [ 5713.620601][T27883] input: syz0 as /devices/virtual/input/input163 [ 5714.290102][T27887] input: syz0 as /devices/virtual/input/input164 [ 5733.836639][T27948] input: syz0 as /devices/virtual/input/input165 [ 5738.840972][T27969] input: syz0 as /devices/virtual/input/input166 [ 5739.252611][T27971] input: syz0 as /devices/virtual/input/input167 [ 5748.319894][T27988] input: syz0 as /devices/virtual/input/input168 [ 5756.222625][T28016] input: syz0 as /devices/virtual/input/input169 [ 5767.491449][T28072] input: syz1 as /devices/virtual/input/input170 [ 5771.063031][T28083] input: syz0 as /devices/virtual/input/input171 [ 5779.518023][T28109] binder: 28108:28109 ioctl 4018620d 0 returned -22 [ 5779.521270][T28109] binder: 28108:28109 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5779.523274][T28109] binder: 28109 RLIMIT_NICE not set [ 5782.225923][T28117] input: syz0 as /devices/virtual/input/input172 [ 5783.035061][T28098] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5787.726165][T28129] input: syz1 as /devices/virtual/input/input173 [ 5799.180910][T28156] input: syz0 as /devices/virtual/input/input174 [ 5804.489822][T28164] input: syz1 as /devices/virtual/input/input175 [ 5813.460778][T28199] input: syz0 as /devices/virtual/input/input176 [ 5820.003104][T28208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7943'. [ 5850.162532][T28291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5850.172721][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5851.810651][T28295] can: request_module (can-proto-0) failed. [ 5852.943068][T28314] input: syz1 as /devices/virtual/input/input177 [ 5857.250215][T28330] input: syz0 as /devices/virtual/input/input178 [ 5862.192359][T28356] input: syz0 as /devices/virtual/input/input179 [ 5863.056135][T28364] input: syz0 as /devices/virtual/input/input180 [ 5869.196950][T28397] input: syz0 as /devices/virtual/input/input181 [ 5872.168800][T28416] input: syz0 as /devices/virtual/input/input182 [ 5875.396781][T28422] input: syz0 as /devices/virtual/input/input183 [ 5883.352847][T28442] input: syz0 as /devices/virtual/input/input184 [ 5887.515215][T28446] input: syz0 as /devices/virtual/input/input185 [ 5887.515265][T28432] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5893.441095][T28469] input: syz0 as /devices/virtual/input/input186 [ 5898.105568][T28475] input: syz0 as /devices/virtual/input/input187 [ 5904.576479][T28491] input: syz1 as /devices/virtual/input/input188 [ 5904.971447][T28494] input: syz1 as /devices/virtual/input/input189 [ 5913.164865][T28506] kvm [28506]: Failed to find VMA for hva 0x20c79000 [ 5913.865528][T28516] input: syz0 as /devices/virtual/input/input190 [ 5915.987385][T28524] input: syz1 as /devices/virtual/input/input191 [ 5919.463845][T28529] input: syz0 as /devices/virtual/input/input192 [ 5928.343621][T28547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5928.346152][T28547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5930.960025][T28565] FAULT_INJECTION: forcing a failure. [ 5930.960025][T28565] name failslab, interval 1, probability 0, space 0, times 1 [ 5930.960414][T28565] CPU: 1 UID: 0 PID: 28565 Comm: syz.0.8049 Not tainted syzkaller #0 PREEMPT [ 5930.960514][T28565] Hardware name: linux,dummy-virt (DT) [ 5930.960557][T28565] Call trace: [ 5930.960591][T28565] show_stack+0x18/0x24 (C) [ 5930.960696][T28565] dump_stack_lvl+0x60/0x80 [ 5930.960782][T28565] dump_stack+0x18/0x24 [ 5930.960855][T28565] should_fail_ex+0x1e0/0x238 [ 5930.960935][T28565] should_failslab+0x54/0x80 [ 5930.961008][T28565] __kmalloc_noprof+0xac/0x550 [ 5930.961086][T28565] tomoyo_realpath_from_path+0x44/0x1d4 [ 5930.961176][T28565] tomoyo_path_number_perm+0xe0/0x21c [ 5930.961252][T28565] tomoyo_file_ioctl+0x1c/0x30 [ 5930.961326][T28565] security_file_ioctl+0x8c/0x19c [ 5930.961408][T28565] __arm64_sys_ioctl+0x48/0x104 [ 5930.961493][T28565] invoke_syscall+0x54/0x10c [ 5930.961566][T28565] el0_svc_common.constprop.0+0x40/0xe0 [ 5930.961634][T28565] do_el0_svc+0x1c/0x34 [ 5930.961704][T28565] el0_svc+0x38/0x1fc [ 5930.961788][T28565] el0t_64_sync_handler+0xa0/0xf0 [ 5930.961860][T28565] el0t_64_sync+0x1a4/0x1a8 [ 5930.962272][T28565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5935.241350][T28585] FAULT_INJECTION: forcing a failure. [ 5935.241350][T28585] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 5935.245954][T28585] CPU: 0 UID: 0 PID: 28585 Comm: syz.0.8055 Not tainted syzkaller #0 PREEMPT [ 5935.246140][T28585] Hardware name: linux,dummy-virt (DT) [ 5935.246187][T28585] Call trace: [ 5935.246223][T28585] show_stack+0x18/0x24 (C) [ 5935.246347][T28585] dump_stack_lvl+0x60/0x80 [ 5935.246433][T28585] dump_stack+0x18/0x24 [ 5935.246562][T28585] should_fail_ex+0x1e0/0x238 [ 5935.246653][T28585] should_fail+0x14/0x40 [ 5935.246726][T28585] should_fail_usercopy+0x1c/0x40 [ 5935.246805][T28585] simple_read_from_buffer+0x5c/0x12c [ 5935.246884][T28585] proc_fail_nth_read+0xb4/0x140 [ 5935.246964][T28585] vfs_read+0xc4/0x31c [ 5935.247039][T28585] ksys_read+0x70/0x110 [ 5935.247105][T28585] __arm64_sys_read+0x1c/0x28 [ 5935.247207][T28585] invoke_syscall+0x54/0x10c [ 5935.247321][T28585] el0_svc_common.constprop.0+0x40/0xe0 [ 5935.247398][T28585] do_el0_svc+0x1c/0x34 [ 5935.247469][T28585] el0_svc+0x38/0x1fc [ 5935.247547][T28585] el0t_64_sync_handler+0xa0/0xf0 [ 5935.247622][T28585] el0t_64_sync+0x1a4/0x1a8 [ 5935.375015][T28587] fuse: Bad value for 'group_id' [ 5935.376661][T28587] fuse: Bad value for 'group_id' [ 5935.538665][T28589] FAULT_INJECTION: forcing a failure. [ 5935.538665][T28589] name failslab, interval 1, probability 0, space 0, times 0 [ 5935.544814][T28589] CPU: 0 UID: 0 PID: 28589 Comm: syz.0.8057 Not tainted syzkaller #0 PREEMPT [ 5935.544954][T28589] Hardware name: linux,dummy-virt (DT) [ 5935.544997][T28589] Call trace: [ 5935.545031][T28589] show_stack+0x18/0x24 (C) [ 5935.545135][T28589] dump_stack_lvl+0x60/0x80 [ 5935.545208][T28589] dump_stack+0x18/0x24 [ 5935.545287][T28589] should_fail_ex+0x1e0/0x238 [ 5935.545370][T28589] should_failslab+0x54/0x80 [ 5935.545448][T28589] __kmalloc_noprof+0xac/0x550 [ 5935.545536][T28589] tomoyo_realpath_from_path+0x44/0x1d4 [ 5935.545621][T28589] tomoyo_path_number_perm+0xe0/0x21c [ 5935.545696][T28589] tomoyo_file_ioctl+0x1c/0x30 [ 5935.545769][T28589] security_file_ioctl+0x8c/0x19c [ 5935.545857][T28589] __arm64_sys_ioctl+0x48/0x104 [ 5935.545944][T28589] invoke_syscall+0x54/0x10c [ 5935.546023][T28589] el0_svc_common.constprop.0+0x40/0xe0 [ 5935.546098][T28589] do_el0_svc+0x1c/0x34 [ 5935.546167][T28589] el0_svc+0x38/0x1fc [ 5935.546252][T28589] el0t_64_sync_handler+0xa0/0xf0 [ 5935.546324][T28589] el0t_64_sync+0x1a4/0x1a8 [ 5935.563515][T28589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5935.780060][T28591] FAULT_INJECTION: forcing a failure. [ 5935.780060][T28591] name failslab, interval 1, probability 0, space 0, times 0 [ 5935.789123][T28591] CPU: 0 UID: 0 PID: 28591 Comm: syz.0.8058 Not tainted syzkaller #0 PREEMPT [ 5935.789312][T28591] Hardware name: linux,dummy-virt (DT) [ 5935.789365][T28591] Call trace: [ 5935.789400][T28591] show_stack+0x18/0x24 (C) [ 5935.789510][T28591] dump_stack_lvl+0x60/0x80 [ 5935.789584][T28591] dump_stack+0x18/0x24 [ 5935.789654][T28591] should_fail_ex+0x1e0/0x238 [ 5935.789735][T28591] should_failslab+0x54/0x80 [ 5935.789810][T28591] __kmalloc_noprof+0xac/0x550 [ 5935.789890][T28591] tomoyo_realpath_from_path+0x44/0x1d4 [ 5935.789967][T28591] tomoyo_path_number_perm+0xe0/0x21c [ 5935.790038][T28591] tomoyo_file_ioctl+0x1c/0x30 [ 5935.790109][T28591] security_file_ioctl+0x8c/0x19c [ 5935.790197][T28591] __arm64_sys_ioctl+0x48/0x104 [ 5935.790276][T28591] invoke_syscall+0x54/0x10c [ 5935.790347][T28591] el0_svc_common.constprop.0+0x40/0xe0 [ 5935.790417][T28591] do_el0_svc+0x1c/0x34 [ 5935.790484][T28591] el0_svc+0x38/0x1fc [ 5935.790559][T28591] el0t_64_sync_handler+0xa0/0xf0 [ 5935.790630][T28591] el0t_64_sync+0x1a4/0x1a8 [ 5935.815972][T28591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5936.197584][T28595] FAULT_INJECTION: forcing a failure. [ 5936.197584][T28595] name failslab, interval 1, probability 0, space 0, times 0 [ 5936.201053][T28595] CPU: 0 UID: 0 PID: 28595 Comm: syz.0.8060 Not tainted syzkaller #0 PREEMPT [ 5936.201202][T28595] Hardware name: linux,dummy-virt (DT) [ 5936.201244][T28595] Call trace: [ 5936.201279][T28595] show_stack+0x18/0x24 (C) [ 5936.201386][T28595] dump_stack_lvl+0x60/0x80 [ 5936.201459][T28595] dump_stack+0x18/0x24 [ 5936.201528][T28595] should_fail_ex+0x1e0/0x238 [ 5936.201610][T28595] should_failslab+0x54/0x80 [ 5936.201681][T28595] __kmalloc_noprof+0xac/0x550 [ 5936.201760][T28595] tomoyo_realpath_from_path+0x44/0x1d4 [ 5936.201835][T28595] tomoyo_path_number_perm+0xe0/0x21c [ 5936.201905][T28595] tomoyo_file_ioctl+0x1c/0x30 [ 5936.201981][T28595] security_file_ioctl+0x8c/0x19c [ 5936.202065][T28595] __arm64_sys_ioctl+0x48/0x104 [ 5936.202212][T28595] invoke_syscall+0x54/0x10c [ 5936.202286][T28595] el0_svc_common.constprop.0+0x40/0xe0 [ 5936.202357][T28595] do_el0_svc+0x1c/0x34 [ 5936.202426][T28595] el0_svc+0x38/0x1fc [ 5936.202503][T28595] el0t_64_sync_handler+0xa0/0xf0 [ 5936.202573][T28595] el0t_64_sync+0x1a4/0x1a8 [ 5936.216867][T28595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5936.547239][T28597] fuse: Bad value for 'group_id' [ 5936.552855][T28597] fuse: Bad value for 'group_id' [ 5941.397956][T28612] FAULT_INJECTION: forcing a failure. [ 5941.397956][T28612] name failslab, interval 1, probability 0, space 0, times 0 [ 5941.398158][T28612] CPU: 1 UID: 0 PID: 28612 Comm: syz.1.8066 Not tainted syzkaller #0 PREEMPT [ 5941.398220][T28612] Hardware name: linux,dummy-virt (DT) [ 5941.398253][T28612] Call trace: [ 5941.398275][T28612] show_stack+0x18/0x24 (C) [ 5941.398342][T28612] dump_stack_lvl+0x60/0x80 [ 5941.398383][T28612] dump_stack+0x18/0x24 [ 5941.398420][T28612] should_fail_ex+0x1e0/0x238 [ 5941.398503][T28612] should_failslab+0x54/0x80 [ 5941.398547][T28612] __kmalloc_noprof+0xac/0x550 [ 5941.398591][T28612] tomoyo_realpath_from_path+0x44/0x1d4 [ 5941.398766][T28612] tomoyo_path_number_perm+0xe0/0x21c [ 5941.398863][T28612] tomoyo_file_ioctl+0x1c/0x30 [ 5941.398945][T28612] security_file_ioctl+0x8c/0x19c [ 5941.399023][T28612] __arm64_sys_ioctl+0x48/0x104 [ 5941.399179][T28612] invoke_syscall+0x54/0x10c [ 5941.399249][T28612] el0_svc_common.constprop.0+0x40/0xe0 [ 5941.399288][T28612] do_el0_svc+0x1c/0x34 [ 5941.399358][T28612] el0_svc+0x38/0x1fc [ 5941.399453][T28612] el0t_64_sync_handler+0xa0/0xf0 [ 5941.399542][T28612] el0t_64_sync+0x1a4/0x1a8 [ 5941.400138][T28612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5941.476097][T28614] FAULT_INJECTION: forcing a failure. [ 5941.476097][T28614] name failslab, interval 1, probability 0, space 0, times 0 [ 5941.476330][T28614] CPU: 1 UID: 0 PID: 28614 Comm: syz.1.8067 Not tainted syzkaller #0 PREEMPT [ 5941.476413][T28614] Hardware name: linux,dummy-virt (DT) [ 5941.476453][T28614] Call trace: [ 5941.476482][T28614] show_stack+0x18/0x24 (C) [ 5941.476543][T28614] dump_stack_lvl+0x60/0x80 [ 5941.476660][T28614] dump_stack+0x18/0x24 [ 5941.476745][T28614] should_fail_ex+0x1e0/0x238 [ 5941.476865][T28614] should_failslab+0x54/0x80 [ 5941.476972][T28614] __kmalloc_noprof+0xac/0x550 [ 5941.477221][T28614] tomoyo_realpath_from_path+0x44/0x1d4 [ 5941.477302][T28614] tomoyo_path_number_perm+0xe0/0x21c [ 5941.477394][T28614] tomoyo_file_ioctl+0x1c/0x30 [ 5941.477477][T28614] security_file_ioctl+0x8c/0x19c [ 5941.477576][T28614] __arm64_sys_ioctl+0x48/0x104 [ 5941.477697][T28614] invoke_syscall+0x54/0x10c [ 5941.477801][T28614] el0_svc_common.constprop.0+0x40/0xe0 [ 5941.477931][T28614] do_el0_svc+0x1c/0x34 [ 5941.478011][T28614] el0_svc+0x38/0x1fc [ 5941.478228][T28614] el0t_64_sync_handler+0xa0/0xf0 [ 5941.478315][T28614] el0t_64_sync+0x1a4/0x1a8 [ 5941.478902][T28614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5945.331296][T28626] input: syz1 as /devices/virtual/input/input193 [ 5948.133502][T28631] "syz.0.8071" (28631) uses obsolete ecb(arc4) skcipher [ 5948.146541][T28631] FAULT_INJECTION: forcing a failure. [ 5948.146541][T28631] name failslab, interval 1, probability 0, space 0, times 0 [ 5948.146918][T28631] CPU: 1 UID: 0 PID: 28631 Comm: syz.0.8071 Not tainted syzkaller #0 PREEMPT [ 5948.147016][T28631] Hardware name: linux,dummy-virt (DT) [ 5948.147059][T28631] Call trace: [ 5948.147092][T28631] show_stack+0x18/0x24 (C) [ 5948.147264][T28631] dump_stack_lvl+0x60/0x80 [ 5948.147357][T28631] dump_stack+0x18/0x24 [ 5948.147421][T28631] should_fail_ex+0x1e0/0x238 [ 5948.147510][T28631] should_failslab+0x54/0x80 [ 5948.147650][T28631] __kmalloc_noprof+0xac/0x550 [ 5948.147804][T28631] tomoyo_realpath_from_path+0x44/0x1d4 [ 5948.148127][T28631] tomoyo_path_number_perm+0xe0/0x21c [ 5948.148309][T28631] tomoyo_file_ioctl+0x1c/0x30 [ 5948.148425][T28631] security_file_ioctl+0x8c/0x19c [ 5948.148663][T28631] __arm64_sys_ioctl+0x48/0x104 [ 5948.148842][T28631] invoke_syscall+0x54/0x10c [ 5948.149042][T28631] el0_svc_common.constprop.0+0x40/0xe0 [ 5948.149122][T28631] do_el0_svc+0x1c/0x34 [ 5948.149211][T28631] el0_svc+0x38/0x1fc [ 5948.149294][T28631] el0t_64_sync_handler+0xa0/0xf0 [ 5948.149391][T28631] el0t_64_sync+0x1a4/0x1a8 [ 5948.153763][T28631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5948.292601][T28633] FAULT_INJECTION: forcing a failure. [ 5948.292601][T28633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5948.298701][T28633] CPU: 0 UID: 0 PID: 28633 Comm: syz.0.8072 Not tainted syzkaller #0 PREEMPT [ 5948.298860][T28633] Hardware name: linux,dummy-virt (DT) [ 5948.298903][T28633] Call trace: [ 5948.298938][T28633] show_stack+0x18/0x24 (C) [ 5948.299049][T28633] dump_stack_lvl+0x60/0x80 [ 5948.299125][T28633] dump_stack+0x18/0x24 [ 5948.299223][T28633] should_fail_ex+0x1e0/0x238 [ 5948.299302][T28633] should_fail+0x14/0x40 [ 5948.299378][T28633] should_fail_usercopy+0x1c/0x40 [ 5948.299455][T28633] _inline_copy_from_user+0x24/0xa8 [ 5948.299538][T28633] __sys_bpf+0x11c/0x1d04 [ 5948.299609][T28633] __arm64_sys_bpf+0x30/0x40 [ 5948.299680][T28633] invoke_syscall+0x54/0x10c [ 5948.299751][T28633] el0_svc_common.constprop.0+0x40/0xe0 [ 5948.299823][T28633] do_el0_svc+0x1c/0x34 [ 5948.299892][T28633] el0_svc+0x38/0x1fc [ 5948.299968][T28633] el0t_64_sync_handler+0xa0/0xf0 [ 5948.300041][T28633] el0t_64_sync+0x1a4/0x1a8 [ 5955.995507][T28652] input: syz1 as /devices/virtual/input/input194 [ 5960.298372][T28669] input: syz0 as /devices/virtual/input/input195 [ 5971.575504][T28688] veth0_to_team: entered allmulticast mode [ 5977.594894][T28699] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5979.709821][T28736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8099'. [ 5981.507776][T28756] fuse: Bad value for 'fd' [ 5981.821756][T28758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8108'. [ 5981.912058][T28767] input: syz1 as /devices/virtual/input/input198 [ 5985.702613][T28792] fuse: Bad value for 'fd' [ 5988.552836][T28809] fuse: Bad value for 'fd' [ 5988.725122][T28811] input: syz1 as /devices/virtual/input/input199 [ 5991.486548][T28823] fuse: Bad value for 'fd' [ 5994.759260][T28834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8133'. [ 5997.976281][T28860] "syz.0.8141" (28860) uses obsolete ecb(arc4) skcipher [ 6000.155094][T28842] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6004.347672][T28909] "syz.1.8153" (28909) uses obsolete ecb(arc4) skcipher [ 6016.155081][T28974] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6022.270535][T29033] FAULT_INJECTION: forcing a failure. [ 6022.270535][T29033] name failslab, interval 1, probability 0, space 0, times 0 [ 6022.270877][T29033] CPU: 1 UID: 0 PID: 29033 Comm: syz.1.8181 Not tainted syzkaller #0 PREEMPT [ 6022.270940][T29033] Hardware name: linux,dummy-virt (DT) [ 6022.270964][T29033] Call trace: [ 6022.270985][T29033] show_stack+0x18/0x24 (C) [ 6022.271059][T29033] dump_stack_lvl+0x60/0x80 [ 6022.271109][T29033] dump_stack+0x18/0x24 [ 6022.271211][T29033] should_fail_ex+0x1e0/0x238 [ 6022.271265][T29033] should_failslab+0x54/0x80 [ 6022.271307][T29033] __kmalloc_noprof+0xac/0x550 [ 6022.271393][T29033] tomoyo_realpath_from_path+0x44/0x1d4 [ 6022.271447][T29033] tomoyo_path_number_perm+0xe0/0x21c [ 6022.271530][T29033] tomoyo_file_ioctl+0x1c/0x30 [ 6022.271604][T29033] security_file_ioctl+0x8c/0x19c [ 6022.271664][T29033] __arm64_sys_ioctl+0x48/0x104 [ 6022.271709][T29033] invoke_syscall+0x54/0x10c [ 6022.271748][T29033] el0_svc_common.constprop.0+0x40/0xe0 [ 6022.271803][T29033] do_el0_svc+0x1c/0x34 [ 6022.271849][T29033] el0_svc+0x38/0x1fc [ 6022.271922][T29033] el0t_64_sync_handler+0xa0/0xf0 [ 6022.271963][T29033] el0t_64_sync+0x1a4/0x1a8 [ 6022.275402][T29033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6027.554662][T29058] input: syz0 as /devices/virtual/input/input200 [ 6037.255830][T29079] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6037.617985][T29107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6037.629059][T29107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6047.727117][T29114] fuse: Unknown parameter '00000000000000000003' [ 6048.585882][T29133] FAULT_INJECTION: forcing a failure. [ 6048.585882][T29133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6048.586193][T29133] CPU: 1 UID: 0 PID: 29133 Comm: syz.1.8209 Not tainted syzkaller #0 PREEMPT [ 6048.586296][T29133] Hardware name: linux,dummy-virt (DT) [ 6048.586334][T29133] Call trace: [ 6048.586367][T29133] show_stack+0x18/0x24 (C) [ 6048.586470][T29133] dump_stack_lvl+0x60/0x80 [ 6048.586665][T29133] dump_stack+0x18/0x24 [ 6048.586761][T29133] should_fail_ex+0x1e0/0x238 [ 6048.586867][T29133] should_fail+0x14/0x40 [ 6048.586943][T29133] should_fail_usercopy+0x1c/0x40 [ 6048.587013][T29133] simple_read_from_buffer+0x5c/0x12c [ 6048.587123][T29133] proc_fail_nth_read+0xb4/0x140 [ 6048.587291][T29133] vfs_read+0xc4/0x31c [ 6048.587502][T29133] ksys_read+0x70/0x110 [ 6048.587597][T29133] __arm64_sys_read+0x1c/0x28 [ 6048.587648][T29133] invoke_syscall+0x54/0x10c [ 6048.587686][T29133] el0_svc_common.constprop.0+0x40/0xe0 [ 6048.587727][T29133] do_el0_svc+0x1c/0x34 [ 6048.587771][T29133] el0_svc+0x38/0x1fc [ 6048.587832][T29133] el0t_64_sync_handler+0xa0/0xf0 [ 6048.587871][T29133] el0t_64_sync+0x1a4/0x1a8 [ 6048.710675][T29135] input: syz1 as /devices/virtual/input/input201 [ 6054.786466][T29142] fuse: Unknown parameter '00000000000000000003' [ 6060.638341][T29177] fuse: Unknown parameter 'fd00000000000000000003' [ 6069.042270][T29188] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6075.025066][T29222] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6079.049566][T29270] input: syz1 as /devices/virtual/input/input203 [ 6092.804859][T29296] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6099.023328][T29340] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6099.662316][T29359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6099.668909][T29359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6107.595439][T29370] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6107.805662][T29393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6107.807639][T29393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6111.086020][T29436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6111.089039][T29436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6112.608967][T29455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6112.611637][T29455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6112.793643][T29459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6112.796202][T29459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6112.808798][T29459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6112.810239][T29459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6112.830459][T29459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6112.831812][T29459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6113.032598][T29463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6113.033453][T29463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6117.091557][T29489] 8021q: VLANs not supported on tunl0 [ 6120.091969][T29500] 8021q: VLANs not supported on tunl0 [ 6126.623520][T29545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8320'. [ 6127.051176][T29561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8326'. [ 6127.890187][T29578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6127.906488][T29578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6129.643557][T28114] pimreg: left allmulticast mode [ 6130.023439][T28114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6130.077917][T28114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6130.108982][T28114] bond0 (unregistering): Released all slaves [ 6131.483731][T28114] hsr_slave_0: left promiscuous mode [ 6131.487883][T28114] hsr_slave_1: left promiscuous mode [ 6132.129741][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 6133.417775][ T3216] 8021q: adding VLAN 0 to HW filter on device eth2 [ 6134.098253][T29588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6134.120463][T29588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6134.679289][ T3216] 8021q: adding VLAN 0 to HW filter on device eth3 [ 6135.759873][T29588] hsr_slave_0: entered promiscuous mode [ 6135.770878][T29588] hsr_slave_1: entered promiscuous mode [ 6135.786201][T29588] debugfs: 'hsr0' already exists in 'hsr' [ 6135.786551][T29588] Cannot create hsr debugfs directory [ 6137.302056][T29588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6137.331489][T29588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6137.343832][T29588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6137.368086][T29588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6137.373446][T29588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6137.404577][T29588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6137.407896][T29588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6137.431942][T29588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6138.743028][T29588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6138.982879][T29695] syzkaller0: entered allmulticast mode [ 6139.016742][T29695] syzkaller0: left allmulticast mode [ 6142.360407][T29588] veth0_vlan: entered promiscuous mode [ 6142.399107][T29588] veth1_vlan: entered promiscuous mode [ 6142.512654][T29588] veth0_macvtap: entered promiscuous mode [ 6142.535943][T29588] veth1_macvtap: entered promiscuous mode [ 6142.668797][T28114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6142.669219][T28114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6142.669519][T28114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6142.669702][T28114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6143.392052][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8346'. [ 6144.689757][T29775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6144.695863][T29775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6144.895887][T29778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6144.900607][T29778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6144.995461][T29780] binder_alloc: binder_alloc_mmap_handler: 29779 20ffe000-21000000 already mapped failed -16 [ 6145.076365][T29782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6145.077996][T29782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6145.306573][T29788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6145.311120][T29788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6145.323615][T29788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6145.327670][T29788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6145.532569][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8357'. [ 6145.533034][T29792] nbd: must specify at least one socket [ 6145.611120][T29794] binder_alloc: binder_alloc_mmap_handler: 29793 20ffe000-21000000 already mapped failed -16 [ 6145.683412][T29796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6145.685695][T29796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6145.989487][T29804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6145.996119][T29804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6147.221765][T29817] binder: 29815:29817 ioctl c0306201 20000080 returned -14 [ 6147.256891][T29817] binder: 29815:29817 tried to acquire reference to desc 0, got 1 instead [ 6147.261045][T29817] binder: 29815:29817 ioctl c0306201 200003c0 returned -14 [ 6147.276803][T29816] binder: 29816 RLIMIT_NICE not set [ 6147.277489][T29816] binder: 29816 RLIMIT_NICE not set [ 6147.341801][T29755] binder: release 29815:29816 transaction 8 in, still active [ 6147.350373][T29755] binder: send failed reply for transaction 8 to 29815:29817 [ 6147.354704][T29755] binder: undelivered TRANSACTION_COMPLETE [ 6147.356613][T29755] binder: undelivered TRANSACTION_ERROR: 29189 [ 6147.537058][T29832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6147.538368][T29832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6147.612589][T29834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6147.613530][T29834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6150.347987][T29756] smc: removing ib device syz1 [ 6153.298101][T28114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6153.341853][T28114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6153.367261][T28114] bond0 (unregistering): Released all slaves [ 6153.433334][T29876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6153.446013][T29876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6153.613607][T28114] hsr_slave_0: left promiscuous mode [ 6153.640766][T28114] hsr_slave_1: left promiscuous mode [ 6153.805407][T29885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6153.826712][T29885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6154.289431][T29893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6154.299369][T29893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6154.435293][T29895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6154.439807][T29895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6154.807864][T29902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6154.819448][T29902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6155.479055][T29846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6155.502307][T29846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6156.128121][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 6157.052805][T29846] hsr_slave_0: entered promiscuous mode [ 6157.061171][T29846] hsr_slave_1: entered promiscuous mode [ 6157.905033][ T3216] 8021q: adding VLAN 0 to HW filter on device eth2 [ 6158.821646][T29846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6158.859681][T29846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 6158.869248][T29846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6158.902912][T29846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 6158.907868][T29846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6158.947985][T29846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 6158.953493][T29846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6158.975983][T29846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 6160.382671][T29846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6162.683751][T30049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8417'. [ 6162.980649][T30053] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 6163.632992][T29846] veth0_vlan: entered promiscuous mode [ 6163.687945][T29846] veth1_vlan: entered promiscuous mode [ 6163.773944][T29846] veth0_macvtap: entered promiscuous mode [ 6163.800822][T29846] veth1_macvtap: entered promiscuous mode [ 6163.882411][T29756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6163.882819][T29756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6163.882995][T29756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6163.883184][T29756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6166.831668][T18492] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6166.831926][T18492] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6166.833215][T18492] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6166.833314][T18492] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6167.149005][T30083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6167.150424][T30083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6167.221068][T30085] ubi10: attaching mtd0 [ 6167.223642][T30085] ubi10 error: ubi_attach_mtd_dev: bad VID header (11) or data offsets (75) [ 6167.316845][T30087] binder: 30086:30087 tried to acquire reference to desc 0, got 1 instead [ 6167.319829][T30087] binder: 30086:30087 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 6167.320158][T30087] binder: 30087 RLIMIT_NICE not set [ 6167.320272][T30087] binder: 30087 RLIMIT_NICE not set [ 6167.320612][T30087] binder: send failed reply for transaction 13 to 30086:30087 [ 6167.320897][T30087] binder: 30086:30087 ioctl c0306201 20000440 returned -14 [ 6167.327548][T29701] binder: undelivered TRANSACTION_COMPLETE [ 6167.328020][T29701] binder: undelivered TRANSACTION_ERROR: 29201 [ 6178.062272][T30145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6178.066295][T30145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6178.401590][T30151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6178.425493][T30151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6178.656729][T30153] syzkaller0: entered promiscuous mode [ 6178.657112][T30153] syzkaller0: entered allmulticast mode [ 6184.492586][T30171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 6185.358179][T30185] batadv_slave_0: entered promiscuous mode [ 6185.362844][T30184] batadv_slave_0: left promiscuous mode [ 6185.740501][T30193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6185.742029][T30193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6195.149010][T30214] Illegal XDP return value 4294967274 on prog (id 95) dev syz_tun, expect packet loss! [ 6198.266143][T30230] cgroup: Unknown subsys name 'cpuset' [ 6207.827119][T30302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6207.829661][T30302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6207.932898][T30304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6207.943213][T30304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6211.082390][T30324] fuse: Bad value for 'fd' [ 6213.931426][T30342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6213.937912][T30342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6213.996039][T30344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6213.997440][T30344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6214.389750][T30356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6214.392563][T30356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6216.269920][T30388] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 6227.000324][T30521] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8564'. [ 6227.643100][T30528] loop2: detected capacity change from 0 to 7 [ 6228.122895][T30533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6228.127238][T30533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6228.348461][T30533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6228.350464][T30533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6228.357632][T30533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6228.365211][T30533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6228.395241][T30533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6228.398457][T30533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6228.891988][T30542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6228.898809][T30542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6229.660458][T30562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6229.663435][T30562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6231.818267][T30574] binder: 30573:30574 tried to acquire reference to desc 0, got 1 instead [ 6231.826845][T28088] binder: undelivered TRANSACTION_COMPLETE [ 6231.845346][T28088] binder: undelivered transaction 18, process died. [ 6232.256190][T30580] xt_hashlimit: size too large, truncated to 1048576 [ 6232.720605][T30583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6232.726457][T30583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6232.828396][T30585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6232.829558][T30585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6235.605954][T30596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6235.607284][T30596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6236.486850][T30607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8604'. [ 6238.500673][T30624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6238.507498][T30624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6242.729012][T30638] netlink: 'syz.1.8617': attribute type 4 has an invalid length. [ 6245.055648][T30647] fuse: fd is not a fuse device [ 6245.306594][T30651] xt_hashlimit: size too large, truncated to 1048576 [ 6247.716198][T30692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6247.717602][T30692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6248.163630][T30701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6248.170062][T30701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6248.229928][ T28] audit: type=1326 audit(6248.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.232819][ T28] audit: type=1326 audit(6248.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.246006][ T28] audit: type=1326 audit(6248.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.250869][ T28] audit: type=1326 audit(6248.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.256988][ T28] audit: type=1326 audit(6248.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.278468][ T28] audit: type=1326 audit(6248.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.285310][ T28] audit: type=1326 audit(6248.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.285838][ T28] audit: type=1326 audit(6248.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.285984][ T28] audit: type=1326 audit(6248.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.292368][ T28] audit: type=1326 audit(6248.130:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30702 comm="syz.0.8647" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83977b68 code=0x7ffc0000 [ 6248.323654][T30705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6248.327347][T30705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6250.568994][T30763] fuse: fd is not a fuse device [ 6265.141383][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8695'. [ 6265.141820][T30854] netlink: 'syz.0.8695': attribute type 30 has an invalid length. [ 6265.148034][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8695'. [ 6265.206145][T29821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 6265.206723][T29821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 6265.206876][T29821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 6265.207020][T29821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 6265.208764][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8695'. [ 6265.208906][T30854] netlink: 'syz.0.8695': attribute type 30 has an invalid length. [ 6265.208949][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8695'. [ 6274.165098][T30901] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6279.765631][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 6279.766040][ T28] audit: type=1326 audit(6279.600:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30959 comm="syz.1.8730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 6279.772107][ T28] audit: type=1326 audit(6279.610:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30959 comm="syz.1.8730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 6279.780560][ T28] audit: type=1326 audit(6279.620:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30959 comm="syz.1.8730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 6279.787408][ T28] audit: type=1326 audit(6279.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30959 comm="syz.1.8730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 6279.793474][ T28] audit: type=1326 audit(6279.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30959 comm="syz.1.8730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9177b68 code=0x7ffc0000 [ 6280.578111][T30987] syzkaller0: entered promiscuous mode [ 6280.578581][T30987] syzkaller0: entered allmulticast mode [ 6284.925052][T31033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6284.926514][T31033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6285.159847][T31030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8758'. [ 6285.387175][T31046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6285.407453][T31046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6285.481285][T31048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8766'. [ 6285.483369][T31048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8766'. [ 6285.512358][T31048] gtp0: entered promiscuous mode [ 6286.277662][T31060] netlink: 'syz.0.8772': attribute type 10 has an invalid length. [ 6286.383338][T31063] syzkaller1: entered promiscuous mode [ 6286.387611][T31063] syzkaller1: entered allmulticast mode [ 6287.822265][T31096] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8788'. [ 6288.401798][T31110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8795'. [ 6289.822739][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8798'. [ 6291.243251][T31130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6291.246759][T31130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6292.156521][T31156] ip6gre1: entered promiscuous mode [ 6292.157835][T31156] ip6gre1: entered allmulticast mode [ 6295.021442][T28197] bond0: (slave bond_slave_0): interface is now down [ 6295.028064][T28197] bond0: (slave bond_slave_1): interface is now down [ 6295.033813][T31173] netlink: 'syz.0.8820': attribute type 10 has an invalid length. [ 6295.037151][T31173] syz_tun: entered promiscuous mode [ 6295.045944][T28197] bond0: (slave bond_slave_0): interface is now down [ 6295.046388][T28197] bond0: (slave bond_slave_1): interface is now down [ 6295.065557][T28197] bond0: (slave bond_slave_0): interface is now down [ 6295.066141][T28197] bond0: (slave bond_slave_1): interface is now down [ 6295.085246][T28197] bond0: (slave bond_slave_0): interface is now down [ 6295.085737][T28197] bond0: (slave bond_slave_1): interface is now down [ 6295.103276][T28197] bond0: now running without any active interface! [ 6295.640475][T31184] syzkaller1: entered promiscuous mode [ 6295.640827][T31184] syzkaller1: entered allmulticast mode [ 6298.547698][T31224] syzkaller0: entered promiscuous mode [ 6298.548009][T31224] syzkaller0: entered allmulticast mode [ 6299.731309][T31262] ------------[ cut here ]------------ [ 6299.734703][T31262] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x538/0x6a8, CPU#1: syz.0.8858/31262 [ 6299.741604][T31262] Modules linked in: [ 6299.744318][T31262] CPU: 1 UID: 0 PID: 31262 Comm: syz.0.8858 Not tainted syzkaller #0 PREEMPT [ 6299.745028][T31262] Hardware name: linux,dummy-virt (DT) [ 6299.745834][T31262] pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 6299.746328][T31262] pc : __kvmalloc_node_noprof+0x538/0x6a8 [ 6299.746629][T31262] lr : __kvmalloc_node_noprof+0x524/0x6a8 [ 6299.746940][T31262] sp : ffff800088ce3b50 [ 6299.747226][T31262] x29: ffff800088ce3b80 x28: fcf00000049e5500 x27: 0000000000000000 [ 6299.748059][T31262] x26: ffff8000806e519c x25: ccaf8000806e519c x24: 0000000000000001 [ 6299.748746][T31262] x23: 00000000004028c0 x22: 00000000ffffffff x21: 0000000000400cc0 [ 6299.749181][T31262] x20: 0000000000000021 x19: 0000000080000008 x18: 0000000000000002 [ 6299.749568][T31262] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 6299.750182][T31262] x14: 0000000000000000 x13: 000000000006d04a x12: 0000000000000000 [ 6299.750699][T31262] x11: 0000000000001000 x10: 0000000000000001 x9 : 0000000000000080 [ 6299.751196][T31262] x8 : 0000000000000030 x7 : ffff800082e287d0 x6 : 0000000000000001 [ 6299.751683][T31262] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 6299.752146][T31262] x2 : 00000000004428c0 x1 : 000000007fffffff x0 : 0000000000000000 [ 6299.752942][T31262] Call trace: [ 6299.753498][T31262] __kvmalloc_node_noprof+0x538/0x6a8 (P) [ 6299.754071][T31262] io_pin_pages+0x5c/0x124 [ 6299.754482][T31262] io_sqe_buffer_register+0x98/0x5e4 [ 6299.754883][T31262] io_sqe_buffers_register+0x180/0x1f4 [ 6299.755270][T31262] __arm64_sys_io_uring_register+0x2b4/0xda0 [ 6299.755552][T31262] invoke_syscall+0x54/0x10c [ 6299.755779][T31262] el0_svc_common.constprop.0+0x40/0xe0 [ 6299.756023][T31262] do_el0_svc+0x1c/0x34 [ 6299.756366][T31262] el0_svc+0x38/0x1fc [ 6299.756628][T31262] el0t_64_sync_handler+0xa0/0xf0 [ 6299.757019][T31262] el0t_64_sync+0x1a4/0x1a8 [ 6299.757606][T31262] ---[ end trace 0000000000000000 ]---