last executing test programs: 13.150628198s ago: executing program 0 (id=373): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10.426677243s ago: executing program 0 (id=376): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000380), 0x2e9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x138, 0x16, 0x633, 0x0, 0x7fffffff, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@empty, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx2\x00'}}}]}, 0x138}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x9, 0x1, 0x23d, 0x2020, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xa}, 0x50) close(r0) 6.719538533s ago: executing program 0 (id=380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x30, 0x8}}], 0x1, 0x0) 6.581295589s ago: executing program 0 (id=381): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x3, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3.950277653s ago: executing program 0 (id=384): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x61) writev(r3, &(0x7f0000000140)=[{&(0x7f00000002c0)="994b", 0x2}], 0x1) 1.119342501s ago: executing program 0 (id=386): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000014c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000001540)={[{0x8, 0x4e00, "0796360ded7c85c3"}]}) 654.357885ms ago: executing program 1 (id=390): socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='14', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 356.291249ms ago: executing program 1 (id=391): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000c40)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000c80)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf250300000008000100000000002800078024000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 228.740284ms ago: executing program 1 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f00000008c0)='10', 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) 130.418315ms ago: executing program 1 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 69.876163ms ago: executing program 1 (id=394): r0 = syz_io_uring_setup(0xb77, &(0x7f0000000500)={0x0, 0x4c1b, 0x40, 0xfffffffe, 0x1e9}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1) 0s ago: executing program 1 (id=395): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:4335' (ED25519) to the list of known hosts. syzkaller login: [ 82.720894][ T3392] cgroup: Unknown subsys name 'net' [ 82.934293][ T3392] cgroup: Unknown subsys name 'cpuset' [ 82.946488][ T3392] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.364547][ T3392] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.912353][ T3398] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.916933][ T3399] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.932771][ T3399] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.935682][ T3399] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.437473][ T3399] infiniband rxe0: set active [ 89.438101][ T812] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.451933][ T3399] infiniband rxe0: added rxe_eth0 [ 89.560540][ T3399] RDS/IB: rxe0: added [ 89.560961][ T3399] smc: adding ib device rxe0 with port count 1 [ 89.561199][ T3399] smc: ib device rxe0 port 1 has no pnetid [ 89.561528][ T812] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.564241][ T3399] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.035005][ T3399] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.412093][ T3398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.457161][ T3398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.567638][ T3398] hsr_slave_0: entered promiscuous mode [ 91.576088][ T3398] hsr_slave_1: entered promiscuous mode [ 91.922263][ T3399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.956305][ T3399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.479268][ T3398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.504629][ T3398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.508066][ T3398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.521300][ T3398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.526053][ T3398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.539632][ T3398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.549142][ T3398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.563808][ T3398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.845806][ T3399] hsr_slave_0: entered promiscuous mode [ 92.849011][ T3399] hsr_slave_1: entered promiscuous mode [ 92.854911][ T3399] debugfs: 'hsr0' already exists in 'hsr' [ 92.855374][ T3399] Cannot create hsr debugfs directory [ 93.526912][ T3399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.546169][ T3399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.556259][ T3399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.573721][ T3399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.587403][ T3399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.603499][ T3399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.607720][ T3399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.625088][ T3399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.742166][ T3398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.371612][ T3399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.545518][ T3398] veth0_vlan: entered promiscuous mode [ 96.643065][ T3398] veth1_vlan: entered promiscuous mode [ 96.824833][ T3398] veth0_macvtap: entered promiscuous mode [ 96.857697][ T3398] veth1_macvtap: entered promiscuous mode [ 97.154040][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.177072][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.248349][ T3399] veth0_vlan: entered promiscuous mode [ 97.353027][ T3399] veth1_vlan: entered promiscuous mode [ 97.362414][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.362629][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.547950][ T3399] veth0_macvtap: entered promiscuous mode [ 97.598312][ T3399] veth1_macvtap: entered promiscuous mode [ 97.849535][ T3398] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.854953][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.855479][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.855635][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.855766][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.547312][ T3592] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 101.008778][ T3599] syzkaller0: entered promiscuous mode [ 101.009122][ T3599] syzkaller0: entered allmulticast mode [ 101.025692][ T3599] 0: reclassify loop, rule prio 0, protocol 800 [ 101.398161][ T3486] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.444225][ T3603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17'. [ 102.643356][ T3628] Failed to decode metaid 5 dlen 4 err -22 [ 102.962422][ T3641] Zero length message leads to an empty skb [ 103.056091][ T3649] TC_ACT_REPEAT abuse ? [ 103.609058][ T3658] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 106.309319][ T3675] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 106.333895][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 106.334087][ T3675] veth1_to_bond: entered promiscuous mode [ 106.334187][ T3675] veth1_to_bond: entered allmulticast mode [ 106.464224][ T3679] ip_tables: iptables: counters copy to user failed while replacing table [ 110.852897][ T3665] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 118.987145][ T3887] x_tables: unsorted entry at hook 3 [ 119.998401][ T3911] ip_tables: iptables: counters copy to user failed while replacing table [ 120.018462][ T3911] ip_tables: iptables: counters copy to user failed while replacing table [ 120.353390][ T3917] syzkaller1: entered promiscuous mode [ 120.353523][ T3917] syzkaller1: entered allmulticast mode [ 125.388412][ T3980] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 125.545253][ T3985] xt_CONNSECMARK: invalid mode: 0 [ 125.912491][ T3999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'. [ 125.919587][ T4000] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 126.412736][ T4012] netlink: 'syz.0.148': attribute type 5 has an invalid length. [ 126.442542][ T4009] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 126.442668][ T4009] netlink: 244 bytes leftover after parsing attributes in process `syz.1.147'. [ 128.220786][ T4054] netlink: 'syz.0.165': attribute type 21 has an invalid length. [ 128.223874][ T4054] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 128.638020][ T4063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 128.639264][ T4063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 128.993219][ T4072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 129.507939][ T4092] rdma_op 00000000e6f3f401 conn xmit_rdma 0000000000000000 [ 129.894034][ T115] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.894264][ T115] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.894397][ T115] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.894539][ T115] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.916866][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 130.039236][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'. [ 150.621977][ T3486] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.807563][ T3486] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.827946][ T3486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.853492][ T3486] usb 1-1: config 0 descriptor?? [ 151.135079][ T3486] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.423817][ T3486] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 151.424013][ T3486] [drm] Initialized udl on minor 2 [ 151.945545][ T3486] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.959689][ T3318] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.983435][ T3486] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 152.007054][ T3318] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.008051][ T3318] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 152.062831][ T3486] usb 1-1: USB disconnect, device number 2 [ 153.499052][ T4195] syzkaller0: entered promiscuous mode [ 153.499189][ T4195] syzkaller0: entered allmulticast mode [ 154.149184][ T4211] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 158.337839][ T4243] FAULT_INJECTION: forcing a failure. [ 158.337839][ T4243] name failslab, interval 1, probability 0, space 0, times 1 [ 158.338754][ T4243] CPU: 0 UID: 0 PID: 4243 Comm: syz.0.232 Not tainted syzkaller #0 PREEMPT [ 158.338999][ T4243] Hardware name: linux,dummy-virt (DT) [ 158.339307][ T4243] Call trace: [ 158.339674][ T4243] show_stack+0x18/0x24 (C) [ 158.340672][ T4243] dump_stack_lvl+0x60/0x80 [ 158.340761][ T4243] dump_stack+0x18/0x24 [ 158.340835][ T4243] should_fail_ex+0x1d0/0x238 [ 158.340923][ T4243] should_failslab+0x54/0x80 [ 158.341026][ T4243] __kmalloc_cache_noprof+0x58/0x42c [ 158.341105][ T4243] call_usermodehelper_setup+0x68/0xcc [ 158.341181][ T4243] __request_module+0x17c/0x220 [ 158.341253][ T4243] nvmf_dev_write+0xf4/0x338 [ 158.341329][ T4243] vfs_write+0xd4/0x440 [ 158.341408][ T4243] ksys_write+0x70/0x114 [ 158.341483][ T4243] __arm64_sys_write+0x18/0x24 [ 158.341558][ T4243] invoke_syscall+0x54/0x108 [ 158.341633][ T4243] el0_svc_common.constprop.0+0x40/0xe0 [ 158.341707][ T4243] do_el0_svc+0x1c/0x28 [ 158.341775][ T4243] el0_svc+0x38/0x200 [ 158.341851][ T4243] el0t_64_sync_handler+0xa0/0xe4 [ 158.341919][ T4243] el0t_64_sync+0x1a4/0x1a8 [ 158.362178][ T4243] nvme_fabrics: missing parameter 'nqn=%s' [ 160.671916][ T13] nvme nvme0: rdma_resolve_route failed (-110). [ 160.686713][ T4262] nvme nvme0: rdma connection establishment failed (-19) [ 163.950794][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.100915][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 164.104463][ T24] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 164.109822][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 164.110541][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.110677][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.124160][ T24] usb 1-1: config 0 descriptor?? [ 169.764566][ T24] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 169.764764][ T24] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 169.764840][ T24] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 169.764910][ T24] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 169.764983][ T24] hid-generic 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 169.794509][ T24] hid-generic 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 170.005458][ T4290] netlink: 34 bytes leftover after parsing attributes in process `syz.1.247'. [ 178.718746][ T3318] usb 1-1: USB disconnect, device number 3 [ 181.656704][ T4306] bonding: b is being created... [ 182.286777][ T4311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.288079][ T4311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.781275][ T3551] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.930840][ T3551] usb 1-1: Using ep0 maxpacket: 8 [ 182.934911][ T3551] usb 1-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.40 [ 183.963781][ T3551] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.963991][ T3551] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.989370][ T3551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.989548][ T3551] usb 1-1: Product: syz [ 183.989627][ T3551] usb 1-1: Manufacturer: syz [ 183.989694][ T3551] usb 1-1: SerialNumber: syz [ 185.575523][ T3551] usb 1-1: USB disconnect, device number 4 [ 185.783983][ T4296] udevd[4296]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.730870][ T3551] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.886873][ T3551] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 188.899046][ T3551] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.899261][ T3551] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.899475][ T3551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.923370][ T3551] usb 1-1: config 0 descriptor?? [ 191.151868][ T3551] usb 1-1: string descriptor 0 read error: -71 [ 191.162933][ T3551] usb 1-1: USB disconnect, device number 5 [ 192.428942][ T29] audit: type=1326 audit(192.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4353 comm="syz.1.270" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 192.429518][ T29] audit: type=1326 audit(192.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4353 comm="syz.1.270" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 192.445769][ T29] audit: type=1326 audit(192.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4353 comm="syz.1.270" exe="/syz-executor" sig=0 arch=c00000b7 syscall=164 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 192.446196][ T29] audit: type=1326 audit(192.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4353 comm="syz.1.270" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 192.446290][ T29] audit: type=1326 audit(192.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4353 comm="syz.1.270" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 193.708819][ T4364] capability: warning: `syz.0.274' uses deprecated v2 capabilities in a way that may be insecure [ 196.856631][ T4377] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 196.998878][ T4377] bond1: (slave gretap1): making interface the new active one [ 197.014318][ T4377] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 197.140740][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 197.308367][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.320544][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 197.320777][ T24] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 197.329051][ T24] usb 1-1: config 129 has an invalid interface number: 8 but max is 1 [ 197.329205][ T24] usb 1-1: config 129 has an invalid interface number: 3 but max is 1 [ 197.329376][ T24] usb 1-1: config 129 has no interface number 0 [ 197.329465][ T24] usb 1-1: config 129 has no interface number 1 [ 197.329750][ T24] usb 1-1: config 129 interface 8 has no altsetting 0 [ 197.352459][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.352599][ T24] usb 1-1: Product: syz [ 197.352656][ T24] usb 1-1: Manufacturer: syz [ 197.352709][ T24] usb 1-1: SerialNumber: syz [ 198.056316][ T24] usb 1-1: Could not set interface, error -71 [ 198.091199][ T24] usb 1-1: USB disconnect, device number 6 [ 198.311763][ T4406] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 198.434780][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.437338][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.536146][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.536831][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.603032][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.603680][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.911000][ T3551] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 203.072859][ T3551] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.075835][ T3551] usb 1-1: not running at top speed; connect to a high speed hub [ 203.075942][ T3551] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 203.085536][ T3551] usb 1-1: config 129 has an invalid interface number: 8 but max is 1 [ 203.085664][ T3551] usb 1-1: config 129 has an invalid interface number: 3 but max is 1 [ 203.085733][ T3551] usb 1-1: config 129 has no interface number 0 [ 203.085814][ T3551] usb 1-1: config 129 has no interface number 1 [ 203.085961][ T3551] usb 1-1: config 129 interface 8 has no altsetting 0 [ 203.107294][ T3551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.107371][ T3551] usb 1-1: Product: syz [ 203.107400][ T3551] usb 1-1: Manufacturer: syz [ 203.107427][ T3551] usb 1-1: SerialNumber: syz [ 203.772861][ T3551] usb 1-1: Could not set interface, error -71 [ 203.785502][ T3551] usb 1-1: USB disconnect, device number 7 [ 206.151504][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.152887][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.239833][ T4448] capability: warning: `syz.1.306' uses 32-bit capabilities (legacy support in use) [ 207.041409][ T811] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 208.210865][ T811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.224883][ T811] usb 1-1: not running at top speed; connect to a high speed hub [ 208.225278][ T811] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 208.971416][ T811] usb 1-1: config 129 has an invalid interface number: 8 but max is 1 [ 208.971492][ T811] usb 1-1: config 129 has an invalid interface number: 3 but max is 1 [ 208.971527][ T811] usb 1-1: config 129 has no interface number 0 [ 208.971556][ T811] usb 1-1: config 129 has no interface number 1 [ 208.971670][ T811] usb 1-1: config 129 interface 8 has no altsetting 0 [ 208.997540][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.997619][ T811] usb 1-1: Product: syz [ 208.997649][ T811] usb 1-1: Manufacturer: syz [ 208.997677][ T811] usb 1-1: SerialNumber: syz [ 209.499509][ T811] usb 1-1: Could not set interface, error -71 [ 209.533223][ T811] usb 1-1: USB disconnect, device number 8 [ 209.741356][ T29] audit: type=1400 audit(209.600:7): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=4468 comm="syz.0.315" name="158" dev="tmpfs" ino=820 [ 210.398355][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 210.879610][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.883367][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.051278][ T4509] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 214.021785][ T4525] netlink: 76 bytes leftover after parsing attributes in process `syz.1.337'. [ 216.674476][ T4536] syz.1.339 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 216.674958][ T4536] CPU: 1 UID: 0 PID: 4536 Comm: syz.1.339 Not tainted syzkaller #0 PREEMPT [ 216.675079][ T4536] Hardware name: linux,dummy-virt (DT) [ 216.675125][ T4536] Call trace: [ 216.675162][ T4536] show_stack+0x18/0x24 (C) [ 216.675269][ T4536] dump_stack_lvl+0x60/0x80 [ 216.675344][ T4536] dump_stack+0x18/0x24 [ 216.675412][ T4536] dump_header+0x40/0x170 [ 216.675486][ T4536] oom_kill_process+0x204/0x284 [ 216.675561][ T4536] out_of_memory+0xec/0x5a8 [ 216.675635][ T4536] mem_cgroup_out_of_memory+0x108/0x118 [ 216.675718][ T4536] try_charge_memcg+0x3f8/0x664 [ 216.675794][ T4536] charge_memcg+0x64/0x140 [ 216.675868][ T4536] __mem_cgroup_charge+0x38/0x104 [ 216.675952][ T4536] shmem_alloc_and_add_folio+0x120/0x560 [ 216.676034][ T4536] shmem_get_folio_gfp+0x118/0x830 [ 216.676106][ T4536] shmem_write_begin+0x6c/0x158 [ 216.676176][ T4536] generic_perform_write+0xb4/0x24c [ 216.676255][ T4536] shmem_file_write_iter+0xa0/0xa8 [ 216.676330][ T4536] vfs_write+0x298/0x440 [ 216.676405][ T4536] ksys_write+0x70/0x114 [ 216.676485][ T4536] __arm64_sys_write+0x18/0x24 [ 216.676561][ T4536] invoke_syscall+0x54/0x108 [ 216.676669][ T4536] el0_svc_common.constprop.0+0x40/0xe0 [ 216.676749][ T4536] do_el0_svc+0x1c/0x28 [ 216.676818][ T4536] el0_svc+0x38/0x200 [ 216.676894][ T4536] el0t_64_sync_handler+0xa0/0xe4 [ 216.677025][ T4536] el0t_64_sync+0x1a4/0x1a8 [ 216.729664][ T4536] memory: usage 0kB, limit 0kB, failcnt 19 [ 216.729805][ T4536] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 216.729870][ T4536] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 216.730506][ T4536] Memory cgroup stats for /syz1/test: [ 216.744370][ T4536] cache 0 [ 216.744502][ T4536] rss 0 [ 216.744535][ T4536] rss_huge 0 [ 216.744564][ T4536] shmem 0 [ 216.744592][ T4536] mapped_file 0 [ 216.744619][ T4536] dirty 0 [ 216.744647][ T4536] writeback 0 [ 216.744677][ T4536] workingset_refault_anon 0 [ 216.744705][ T4536] workingset_refault_file 0 [ 216.744737][ T4536] swap 0 [ 216.744765][ T4536] swapcached 0 [ 216.744793][ T4536] pgpgin 0 [ 216.744821][ T4536] pgpgout 0 [ 216.744849][ T4536] pgfault 0 [ 216.744876][ T4536] pgmajfault 0 [ 216.744903][ T4536] inactive_anon 0 [ 216.744943][ T4536] active_anon 0 [ 216.744973][ T4536] inactive_file 0 [ 216.744999][ T4536] active_file 0 [ 216.745028][ T4536] unevictable 0 [ 216.745060][ T4536] hierarchical_memory_limit 0 [ 216.745091][ T4536] hierarchical_memsw_limit 9223372036854771712 [ 216.745122][ T4536] total_cache 0 [ 216.745150][ T4536] total_rss 0 [ 216.745178][ T4536] total_rss_huge 0 [ 216.745207][ T4536] total_shmem 0 [ 216.745237][ T4536] total_mapped_file 0 [ 216.745268][ T4536] total_dirty 0 [ 216.745295][ T4536] total_writeback 0 [ 216.745324][ T4536] total_workingset_refault_anon 0 [ 216.745354][ T4536] total_workingset_refault_file 0 [ 216.745383][ T4536] total_swap 0 [ 216.745411][ T4536] total_swapcached 0 [ 216.745442][ T4536] total_pgpgin 0 [ 216.745473][ T4536] total_pgpgout 0 [ 216.745504][ T4536] total_pgfault 0 [ 216.745538][ T4536] total_pgmajfault 0 [ 216.745567][ T4536] total_inactive_anon 0 [ 216.745595][ T4536] total_active_anon 0 [ 216.745622][ T4536] total_inactive_file 0 [ 216.745650][ T4536] total_active_file 0 [ 216.745677][ T4536] total_unevictable 0 [ 216.745878][ T4536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.339,pid=4535,uid=0 [ 216.747801][ T4536] Memory cgroup out of memory: Killed process 4535 (syz.1.339) total-vm:41060kB, anon-rss:1336kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 221.786740][ T4556] FAULT_INJECTION: forcing a failure. [ 221.786740][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 221.786912][ T4556] CPU: 1 UID: 0 PID: 4556 Comm: syz.1.346 Not tainted syzkaller #0 PREEMPT [ 221.787007][ T4556] Hardware name: linux,dummy-virt (DT) [ 221.787049][ T4556] Call trace: [ 221.787085][ T4556] show_stack+0x18/0x24 (C) [ 221.787198][ T4556] dump_stack_lvl+0x60/0x80 [ 221.787275][ T4556] dump_stack+0x18/0x24 [ 221.787347][ T4556] should_fail_ex+0x1d0/0x238 [ 221.787430][ T4556] should_failslab+0x54/0x80 [ 221.787514][ T4556] __kmalloc_cache_noprof+0x58/0x42c [ 221.787586][ T4556] snd_mixer_oss_put_volume1_sw.isra.0+0xac/0x1d0 [ 221.787662][ T4556] snd_mixer_oss_put_recsrc1_sw+0x24/0x40 [ 221.787727][ T4556] snd_mixer_oss_ioctl1+0x680/0xafc [ 221.787814][ T4556] snd_mixer_oss_ioctl+0x14/0x38 [ 221.787905][ T4556] __arm64_sys_ioctl+0xa8/0x100 [ 221.787999][ T4556] invoke_syscall+0x54/0x108 [ 221.788072][ T4556] el0_svc_common.constprop.0+0x40/0xe0 [ 221.788137][ T4556] do_el0_svc+0x1c/0x28 [ 221.788204][ T4556] el0_svc+0x38/0x200 [ 221.788275][ T4556] el0t_64_sync_handler+0xa0/0xe4 [ 221.788340][ T4556] el0t_64_sync+0x1a4/0x1a8 [ 222.273628][ T4561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.117278][ T4586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 228.060827][ T3394] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 228.227985][ T3394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.230978][ T3394] usb 1-1: not running at top speed; connect to a high speed hub [ 228.231121][ T3394] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 228.243701][ T3394] usb 1-1: config 129 has an invalid interface number: 8 but max is 0 [ 228.243834][ T3394] usb 1-1: config 129 has no interface number 0 [ 228.243957][ T3394] usb 1-1: config 129 interface 8 has no altsetting 0 [ 228.265143][ T3394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.265283][ T3394] usb 1-1: Product: syz [ 228.265344][ T3394] usb 1-1: Manufacturer: syz [ 228.265401][ T3394] usb 1-1: SerialNumber: syz [ 229.843522][ T3394] usb 1-1: USB disconnect, device number 9 [ 240.202774][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 240.368132][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.374213][ T24] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 240.377382][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 240.377615][ T24] usb 1-1: can't read configurations, error -71 [ 241.069312][ T29] audit: type=1326 audit(240.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7fc00000 [ 241.217660][ T4620] tap0: tun_chr_ioctl cmd 1074025675 [ 241.217907][ T4620] tap0: persist disabled [ 241.219260][ T4620] tap0: tun_chr_ioctl cmd 1074025672 [ 241.219428][ T4620] tap0: ignored: set checksum disabled [ 241.465160][ T29] audit: type=1326 audit(241.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffa95731cc code=0x7fc00000 [ 241.466523][ T29] audit: type=1326 audit(241.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa4d78f0 code=0x7fc00000 [ 241.466680][ T29] audit: type=1326 audit(241.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffaa4d7b9c code=0x7fc00000 [ 241.467243][ T29] audit: type=1326 audit(241.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa4d78f0 code=0x7fc00000 [ 241.467356][ T29] audit: type=1326 audit(241.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffaa4d7b9c code=0x7fc00000 [ 241.468111][ T29] audit: type=1326 audit(241.330:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa4d78f0 code=0x7fc00000 [ 241.468264][ T29] audit: type=1326 audit(241.330:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffaa4d7b9c code=0x7fc00000 [ 241.468832][ T29] audit: type=1326 audit(241.330:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa4d78f0 code=0x7fc00000 [ 241.469313][ T29] audit: type=1326 audit(241.330:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4611 comm="syz.1.365" exe="/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffffaa4d7b9c code=0x7fc00000 [ 242.215526][ T12] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 242.427584][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.437863][ T12] usb 1-1: New USB device found: idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 242.454217][ T12] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 242.454406][ T12] usb 1-1: can't read configurations, error -71 [ 246.254274][ T4647] device-mapper: table: 248:1: multipath: unknown path selector type (-EINVAL) [ 246.254715][ T4647] device-mapper: ioctl: error adding target to table [ 246.423486][ T4650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.376'. [ 246.511939][ T4653] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 255.150984][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 255.340673][ T24] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 255.392476][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.392616][ T24] usb 1-1: Product: syz [ 255.392677][ T24] usb 1-1: Manufacturer: syz [ 255.392778][ T24] usb 1-1: SerialNumber: syz [ 255.487087][ T4697] FAULT_INJECTION: forcing a failure. [ 255.487087][ T4697] name failslab, interval 1, probability 0, space 0, times 0 [ 255.487236][ T4697] CPU: 0 UID: 0 PID: 4697 Comm: syz.1.390 Not tainted syzkaller #0 PREEMPT [ 255.487319][ T4697] Hardware name: linux,dummy-virt (DT) [ 255.487358][ T4697] Call trace: [ 255.487390][ T4697] show_stack+0x18/0x24 (C) [ 255.487501][ T4697] dump_stack_lvl+0x60/0x80 [ 255.487575][ T4697] dump_stack+0x18/0x24 [ 255.487644][ T4697] should_fail_ex+0x1d0/0x238 [ 255.487727][ T4697] should_failslab+0x54/0x80 [ 255.487805][ T4697] __kmalloc_node_track_caller_noprof+0xb0/0x518 [ 255.487884][ T4697] kvasprintf+0x88/0x120 [ 255.488006][ T4697] kvasprintf_const+0x9c/0xe0 [ 255.488084][ T4697] kobject_set_name_vargs+0x44/0xc0 [ 255.488166][ T4697] device_create_groups_vargs+0xa4/0x140 [ 255.488242][ T4697] device_create+0x60/0x8c [ 255.488308][ T4697] vcs_make_sysfs+0x44/0xa0 [ 255.488385][ T4697] vc_allocate+0x21c/0x260 [ 255.488451][ T4697] con_install+0x2c/0x16c [ 255.488520][ T4697] tty_init_dev.part.0+0x44/0x260 [ 255.488590][ T4697] tty_open+0x41c/0x6c8 [ 255.488658][ T4697] chrdev_open+0xac/0x220 [ 255.488729][ T4697] do_dentry_open+0x118/0x4dc [ 255.488803][ T4697] vfs_open_consume+0x30/0xec [ 255.488876][ T4697] path_openat+0x5d4/0x9b0 [ 255.488947][ T4697] do_file_open+0xb0/0x170 [ 255.489024][ T4697] do_sys_openat2+0xc0/0x110 [ 255.489096][ T4697] __arm64_sys_openat+0x64/0xc0 [ 255.489169][ T4697] invoke_syscall+0x54/0x108 [ 255.489240][ T4697] el0_svc_common.constprop.0+0x40/0xe0 [ 255.489313][ T4697] do_el0_svc+0x1c/0x28 [ 255.489381][ T4697] el0_svc+0x38/0x200 [ 255.489452][ T4697] el0t_64_sync_handler+0xa0/0xe4 [ 255.489525][ T4697] el0t_64_sync+0x1a4/0x1a8 [ 255.696874][ T4700] block nbd0: not configured, cannot reconfigure [ 255.784210][ T4702] FAULT_INJECTION: forcing a failure. [ 255.784210][ T4702] name failslab, interval 1, probability 0, space 0, times 0 [ 255.784347][ T4702] CPU: 1 UID: 0 PID: 4702 Comm: syz.1.392 Not tainted syzkaller #0 PREEMPT [ 255.784435][ T4702] Hardware name: linux,dummy-virt (DT) [ 255.784478][ T4702] Call trace: [ 255.784513][ T4702] show_stack+0x18/0x24 (C) [ 255.784625][ T4702] dump_stack_lvl+0x60/0x80 [ 255.784697][ T4702] dump_stack+0x18/0x24 [ 255.784766][ T4702] should_fail_ex+0x1d0/0x238 [ 255.784846][ T4702] should_failslab+0x54/0x80 [ 255.784925][ T4702] __kmalloc_cache_noprof+0x58/0x42c [ 255.785036][ T4702] alloc_tty_struct+0x48/0x20c [ 255.785119][ T4702] tty_init_dev.part.0+0x20/0x260 [ 255.785189][ T4702] tty_init_dev+0x44/0x54 [ 255.785258][ T4702] ptmx_open+0xec/0x1cc [ 255.785332][ T4702] chrdev_open+0xac/0x220 [ 255.785406][ T4702] do_dentry_open+0x118/0x4dc [ 255.785482][ T4702] vfs_open_consume+0x30/0xec [ 255.785558][ T4702] path_openat+0x5d4/0x9b0 [ 255.785629][ T4702] do_file_open+0xb0/0x170 [ 255.785699][ T4702] do_sys_openat2+0xc0/0x110 [ 255.785770][ T4702] __arm64_sys_openat+0x64/0xc0 [ 255.785847][ T4702] invoke_syscall+0x54/0x108 [ 255.785924][ T4702] el0_svc_common.constprop.0+0x40/0xe0 [ 255.786033][ T4702] do_el0_svc+0x1c/0x28 [ 255.786134][ T4702] el0_svc+0x38/0x200 [ 255.786217][ T4702] el0t_64_sync_handler+0xa0/0xe4 [ 255.786290][ T4702] el0t_64_sync+0x1a4/0x1a8 [ 257.341489][ T3394] ------------[ cut here ]------------ [ 257.341617][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 257.342973][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 257.353198][ T3394] Modules linked in: [ 257.355070][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT [ 257.355823][ T3394] Hardware name: linux,dummy-virt (DT) [ 257.356542][ T3394] Workqueue: events drm_fb_helper_damage_work [ 257.357339][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 257.357818][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 257.358188][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 257.358536][ T3394] sp : ffff8000863f3c20 [ 257.358846][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 257.359676][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 257.360128][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 257.360568][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 257.361068][ T3394] x17: fff07ffffc25f000 x16: ffff800083a40000 x15: ffff80008393d706 [ 257.361518][ T3394] x14: 00000000000004bb x13: ffff8000863f3880 x12: 0000000000000000 [ 257.361975][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 257.362523][ T3394] x8 : 00000000000004bc x7 : 0000000000000710 x6 : 0000000000000711 [ 257.363013][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 257.363445][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 257.364099][ T3394] Call trace: [ 257.364619][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 257.365368][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 257.365745][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 257.366070][ T3394] process_one_work+0x1ac/0x320 [ 257.366388][ T3394] worker_thread+0x18c/0x300 [ 257.366661][ T3394] kthread+0x10c/0x120 [ 257.366932][ T3394] ret_from_fork+0x10/0x20 [ 257.367479][ T3394] ---[ end trace 0000000000000000 ]--- [ 258.451031][ T3394] ------------[ cut here ]------------ [ 258.451084][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 258.451237][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 258.452093][ T3394] Modules linked in: [ 258.452603][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 258.453099][ T3394] Tainted: [W]=WARN [ 258.453319][ T3394] Hardware name: linux,dummy-virt (DT) [ 258.453543][ T3394] Workqueue: events drm_fb_helper_damage_work [ 258.453772][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 258.454043][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 258.454250][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 258.454423][ T3394] sp : ffff8000863f3c20 [ 258.454555][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 258.454884][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 258.455165][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 258.455400][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 258.455678][ T3394] x17: fff07ffffc25f000 x16: ffff800083a40000 x15: ffff80008393de56 [ 258.455929][ T3394] x14: 00000000000004d9 x13: ffff8000863f3880 x12: 0000000000000000 [ 258.456180][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 258.456517][ T3394] x8 : 00000000000004da x7 : 0000000000000750 x6 : 0000000000000751 [ 258.456752][ T3394] x5 : ffff8000837fa2a0 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 258.456997][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 258.457262][ T3394] Call trace: [ 258.457354][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 258.457537][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 258.457769][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 258.457937][ T3394] process_one_work+0x1ac/0x320 [ 258.458088][ T3394] worker_thread+0x18c/0x300 [ 258.458291][ T3394] kthread+0x10c/0x120 [ 258.458451][ T3394] ret_from_fork+0x10/0x20 [ 258.458609][ T3394] ---[ end trace 0000000000000000 ]--- [ 259.501281][ T3394] ------------[ cut here ]------------ [ 259.501370][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 259.501550][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 259.502826][ T3394] Modules linked in: [ 259.503164][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 259.503678][ T3394] Tainted: [W]=WARN [ 259.503897][ T3394] Hardware name: linux,dummy-virt (DT) [ 259.504214][ T3394] Workqueue: events drm_fb_helper_damage_work [ 259.504568][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 259.504961][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 259.505248][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 259.505514][ T3394] sp : ffff8000863f3c20 [ 259.505708][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 259.506233][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 259.506674][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 259.507158][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 259.507588][ T3394] x17: fff07ffffc25f000 x16: ffff800083a40000 x15: ffff80008393e5d6 [ 259.508097][ T3394] x14: 00000000000004f8 x13: ffff8000863f3880 x12: 0000000000000000 [ 259.508503][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 259.508942][ T3394] x8 : 00000000000004f9 x7 : 0000000000000791 x6 : 0000000000000792 [ 259.509432][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 259.509862][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 259.510299][ T3394] Call trace: [ 259.510460][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 259.510799][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 259.511139][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 259.511435][ T3394] process_one_work+0x1ac/0x320 [ 259.511708][ T3394] worker_thread+0x18c/0x300 [ 259.511959][ T3394] kthread+0x10c/0x120 [ 259.512189][ T3394] ret_from_fork+0x10/0x20 [ 259.512453][ T3394] ---[ end trace 0000000000000000 ]--- [ 260.551320][ T3394] ------------[ cut here ]------------ [ 260.551410][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 260.551592][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 260.552852][ T3394] Modules linked in: [ 260.553141][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 260.553629][ T3394] Tainted: [W]=WARN [ 260.553881][ T3394] Hardware name: linux,dummy-virt (DT) [ 260.554237][ T3394] Workqueue: events drm_fb_helper_damage_work [ 260.554709][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 260.555068][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 260.555403][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 260.555687][ T3394] sp : ffff8000863f3c20 [ 260.555912][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 260.556362][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 260.556770][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 260.557199][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 260.557614][ T3394] x17: 0000000000000000 x16: f4f00000040a1980 x15: ffff80008393ed56 [ 260.558050][ T3394] x14: 0000000000000517 x13: ffff8000863f3880 x12: 0000000000000000 [ 260.558518][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 260.558941][ T3394] x8 : 0000000000000518 x7 : 00000000000007d2 x6 : 00000000000007d3 [ 260.559381][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 260.559816][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 260.560250][ T3394] Call trace: [ 260.560426][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 260.560756][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 260.561065][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 260.561375][ T3394] process_one_work+0x1ac/0x320 [ 260.561641][ T3394] worker_thread+0x18c/0x300 [ 260.561885][ T3394] kthread+0x10c/0x120 [ 260.562149][ T3394] ret_from_fork+0x10/0x20 [ 260.562401][ T3394] ---[ end trace 0000000000000000 ]--- [ 261.601423][ T3394] ------------[ cut here ]------------ [ 261.601518][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 261.601707][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 261.603021][ T3394] Modules linked in: [ 261.603313][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 261.603794][ T3394] Tainted: [W]=WARN [ 261.604016][ T3394] Hardware name: linux,dummy-virt (DT) [ 261.604357][ T3394] Workqueue: events drm_fb_helper_damage_work [ 261.604713][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 261.605202][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 261.605495][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 261.605800][ T3394] sp : ffff8000863f3c20 [ 261.606044][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 261.606530][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 261.607023][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 261.607492][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 261.607945][ T3394] x17: fff07ffffc25f000 x16: ffff800083a40000 x15: ffff80008393f4d6 [ 261.608404][ T3394] x14: 0000000000000536 x13: ffff8000863f3880 x12: 0000000000000000 [ 261.608868][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 261.609309][ T3394] x8 : 0000000000000537 x7 : 0000000000000813 x6 : 0000000000000814 [ 261.609733][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 261.610225][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 261.610671][ T3394] Call trace: [ 261.610864][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 261.611216][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 261.611542][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 261.611803][ T3394] process_one_work+0x1ac/0x320 [ 261.612098][ T3394] worker_thread+0x18c/0x300 [ 261.612357][ T3394] kthread+0x10c/0x120 [ 261.612618][ T3394] ret_from_fork+0x10/0x20 [ 261.612911][ T3394] ---[ end trace 0000000000000000 ]--- [ 262.701346][ T3394] ------------[ cut here ]------------ [ 262.701442][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 262.701626][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 262.702896][ T3394] Modules linked in: [ 262.703194][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 262.703741][ T3394] Tainted: [W]=WARN [ 262.703969][ T3394] Hardware name: linux,dummy-virt (DT) [ 262.704282][ T3394] Workqueue: events drm_fb_helper_damage_work [ 262.704656][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 262.705071][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 262.705399][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 262.705716][ T3394] sp : ffff8000863f3c20 [ 262.705904][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 262.706465][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 262.706913][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 262.707406][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 262.707849][ T3394] x17: fff07ffffc25f000 x16: ffff800083a40000 x15: ffff80008393fc56 [ 262.708274][ T3394] x14: 0000000000000555 x13: ffff8000863f3880 x12: 0000000000000000 [ 262.708682][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 262.709117][ T3394] x8 : 0000000000000556 x7 : 0000000000000854 x6 : 0000000000000855 [ 262.709536][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 262.709988][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 262.710428][ T3394] Call trace: [ 262.710615][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 262.710959][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 262.711275][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 262.711569][ T3394] process_one_work+0x1ac/0x320 [ 262.711848][ T3394] worker_thread+0x18c/0x300 [ 262.712112][ T3394] kthread+0x10c/0x120 [ 262.712341][ T3394] ret_from_fork+0x10/0x20 [ 262.712593][ T3394] ---[ end trace 0000000000000000 ]--- [ 263.755380][ T3394] ------------[ cut here ]------------ [ 263.755471][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 263.755658][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 263.756893][ T3394] Modules linked in: [ 263.757162][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 263.757644][ T3394] Tainted: [W]=WARN [ 263.757835][ T3394] Hardware name: linux,dummy-virt (DT) [ 263.758187][ T3394] Workqueue: events drm_fb_helper_damage_work [ 263.758536][ T3394] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 263.758950][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 263.759254][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 263.759569][ T3394] sp : ffff8000863f3c20 [ 263.759793][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 263.760286][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 263.760739][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 263.761189][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 263.761636][ T3394] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000839403d6 [ 263.762136][ T3394] x14: 0000000000000574 x13: ffff8000863f3880 x12: 0000000000000000 [ 263.762586][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 263.763038][ T3394] x8 : 0000000000000575 x7 : 0000000000000895 x6 : 0000000000000896 [ 263.763489][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 263.763987][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 263.764426][ T3394] Call trace: [ 263.764624][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 263.765004][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 263.765349][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 263.765672][ T3394] process_one_work+0x1ac/0x320 [ 263.765953][ T3394] worker_thread+0x18c/0x300 [ 263.766299][ T3394] kthread+0x10c/0x120 [ 263.766561][ T3394] ret_from_fork+0x10/0x20 [ 263.766825][ T3394] ---[ end trace 0000000000000000 ]--- [ 264.804177][ T3394] ------------[ cut here ]------------ [ 264.804265][ T3394] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 264.804449][ T3394] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x1b4/0x238, CPU#1: kworker/1:3/3394 [ 264.805878][ T3394] Modules linked in: [ 264.806213][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT [ 264.806828][ T3394] Tainted: [W]=WARN [ 264.807027][ T3394] Hardware name: linux,dummy-virt (DT) [ 264.807364][ T3394] Workqueue: events drm_fb_helper_damage_work [ 264.807807][ T3394] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 264.808338][ T3394] pc : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 264.808688][ T3394] lr : drm_crtc_wait_one_vblank+0x1b4/0x238 [ 264.809091][ T3394] sp : ffff8000863f3c20 [ 264.809346][ T3394] x29: ffff8000863f3c50 x28: 0000000000000000 x27: 0000000000000000 [ 264.809873][ T3394] x26: f7f00000049f6000 x25: ffff8000863f3c20 x24: f5f000000662cc88 [ 264.810357][ T3394] x23: 0000000000000000 x22: 00000000000039fe x21: 0000000000000000 [ 264.810792][ T3394] x20: 0000000000000000 x19: f7f00000049f6000 x18: 00000000ffffffff [ 264.811288][ T3394] x17: 00000000a73f1d63 x16: 00000000a7188189 x15: ffff800083940b56 [ 264.811786][ T3394] x14: 0000000000000593 x13: ffff8000863f3880 x12: 0000000000000000 [ 264.812275][ T3394] x11: ffff8000836c9030 x10: 0000000000000000 x9 : ffff8000836c9030 [ 264.812737][ T3394] x8 : 0000000000000594 x7 : 00000000000008d6 x6 : 00000000000008d7 [ 264.813212][ T3394] x5 : ffff8000836c8f50 x4 : fff07ffffc25f000 x3 : fff000007f8d1208 [ 264.813675][ T3394] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f0000007059100 [ 264.814267][ T3394] Call trace: [ 264.814508][ T3394] drm_crtc_wait_one_vblank+0x1b4/0x238 (P) [ 264.814916][ T3394] drm_client_modeset_wait_for_vblank+0x70/0x84 [ 264.815310][ T3394] drm_fb_helper_damage_work+0x178/0x39c [ 264.815728][ T3394] process_one_work+0x1ac/0x320 [ 264.816094][ T3394] worker_thread+0x18c/0x300 [ 264.816467][ T3394] kthread+0x10c/0x120 [ 264.816764][ T3394] ret_from_fork+0x10/0x20 [ 264.817138][ T3394] ---[ end trace 0000000000000000 ]--- [ 265.165030][ T3551] usb 1-1: USB disconnect, device number 14