last executing test programs: 13m37.250000869s ago: executing program 0 (id=1303): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) r0 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r0, 0xf, 0x7929, 0x1, 0x0, 0x0) 13m37.025652411s ago: executing program 0 (id=1304): r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000000)) 13m36.897836039s ago: executing program 0 (id=1305): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 13m32.476336527s ago: executing program 0 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 13m32.24128002s ago: executing program 0 (id=1313): fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) 13m31.856474611s ago: executing program 0 (id=1315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13m31.856313222s ago: executing program 32 (id=1315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m46.767902619s ago: executing program 1 (id=2540): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private2, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000002900000004000000000000000000000004018f000000000018"], 0x38}}], 0x1, 0x40000000) 5m46.757686479s ago: executing program 1 (id=2541): r0 = openat(0xffffffffffffff9c, 0x0, 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(0x0, 0x0, &(0x7f0000000600)="b1aaba54dfe9ae15514b5f68e30641bcfb6666390b8d46230226d2e8578d9de4d26426387316fdc6a385931a04b6ce3c0400000098007a0180d18f3397c9f19ac4644e04301bf23e000000", 0x4b, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$smackfs_ipv6host(r5, 0x0, 0xb5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) 5m43.54768938s ago: executing program 1 (id=2545): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2213d3", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="eff38aa2e3f2c417a4d0bb308e1c69bfccb5c880f7298574b9b1319ae8337cb785c530e8807e76ff2c9afaa0c4c5eddc4bf88f600a0ae333b712235bc8b9b11fe545834b4c1b93c72090fb55ae34e9ab74837f7fb8db37a7c2366a2b2a17", 0x5e}], 0x1}}], 0x3, 0x4080) 5m43.339207372s ago: executing program 1 (id=2546): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 5m43.201011669s ago: executing program 1 (id=2547): syz_emit_ethernet(0x46, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(r0, 0x1, 0x0, &(0x7f0000000180)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r3, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0xe2e}], 0x1) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m42.858280788s ago: executing program 1 (id=2548): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0xc}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m42.858082429s ago: executing program 33 (id=2548): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0xc}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.219417335s ago: executing program 3 (id=3649): r0 = userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xf4ff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 59.12872798s ago: executing program 3 (id=3650): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 51.957093362s ago: executing program 3 (id=3674): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xa, 0xb41) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000021c0)=""/4084) 46.866189948s ago: executing program 3 (id=3678): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05c14, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 46.552806946s ago: executing program 3 (id=3679): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 45.665412916s ago: executing program 3 (id=3682): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 45.665265576s ago: executing program 34 (id=3682): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 4.09655219s ago: executing program 2 (id=3773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 3.968756937s ago: executing program 2 (id=3774): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8c0, 0x5, 0x3, 0x20c, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x8}, 0x50) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32000000001400000011"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 2.319683669s ago: executing program 2 (id=3775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000}) 1.405086301s ago: executing program 2 (id=3777): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.267748348s ago: executing program 2 (id=3778): write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x7, 0x2, {0x6, '}\xc5[\'-!'}}, 0xf) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 1.267380199s ago: executing program 4 (id=3779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) 1.039344252s ago: executing program 2 (id=3780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 1.038991102s ago: executing program 4 (id=3781): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x4, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 811.574454ms ago: executing program 4 (id=3782): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 267.684175ms ago: executing program 4 (id=3783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 139.413262ms ago: executing program 4 (id=3784): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 0s ago: executing program 4 (id=3785): r0 = msgget$private(0x0, 0xe1) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) setuid(0xee01) msgctl$IPC_RMID(r0, 0x0) kernel console output (not intermixed with test programs): lter on device netdevsim3 [ 600.775034][ T783] usb 1-1: Using ep0 maxpacket: 16 [ 600.811435][ T783] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.811739][ T783] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.812036][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.812157][ T783] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 600.812230][ T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.846536][ T783] usb 1-1: config 0 descriptor?? [ 601.283827][ T783] usbhid 1-1:0.0: can't add hid device: -71 [ 601.285178][ T783] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.311890][ T783] usb 1-1: USB disconnect, device number 45 [ 601.855110][ T783] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 602.025661][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 602.101823][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 602.102346][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 602.102587][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 602.148729][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 602.149136][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.149370][ T783] usb 1-1: Product: syz [ 602.149427][ T783] usb 1-1: Manufacturer: syz [ 602.149603][ T783] usb 1-1: SerialNumber: syz [ 602.192463][ T783] usb 1-1: config 0 descriptor?? [ 602.352878][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.704546][ T783] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 602.911409][ T783] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 602.913004][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 602.984831][ T783] usb 1-1: USB disconnect, device number 46 [ 603.365494][ T783] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 603.569711][ T783] usb 1-1: unable to get BOS descriptor or descriptor too short [ 603.587864][ T783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.588058][ T783] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 603.588257][ T783] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 603.588427][ T783] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 603.588596][ T783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 603.588717][ T783] usb 1-1: config 1 interface 1 has no altsetting 0 [ 603.631103][ T783] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 603.631314][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.631458][ T783] usb 1-1: Product: syz [ 603.631528][ T783] usb 1-1: Manufacturer: syz [ 603.631579][ T783] usb 1-1: SerialNumber: syz [ 604.134881][ T783] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 604.174542][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 604.175043][ T783] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 604.175200][ T783] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 604.257552][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 604.365853][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 604.437871][ T783] usb 1-1: USB disconnect, device number 47 [ 604.849997][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.024889][ T783] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 605.186016][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 605.219668][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.219948][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 605.220165][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.271068][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 605.271247][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.271387][ T783] usb 1-1: Product: syz [ 605.271447][ T783] usb 1-1: Manufacturer: syz [ 605.271497][ T783] usb 1-1: SerialNumber: syz [ 605.286898][ T783] usb 1-1: config 0 descriptor?? [ 605.733972][ T783] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 605.940365][ T783] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 605.940676][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 605.965842][ T783] usb 1-1: USB disconnect, device number 48 [ 606.479145][ T783] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 606.648740][ T6021] veth0_vlan: entered promiscuous mode [ 606.680963][ T783] usb 1-1: unable to get BOS descriptor or descriptor too short [ 606.690942][ T783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.691270][ T783] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.691611][ T783] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 606.691741][ T783] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 606.691856][ T783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 606.691934][ T783] usb 1-1: config 1 interface 1 has no altsetting 0 [ 606.711741][ T783] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 606.712011][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.712250][ T783] usb 1-1: Product: syz [ 606.712369][ T783] usb 1-1: Manufacturer: syz [ 606.712444][ T783] usb 1-1: SerialNumber: syz [ 606.752082][ T6021] veth1_vlan: entered promiscuous mode [ 606.892670][ T6021] veth0_macvtap: entered promiscuous mode [ 606.944938][ T6021] veth1_macvtap: entered promiscuous mode [ 607.185322][ T783] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 607.194876][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.195672][ T5636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.202059][ T5636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.202434][ T5636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.237828][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 607.238171][ T783] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 607.238400][ T783] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 607.327127][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 607.463292][ T783] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 607.486395][ T783] usb 1-1: USB disconnect, device number 49 [ 607.772373][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.860349][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.876314][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.917018][ T783] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 608.105941][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 608.175825][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.176133][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 608.176346][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 608.206939][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 608.207832][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.208835][ T783] usb 1-1: Product: syz [ 608.209499][ T783] usb 1-1: Manufacturer: syz [ 608.210028][ T783] usb 1-1: SerialNumber: syz [ 608.226633][ T783] usb 1-1: config 0 descriptor?? [ 608.655759][ T783] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 608.859710][ T783] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 608.861452][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 608.975730][ T783] usb 1-1: USB disconnect, device number 50 [ 610.237847][ T6223] capability: warning: `syz.0.981' uses 32-bit capabilities (legacy support in use) [ 610.544830][ T3276] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 610.703826][ T3276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 610.712142][ T3276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.712486][ T3276] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 610.712692][ T3276] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 610.712852][ T3276] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 610.712971][ T3276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 610.713120][ T3276] usb 1-1: config 1 interface 1 has no altsetting 0 [ 610.750802][ T3276] usb 1-1: string descriptor 0 read error: -22 [ 610.751430][ T3276] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 610.754859][ T3276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.410078][ T3276] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 611.563802][ T3276] usb 1-1: USB disconnect, device number 51 [ 611.678809][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.374585][ T6230] syzkaller0: entered promiscuous mode [ 612.374845][ T6230] syzkaller0: entered allmulticast mode [ 613.765070][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.766484][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.476572][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.478788][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.675163][ T3276] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 617.833666][ T3276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 617.848674][ T3276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.848882][ T3276] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 617.849133][ T3276] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 617.849225][ T3276] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 617.849350][ T3276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 617.849398][ T3276] usb 1-1: config 1 interface 1 has no altsetting 0 [ 617.892706][ T3276] usb 1-1: string descriptor 0 read error: -22 [ 617.893172][ T3276] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 617.893218][ T3276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.122062][ T3276] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 618.328156][ T3276] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 618.328353][ T3276] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 618.328483][ T3276] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 618.406007][ T3276] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 618.452143][ T3276] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 618.486930][ T3276] usb 1-1: USB disconnect, device number 52 [ 618.532907][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 618.579497][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.324805][ T783] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 619.387018][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.390176][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.494700][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 619.508896][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 619.509097][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 619.509169][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.533011][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 619.542139][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.544956][ T783] usb 1-1: Product: syz [ 619.546209][ T783] usb 1-1: Manufacturer: syz [ 619.546990][ T783] usb 1-1: SerialNumber: syz [ 619.557066][ T783] usb 1-1: config 0 descriptor?? [ 619.961420][ T28] audit: type=1326 audit(619.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 619.974915][ T28] audit: type=1326 audit(619.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 619.975422][ T28] audit: type=1326 audit(619.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 619.986426][ T783] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 619.986602][ T28] audit: type=1326 audit(619.810:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 619.995190][ T28] audit: type=1326 audit(619.830:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 619.999774][ T28] audit: type=1326 audit(619.840:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6302 comm="syz.1.1012" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d771a8 code=0x7ffc0000 [ 620.215101][ T783] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 620.215499][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 620.256389][ T783] usb 1-1: USB disconnect, device number 53 [ 620.560806][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.563858][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.689533][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.706001][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.100348][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.103159][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.224779][ T38] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 621.400982][ T38] usb 1-1: unable to get BOS descriptor or descriptor too short [ 621.425724][ T38] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.426059][ T38] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 621.430246][ T38] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 621.430764][ T38] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 621.430908][ T38] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 621.430994][ T38] usb 1-1: config 1 interface 1 has no altsetting 0 [ 621.462473][ T38] usb 1-1: string descriptor 0 read error: -22 [ 621.462909][ T38] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 621.462976][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.719378][ T38] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 621.934955][ T38] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 621.935298][ T38] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 621.935553][ T38] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 622.042358][ T38] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 622.128324][ T38] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 622.193063][ T38] usb 1-1: USB disconnect, device number 54 [ 622.665158][ T38] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 622.824813][ T38] usb 1-1: Using ep0 maxpacket: 16 [ 622.840417][ T38] usb 1-1: config index 0 descriptor too short (expected 67, got 36) [ 622.840788][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.841168][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.841454][ T38] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 622.841606][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.851370][ T38] usb 1-1: config 0 descriptor?? [ 623.282927][ T38] usbhid 1-1:0.0: can't add hid device: -71 [ 623.283561][ T38] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 623.301370][ T38] usb 1-1: USB disconnect, device number 55 [ 624.021878][ T6349] GUP no longer grows the stack in syz.0.1034 (6349): 20004000-2000a000 (20002000) [ 624.029179][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.0.1034 Tainted: G L syzkaller #0 PREEMPT [ 624.029555][ T6349] Tainted: [L]=SOFTLOCKUP [ 624.029627][ T6349] Hardware name: linux,dummy-virt (DT) [ 624.029943][ T6349] Call trace: [ 624.030295][ T6349] show_stack+0x18/0x24 (C) [ 624.030644][ T6349] dump_stack_lvl+0x60/0x80 [ 624.030730][ T6349] dump_stack+0x18/0x24 [ 624.030815][ T6349] gup_vma_lookup+0xac/0xc0 [ 624.030903][ T6349] __get_user_pages+0x90/0xc94 [ 624.030980][ T6349] get_user_pages_remote+0xe4/0x37c [ 624.031066][ T6349] __access_remote_vm+0x1ec/0x3b4 [ 624.031136][ T6349] access_remote_vm+0x10/0x20 [ 624.031210][ T6349] proc_pid_cmdline_read+0x234/0x474 [ 624.031292][ T6349] vfs_readv+0x1cc/0x280 [ 624.031361][ T6349] do_preadv+0x90/0xf8 [ 624.031427][ T6349] __arm64_sys_preadv+0x20/0x2c [ 624.031496][ T6349] invoke_syscall+0x54/0x10c [ 624.031571][ T6349] el0_svc_common.constprop.0+0x40/0xe0 [ 624.031643][ T6349] do_el0_svc+0x1c/0x34 [ 624.031704][ T6349] el0_svc+0x34/0x12c [ 624.031778][ T6349] el0t_64_sync_handler+0xa0/0xf0 [ 624.031844][ T6349] el0t_64_sync+0x1a4/0x1a8 [ 625.238917][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 633.243904][ T6413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.311873][ T6413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.387698][ T6413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.451542][ T6413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.749555][ T190] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.833865][ T5138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.895025][ T5138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.926266][ T5138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.859699][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.863381][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.991015][ T6477] syzkaller0: entered promiscuous mode [ 640.991321][ T6477] syzkaller0: entered allmulticast mode [ 641.546614][ T6483] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1089'. [ 641.955145][ T5752] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 642.115325][ T5752] usb 1-1: Using ep0 maxpacket: 32 [ 642.132632][ T5752] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.138290][ T5752] usb 1-1: config 0 interface 0 has no altsetting 0 [ 642.166179][ T5752] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 642.167772][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.170235][ T5752] usb 1-1: Product: syz [ 642.171298][ T5752] usb 1-1: Manufacturer: syz [ 642.172065][ T5752] usb 1-1: SerialNumber: syz [ 642.181839][ T5752] usb 1-1: config 0 descriptor?? [ 642.199529][ T5752] gs_usb 1-1:0.0: Required endpoints not found [ 644.365968][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 649.514975][ T6493] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 652.540044][ T783] usb 1-1: USB disconnect, device number 56 [ 653.033335][ T6514] bond0: (slave bond_slave_0): Releasing backup interface [ 653.086341][ T6514] bond0: (slave bond_slave_1): Releasing backup interface [ 653.151157][ T6514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.814487][ T783] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 653.994682][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 654.008105][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 654.008389][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 654.008658][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 654.029361][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 654.029723][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.029857][ T783] usb 1-1: Product: syz [ 654.029970][ T783] usb 1-1: Manufacturer: syz [ 654.030032][ T783] usb 1-1: SerialNumber: syz [ 654.052407][ T783] usb 1-1: config 0 descriptor?? [ 654.493168][ T783] gs_usb 1-1:0.0: Configuring for 241 interfaces [ 654.638685][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 654.701351][ T783] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 654.701840][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 654.757616][ T783] usb 1-1: USB disconnect, device number 57 [ 655.375284][ T783] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 655.524723][ T783] usb 1-1: Using ep0 maxpacket: 32 [ 655.542207][ T783] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.542452][ T783] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 655.542627][ T783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 655.563698][ T783] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 655.564648][ T783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.564957][ T783] usb 1-1: Product: syz [ 655.565015][ T783] usb 1-1: Manufacturer: syz [ 655.565720][ T783] usb 1-1: SerialNumber: syz [ 655.576960][ T783] usb 1-1: config 0 descriptor?? [ 656.007330][ T783] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 656.007862][ T783] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 656.055170][ T783] usb 1-1: USB disconnect, device number 58 [ 657.647087][ T6575] netlink: 'syz.0.1125': attribute type 30 has an invalid length. [ 660.479659][ T28] audit: type=1326 audit(660.320:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.0.1144" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11771a8 code=0x0 [ 673.589918][ T6667] Restarting kernel threads ... [ 673.596409][ T6667] Done restarting kernel threads. [ 673.651203][ T6669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 673.765918][ T6673] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 673.970412][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 673.970749][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 679.852824][ T6733] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 679.853005][ T6733] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1197'. [ 680.114818][ T5752] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 680.254894][ T5752] usb 1-1: device descriptor read/64, error -71 [ 680.507131][ T5752] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 680.660563][ T5752] usb 1-1: device descriptor read/64, error -71 [ 680.786386][ T5752] usb usb1-port1: attempt power cycle [ 681.144767][ T5752] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 681.169428][ T5752] usb 1-1: device descriptor read/8, error -71 [ 681.404757][ T5752] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 681.430687][ T5752] usb 1-1: device descriptor read/8, error -71 [ 681.537247][ T5752] usb usb1-port1: unable to enumerate USB device [ 691.138951][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 701.047180][ T99] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.047689][ T99] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.048046][ T99] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.048229][ T99] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.769305][ T6905] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 701.800497][ T6905] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 704.186402][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 704.746965][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 704.747592][ T6968] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 704.747645][ T6968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1291'. [ 704.880387][ T6970] syzkaller1: entered promiscuous mode [ 704.880629][ T6970] syzkaller1: entered allmulticast mode [ 705.118021][ T6974] gretap0: entered promiscuous mode [ 705.118780][ T6974] gretap0: left promiscuous mode [ 706.764708][ T6905] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 706.933790][ T6905] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 706.934856][ T6905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.949126][ T6905] usb 1-1: config 0 descriptor?? [ 707.189895][ T6905] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 707.402242][ T6905] [drm:udl_init] *ERROR* Selecting channel failed [ 707.496351][ T6996] process 'syz.0.1300' launched '/dev/fd/3' with NULL argv: empty string added [ 707.521370][ T6905] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 707.521832][ T6905] [drm] Initialized udl on minor 2 [ 707.547858][ T6905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 707.552863][ T6905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 707.594875][ T6905] usb 1-1: USB disconnect, device number 63 [ 707.597509][ T6914] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 707.600100][ T6914] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 708.035410][ T6905] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 708.195188][ T6905] usb 1-1: Using ep0 maxpacket: 8 [ 708.212701][ T6905] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.212903][ T6905] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.213120][ T6905] usb 1-1: config 0 interface 0 has no altsetting 0 [ 708.213196][ T6905] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 708.213253][ T6905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.221513][ T6905] usb 1-1: config 0 descriptor?? [ 708.686894][ T6905] hid (null): bogus close delimiter [ 708.701068][ T6905] hid-generic 0003:1B1C:0A2B.000D: unknown main item tag 0x1 [ 708.701585][ T6905] hid-generic 0003:1B1C:0A2B.000D: bogus close delimiter [ 708.701680][ T6905] hid-generic 0003:1B1C:0A2B.000D: item 0 4 2 10 parsing failed [ 708.715830][ T6905] hid-generic 0003:1B1C:0A2B.000D: probe with driver hid-generic failed with error -22 [ 708.898875][ T6905] usb 1-1: USB disconnect, device number 64 [ 709.704919][ T6905] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 709.885240][ T6905] usb 1-1: Using ep0 maxpacket: 8 [ 709.900707][ T6905] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 709.901164][ T6905] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.901240][ T6905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.901393][ T6905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.901525][ T6905] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.901699][ T6905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.902793][ T6905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.131391][ T6905] usb 1-1: usb_control_msg returned -32 [ 710.131927][ T6905] usbtmc 1-1:16.0: can't read capabilities [ 711.137665][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.142164][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.669360][ T7019] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 713.675373][ T6905] usb 1-1: USB disconnect, device number 65 [ 714.061452][ T3316] syz_tun (unregistering): left allmulticast mode [ 714.262747][ T3276] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 714.269204][ T3276] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.220868][ T190] bond0 (unregistering): Released all slaves [ 715.545854][ T190] hsr_slave_0: left promiscuous mode [ 715.549965][ T190] hsr_slave_1: left promiscuous mode [ 719.248021][ T3162] 8021q: adding VLAN 0 to HW filter on device eth2 [ 720.549646][ T3463] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 720.586375][ T3463] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 720.971577][ T3162] 8021q: adding VLAN 0 to HW filter on device eth1 [ 720.990118][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.005570][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.002326][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.004025][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.459186][ T7029] hsr_slave_0: entered promiscuous mode [ 722.469192][ T7029] hsr_slave_1: entered promiscuous mode [ 722.640222][ T3162] 8021q: adding VLAN 0 to HW filter on device eth3 [ 723.343722][ T7029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 723.358525][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.362580][ T7029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 723.381346][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.386360][ T7029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 723.402416][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.410327][ T7029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 723.433721][ T7029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.613649][ T3162] 8021q: adding VLAN 0 to HW filter on device eth4 [ 724.563859][ T7029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.119497][ T7029] veth0_vlan: entered promiscuous mode [ 728.172041][ T7029] veth1_vlan: entered promiscuous mode [ 728.331364][ T7029] veth0_macvtap: entered promiscuous mode [ 728.347606][ T7029] veth1_macvtap: entered promiscuous mode [ 728.513788][ T190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.517553][ T190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.520194][ T190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.520511][ T190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.021781][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.028322][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.441952][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.443475][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.539200][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.540621][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.145434][ T7194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1332'. [ 732.001566][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.007078][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.746118][ T7213] lo speed is unknown, defaulting to 1000 [ 732.755580][ T7213] lo speed is unknown, defaulting to 1000 [ 732.778350][ T7213] lo speed is unknown, defaulting to 1000 [ 732.901271][ T7213] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 733.207278][ T7213] lo speed is unknown, defaulting to 1000 [ 733.225633][ T7213] lo speed is unknown, defaulting to 1000 [ 738.892115][ T7268] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 745.011357][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 745.186770][ T7314] netlink: 'syz.1.1361': attribute type 21 has an invalid length. [ 752.718775][ T28] audit: type=1326 audit(752.300:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7380 comm="syz.2.1387" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7fc00000 [ 754.293333][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 761.312119][ T6905] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 761.342586][ T6905] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 762.986536][ T38] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 762.993637][ T38] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.413010][ T7455] fido_id[7455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 763.559528][ T38] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 763.586869][ T38] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.943676][ T7471] binder: 7470:7471 tried to acquire reference to desc 0, got 1 instead [ 763.961381][ T7471] binder: 7470:7471 got transaction with invalid offsets ptr [ 763.962818][ T7471] binder: 7470:7471 transaction call to 7470:0 failed 19/29201/-22, code 0 size 104-24 line 3738 [ 763.978968][ T6905] binder: undelivered TRANSACTION_ERROR: 29201 [ 764.015035][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.016499][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.187797][ T7467] fido_id[7467]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 764.240885][ T38] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 764.246200][ T38] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.398622][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.401790][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.789151][ T7482] fido_id[7482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 764.855561][ T7485] hugetlbfs: Bad value '%' for mount option 'size' [ 764.855561][ T7485] [ 774.687433][ T7526] lo speed is unknown, defaulting to 1000 [ 783.900806][ T7556] support for cryptoloop has been removed. Use dm-crypt instead. [ 793.480834][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.482355][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.741995][ T7586] binder: 7585:7586 got transaction to invalid handle, 1 [ 793.742169][ T7586] binder: 7585:7586 cannot find target node [ 793.745614][ T7586] binder: 7585:7586 transaction async to 0:0 failed 20/29201/-22, code 0 size 0-0 line 3236 [ 793.749952][ T3276] binder: undelivered TRANSACTION_ERROR: 29201 [ 795.518900][ T6914] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 795.536433][ T6914] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 797.310316][ T7610] syzkaller1: entered promiscuous mode [ 797.310602][ T7610] syzkaller1: entered allmulticast mode [ 797.640921][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.642424][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.961102][ T6914] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 799.976068][ T6914] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 802.811051][ T7645] bond0: (slave bond_slave_0): Releasing backup interface [ 802.858887][ T7645] bond0: (slave bond_slave_1): Releasing backup interface [ 802.920036][ T7645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.157590][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 803.562948][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 803.577159][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 803.665161][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.667229][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.541944][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.546483][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.590565][ T7687] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 809.503656][ T7694] all: renamed from bridge_slave_1 (while UP) [ 809.666402][ T38] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 809.677386][ T38] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 814.180138][ T7709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 815.809239][ T6905] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 815.826921][ T6905] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 816.217073][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 816.738902][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.740401][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.900742][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 825.233413][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.239312][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.528342][ T7778] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 825.566540][ T7778] vlan2: entered allmulticast mode [ 825.568745][ T7778] bond1: entered allmulticast mode [ 825.573406][ T7778] gretap1: entered allmulticast mode [ 825.766685][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.771492][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.045805][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 826.062640][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 826.139664][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.148021][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.780152][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.781579][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.410615][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.413577][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.825274][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.826807][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.461135][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 847.795867][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.800677][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.200074][ T7935] input: syz0 as /devices/virtual/input/input5 [ 852.741626][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.757423][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.436655][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.437954][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.299866][ T7954] block nbd1: shutting down sockets [ 854.962679][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.981065][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.058022][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.060067][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.223204][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.228410][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.316081][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.319721][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.264747][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.266219][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.678209][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 863.697373][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 866.386335][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.387580][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.468669][ T8038] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1625'. [ 866.628692][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.635636][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.762900][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.764307][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.811870][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.813335][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.999315][ T8046] smc: net device bond0 applied user defined pnetid SYZ2 [ 868.001992][ T8046] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1627'. [ 873.812922][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.821985][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.416914][ T3276] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 874.438529][ T3276] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 875.901318][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.905571][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.342875][ T8102] syz_tun: entered allmulticast mode [ 877.726917][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.728192][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.670805][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.672116][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.325333][ T8136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1662'. [ 879.325562][ T8136] ÿÿÿÿ: renamed from lo (while UP) [ 879.335578][ T8136] ÿÿÿÿ: entered promiscuous mode [ 882.549364][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.586693][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.422606][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.435158][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.327888][ T8175] block nbd1: shutting down sockets [ 887.804993][ T8188] lo speed is unknown, defaulting to 1000 [ 888.832014][ T8185] block nbd2: shutting down sockets [ 894.419611][ T8200] 8021q: adding VLAN 0 to HW filter on device eth0 [ 894.431345][ T8200] 8021q: adding VLAN 0 to HW filter on device eth1 [ 894.451870][ T8200] 8021q: adding VLAN 0 to HW filter on device eth2 [ 894.462841][ T8200] 8021q: adding VLAN 0 to HW filter on device eth3 [ 894.502615][ T10] lo speed is unknown, defaulting to 1000 [ 896.973858][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.981349][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.028328][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.080759][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.598330][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.602938][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.818770][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.821655][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.073860][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.081328][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.797732][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.798855][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.018352][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1701'. [ 902.892081][ T8258] syzkaller0: entered promiscuous mode [ 902.892437][ T8258] syzkaller0: entered allmulticast mode [ 903.326930][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.328388][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.401671][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.417396][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.567061][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.569872][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.655666][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.666777][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.494394][ T8291] binder: 8277:8291 BC_FREE_BUFFER no match for buffer at offset 0 [ 905.496264][ T8291] binder: 8277:8291 got transaction to invalid handle, 1 [ 905.496649][ T8291] binder: 8277:8291 cannot find target node [ 905.497499][ T8291] binder: 8277:8291 transaction call to 0:0 failed 21/29201/-22, code 0 size 96-24 line 3236 [ 907.259438][ T3276] binder: undelivered TRANSACTION_ERROR: 29201 [ 907.297218][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.300253][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.472988][ T8319] binder: 8318:8319 tried to acquire reference to desc 0, got 1 instead [ 913.478624][ T8319] binder: 8318:8319 got transaction with invalid data ptr [ 913.496427][ T8319] binder: 8318:8319 transaction call to 8318:0 failed 26/29201/-14, code 0 size 104-3992 line 3496 [ 913.507806][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 913.717744][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.731197][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.100611][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.119105][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.490432][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.493720][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.330547][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.333632][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.427722][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.430167][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.801709][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.807019][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.369977][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.385084][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.091036][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.092603][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.611312][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.612637][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.665276][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1761'. [ 924.340600][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.359263][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.365887][ T8421] block nbd2: shutting down sockets [ 924.870087][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 924.995130][ T8434] block nbd1: shutting down sockets [ 925.044356][ T28] audit: type=1326 audit(924.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.044680][ T28] audit: type=1326 audit(924.880:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.044875][ T28] audit: type=1326 audit(924.880:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.054505][ T28] audit: type=1326 audit(924.880:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.054767][ T28] audit: type=1326 audit(924.890:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=468 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.090845][ T28] audit: type=1326 audit(924.890:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 925.091306][ T28] audit: type=1326 audit(924.920:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.2.1773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 926.023484][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.036125][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.432785][ T8472] block nbd2: shutting down sockets [ 928.536880][ T8485] block nbd2: shutting down sockets [ 928.712957][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 928.713232][ T8487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1794'. [ 928.831906][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.840072][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.929843][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 929.574844][ T8498] block nbd1: shutting down sockets [ 933.144484][ T8518] block nbd2: shutting down sockets [ 933.737930][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1809'. [ 937.609997][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.617807][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.733631][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.746269][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.946818][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.947816][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.105898][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.114888][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.061619][ T8620] block nbd1: shutting down sockets [ 944.271390][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.281847][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.800336][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.805452][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.919191][ T8640] block nbd2: shutting down sockets [ 948.984861][ T8661] block nbd2: shutting down sockets [ 955.427480][ T8705] [U] ^E [ 955.927452][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.928892][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.167882][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.172544][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.490679][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.491641][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.650312][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.651783][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.586968][ T8749] tmpfs: Bad value for 'mpol' [ 958.425935][ T8756] block nbd1: shutting down sockets [ 963.030578][ T3463] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 963.057962][ T3463] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 964.018516][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.026061][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.520220][ T6905] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 964.530114][ T6905] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 966.524716][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.526041][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.169443][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.170866][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.256146][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.256980][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.514570][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.519816][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.725352][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.730659][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.486740][ T8945] loop2: detected capacity change from 0 to 1 [ 975.145855][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.147335][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.495619][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.496839][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.793767][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.808031][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.123524][ T8998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.136266][ T8998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.767736][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.769132][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.132345][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.133884][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.064686][ T9020] block nbd1: shutting down sockets [ 981.272260][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.286614][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.635152][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'. [ 982.672299][ T9031] block nbd1: shutting down sockets [ 982.882267][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.899852][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.177106][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.179634][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.367927][ T1418] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.268584][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.269679][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.697522][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.716423][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.851842][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.860448][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.779690][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.780528][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.945386][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.947540][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.429875][ T9138] block nbd2: shutting down sockets [ 996.588395][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.608117][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.813205][ T9142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.839544][ T9142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.060403][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.070980][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.325365][ T9152] block nbd2: shutting down sockets [ 998.620219][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.621713][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.142677][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.170773][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.659401][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.661961][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.100572][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.106229][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.812041][ T9193] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 1001.707861][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.710316][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.718698][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.723464][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.600978][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.627543][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.881362][ T9227] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1005.263750][ T9231] tap0: tun_chr_ioctl cmd 2147767506 [ 1005.496616][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.498069][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.865136][ T8145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.954787][ T8145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.020142][ T8145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.099558][ T8145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.778263][ T8145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.807688][ T8145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.839989][ T8145] bond0 (unregistering): Released all slaves [ 1015.029742][ T9267] lo speed is unknown, defaulting to 1000 [ 1015.107734][ T8145] hsr_slave_0: left promiscuous mode [ 1015.110861][ T8145] hsr_slave_1: left promiscuous mode [ 1015.135667][ T8145] veth1_macvtap: left promiscuous mode [ 1015.136086][ T8145] veth0_macvtap: left promiscuous mode [ 1015.142383][ T8145] veth1_vlan: left promiscuous mode [ 1015.142850][ T8145] veth0_vlan: left promiscuous mode [ 1015.308240][ T9291] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 1015.308592][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1016.139070][ T6919] lo speed is unknown, defaulting to 1000 [ 1016.140598][ T6919] infiniband syz2: ib_query_port failed (-19) [ 1016.152112][ T3162] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1016.512378][ T28] audit: type=1326 audit(1016.350:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.517982][ T28] audit: type=1326 audit(1016.360:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.524563][ T28] audit: type=1326 audit(1016.360:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.527879][ T28] audit: type=1326 audit(1016.370:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.537470][ T28] audit: type=1326 audit(1016.380:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.540680][ T28] audit: type=1326 audit(1016.380:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.543908][ T28] audit: type=1326 audit(1016.380:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.549872][ T28] audit: type=1326 audit(1016.390:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=111 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.561917][ T28] audit: type=1326 audit(1016.390:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1016.562426][ T28] audit: type=1326 audit(1016.390:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.2096" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1018.269707][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.290262][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.425110][ T3162] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1019.721068][ T9267] hsr_slave_0: entered promiscuous mode [ 1019.736274][ T9267] hsr_slave_1: entered promiscuous mode [ 1019.745293][ T9267] debugfs: 'hsr0' already exists in 'hsr' [ 1019.746560][ T9267] Cannot create hsr debugfs directory [ 1021.040815][ T9267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1021.069409][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.072843][ T9267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1021.099806][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.104014][ T9267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1021.147693][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1021.150989][ T9267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1021.185529][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1021.807412][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2106'. [ 1022.757310][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.400040][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.401991][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.692179][ T9267] veth0_vlan: entered promiscuous mode [ 1026.760587][ T9267] veth1_vlan: entered promiscuous mode [ 1026.886800][ T9267] veth0_macvtap: entered promiscuous mode [ 1026.909336][ T9267] veth1_macvtap: entered promiscuous mode [ 1027.016801][ T99] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.017716][ T99] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.023931][ T99] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.028572][ T99] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.173505][ T9499] block nbd2: shutting down sockets [ 1032.318832][ T9505] syz.1.2135 (9505): drop_caches: 4 [ 1034.231719][ T9549] loop8: detected capacity change from 0 to 8 [ 1040.777283][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1040.780820][ T28] audit: type=1326 audit(1040.620:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.783378][ T28] audit: type=1326 audit(1040.620:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.791677][ T28] audit: type=1326 audit(1040.620:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.795674][ T28] audit: type=1326 audit(1040.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.798776][ T28] audit: type=1326 audit(1040.630:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.802662][ T28] audit: type=1326 audit(1040.630:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.806323][ T28] audit: type=1326 audit(1040.630:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.809662][ T28] audit: type=1326 audit(1040.630:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.813824][ T28] audit: type=1326 audit(1040.630:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9576 comm="syz.2.2165" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb65771a8 code=0x7ffc0000 [ 1040.888568][ T9580] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2167'. [ 1040.998717][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.000277][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.690270][ T99] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.693456][ T99] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.703754][ T99] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.708091][ T99] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.005463][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.007075][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.952542][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.966792][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.417558][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'. [ 1050.705437][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1053.367275][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.368710][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.751752][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.753192][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.330028][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.331531][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.543453][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.550978][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.403413][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.409103][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.737705][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.744002][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.331612][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.332516][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.260524][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.261640][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.649495][T10047] netlink: 'syz.1.2316': attribute type 6 has an invalid length. [ 1110.229230][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.258216][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.835557][T10087] loop8: detected capacity change from 0 to 7 [ 1114.901568][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.902526][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.795606][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.799793][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.012819][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.015955][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.555300][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 1123.619369][T10180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 1123.702193][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 1128.491218][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.492586][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.034695][T10231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2390'. [ 1135.210079][T10249] fuse: Bad value for 'fd' [ 1135.511148][T10254] netlink: 'syz.2.2400': attribute type 12 has an invalid length. [ 1138.496813][T10262] fuse: Bad value for 'fd' [ 1151.317740][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.319040][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.526968][T10319] fuse: Bad value for 'group_id' [ 1151.527292][T10319] fuse: Bad value for 'group_id' [ 1153.143025][ T8117] syz_tun (unregistering): left allmulticast mode [ 1154.279797][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.281269][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.407675][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.421966][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.844298][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'. [ 1156.359833][T10420] loop8: detected capacity change from 0 to 8 [ 1156.424629][T10346] hsr_slave_0: entered promiscuous mode [ 1156.430800][T10346] hsr_slave_1: entered promiscuous mode [ 1156.437002][T10346] debugfs: 'hsr0' already exists in 'hsr' [ 1156.438672][T10346] Cannot create hsr debugfs directory [ 1157.143348][T10435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.151919][T10435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.443020][T10346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1157.457771][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.462297][T10346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1157.472231][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.476420][T10346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1157.496990][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.501465][T10346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1157.526327][T10346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.177747][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.959574][T10488] fuse: Bad value for 'fd' [ 1162.061391][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.062829][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.222545][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.227323][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.345818][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.348794][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.780392][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.783337][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.313371][T10346] veth0_vlan: entered promiscuous mode [ 1163.349515][T10346] veth1_vlan: entered promiscuous mode [ 1163.526780][T10346] veth0_macvtap: entered promiscuous mode [ 1163.561408][T10346] veth1_macvtap: entered promiscuous mode [ 1163.753449][ T99] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.753850][ T99] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.755164][ T99] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.755301][ T99] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.738965][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.746172][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.751954][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.753399][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.849870][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.868415][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.131569][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.143720][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.162518][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.177420][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.425844][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.427419][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.610550][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.613370][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.387619][T10650] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1176.025837][T10656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.027220][T10656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.051990][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.053458][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.387421][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.389231][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.632525][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.647798][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.994670][T10676] syzkaller0: entered promiscuous mode [ 1178.994936][T10676] syzkaller0: entered allmulticast mode [ 1179.208647][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.215347][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.351289][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.360150][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.272915][ T8145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.369849][ T8145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.446800][ T8145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.513555][ T8145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.642443][ T8145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.686078][ T8145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.726426][ T8145] bond0 (unregistering): Released all slaves [ 1184.892170][ T8145] hsr_slave_0: left promiscuous mode [ 1184.896915][ T8145] hsr_slave_1: left promiscuous mode [ 1184.956364][ T8145] veth1_macvtap: left promiscuous mode [ 1184.956761][ T8145] veth0_macvtap: left promiscuous mode [ 1184.957209][ T8145] veth1_vlan: left promiscuous mode [ 1184.957451][ T8145] veth0_vlan: left promiscuous mode [ 1186.128358][ T3162] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1188.026649][ T3162] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1188.337716][T10703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.353902][T10703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.197809][T10703] hsr_slave_0: entered promiscuous mode [ 1189.201738][T10703] hsr_slave_1: entered promiscuous mode [ 1189.216667][T10703] debugfs: 'hsr0' already exists in 'hsr' [ 1189.216914][T10703] Cannot create hsr debugfs directory [ 1189.333632][ T3162] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1189.950755][T10703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1189.983258][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1189.998277][T10703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1190.018040][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1190.021261][T10703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1190.059660][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1190.062891][T10703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1190.088093][T10703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.381981][ T3162] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1191.133817][T10703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.315399][T10808] fuse: Bad value for 'group_id' [ 1193.315734][T10808] fuse: Bad value for 'group_id' [ 1194.191428][T10703] veth0_vlan: entered promiscuous mode [ 1194.221392][T10703] veth1_vlan: entered promiscuous mode [ 1195.465706][T10703] veth0_macvtap: entered promiscuous mode [ 1195.502693][T10703] veth1_macvtap: entered promiscuous mode [ 1195.651566][ T99] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.657462][ T99] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.657726][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.657825][ T99] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.138867][T10832] netlink: 'syz.3.2551': attribute type 11 has an invalid length. [ 1196.139035][T10832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1196.169362][T10832] netlink: 'syz.3.2551': attribute type 11 has an invalid length. [ 1196.172150][T10832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1196.275180][T10834] binder: 10833:10834 tried to acquire reference to desc 0, got 1 instead [ 1196.278941][T10834] binder: 10833:10834 ioctl c0306201 0 returned -14 [ 1196.280849][T10834] binder: 10833:10834 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1196.283416][T10834] binder: 10834 RLIMIT_NICE not set [ 1196.285603][T10834] binder: 10834 RLIMIT_NICE not set [ 1196.288082][T10834] binder_alloc: 10833: binder_alloc_buf, no vma [ 1196.289198][T10834] binder: cannot allocate buffer: vma cleared, target dead or dying [ 1196.289829][T10834] binder: 10833:10834 transaction call to 10833:10834 failed 38/29189/-3, code 0 size 0-0 line 3393 [ 1196.295013][ T9594] binder: release 10833:10834 transaction 31 out, still active [ 1196.295449][ T9594] binder: undelivered TRANSACTION_COMPLETE [ 1196.300833][ T9594] binder: release 10833:10834 transaction 31 in, still active [ 1196.302649][ T9594] binder: send failed reply for transaction 31, target dead [ 1196.304991][ T9594] binder: undelivered TRANSACTION_ERROR: 29189 [ 1196.360111][T10836] fuse: Bad value for 'group_id' [ 1196.361002][T10836] fuse: Bad value for 'group_id' [ 1196.420068][T10838] netlink: 'syz.3.2555': attribute type 12 has an invalid length. [ 1197.086538][T10843] syzkaller0: entered promiscuous mode [ 1197.086802][T10843] syzkaller0: entered allmulticast mode [ 1202.637718][T10907] xt_hashlimit: size too large, truncated to 1048576 [ 1203.675108][ T28] audit: type=1326 audit(1203.480:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.675494][ T28] audit: type=1326 audit(1203.510:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.678857][ T28] audit: type=1326 audit(1203.520:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.701795][ T28] audit: type=1326 audit(1203.540:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.704891][ T28] audit: type=1326 audit(1203.520:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=55 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.705143][ T28] audit: type=1326 audit(1203.540:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.707142][ T28] audit: type=1326 audit(1203.550:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.708056][ T28] audit: type=1326 audit(1203.540:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1203.715476][ T28] audit: type=1326 audit(1203.550:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10923 comm="syz.3.2582" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1208.007947][ T28] audit: type=1326 audit(1207.850:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10968 comm="syz.3.2597" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x0 [ 1214.377630][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2609'. [ 1215.478939][T11019] Invalid ELF header type: 3 != 1 [ 1218.077519][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2624'. [ 1218.079741][T11040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2624'. [ 1220.593204][ T28] audit: type=1326 audit(1220.430:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x7ffc0000 [ 1220.600969][ T28] audit: type=1326 audit(1220.440:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x7ffc0000 [ 1220.608715][ T28] audit: type=1326 audit(1220.450:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffffb37771a8 code=0x7ffc0000 [ 1220.611519][ T28] audit: type=1326 audit(1220.450:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x7ffc0000 [ 1220.616833][ T28] audit: type=1326 audit(1220.450:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x7ffc0000 [ 1227.440692][T11111] fuse: Unknown parameter 'group_i00000000000000000000' [ 1227.762350][T11122] fuse: Unknown parameter 'group_i00000000000000000000' [ 1228.516248][T11133] fuse: Unknown parameter 'group_id00000000000000000000' [ 1233.950802][ T28] audit: type=1326 audit(1233.790:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11213 comm="syz.2.2695" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x0 [ 1234.948730][T11227] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 1236.456203][T11248] netlink: 'syz.3.2710': attribute type 27 has an invalid length. [ 1236.458461][T11248] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2710'. [ 1236.570955][T11250] netlink: 'syz.3.2711': attribute type 29 has an invalid length. [ 1236.592271][T11250] netlink: 'syz.3.2711': attribute type 29 has an invalid length. [ 1238.326976][T11257] netlink: 'syz.2.2714': attribute type 29 has an invalid length. [ 1238.330230][T11257] netlink: 'syz.2.2714': attribute type 29 has an invalid length. [ 1238.935701][T11264] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 1238.937942][T11260] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 1238.948160][T11264] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 1242.003581][T11288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1242.010021][T11288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1244.166920][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1244.167396][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 1246.403341][T11361] fuse: Unknown parameter 'user_i00000000000000000000' [ 1246.961361][T11366] netlink: 'syz.2.2757': attribute type 29 has an invalid length. [ 1246.971237][T11363] netlink: 'syz.2.2757': attribute type 29 has an invalid length. [ 1246.978334][T11366] netlink: 'syz.2.2757': attribute type 29 has an invalid length. [ 1247.101436][T11370] netlink: 'syz.2.2760': attribute type 29 has an invalid length. [ 1247.116217][T11370] netlink: 'syz.2.2760': attribute type 29 has an invalid length. [ 1249.279583][T11409] netlink: 'syz.3.2775': attribute type 4 has an invalid length. [ 1249.649478][T11417] fuse: Bad value for 'fd' [ 1250.288279][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1251.011995][T11443] fuse: Unknown parameter '0x0000000000000004' [ 1251.135752][T11447] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 1252.040179][T11458] netlink: 'syz.3.2797': attribute type 29 has an invalid length. [ 1252.049824][T11458] netlink: 'syz.3.2797': attribute type 29 has an invalid length. [ 1253.416021][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1253.425431][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1254.010023][T11489] netlink: 'syz.3.2813': attribute type 2 has an invalid length. [ 1254.014961][T11489] netlink: 600 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1254.561521][T11505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2819'. [ 1254.571346][T11505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2819'. [ 1254.977716][T11515] netlink: 'syz.2.2823': attribute type 29 has an invalid length. [ 1254.987353][T11515] netlink: 'syz.2.2823': attribute type 29 has an invalid length. [ 1255.275007][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2828'. [ 1255.286779][T11525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2828'. [ 1255.632685][T11534] netlink: 'syz.2.2832': attribute type 16 has an invalid length. [ 1255.633024][T11534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1255.636107][T11534] geneve1: entered allmulticast mode [ 1256.363931][T11546] netlink: 'syz.2.2836': attribute type 39 has an invalid length. [ 1256.560732][T11548] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 1256.562025][T11541] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 1256.567768][T11541] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 1257.561608][T11578] fuse: Unknown parameter 'fd0x0000000000000004' [ 1258.191286][T11588] fuse: Unknown parameter 'fd0x0000000000000004' [ 1259.300962][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1259.761498][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 1261.207570][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2888'. [ 1261.250184][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1262.442711][T11674] netlink: 'syz.2.2898': attribute type 4 has an invalid length. [ 1263.598435][T11687] netlink: 'syz.2.2903': attribute type 2 has an invalid length. [ 1263.610485][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1263.633895][T11687] netlink: 'syz.2.2903': attribute type 2 has an invalid length. [ 1263.634525][T11687] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1263.940963][T11693] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1263.942789][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1264.496958][T11707] netlink: 'syz.2.2912': attribute type 1 has an invalid length. [ 1264.505617][T11707] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1264.791728][T11711] pim6reg1: entered promiscuous mode [ 1264.792032][T11711] pim6reg1: entered allmulticast mode [ 1265.729566][T11728] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2923'. [ 1265.730053][T11728] bond_slave_1: default FDB implementation only supports local addresses [ 1267.578332][T11758] netlink: 'syz.3.2934': attribute type 13 has an invalid length. [ 1267.581256][T11758] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1267.586518][T11758] syz_tun: refused to change device tx_queue_len [ 1268.805733][T11773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1268.812709][T11773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1269.111947][T11784] netlink: 'syz.3.2944': attribute type 19 has an invalid length. [ 1269.238876][T11788] netlink: 'syz.3.2946': attribute type 2 has an invalid length. [ 1269.240455][T11788] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1269.417481][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1269.421607][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1269.447783][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1271.488799][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 1271.489183][T11842] tc_dump_action: action bad kind [ 1271.642280][T11846] netlink: 'syz.3.2974': attribute type 32 has an invalid length. [ 1272.580884][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 1273.017950][T11874] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 1273.018253][T11874] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2987'. [ 1273.205399][T11878] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2989'. [ 1273.205793][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2989'. [ 1273.328687][T11881] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 1273.329020][T11881] netlink: 'syz.2.2990': attribute type 2 has an invalid length. [ 1273.518272][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1273.922405][T11896] netlink: 'syz.3.2997': attribute type 29 has an invalid length. [ 1273.945747][T11896] netlink: 'syz.3.2997': attribute type 29 has an invalid length. [ 1274.681122][T11912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1279.867158][T11972] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 1279.868376][T11972] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3025'. [ 1280.327450][T11984] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 1280.327614][T11984] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3030'. [ 1280.542401][T11989] syzkaller0: entered promiscuous mode [ 1280.542678][T11989] syzkaller0: entered allmulticast mode [ 1281.616605][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'. [ 1284.573780][T12072] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 1284.585145][T12072] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1284.857713][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.859177][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.029434][T12086] netlink: 'syz.3.3050': attribute type 1 has an invalid length. [ 1285.034571][T12086] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3050'. [ 1285.442705][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.450832][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.658400][T12099] netlink: 'syz.3.3056': attribute type 1 has an invalid length. [ 1285.660223][T12099] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1285.779232][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 1289.192405][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.195793][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.960417][T12140] syzkaller0: entered promiscuous mode [ 1291.960692][T12140] syzkaller0: entered allmulticast mode [ 1295.023459][T12154] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 1295.023665][T12154] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1295.153962][T12156] bond1: option downdelay: invalid value (18446744073709551449) [ 1295.155250][T12156] bond1: option downdelay: allowed values 0 - 2147483647 [ 1295.178123][T12156] bond1 (unregistering): Released all slaves [ 1296.047882][T12165] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 1296.049530][T12165] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1299.377395][T12176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.380705][T12176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.479223][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.480234][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.505922][T12188] could not allocate digest TFM handle [ 1303.559036][T12240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.563594][T12240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.890015][T12248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1304.718661][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.721756][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.120462][ T28] audit: type=1326 audit(1306.960:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12275 comm="syz.2.3127" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb37771a8 code=0x0 [ 1307.742273][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1313.779232][T12302] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 1314.435880][T12329] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 1314.436174][T12329] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1314.550945][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.552748][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.710512][T12336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.716342][T12336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.739430][T12351] blkio.reset_stats is deprecated [ 1315.915268][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.916723][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.143936][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.148347][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.364095][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.367305][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.454881][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.459628][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.748618][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.752894][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.323448][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.328645][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.259320][T12419] syzkaller0: entered promiscuous mode [ 1319.259669][T12419] syzkaller0: entered allmulticast mode [ 1319.323389][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.354685][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.793795][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1319.794435][T12429] netlink: 'syz.2.3184': attribute type 5 has an invalid length. [ 1319.794572][T12429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1319.816573][T12429] geneve2: entered promiscuous mode [ 1319.834919][T12429] geneve2: entered allmulticast mode [ 1319.846868][ T1121] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1319.847504][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1319.847682][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1319.847828][ T1121] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1319.913080][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3185'. [ 1320.336780][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.338121][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.608298][T12444] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1323.178289][T12470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.182661][T12470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.496308][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.497808][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.548800][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.551334][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.016495][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.017945][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.140009][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.142157][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.192232][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1328.193227][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1329.580244][T12581] binder: 12580:12581 tried to acquire reference to desc 0, got 1 instead [ 1329.583082][T12581] binder: 12580:12581 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1329.588835][T12581] binder: 12581 RLIMIT_NICE not set [ 1330.092702][T12581] binder: send failed reply for transaction 43 to 12580:12582 [ 1330.098214][ T9594] binder: undelivered TRANSACTION_COMPLETE [ 1330.098610][ T9594] binder: undelivered TRANSACTION_ERROR: 29189 [ 1332.227045][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1332.341024][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1332.850994][T12605] input: syz0 as /devices/virtual/input/input9 [ 1333.512216][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.513714][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.152710][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.157874][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.311568][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1337.374218][T12671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.387231][ T28] audit: type=1326 audit(1337.190:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12673 comm="syz.3.3281" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x0 [ 1338.553549][T12694] binder: 12692:12694 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1338.554071][T12694] binder: 12694 RLIMIT_NICE not set [ 1338.559398][T12694] binder: 12692:12694 ioctl c0306201 20000040 returned -14 [ 1339.077514][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.082058][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.281380][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1339.285411][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1339.357021][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1340.615372][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.616899][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.808340][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.811407][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.870384][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.879030][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.219692][T12767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1354.423408][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.428303][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.632748][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.636164][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.750035][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.756861][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.533949][ T28] audit: type=1326 audit(1355.370:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12800 comm="syz.3.3328" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x0 [ 1358.160653][T12806] binder: 12805:12806 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 1358.161015][T12806] binder: 12805:12806 ioctl c0306201 20000640 returned -22 [ 1358.330608][T12808] syzkaller0: entered promiscuous mode [ 1358.332124][T12808] syzkaller0: entered allmulticast mode [ 1358.611315][T12810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.612781][T12810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.765754][T12813] binder: 12812:12813 got transaction to invalid handle, 1 [ 1358.765967][T12813] binder: 12812:12813 cannot find target node [ 1358.767211][T12813] binder: 12812:12813 transaction call to 0:0 failed 46/29201/-22, code 0 size 0-0 line 3236 [ 1363.619976][T12839] bond0: (slave bond_slave_0): Releasing backup interface [ 1363.729760][T12839] bond0: (slave bond_slave_1): Releasing backup interface [ 1363.877915][T12839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1367.495487][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.497000][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.403866][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1378.151381][T12970] macvlan0: entered promiscuous mode [ 1378.618929][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.626671][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.655341][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.658422][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.845160][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1378.875685][T12992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1381.895593][T13012] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:003e with DS=0x3 [ 1382.088287][T13016] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3413'. [ 1382.554731][T13026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3418'. [ 1382.921773][T13041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.925202][T13041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.312933][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.317504][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.352768][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.356449][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.835777][T13064] syzkaller1: entered promiscuous mode [ 1384.835981][T13064] syzkaller1: entered allmulticast mode [ 1385.360538][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.361894][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.374950][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.375771][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.031206][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.036622][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.905103][ T1121] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1391.046862][ T1121] gretap1 (unregistering): left allmulticast mode [ 1391.223618][ T1121] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1391.232988][ T1121] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1391.457399][ T1121] bond0 (unregistering): Released all slaves [ 1391.469841][ T1121] bond1 (unregistering): Released all slaves [ 1391.490765][ T1121] bond2 (unregistering): Released all slaves [ 1391.886243][ T1121] hsr_slave_0: left promiscuous mode [ 1391.891076][ T1121] hsr_slave_1: left promiscuous mode [ 1396.923606][T13143] binder: 13142:13143 ioctl 4018620d 0 returned -22 [ 1396.927858][T13143] binder: 13142:13143 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1396.973639][T13143] pim6reg: entered allmulticast mode [ 1396.975799][T13143] pim6reg: left allmulticast mode [ 1398.925891][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.928297][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.138217][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.141211][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.941913][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1404.204415][T13214] netlink: 'syz.2.3486': attribute type 13 has an invalid length. [ 1404.436776][T13214] netlink: 'syz.2.3486': attribute type 10 has an invalid length. [ 1404.675098][T13214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.676569][T13214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.744778][T13253] xt_hashlimit: size too large, truncated to 1048576 [ 1408.293532][T13261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1412.743227][T13284] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1413.600653][T13299] IPv6: addrconf: prefix option has invalid lifetime [ 1416.911919][T13323] xt_hashlimit: size too large, truncated to 1048576 [ 1417.459159][T13331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3536'. [ 1419.055277][T13348] -1: renamed from syzkaller0 [ 1420.732427][T13375] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1422.503081][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.505658][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1422.684821][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.685145][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1423.079992][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.080362][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1423.394430][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.394628][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1423.779384][T13391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.786216][T13391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.901189][ T29] bond0 (unregistering): Released all slaves [ 1424.950893][ T29] bond1 (unregistering): Released all slaves [ 1425.492856][ T29] hsr_slave_0: left promiscuous mode [ 1425.496992][ T29] hsr_slave_1: left promiscuous mode [ 1425.519484][ T29] veth1_macvtap: left promiscuous mode [ 1425.520906][ T29] veth0_macvtap: left promiscuous mode [ 1425.525832][ T29] veth1_vlan: left promiscuous mode [ 1425.527406][ T29] veth0_vlan: left promiscuous mode [ 1426.459287][ T3162] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1426.556523][T13391] hsr_slave_0: entered promiscuous mode [ 1426.558421][T13391] hsr_slave_1: entered promiscuous mode [ 1428.559388][T13391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1428.580164][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1428.585393][T13391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1428.598392][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1428.603334][T13391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1428.615226][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1428.618658][T13391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1428.658154][T13391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1429.689110][T13391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.306011][T13391] veth0_vlan: entered promiscuous mode [ 1433.339206][T13391] veth1_vlan: entered promiscuous mode [ 1433.426056][T13391] veth0_macvtap: entered promiscuous mode [ 1433.446893][T13391] veth1_macvtap: entered promiscuous mode [ 1433.544510][ T1121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.545343][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.546482][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.547395][ T1121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.024862][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.026575][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.858533][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.862461][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.085961][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.087216][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.114174][T13589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.115635][T13589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.045523][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.047022][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.260376][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.261837][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.304471][T13624] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1453.869836][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.872720][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.050511][T13634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1458.799260][ T28] audit: type=1326 audit(1458.630:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.896091][ T28] audit: type=1326 audit(1458.730:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.903082][ T28] audit: type=1326 audit(1458.730:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.914506][ T28] audit: type=1326 audit(1458.730:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=3 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.924883][ T28] audit: type=1326 audit(1458.760:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.932628][ T28] audit: type=1326 audit(1458.760:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.933018][ T28] audit: type=1326 audit(1458.770:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1458.933654][ T28] audit: type=1326 audit(1458.770:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.3.3618" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaa9771a8 code=0x7ffc0000 [ 1461.020275][T13683] lo speed is unknown, defaulting to 1000 [ 1461.020847][T13683] lo speed is unknown, defaulting to 1000 [ 1461.023192][T13683] lo speed is unknown, defaulting to 1000 [ 1461.048372][T13683] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 1461.094572][T13683] lo speed is unknown, defaulting to 1000 [ 1461.099341][T13683] lo speed is unknown, defaulting to 1000 [ 1463.243256][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.246773][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.411852][T13723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.421249][T13723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.677309][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.680230][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.716148][T13741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1464.905256][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.908223][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.217800][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1469.886196][T13781] syzkaller0: entered promiscuous mode [ 1469.887689][T13781] syzkaller0: entered allmulticast mode [ 1471.987143][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.990286][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.237772][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.239380][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.317894][T13809] syz_tun: entered promiscuous mode [ 1472.327811][T13809] syz_tun: left promiscuous mode [ 1476.003644][T13820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1478.325383][T13827] siw: device registration error -23 [ 1480.536655][T13831] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3680'. [ 1481.556369][T13835] lo speed is unknown, defaulting to 1000 [ 1485.006461][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.014077][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.862478][T13835] hsr_slave_0: entered promiscuous mode [ 1485.866354][T13835] hsr_slave_1: entered promiscuous mode [ 1485.868845][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 1485.869180][T13835] Cannot create hsr debugfs directory [ 1486.543776][T13835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1486.556094][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1486.558186][T13835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1486.577090][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1486.579268][T13835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1486.609179][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1486.613703][T13835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1486.626848][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1487.333213][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.084810][T13835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1488.085192][T13835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1488.740592][T13905] binder: 13904:13905 ioctl c0306201 200003c0 returned -14 [ 1490.704928][T13835] veth0_vlan: entered promiscuous mode [ 1490.727415][T13835] veth1_vlan: entered promiscuous mode [ 1490.875978][T13835] veth0_macvtap: entered promiscuous mode [ 1490.890069][T13835] veth1_macvtap: entered promiscuous mode [ 1491.016761][ T1121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.017287][ T1121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.022322][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.022788][ T1121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.756333][T13943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.760549][T13943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.466244][T13958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3698'. [ 1496.361878][T13968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.362784][T13968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.600404][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3705'. [ 1496.600865][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3705'. [ 1501.380097][T14014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.381607][T14014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.739294][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1502.740941][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1502.742856][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1503.482249][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.483767][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.518458][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1508.383641][T14061] fuse: Bad value for 'fd' [ 1508.750916][T14072] loop8: detected capacity change from 0 to 4 [ 1508.977423][T14077] fuse: Bad value for 'fd' [ 1514.872072][T14107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.875484][T14107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.874984][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.876527][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.282795][T14150] block nbd4: shutting down sockets [ 1524.875032][T14176] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1525.066278][T14180] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3779'. [ 1527.915487][ T9597] ------------[ cut here ]------------ [ 1527.915827][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1527.922548][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1527.930743][ T9597] Modules linked in: [ 1527.933236][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT [ 1527.934375][ T9597] Tainted: [L]=SOFTLOCKUP [ 1527.934768][ T9597] Hardware name: linux,dummy-virt (DT) [ 1527.935528][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1527.936394][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1527.936877][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1527.937328][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1527.937732][ T9597] sp : ffff8000871f3cc0 [ 1527.938109][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1527.938988][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1527.939585][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1527.940222][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1527.940873][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1527.943546][ T9597] x14: 00000000000002f0 x13: 00000000e5b906e6 x12: 000001618ec49dfc [ 1527.945472][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1527.946239][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1527.946934][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1527.947497][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1527.948352][ T9597] Call trace: [ 1527.948933][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1527.949607][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1527.950064][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1527.950395][ T9597] process_one_work+0x180/0x2d0 [ 1527.950756][ T9597] worker_thread+0x18c/0x300 [ 1527.951117][ T9597] kthread+0x118/0x130 [ 1527.951375][ T9597] ret_from_fork+0x10/0x20 [ 1527.952074][ T9597] ---[ end trace 0000000000000000 ]--- [ 1529.463778][ T9597] ------------[ cut here ]------------ [ 1529.464053][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1529.467390][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1529.468306][ T9597] Modules linked in: [ 1529.468584][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1529.469325][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1529.469642][ T9597] Hardware name: linux,dummy-virt (DT) [ 1529.469928][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1529.470252][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1529.470703][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1529.471068][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1529.471514][ T9597] sp : ffff8000871f3cc0 [ 1529.471755][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1529.472270][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1529.472825][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1529.473334][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f7f0000003690080 [ 1529.473837][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000832abb4d [ 1529.474409][ T9597] x14: 00000000000001ad x13: 00000000f5257d14 x12: 0000b0528bbb7f94 [ 1529.474893][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1529.475505][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1529.476170][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1529.476762][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1529.477371][ T9597] Call trace: [ 1529.477555][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1529.478155][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1529.478544][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1529.478939][ T9597] process_one_work+0x180/0x2d0 [ 1529.479224][ T9597] worker_thread+0x18c/0x300 [ 1529.479519][ T9597] kthread+0x118/0x130 [ 1529.479785][ T9597] ret_from_fork+0x10/0x20 [ 1529.480090][ T9597] ---[ end trace 0000000000000000 ]--- [ 1530.904472][ T9597] ------------[ cut here ]------------ [ 1530.904790][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1530.913323][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1530.914432][ T9597] Modules linked in: [ 1530.914761][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1530.915469][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1530.915814][ T9597] Hardware name: linux,dummy-virt (DT) [ 1530.916160][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1530.916648][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1530.917134][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1530.917420][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1530.917701][ T9597] sp : ffff8000871f3cc0 [ 1530.917949][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1530.918479][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1530.919002][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1530.919689][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f1f0000007159800 [ 1530.920251][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1530.920852][ T9597] x14: 000000000000031d x13: 00000000d744fcc9 x12: 00009bd0c3284cac [ 1530.921556][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1530.922019][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1530.922613][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1530.923158][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1530.923854][ T9597] Call trace: [ 1530.924112][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1530.924563][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1530.925020][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1530.925431][ T9597] process_one_work+0x180/0x2d0 [ 1530.925837][ T9597] worker_thread+0x18c/0x300 [ 1530.926105][ T9597] kthread+0x118/0x130 [ 1530.926419][ T9597] ret_from_fork+0x10/0x20 [ 1530.926788][ T9597] ---[ end trace 0000000000000000 ]--- [ 1533.011883][ T9597] ------------[ cut here ]------------ [ 1533.012231][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1533.012702][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1533.014262][ T9597] Modules linked in: [ 1533.014624][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1533.015091][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1533.015334][ T9597] Hardware name: linux,dummy-virt (DT) [ 1533.015593][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1533.015991][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1533.016412][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1533.016789][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1533.017060][ T9597] sp : ffff8000871f3cc0 [ 1533.017301][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1533.017858][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1533.018325][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1533.018818][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: 00000000ffffffff [ 1533.019248][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800082e5e006 [ 1533.019687][ T9597] x14: 00000000ffffffea x13: ffff8000871f3918 x12: ffff800082c2bde0 [ 1533.020106][ T9597] x11: ffff800082b7be38 x10: ffff800082c2be38 x9 : 0000000000000001 [ 1533.020562][ T9597] x8 : 0000000000000001 x7 : 0000000000000002 x6 : ffffffffffffffff [ 1533.020995][ T9597] x5 : 0000000000001787 x4 : 0000000000000002 x3 : 0000000000000001 [ 1533.021435][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1533.022103][ T9597] Call trace: [ 1533.022384][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1533.022751][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1533.023161][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1533.023526][ T9597] process_one_work+0x180/0x2d0 [ 1533.023827][ T9597] worker_thread+0x18c/0x300 [ 1533.024088][ T9597] kthread+0x118/0x130 [ 1533.024357][ T9597] ret_from_fork+0x10/0x20 [ 1533.024737][ T9597] ---[ end trace 0000000000000000 ]--- [ 1535.054755][ T9597] ------------[ cut here ]------------ [ 1535.055013][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1535.059647][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1535.060610][ T9597] Modules linked in: [ 1535.060937][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1535.061619][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1535.061948][ T9597] Hardware name: linux,dummy-virt (DT) [ 1535.062345][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1535.062742][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1535.063216][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1535.063617][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1535.064012][ T9597] sp : ffff8000871f3cc0 [ 1535.064389][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1535.065118][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1535.065922][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1535.066473][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1535.067099][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1535.067768][ T9597] x14: 0000000000000275 x13: 00000000eac0c6e6 x12: 00000165a1af0264 [ 1535.068395][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1535.069205][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1535.069992][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1535.070597][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1535.071050][ T9597] Call trace: [ 1535.071331][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1535.071816][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1535.072315][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1535.072705][ T9597] process_one_work+0x180/0x2d0 [ 1535.073127][ T9597] worker_thread+0x18c/0x300 [ 1535.073667][ T9597] kthread+0x118/0x130 [ 1535.074050][ T9597] ret_from_fork+0x10/0x20 [ 1535.074428][ T9597] ---[ end trace 0000000000000000 ]--- [ 1536.715037][ T9597] ------------[ cut here ]------------ [ 1536.715312][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1536.721992][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1536.723300][ T9597] Modules linked in: [ 1536.723734][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1536.725129][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1536.725666][ T9597] Hardware name: linux,dummy-virt (DT) [ 1536.726240][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1536.726908][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1536.727408][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1536.728004][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1536.728567][ T9597] sp : ffff8000871f3cc0 [ 1536.729135][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1536.729971][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1536.730822][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1536.732031][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: fdf00000227e9400 [ 1536.732734][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffffc21af8c0 [ 1536.734832][ T9597] x14: 0000000000000002 x13: 00000000e5b906e6 x12: 000000c2b9d6d8f6 [ 1536.736259][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1536.736979][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1536.737516][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1536.738386][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1536.739485][ T9597] Call trace: [ 1536.740012][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1536.741078][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1536.741617][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1536.742011][ T9597] process_one_work+0x180/0x2d0 [ 1536.742496][ T9597] worker_thread+0x18c/0x300 [ 1536.742879][ T9597] kthread+0x118/0x130 [ 1536.743170][ T9597] ret_from_fork+0x10/0x20 [ 1536.743506][ T9597] ---[ end trace 0000000000000000 ]--- [ 1537.795132][ T9597] ------------[ cut here ]------------ [ 1537.795392][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1537.800926][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1537.801577][ T9597] Modules linked in: [ 1537.801858][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1537.802252][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1537.802459][ T9597] Hardware name: linux,dummy-virt (DT) [ 1537.802702][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1537.802998][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1537.803300][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1537.803586][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1537.803861][ T9597] sp : ffff8000871f3cc0 [ 1537.804109][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1537.804488][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1537.804912][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1537.805317][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: faf0000005d99140 [ 1537.805691][ T9597] x17: ffff800083eebbb0 x16: 0000000000001000 x15: f6f0000004b149af [ 1537.806063][ T9597] x14: 00000000000003e0 x13: 00000000e5b906e6 x12: 0000011b906483e8 [ 1537.806424][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1537.806858][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1537.807268][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1537.807629][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1537.808024][ T9597] Call trace: [ 1537.808202][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1537.808475][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1537.808760][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1537.809015][ T9597] process_one_work+0x180/0x2d0 [ 1537.809286][ T9597] worker_thread+0x18c/0x300 [ 1537.809517][ T9597] kthread+0x118/0x130 [ 1537.809729][ T9597] ret_from_fork+0x10/0x20 [ 1537.809970][ T9597] ---[ end trace 0000000000000000 ]--- [ 1538.904894][ T9597] ------------[ cut here ]------------ [ 1538.905238][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1538.914920][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1538.915812][ T9597] Modules linked in: [ 1538.916097][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1538.916558][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1538.916794][ T9597] Hardware name: linux,dummy-virt (DT) [ 1538.917086][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1538.917402][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1538.917721][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1538.917992][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1538.918251][ T9597] sp : ffff8000871f3cc0 [ 1538.918462][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1538.918874][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1538.919276][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1538.919690][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f6f0000003691140 [ 1538.920096][ T9597] x17: 00000000cc7aae78 x16: 0000000086d24e68 x15: 000000002b12054b [ 1538.920489][ T9597] x14: 0000000000000005 x13: 00000000d744fcc9 x12: 00001b30f0c60b86 [ 1538.921057][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1538.921623][ T9597] x8 : f8f00000048b6408 x7 : 000000000000b67e x6 : 0000000000000000 [ 1538.922309][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1538.922882][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1538.923436][ T9597] Call trace: [ 1538.923719][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1538.924420][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1538.924875][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1538.925359][ T9597] process_one_work+0x180/0x2d0 [ 1538.925783][ T9597] worker_thread+0x18c/0x300 [ 1538.926080][ T9597] kthread+0x118/0x130 [ 1538.926421][ T9597] ret_from_fork+0x10/0x20 [ 1538.926818][ T9597] ---[ end trace 0000000000000000 ]--- [ 1539.994904][ T9597] ------------[ cut here ]------------ [ 1539.995111][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1539.998507][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1539.999744][ T9597] Modules linked in: [ 1540.000111][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1540.000802][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1540.001089][ T9597] Hardware name: linux,dummy-virt (DT) [ 1540.001444][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1540.001967][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1540.002297][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1540.002595][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1540.002861][ T9597] sp : ffff8000871f3cc0 [ 1540.003062][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1540.003461][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1540.003842][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1540.004307][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1540.004708][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1540.005129][ T9597] x14: 000000000000009e x13: 00000000f5257d14 x12: 0000005dd859e1a8 [ 1540.005511][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1540.005899][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1540.006290][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1540.006708][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1540.007104][ T9597] Call trace: [ 1540.007284][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1540.007600][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1540.007887][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1540.008141][ T9597] process_one_work+0x180/0x2d0 [ 1540.008398][ T9597] worker_thread+0x18c/0x300 [ 1540.008649][ T9597] kthread+0x118/0x130 [ 1540.008870][ T9597] ret_from_fork+0x10/0x20 [ 1540.009139][ T9597] ---[ end trace 0000000000000000 ]--- [ 1541.045065][ T9597] ------------[ cut here ]------------ [ 1541.045364][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1541.050353][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1541.051159][ T9597] Modules linked in: [ 1541.051475][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1541.052017][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1541.052261][ T9597] Hardware name: linux,dummy-virt (DT) [ 1541.052543][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1541.053018][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1541.053622][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1541.054204][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1541.054570][ T9597] sp : ffff8000871f3cc0 [ 1541.054846][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1541.055325][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1541.056288][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1541.056829][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f7f0000003690080 [ 1541.057314][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000832abb4d [ 1541.057761][ T9597] x14: 00000000000000ea x13: 00000000eac0c6e6 x12: 0000015b8b667682 [ 1541.058308][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1541.059280][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1541.060209][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1541.061131][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1541.062210][ T9597] Call trace: [ 1541.062457][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1541.062857][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1541.063240][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1541.063550][ T9597] process_one_work+0x180/0x2d0 [ 1541.063831][ T9597] worker_thread+0x18c/0x300 [ 1541.064165][ T9597] kthread+0x118/0x130 [ 1541.064455][ T9597] ret_from_fork+0x10/0x20 [ 1541.064947][ T9597] ---[ end trace 0000000000000000 ]--- [ 1542.105071][ T9597] ------------[ cut here ]------------ [ 1542.105349][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1542.110607][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1542.111681][ T9597] Modules linked in: [ 1542.112007][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1542.112628][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1542.112900][ T9597] Hardware name: linux,dummy-virt (DT) [ 1542.113239][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1542.113718][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1542.114250][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1542.114623][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1542.114999][ T9597] sp : ffff8000871f3cc0 [ 1542.115205][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1542.115732][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1542.116282][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1542.116799][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1542.117374][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1542.118121][ T9597] x14: 000000000000002d x13: 00000000eac0c6e6 x12: 00000208dbb94e50 [ 1542.118713][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1542.119186][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1542.119745][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1542.120272][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1542.120890][ T9597] Call trace: [ 1542.121200][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1542.121569][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1542.121953][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1542.122376][ T9597] process_one_work+0x180/0x2d0 [ 1542.122751][ T9597] worker_thread+0x18c/0x300 [ 1542.123075][ T9597] kthread+0x118/0x130 [ 1542.123289][ T9597] ret_from_fork+0x10/0x20 [ 1542.123622][ T9597] ---[ end trace 0000000000000000 ]--- [ 1543.114795][ T9597] ------------[ cut here ]------------ [ 1543.114985][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1543.117853][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1543.118473][ T9597] Modules linked in: [ 1543.118723][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1543.119308][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1543.119616][ T9597] Hardware name: linux,dummy-virt (DT) [ 1543.119906][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1543.120271][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1543.120685][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1543.121124][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1543.121452][ T9597] sp : ffff8000871f3cc0 [ 1543.121880][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1543.122461][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1543.123064][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1543.123371][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1543.123638][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1543.123890][ T9597] x14: 00000000000001e9 x13: 00000000f5257d14 x12: 000000fdc3ce79b4 [ 1543.124240][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1543.124444][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1543.125249][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1543.125556][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1543.125800][ T9597] Call trace: [ 1543.125922][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1543.126123][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1543.126344][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1543.126824][ T9597] process_one_work+0x180/0x2d0 [ 1543.127151][ T9597] worker_thread+0x18c/0x300 [ 1543.127446][ T9597] kthread+0x118/0x130 [ 1543.127625][ T9597] ret_from_fork+0x10/0x20 [ 1543.127828][ T9597] ---[ end trace 0000000000000000 ]--- [ 1544.165026][ T9597] ------------[ cut here ]------------ [ 1544.165344][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1544.169675][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1544.170725][ T9597] Modules linked in: [ 1544.171063][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1544.171845][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1544.172181][ T9597] Hardware name: linux,dummy-virt (DT) [ 1544.172557][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1544.173000][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1544.173638][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1544.174129][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1544.174672][ T9597] sp : ffff8000871f3cc0 [ 1544.174994][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1544.175739][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1544.176419][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1544.176932][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1544.177440][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1544.177972][ T9597] x14: 0000000000000265 x13: 00000000eac0c6e6 x12: 000001a7a7e6f314 [ 1544.178722][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1544.179096][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1544.179632][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1544.180080][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1544.180494][ T9597] Call trace: [ 1544.180672][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1544.181184][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1544.181511][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1544.181759][ T9597] process_one_work+0x180/0x2d0 [ 1544.181899][ T9597] worker_thread+0x18c/0x300 [ 1544.182160][ T9597] kthread+0x118/0x130 [ 1544.182332][ T9597] ret_from_fork+0x10/0x20 [ 1544.182511][ T9597] ---[ end trace 0000000000000000 ]--- [ 1545.215181][ T9597] ------------[ cut here ]------------ [ 1545.215473][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1545.220897][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1545.221989][ T9597] Modules linked in: [ 1545.222469][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1545.223313][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1545.223664][ T9597] Hardware name: linux,dummy-virt (DT) [ 1545.223924][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1545.224512][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1545.225079][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1545.225509][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1545.225996][ T9597] sp : ffff8000871f3cc0 [ 1545.226327][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1545.227135][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1545.227813][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1545.228300][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1545.228909][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1545.229705][ T9597] x14: 0000000000000079 x13: 00000000eac0c6e6 x12: 0000010bc3e2de58 [ 1545.230353][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1545.231145][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1545.231962][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1545.232607][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1545.233009][ T9597] Call trace: [ 1545.233325][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1545.233765][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1545.234082][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1545.234381][ T9597] process_one_work+0x180/0x2d0 [ 1545.234733][ T9597] worker_thread+0x18c/0x300 [ 1545.235062][ T9597] kthread+0x118/0x130 [ 1545.235292][ T9597] ret_from_fork+0x10/0x20 [ 1545.235731][ T9597] ---[ end trace 0000000000000000 ]--- [ 1546.284762][ T9597] ------------[ cut here ]------------ [ 1546.285176][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1546.290068][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1546.291005][ T9597] Modules linked in: [ 1546.291334][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1546.291936][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1546.292182][ T9597] Hardware name: linux,dummy-virt (DT) [ 1546.292614][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1546.293112][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1546.293701][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1546.294223][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1546.294704][ T9597] sp : ffff8000871f3cc0 [ 1546.295120][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1546.295773][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1546.296374][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1546.297000][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f6f0000003691140 [ 1546.297686][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1546.298282][ T9597] x14: 00000000000001a3 x13: 00000000eac0c6e6 x12: 00000c772c8fc690 [ 1546.298759][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1546.299441][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1546.299992][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1546.300670][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1546.301338][ T9597] Call trace: [ 1546.301619][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1546.302079][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1546.302476][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1546.302906][ T9597] process_one_work+0x180/0x2d0 [ 1546.303326][ T9597] worker_thread+0x18c/0x300 [ 1546.303763][ T9597] kthread+0x118/0x130 [ 1546.304175][ T9597] ret_from_fork+0x10/0x20 [ 1546.304473][ T9597] ---[ end trace 0000000000000000 ]--- [ 1547.394834][ T9597] ------------[ cut here ]------------ [ 1547.395182][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1547.400001][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1547.400880][ T9597] Modules linked in: [ 1547.401195][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1547.401832][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1547.402183][ T9597] Hardware name: linux,dummy-virt (DT) [ 1547.402564][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1547.403037][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1547.403511][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1547.403988][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1547.404458][ T9597] sp : ffff8000871f3cc0 [ 1547.404737][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1547.405368][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1547.406040][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1547.406574][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1547.407130][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1547.407602][ T9597] x14: 0000000000000126 x13: 00000000eac0c6e6 x12: 00001cf6e50a64c4 [ 1547.408101][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1547.408725][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1547.409401][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1547.410014][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1547.410632][ T9597] Call trace: [ 1547.410910][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1547.411278][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1547.411717][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1547.412027][ T9597] process_one_work+0x180/0x2d0 [ 1547.412397][ T9597] worker_thread+0x18c/0x300 [ 1547.412802][ T9597] kthread+0x118/0x130 [ 1547.413184][ T9597] ret_from_fork+0x10/0x20 [ 1547.413594][ T9597] ---[ end trace 0000000000000000 ]--- [ 1548.412329][ T9597] ------------[ cut here ]------------ [ 1548.412656][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1548.420429][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1548.421522][ T9597] Modules linked in: [ 1548.421843][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1548.422413][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1548.422771][ T9597] Hardware name: linux,dummy-virt (DT) [ 1548.423155][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1548.424082][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1548.424681][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1548.425121][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1548.425468][ T9597] sp : ffff8000871f3cc0 [ 1548.425770][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1548.426314][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1548.426933][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1548.427440][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f7f00000068ae500 [ 1548.427993][ T9597] x17: 000000005a0031bb x16: 00000000a0a4b401 x15: 000000005f412ede [ 1548.428882][ T9597] x14: 000000000000013e x13: 00000000dbfbb796 x12: 00002eee02193afe [ 1548.429534][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1548.430058][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1548.430543][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1548.431128][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1548.431775][ T9597] Call trace: [ 1548.432142][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1548.432591][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1548.432945][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1548.433458][ T9597] process_one_work+0x180/0x2d0 [ 1548.433836][ T9597] worker_thread+0x18c/0x300 [ 1548.434537][ T9597] kthread+0x118/0x130 [ 1548.434878][ T9597] ret_from_fork+0x10/0x20 [ 1548.435172][ T9597] ---[ end trace 0000000000000000 ]--- [ 1549.458891][ T9597] ------------[ cut here ]------------ [ 1549.459173][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1549.463685][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1549.464601][ T9597] Modules linked in: [ 1549.464919][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1549.465519][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1549.465819][ T9597] Hardware name: linux,dummy-virt (DT) [ 1549.466203][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1549.466662][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1549.467235][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1549.467557][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1549.467829][ T9597] sp : ffff8000871f3cc0 [ 1549.468241][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1549.469134][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1549.470610][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1549.471279][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1549.472099][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1549.472671][ T9597] x14: 0000000000000246 x13: 00000000f5257d14 x12: 00000115b477b0a8 [ 1549.473321][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1549.473925][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1549.474447][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1549.475018][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1549.475595][ T9597] Call trace: [ 1549.475854][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1549.476255][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1549.476699][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1549.477116][ T9597] process_one_work+0x180/0x2d0 [ 1549.477493][ T9597] worker_thread+0x18c/0x300 [ 1549.477826][ T9597] kthread+0x118/0x130 [ 1549.478345][ T9597] ret_from_fork+0x10/0x20 [ 1549.478788][ T9597] ---[ end trace 0000000000000000 ]--- [ 1550.565143][ T9597] ------------[ cut here ]------------ [ 1550.565464][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1550.570115][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1550.571053][ T9597] Modules linked in: [ 1550.571394][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1550.572280][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1550.572577][ T9597] Hardware name: linux,dummy-virt (DT) [ 1550.573078][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1550.573553][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1550.574161][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1550.574532][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1550.574930][ T9597] sp : ffff8000871f3cc0 [ 1550.575267][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1550.575888][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1550.576456][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1550.577148][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f2f000000715ac00 [ 1550.577761][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1550.578294][ T9597] x14: 0000000000000297 x13: 00000000eac0c6e6 x12: 0000004786bc9a14 [ 1550.578863][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1550.579283][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1550.579693][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1550.580186][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1550.580728][ T9597] Call trace: [ 1550.580964][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1550.581421][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1550.581786][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1550.582246][ T9597] process_one_work+0x180/0x2d0 [ 1550.582735][ T9597] worker_thread+0x18c/0x300 [ 1550.583055][ T9597] kthread+0x118/0x130 [ 1550.583386][ T9597] ret_from_fork+0x10/0x20 [ 1550.583794][ T9597] ---[ end trace 0000000000000000 ]--- [ 1551.624974][ T9597] ------------[ cut here ]------------ [ 1551.625241][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1551.634600][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1551.635642][ T9597] Modules linked in: [ 1551.635981][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1551.636710][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1551.637109][ T9597] Hardware name: linux,dummy-virt (DT) [ 1551.637508][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1551.637965][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1551.638456][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1551.638826][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1551.639177][ T9597] sp : ffff8000871f3cc0 [ 1551.639420][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1551.641625][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1551.642066][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1551.642452][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: faf0000005d99140 [ 1551.642837][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000832abb4d [ 1551.644642][ T9597] x14: 00000000000001f7 x13: 00000000d744fcc9 x12: 0000020378314d4d [ 1551.645160][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1551.645854][ T9597] x8 : f8f00000048b6408 x7 : 000000000000b67e x6 : 0000000000000000 [ 1551.646531][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1551.647071][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1551.647661][ T9597] Call trace: [ 1551.647869][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1551.648373][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1551.648801][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1551.649192][ T9597] process_one_work+0x180/0x2d0 [ 1551.649519][ T9597] worker_thread+0x18c/0x300 [ 1551.649850][ T9597] kthread+0x118/0x130 [ 1551.650116][ T9597] ret_from_fork+0x10/0x20 [ 1551.650452][ T9597] ---[ end trace 0000000000000000 ]--- [ 1552.680932][ T9597] ------------[ cut here ]------------ [ 1552.681291][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1552.685089][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1552.685868][ T9597] Modules linked in: [ 1552.686048][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1552.686582][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1552.686871][ T9597] Hardware name: linux,dummy-virt (DT) [ 1552.687177][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1552.687565][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1552.687883][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1552.688192][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1552.688465][ T9597] sp : ffff8000871f3cc0 [ 1552.688615][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1552.688875][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1552.689216][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1552.689568][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1552.690004][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1552.690553][ T9597] x14: 0000000000000337 x13: 00000000efe4b99a x12: 000011227d45c0ea [ 1552.690803][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1552.691063][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1552.691291][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1552.691649][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1552.692133][ T9597] Call trace: [ 1552.692346][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1552.692587][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1552.692821][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1552.693130][ T9597] process_one_work+0x180/0x2d0 [ 1552.693356][ T9597] worker_thread+0x18c/0x300 [ 1552.693639][ T9597] kthread+0x118/0x130 [ 1552.693862][ T9597] ret_from_fork+0x10/0x20 [ 1552.694216][ T9597] ---[ end trace 0000000000000000 ]--- [ 1553.775065][ T9597] ------------[ cut here ]------------ [ 1553.775334][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1553.784693][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1553.786057][ T9597] Modules linked in: [ 1553.786372][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1553.786905][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1553.787107][ T9597] Hardware name: linux,dummy-virt (DT) [ 1553.787347][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1553.787631][ T9597] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1553.787941][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1553.788190][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1553.788525][ T9597] sp : ffff8000871f3cc0 [ 1553.788736][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1553.789224][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1553.789678][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1553.790069][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f6f0000003691140 [ 1553.790595][ T9597] x17: fff07ffffadc6000 x16: ffff800082f40000 x15: ffff8000832abb4d [ 1553.791051][ T9597] x14: 0000000000000022 x13: 00000000d744fcc9 x12: 0000017b3e89561b [ 1553.791501][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1553.792065][ T9597] x8 : f8f00000048b6408 x7 : 000000000000b67e x6 : 0000000000000000 [ 1553.792529][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1553.792880][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1553.793457][ T9597] Call trace: [ 1553.793650][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1553.794194][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1553.794616][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1553.794971][ T9597] process_one_work+0x180/0x2d0 [ 1553.795487][ T9597] worker_thread+0x18c/0x300 [ 1553.795898][ T9597] kthread+0x118/0x130 [ 1553.796274][ T9597] ret_from_fork+0x10/0x20 [ 1553.796633][ T9597] ---[ end trace 0000000000000000 ]--- [ 1554.824937][ T9597] ------------[ cut here ]------------ [ 1554.825265][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1554.834662][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1554.836351][ T9597] Modules linked in: [ 1554.836693][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1554.837232][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1554.837625][ T9597] Hardware name: linux,dummy-virt (DT) [ 1554.837918][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1554.838426][ T9597] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1554.838961][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1554.839336][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1554.839835][ T9597] sp : ffff8000871f3cc0 [ 1554.840170][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1554.840769][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1554.841272][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1554.841806][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: fcf00000068a4380 [ 1554.842536][ T9597] x17: fff07ffffadc6000 x16: ffff800082f40000 x15: 0000000000000002 [ 1554.843222][ T9597] x14: 000000000000026e x13: 00000000d744fcc9 x12: 0000014cfeb706ec [ 1554.844302][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1554.845146][ T9597] x8 : f8f00000048b6408 x7 : 000000000000b67e x6 : 0000000000000000 [ 1554.845631][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1554.846201][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1554.846569][ T9597] Call trace: [ 1554.846798][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1554.847114][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1554.847408][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1554.847715][ T9597] process_one_work+0x180/0x2d0 [ 1554.847988][ T9597] worker_thread+0x18c/0x300 [ 1554.848235][ T9597] kthread+0x118/0x130 [ 1554.848472][ T9597] ret_from_fork+0x10/0x20 [ 1554.848738][ T9597] ---[ end trace 0000000000000000 ]--- [ 1555.876988][ T9597] ------------[ cut here ]------------ [ 1555.877345][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1555.882467][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1555.883649][ T9597] Modules linked in: [ 1555.884103][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1555.884705][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1555.885101][ T9597] Hardware name: linux,dummy-virt (DT) [ 1555.885497][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1555.886026][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1555.886610][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1555.887031][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1555.887494][ T9597] sp : ffff8000871f3cc0 [ 1555.887835][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1555.888343][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1555.888954][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1555.889557][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f1f00000035a6500 [ 1555.890098][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1555.890711][ T9597] x14: 00000000000001c5 x13: 00000000eac0c6e6 x12: 000000dfbfbd9338 [ 1555.891397][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1555.892031][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1555.892878][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1555.893720][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1555.894351][ T9597] Call trace: [ 1555.894607][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1555.895170][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1555.895601][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1555.896023][ T9597] process_one_work+0x180/0x2d0 [ 1555.896430][ T9597] worker_thread+0x18c/0x300 [ 1555.896778][ T9597] kthread+0x118/0x130 [ 1555.897211][ T9597] ret_from_fork+0x10/0x20 [ 1555.897571][ T9597] ---[ end trace 0000000000000000 ]--- [ 1556.985321][ T9597] ------------[ cut here ]------------ [ 1556.985595][ T9597] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1556.990578][ T9597] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:9/9597 [ 1556.991744][ T9597] Modules linked in: [ 1556.992185][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: kworker/1:9 Tainted: G W L syzkaller #0 PREEMPT [ 1556.992792][ T9597] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1556.993190][ T9597] Hardware name: linux,dummy-virt (DT) [ 1556.993616][ T9597] Workqueue: events drm_fb_helper_damage_work [ 1556.994058][ T9597] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1556.994729][ T9597] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1556.995166][ T9597] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 1556.995620][ T9597] sp : ffff8000871f3cc0 [ 1556.996031][ T9597] x29: ffff8000871f3cf0 x28: 0000000000000000 x27: 0000000000000000 [ 1556.996834][ T9597] x26: 0000000000000000 x25: ffff8000871f3cc0 x24: fcf00000052be888 [ 1556.997628][ T9597] x23: 0000000000000000 x22: 000000000001646a x21: 0000000000000000 [ 1556.998425][ T9597] x20: 0000000000000000 x19: f2f00000048a6800 x18: f5f000000715a000 [ 1556.999061][ T9597] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 1556.999865][ T9597] x14: 00000000000000c8 x13: 00000000eac0c6e6 x12: 000000dcff7b3e86 [ 1557.000542][ T9597] x11: 00000000000000c0 x10: 38b551e2075b4ff8 x9 : ea745e25922c39b8 [ 1557.000963][ T9597] x8 : f8f00000048b6408 x7 : 0000000000000004 x6 : 0000000000000000 [ 1557.001458][ T9597] x5 : f8f00000048b53c0 x4 : fbffff3fffffffff x3 : 0000000000000000 [ 1557.002007][ T9597] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f8f00000048b53c0 [ 1557.002583][ T9597] Call trace: [ 1557.002875][ T9597] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 1557.003357][ T9597] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 1557.003717][ T9597] drm_fb_helper_damage_work+0x88/0x1c8 [ 1557.004208][ T9597] process_one_work+0x180/0x2d0 [ 1557.004634][ T9597] worker_thread+0x18c/0x300 [ 1557.005175][ T9597] kthread+0x118/0x130 [ 1557.005592][ T9597] ret_from_fork+0x10/0x20 [ 1557.006083][ T9597] ---[ end trace 0000000000000000 ]---