last executing test programs: 3.652490018s ago: executing program 0 (id=614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262ebbadcd6d70e4a2a0e92807cbacbaf1825df0b68eb423034edeb804cb3fa8817e5caf838", 0x27}, {0x0}], 0x2}}], 0x2, 0x2090) write(r0, 0x0, 0x0) 1.075620513s ago: executing program 0 (id=627): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 941.37455ms ago: executing program 0 (id=628): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @mcast2, 0xffefffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 792.803389ms ago: executing program 0 (id=630): socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 791.821519ms ago: executing program 1 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x20000010304, @local}, 0x6, {0x2, 0x4e1f, @rand_addr=0x64010101}}) 623.468157ms ago: executing program 1 (id=632): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[], 0x30}}, 0x88890) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 491.448112ms ago: executing program 1 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0x10}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000102, 0x0) 401.52764ms ago: executing program 1 (id=634): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xf8, 0x8, 0x7, 0x22, @empty, @empty, 0x8, 0x80, 0x3, 0xcdb}}) 323.531058ms ago: executing program 0 (id=635): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 203.744492ms ago: executing program 1 (id=636): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000500)="7f454c4601010100", 0x8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) 81.125409ms ago: executing program 1 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r2, &(0x7f0000000500)="0000000001000000010000001000000074657374", 0x14) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x200) 0s ago: executing program 0 (id=638): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f00000e2000/0x4000)=nil, 0x4000, 0xb) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20822' (ED25519) to the list of known hosts. syzkaller login: [ 75.319678][ T3369] cgroup: Unknown subsys name 'net' [ 75.473827][ T3369] cgroup: Unknown subsys name 'cpuset' [ 75.495225][ T3369] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.863651][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.373368][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.384804][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.535502][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.544058][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.369850][ T3374] hsr_slave_0: entered promiscuous mode [ 84.373393][ T3374] hsr_slave_1: entered promiscuous mode [ 84.445224][ T3375] hsr_slave_0: entered promiscuous mode [ 84.449646][ T3375] hsr_slave_1: entered promiscuous mode [ 84.456008][ T3375] debugfs: 'hsr0' already exists in 'hsr' [ 84.456697][ T3375] Cannot create hsr debugfs directory [ 85.373992][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.408912][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.414152][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.425054][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.429810][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.442128][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.459252][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.472557][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.613142][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.634250][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.661168][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.681095][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.689128][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.715760][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.721195][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.741036][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.551805][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.710682][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.340018][ T3375] veth0_vlan: entered promiscuous mode [ 89.370627][ T3375] veth1_vlan: entered promiscuous mode [ 89.486696][ T3375] veth0_macvtap: entered promiscuous mode [ 89.527844][ T3375] veth1_macvtap: entered promiscuous mode [ 89.650228][ T3374] veth0_vlan: entered promiscuous mode [ 89.711372][ T3374] veth1_vlan: entered promiscuous mode [ 89.826683][ T1207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.832005][ T1207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847778][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.015395][ T2208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.022756][ T3374] veth0_macvtap: entered promiscuous mode [ 90.059324][ T3374] veth1_macvtap: entered promiscuous mode [ 90.205520][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.275940][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.281783][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.290993][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.291471][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.655667][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.831962][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 91.849589][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.852246][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 91.855838][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.898397][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.899607][ T9] usb 1-1: Product: syz [ 91.902962][ T9] usb 1-1: Manufacturer: syz [ 91.905804][ T9] usb 1-1: SerialNumber: syz [ 91.958694][ T3529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.974113][ T3529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.033834][ T9] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 92.072379][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 92.433807][ T3156] usb 1-1: USB disconnect, device number 2 [ 92.532907][ T3156] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 92.559657][ T3156] cyberjack 1-1:1.0: device disconnected [ 92.947195][ T3537] syz.0.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 92.966420][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT [ 92.966877][ T3537] Hardware name: linux,dummy-virt (DT) [ 92.967207][ T3537] Call trace: [ 92.967570][ T3537] show_stack+0x18/0x24 (C) [ 92.968435][ T3537] dump_stack_lvl+0x60/0x80 [ 92.968522][ T3537] dump_stack+0x18/0x24 [ 92.968591][ T3537] dump_header+0x40/0x170 [ 92.968657][ T3537] oom_kill_process+0x220/0x29c [ 92.968738][ T3537] out_of_memory+0xec/0x58c [ 92.968813][ T3537] mem_cgroup_out_of_memory+0x108/0x118 [ 92.968889][ T3537] try_charge_memcg+0x3b4/0x58c [ 92.968973][ T3537] obj_cgroup_charge_pages+0x44/0x214 [ 92.969080][ T3537] __memcg_slab_post_alloc_hook+0x190/0x498 [ 92.969149][ T3537] kmem_cache_alloc_noprof+0x408/0x43c [ 92.969232][ T3537] prepare_creds+0x24/0x33c [ 92.969308][ T3537] lookup_user_key+0x524/0x640 [ 92.969389][ T3537] keyctl_session_to_parent+0x20/0x2a0 [ 92.969466][ T3537] __arm64_sys_keyctl+0xec/0x290 [ 92.969541][ T3537] invoke_syscall+0x54/0x10c [ 92.969616][ T3537] el0_svc_common.constprop.0+0x40/0xe0 [ 92.969691][ T3537] do_el0_svc+0x1c/0x34 [ 92.969769][ T3537] el0_svc+0x38/0x1fc [ 92.969855][ T3537] el0t_64_sync_handler+0xa0/0xf0 [ 92.969943][ T3537] el0t_64_sync+0x1a4/0x1a8 [ 92.993456][ T3537] memory: usage 0kB, limit 0kB, failcnt 19 [ 92.993881][ T3537] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 92.994068][ T3537] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 92.994128][ T3537] Memory cgroup stats for /syz0/test: [ 93.001301][ T3537] cache 0 [ 93.001571][ T3537] rss 0 [ 93.001653][ T3537] rss_huge 0 [ 93.001722][ T3537] shmem 0 [ 93.001751][ T3537] mapped_file 0 [ 93.001779][ T3537] dirty 0 [ 93.001805][ T3537] writeback 0 [ 93.001834][ T3537] workingset_refault_anon 0 [ 93.001890][ T3537] workingset_refault_file 0 [ 93.001922][ T3537] swap 0 [ 93.001956][ T3537] swapcached 0 [ 93.001983][ T3537] pgpgin 0 [ 93.002010][ T3537] pgpgout 0 [ 93.002037][ T3537] pgfault 0 [ 93.002064][ T3537] pgmajfault 0 [ 93.002091][ T3537] inactive_anon 0 [ 93.002119][ T3537] active_anon 0 [ 93.002146][ T3537] inactive_file 0 [ 93.002173][ T3537] active_file 0 [ 93.002201][ T3537] unevictable 0 [ 93.002228][ T3537] hierarchical_memory_limit 0 [ 93.002256][ T3537] hierarchical_memsw_limit 9223372036854771712 [ 93.002287][ T3537] total_cache 0 [ 93.002356][ T3537] total_rss 0 [ 93.002384][ T3537] total_rss_huge 0 [ 93.002411][ T3537] total_shmem 0 [ 93.002526][ T3537] total_mapped_file 0 [ 93.002558][ T3537] total_dirty 0 [ 93.002586][ T3537] total_writeback 0 [ 93.002614][ T3537] total_workingset_refault_anon 0 [ 93.002642][ T3537] total_workingset_refault_file 0 [ 93.002671][ T3537] total_swap 0 [ 93.002712][ T3537] total_swapcached 0 [ 93.002859][ T3537] total_pgpgin 0 [ 93.019790][ T3537] total_pgpgout 0 [ 93.019973][ T3537] total_pgfault 0 [ 93.020060][ T3537] total_pgmajfault 0 [ 93.020150][ T3537] total_inactive_anon 0 [ 93.020220][ T3537] total_active_anon 0 [ 93.020291][ T3537] total_inactive_file 0 [ 93.020322][ T3537] total_active_file 0 [ 93.020351][ T3537] total_unevictable 0 [ 93.020617][ T3537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.6,pid=3536,uid=0 [ 93.022762][ T3537] Memory cgroup out of memory: Killed process 3536 (syz.0.6) total-vm:42632kB, anon-rss:1288kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 96.256091][ T3553] syz.1.12 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.256430][ T3553] CPU: 1 UID: 0 PID: 3553 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT [ 96.256537][ T3553] Hardware name: linux,dummy-virt (DT) [ 96.256585][ T3553] Call trace: [ 96.256623][ T3553] show_stack+0x18/0x24 (C) [ 96.256768][ T3553] dump_stack_lvl+0x60/0x80 [ 96.256859][ T3553] dump_stack+0x18/0x24 [ 96.256967][ T3553] dump_header+0x40/0x170 [ 96.257050][ T3553] oom_kill_process+0x220/0x29c [ 96.257242][ T3553] out_of_memory+0xec/0x58c [ 96.257338][ T3553] mem_cgroup_out_of_memory+0x108/0x118 [ 96.257420][ T3553] try_charge_memcg+0x3b4/0x58c [ 96.257520][ T3553] obj_cgroup_charge_pages+0x44/0x214 [ 96.257617][ T3553] __memcg_slab_post_alloc_hook+0x190/0x498 [ 96.257708][ T3553] kmem_cache_alloc_noprof+0x408/0x43c [ 96.257839][ T3553] prepare_creds+0x24/0x33c [ 96.257930][ T3553] lookup_user_key+0x524/0x640 [ 96.258011][ T3553] keyctl_session_to_parent+0x20/0x2a0 [ 96.258106][ T3553] __arm64_sys_keyctl+0xec/0x290 [ 96.258185][ T3553] invoke_syscall+0x54/0x10c [ 96.258263][ T3553] el0_svc_common.constprop.0+0x40/0xe0 [ 96.258367][ T3553] do_el0_svc+0x1c/0x34 [ 96.258439][ T3553] el0_svc+0x38/0x1fc [ 96.258531][ T3553] el0t_64_sync_handler+0xa0/0xf0 [ 96.258609][ T3553] el0t_64_sync+0x1a4/0x1a8 [ 96.262567][ T3553] memory: usage 0kB, limit 0kB, failcnt 19 [ 96.262653][ T3553] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.262701][ T3553] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.262739][ T3553] Memory cgroup stats for /syz1/test: [ 96.263214][ T3553] cache 0 [ 96.263277][ T3553] rss 0 [ 96.263336][ T3553] rss_huge 0 [ 96.263371][ T3553] shmem 0 [ 96.263402][ T3553] mapped_file 0 [ 96.263433][ T3553] dirty 0 [ 96.263464][ T3553] writeback 0 [ 96.263494][ T3553] workingset_refault_anon 0 [ 96.263534][ T3553] workingset_refault_file 0 [ 96.263565][ T3553] swap 0 [ 96.263594][ T3553] swapcached 0 [ 96.263624][ T3553] pgpgin 0 [ 96.263654][ T3553] pgpgout 0 [ 96.263684][ T3553] pgfault 0 [ 96.263712][ T3553] pgmajfault 0 [ 96.263741][ T3553] inactive_anon 0 [ 96.263768][ T3553] active_anon 0 [ 96.263797][ T3553] inactive_file 0 [ 96.263827][ T3553] active_file 0 [ 96.263861][ T3553] unevictable 0 [ 96.263892][ T3553] hierarchical_memory_limit 0 [ 96.263921][ T3553] hierarchical_memsw_limit 9223372036854771712 [ 96.263950][ T3553] total_cache 0 [ 96.263977][ T3553] total_rss 0 [ 96.264006][ T3553] total_rss_huge 0 [ 96.264038][ T3553] total_shmem 0 [ 96.264067][ T3553] total_mapped_file 0 [ 96.264095][ T3553] total_dirty 0 [ 96.264123][ T3553] total_writeback 0 [ 96.264151][ T3553] total_workingset_refault_anon 0 [ 96.264211][ T3553] total_workingset_refault_file 0 [ 96.271530][ T3553] total_swap 0 [ 96.271607][ T3553] total_swapcached 0 [ 96.271637][ T3553] total_pgpgin 0 [ 96.271667][ T3553] total_pgpgout 0 [ 96.271728][ T3553] total_pgfault 0 [ 96.271760][ T3553] total_pgmajfault 0 [ 96.271790][ T3553] total_inactive_anon 0 [ 96.271823][ T3553] total_active_anon 0 [ 96.271851][ T3553] total_inactive_file 0 [ 96.271880][ T3553] total_active_file 0 [ 96.271909][ T3553] total_unevictable 0 [ 96.271946][ T3553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.12,pid=3551,uid=0 [ 96.272546][ T3553] Memory cgroup out of memory: Killed process 3551 (syz.1.12) total-vm:42704kB, anon-rss:1296kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 96.415785][ T3156] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.605697][ T3156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.613998][ T3156] usb 1-1: not running at top speed; connect to a high speed hub [ 96.614927][ T3156] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 96.640399][ T3156] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 96.661558][ T3156] usb 1-1: language id specifier not provided by device, defaulting to English [ 96.673421][ T3560] syz.1.16 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.674592][ T3560] CPU: 0 UID: 0 PID: 3560 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT [ 96.674663][ T3560] Hardware name: linux,dummy-virt (DT) [ 96.674685][ T3560] Call trace: [ 96.674702][ T3560] show_stack+0x18/0x24 (C) [ 96.674761][ T3560] dump_stack_lvl+0x60/0x80 [ 96.674798][ T3560] dump_stack+0x18/0x24 [ 96.674832][ T3560] dump_header+0x40/0x170 [ 96.674867][ T3560] oom_kill_process+0x220/0x29c [ 96.674957][ T3560] out_of_memory+0xec/0x58c [ 96.675015][ T3560] mem_cgroup_out_of_memory+0x108/0x118 [ 96.675057][ T3560] try_charge_memcg+0x3b4/0x58c [ 96.675096][ T3560] obj_cgroup_charge_pages+0x44/0x214 [ 96.675134][ T3560] __memcg_slab_post_alloc_hook+0x190/0x498 [ 96.675168][ T3560] kmem_cache_alloc_noprof+0x408/0x43c [ 96.675209][ T3560] copy_fs_struct+0x24/0x94 [ 96.675250][ T3560] ksys_unshare+0xe0/0x3b8 [ 96.675286][ T3560] __arm64_sys_unshare+0x14/0x24 [ 96.675321][ T3560] invoke_syscall+0x54/0x10c [ 96.675356][ T3560] el0_svc_common.constprop.0+0x40/0xe0 [ 96.675391][ T3560] do_el0_svc+0x1c/0x34 [ 96.675424][ T3560] el0_svc+0x38/0x1fc [ 96.675504][ T3560] el0t_64_sync_handler+0xa0/0xf0 [ 96.675541][ T3560] el0t_64_sync+0x1a4/0x1a8 [ 96.688723][ T3560] memory: usage 0kB, limit 0kB, failcnt 55 [ 96.690430][ T3560] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.692149][ T3560] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 96.693141][ T3560] Memory cgroup stats for /syz1/test: [ 96.695251][ T3560] cache 0 [ 96.696199][ T3560] rss 0 [ 96.696811][ T3560] rss_huge 0 [ 96.697344][ T3560] shmem 0 [ 96.697951][ T3560] mapped_file 0 [ 96.698540][ T3560] dirty 0 [ 96.699063][ T3560] writeback 0 [ 96.699674][ T3560] workingset_refault_anon 0 [ 96.700411][ T3560] workingset_refault_file 0 [ 96.701087][ T3560] swap 0 [ 96.701722][ T3560] swapcached 0 [ 96.702627][ T3560] pgpgin 0 [ 96.703228][ T3560] pgpgout 0 [ 96.703890][ T3560] pgfault 0 [ 96.704983][ T3560] pgmajfault 0 [ 96.705155][ T3560] inactive_anon 0 [ 96.705248][ T3560] active_anon 0 [ 96.705336][ T3560] inactive_file 0 [ 96.705416][ T3560] active_file 0 [ 96.705499][ T3560] unevictable 0 [ 96.705532][ T3560] hierarchical_memory_limit 0 [ 96.705599][ T3560] hierarchical_memsw_limit 9223372036854771712 [ 96.705634][ T3560] total_cache 0 [ 96.705663][ T3560] total_rss 0 [ 96.705692][ T3560] total_rss_huge 0 [ 96.705722][ T3560] total_shmem 0 [ 96.705751][ T3560] total_mapped_file 0 [ 96.705795][ T3560] total_dirty 0 [ 96.705826][ T3560] total_writeback 0 [ 96.705856][ T3560] total_workingset_refault_anon 0 [ 96.705886][ T3560] total_workingset_refault_file 0 [ 96.705929][ T3560] total_swap 0 [ 96.705963][ T3560] total_swapcached 0 [ 96.705991][ T3560] total_pgpgin 0 [ 96.706023][ T3560] total_pgpgout 0 [ 96.706052][ T3560] total_pgfault 0 [ 96.706079][ T3560] total_pgmajfault 0 [ 96.706108][ T3560] total_inactive_anon 0 [ 96.706137][ T3560] total_active_anon 0 [ 96.706165][ T3560] total_inactive_file 0 [ 96.706195][ T3560] total_active_file 0 [ 96.706223][ T3560] total_unevictable 0 [ 96.706260][ T3560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.16,pid=3559,uid=0 [ 96.707229][ T3560] Memory cgroup out of memory: Killed process 3559 (syz.1.16) total-vm:40656kB, anon-rss:1296kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 96.739527][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.739836][ T3156] usb 1-1: Manufacturer: 妵銍烶ⷊ鼕↫㧸疌Ῐ֙ⳉ妮ᅜ۝憾ₒ [ 96.739960][ T3156] usb 1-1: SerialNumber: syz [ 96.861970][ T3562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.033661][ T3156] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 97.047163][ T3156] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.233391][ T3156] usb 1-1: USB disconnect, device number 3 [ 97.412660][ T3530] udevd[3530]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.005281][ T3156] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.157475][ T3156] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.166096][ T3156] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.166431][ T3156] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 98.166582][ T3156] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.166695][ T3156] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 98.166856][ T3156] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 98.166993][ T3156] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 98.188969][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.189246][ T3156] usb 1-1: Product: syz [ 98.189455][ T3156] usb 1-1: Manufacturer: syz [ 98.212316][ T3156] cdc_wdm 1-1:1.0: skipping garbage [ 98.212742][ T3156] cdc_wdm 1-1:1.0: skipping garbage [ 98.213604][ T3156] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.432365][ T3156] usb 1-1: USB disconnect, device number 4 [ 99.791498][ T3593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.793231][ T3593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.008166][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.012482][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.490610][ T3624] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 105.005136][ T3438] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.167683][ T3438] usb 1-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 105.176840][ T3438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.177163][ T3438] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.177875][ T3438] usb 1-1: config 1 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 105.178097][ T3438] usb 1-1: config 1 interface 1 has no altsetting 1 [ 105.200074][ T3438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.200403][ T3438] usb 1-1: Product: syz [ 105.200650][ T3438] usb 1-1: Manufacturer: syz [ 105.200713][ T3438] usb 1-1: SerialNumber: syz [ 105.599371][ T3438] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.645611][ T3438] usb 1-1: USB disconnect, device number 5 [ 105.926728][ T3531] udevd[3531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.808232][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.820136][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.026119][ T3663] process 'syz.1.58' launched './file0' with NULL argv: empty string added [ 114.537474][ T3446] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.705335][ T3446] usb 1-1: Using ep0 maxpacket: 8 [ 114.720904][ T3446] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.722357][ T3446] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 114.731568][ T3446] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 114.732104][ T3446] usb 1-1: config 0 has no interface number 0 [ 114.732359][ T3446] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 114.732568][ T3446] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 114.732771][ T3446] usb 1-1: config 0 interface 88 has no altsetting 0 [ 114.763356][ T3446] usb 1-1: string descriptor 0 read error: -22 [ 114.764105][ T3446] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 114.778826][ T3446] usb 1-1: config 0 descriptor?? [ 115.049363][ T3156] usb 1-1: USB disconnect, device number 6 [ 115.238933][ T3713] syzkaller0: entered promiscuous mode [ 115.241001][ T3713] syzkaller0: entered allmulticast mode [ 117.888706][ T3724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.063869][ T3740] kernel profiling enabled (shift: 4) [ 121.302577][ T3745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.303402][ T3745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.711350][ T3756] binder: 3755:3756 tried to acquire reference to desc 0, got 1 instead [ 123.714370][ T3756] binder: 3755:3756 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 123.717038][ T3756] binder: 3756 RLIMIT_NICE not set [ 124.029832][ T3758] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 124.226458][ T3763] binder: 3755:3763 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 124.226884][ T3763] binder: 3755:3763 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 124.227102][ T3763] binder: 3763 RLIMIT_NICE not set [ 126.773405][ T3439] hid-generic 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 127.309051][ T3784] fido_id[3784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.371055][ T3439] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.529843][ T3439] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.545135][ T3439] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.545488][ T3439] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.549096][ T3439] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.549647][ T3439] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.549731][ T3439] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.570626][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.570943][ T3439] usb 1-1: Product: syz [ 127.572746][ T3439] usb 1-1: Manufacturer: syz [ 127.608923][ T3439] cdc_wdm 1-1:1.0: skipping garbage [ 127.609095][ T3439] cdc_wdm 1-1:1.0: skipping garbage [ 127.620767][ T3439] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 128.334354][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.334662][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.336271][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.336353][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.336956][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.337027][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.337611][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.337683][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.338089][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.338177][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.338694][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.338785][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.339313][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.339377][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.339857][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.339928][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.340565][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.340633][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.341125][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 128.341193][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 128.353694][ T3446] usb 1-1: USB disconnect, device number 7 [ 128.354043][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 128.355133][ T3789] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 131.300487][ T3835] ======================================================= [ 131.300487][ T3835] WARNING: The mand mount option has been deprecated and [ 131.300487][ T3835] and is ignored by this kernel. Remove the mand [ 131.300487][ T3835] option from the mount to silence this warning. [ 131.300487][ T3835] ======================================================= [ 136.483975][ T3861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.487629][ T3861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.656995][ T3865] fuse: Bad value for 'fd' [ 137.215942][ T3877] fuse: Bad value for 'fd' [ 138.902744][ T3889] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 139.150669][ T3892] fuse: Bad value for 'fd' [ 139.378009][ T3896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.379339][ T3896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.661879][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.663384][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.468480][ T3911] Trying to write to read-only block-device nullb0 [ 151.568647][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.570068][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.024010][ T3997] nvmet_tcp: malformed ip/port passed: :8009 [ 153.117339][ T3999] fuse: Bad value for 'fd' [ 153.363965][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.369803][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.981028][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.983189][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.093350][ T4009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.097367][ T4009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.202572][ T4011] fuse: Bad value for 'fd' [ 154.408104][ T801] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.425818][ T801] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.283386][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.288209][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.367597][ T4024] fuse: Bad value for 'fd' [ 158.501556][ T4073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.516482][ T4073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.895990][ T4100] syzkaller1: entered promiscuous mode [ 160.897216][ T4100] syzkaller1: entered allmulticast mode [ 161.451387][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.454114][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.115281][ T3439] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 164.267920][ T3439] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.274965][ T3439] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 164.277250][ T3439] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.287792][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.289088][ T3439] usb 1-1: Product: syz [ 164.289329][ T3439] usb 1-1: Manufacturer: syz [ 164.289445][ T3439] usb 1-1: SerialNumber: syz [ 164.299989][ T3439] usb 1-1: config 0 descriptor?? [ 164.323935][ T3439] usb 1-1: selecting invalid altsetting 0 [ 164.544410][ T4122] usb 1-1: BOGUS urb xfer, pipe 0 != type 1 [ 165.487246][ T4132] syzkaller1: entered promiscuous mode [ 165.487663][ T4132] syzkaller1: entered allmulticast mode [ 175.111617][ T3446] usb 1-1: USB disconnect, device number 8 [ 176.248835][ T4172] syzkaller0: entered promiscuous mode [ 176.250171][ T4172] syzkaller0: entered allmulticast mode [ 178.211174][ T3156] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.415816][ T3156] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 178.438443][ T3156] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 178.440609][ T3156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.442072][ T3156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.443460][ T3156] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 178.445903][ T3156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.471000][ T3156] usb 1-1: config 0 descriptor?? [ 179.662273][ T3156] usbhid 1-1:0.0: can't add hid device: -71 [ 179.666525][ T3156] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 179.684991][ T3156] usb 1-1: USB disconnect, device number 9 [ 179.910596][ T4200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 181.058952][ T4211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.060616][ T4211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.976829][ T4215] syzkaller0: entered promiscuous mode [ 182.977142][ T4215] syzkaller0: entered allmulticast mode [ 188.734932][ T3156] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 188.885232][ T3156] usb 1-1: Using ep0 maxpacket: 8 [ 188.889562][ T3156] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.905262][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.905684][ T3156] usb 1-1: Product: syz [ 188.905896][ T3156] usb 1-1: Manufacturer: syz [ 188.906019][ T3156] usb 1-1: SerialNumber: syz [ 188.919608][ T3156] usb 1-1: config 0 descriptor?? [ 198.995525][ T4239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.997001][ T4239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.148523][ T801] usb 1-1: USB disconnect, device number 10 [ 201.647079][ T4249] random: crng reseeded on system resumption [ 201.669426][ T4249] Restarting kernel threads ... [ 201.672179][ T4249] Done restarting kernel threads. [ 201.778379][ T4251] dlm: no local IP address has been set [ 201.778840][ T4251] dlm: cannot start dlm midcomms -107 [ 201.826828][ T28] audit: type=1326 audit(201.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4250 comm="syz.1.292" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x0 [ 205.165441][ T3156] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.314894][ T3156] usb 1-1: Using ep0 maxpacket: 32 [ 205.319257][ T3156] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 205.327111][ T3156] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.327348][ T3156] usb 1-1: config 0 has no interface number 0 [ 205.329083][ T3156] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 205.329529][ T3156] usb 1-1: config 0 interface 1 has no altsetting 0 [ 205.341390][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.341654][ T3156] usb 1-1: Product: syz [ 205.341984][ T3156] usb 1-1: Manufacturer: syz [ 205.342050][ T3156] usb 1-1: SerialNumber: syz [ 205.352715][ T3156] usb 1-1: config 0 descriptor?? [ 205.589117][ T3156] usb 1-1: USB disconnect, device number 11 [ 206.075269][ T3156] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.224945][ T3156] usb 1-1: Using ep0 maxpacket: 32 [ 206.228389][ T3156] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 206.234962][ T3156] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.235241][ T3156] usb 1-1: config 0 has no interface number 0 [ 206.235562][ T3156] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 206.235638][ T3156] usb 1-1: config 0 interface 1 has no altsetting 0 [ 206.248237][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.248574][ T3156] usb 1-1: Product: syz [ 206.248767][ T3156] usb 1-1: Manufacturer: syz [ 206.248866][ T3156] usb 1-1: SerialNumber: syz [ 206.258386][ T3156] usb 1-1: config 0 descriptor?? [ 207.708447][ T4279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.713940][ T4279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.524083][ T3446] usb 1-1: USB disconnect, device number 12 [ 216.955336][ T3156] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.119333][ T3156] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.129887][ T3156] usb 1-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 217.130448][ T3156] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.141789][ T3156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.142023][ T3156] usb 1-1: SerialNumber: syz [ 217.387014][ T3156] usb 1-1: No union descriptors [ 217.410926][ T3156] usb 1-1: USB disconnect, device number 13 [ 222.382629][ T4331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.383492][ T4331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.764990][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.766005][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.821097][ T4342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.822009][ T4342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.771728][ T4360] lo speed is unknown, defaulting to 1000 [ 223.782496][ T4360] lo speed is unknown, defaulting to 1000 [ 223.824839][ T4360] lo speed is unknown, defaulting to 1000 [ 224.499009][ T4360] infiniband syz0: set active [ 224.499500][ T3439] lo speed is unknown, defaulting to 1000 [ 224.500199][ T4360] infiniband syz0: added lo [ 224.585111][ T4360] RDS/IB: syz0: added [ 224.587373][ T4360] smc: adding ib device syz0 with port count 1 [ 224.591335][ T4360] smc: ib device syz0 port 1 has no pnetid [ 224.595571][ T3439] lo speed is unknown, defaulting to 1000 [ 224.604075][ T4360] lo speed is unknown, defaulting to 1000 [ 225.023969][ T4360] lo speed is unknown, defaulting to 1000 [ 225.461853][ T4366] smc: removing ib device syz0 [ 226.902103][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.903625][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.055251][ T3439] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.225443][ T3439] usb 1-1: Using ep0 maxpacket: 32 [ 227.236854][ T3439] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 227.267637][ T3439] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 227.267971][ T3439] usb 1-1: config 2 has no interface number 0 [ 227.268324][ T3439] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 227.268479][ T3439] usb 1-1: config 2 interface 88 has no altsetting 0 [ 227.291110][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 227.292589][ T3439] usb 1-1: Product: syz [ 227.293414][ T3439] usb 1-1: Manufacturer: syz [ 227.294513][ T3439] usb 1-1: SerialNumber: syz [ 227.312562][ T4376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.533877][ T4376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.361066][ T3439] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 228.361340][ T3439] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 228.361841][ T3439] asix 1-1:2.88: probe with driver asix failed with error -71 [ 228.373058][ T3439] usb 1-1: USB disconnect, device number 14 [ 228.765027][ T3439] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.917770][ T3439] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.927244][ T3439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.938484][ T3439] usb 1-1: config 0 descriptor?? [ 229.161523][ T3439] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 229.212020][ T3439] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 229.212445][ T3439] [drm] Initialized udl on minor 2 [ 229.576250][ T3439] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 229.581752][ T3439] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 229.586139][ T3156] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.599767][ T3156] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 229.600513][ T3156] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 229.616473][ T3439] usb 1-1: USB disconnect, device number 15 [ 233.498233][ T4417] syz.0.351 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 233.501196][ T4417] CPU: 0 UID: 0 PID: 4417 Comm: syz.0.351 Not tainted syzkaller #0 PREEMPT [ 233.501344][ T4417] Hardware name: linux,dummy-virt (DT) [ 233.501411][ T4417] Call trace: [ 233.501467][ T4417] show_stack+0x18/0x24 (C) [ 233.501570][ T4417] dump_stack_lvl+0x60/0x80 [ 233.501640][ T4417] dump_stack+0x18/0x24 [ 233.501701][ T4417] dump_header+0x40/0x170 [ 233.501766][ T4417] oom_kill_process+0x220/0x29c [ 233.501844][ T4417] out_of_memory+0xec/0x58c [ 233.501914][ T4417] mem_cgroup_out_of_memory+0x108/0x118 [ 233.502014][ T4417] try_charge_memcg+0x3b4/0x58c [ 233.502115][ T4417] obj_cgroup_charge_pages+0x44/0x214 [ 233.502198][ T4417] __memcg_slab_post_alloc_hook+0x190/0x498 [ 233.502292][ T4417] kmem_cache_alloc_lru_noprof+0x40c/0x440 [ 233.502437][ T4417] sock_alloc_inode+0x24/0x94 [ 233.502527][ T4417] alloc_inode+0x28/0xdc [ 233.502600][ T4417] sock_alloc+0x20/0xa0 [ 233.502672][ T4417] __sock_create+0xa4/0x260 [ 233.502746][ T4417] __sys_socket+0xa0/0x140 [ 233.502881][ T4417] __arm64_sys_socket+0x20/0x38 [ 233.502956][ T4417] invoke_syscall+0x54/0x10c [ 233.503032][ T4417] el0_svc_common.constprop.0+0x40/0xe0 [ 233.503104][ T4417] do_el0_svc+0x1c/0x34 [ 233.503167][ T4417] el0_svc+0x38/0x1fc [ 233.503239][ T4417] el0t_64_sync_handler+0xa0/0xf0 [ 233.503315][ T4417] el0t_64_sync+0x1a4/0x1a8 [ 233.525006][ T4417] memory: usage 0kB, limit 0kB, failcnt 55 [ 233.525104][ T4417] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 233.525151][ T4417] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 233.525194][ T4417] Memory cgroup stats for /syz0/test: [ 233.525640][ T4417] cache 0 [ 233.525684][ T4417] rss 0 [ 233.525715][ T4417] rss_huge 0 [ 233.525864][ T4417] shmem 0 [ 233.525900][ T4417] mapped_file 0 [ 233.525930][ T4417] dirty 0 [ 233.525960][ T4417] writeback 0 [ 233.525992][ T4417] workingset_refault_anon 0 [ 233.526023][ T4417] workingset_refault_file 0 [ 233.526054][ T4417] swap 0 [ 233.526084][ T4417] swapcached 0 [ 233.526114][ T4417] pgpgin 0 [ 233.526159][ T4417] pgpgout 0 [ 233.526191][ T4417] pgfault 0 [ 233.526221][ T4417] pgmajfault 0 [ 233.526251][ T4417] inactive_anon 0 [ 233.526282][ T4417] active_anon 0 [ 233.526329][ T4417] inactive_file 0 [ 233.526360][ T4417] active_file 0 [ 233.526420][ T4417] unevictable 0 [ 233.526503][ T4417] hierarchical_memory_limit 0 [ 233.526539][ T4417] hierarchical_memsw_limit 9223372036854771712 [ 233.526573][ T4417] total_cache 0 [ 233.526603][ T4417] total_rss 0 [ 233.526633][ T4417] total_rss_huge 0 [ 233.526664][ T4417] total_shmem 0 [ 233.526694][ T4417] total_mapped_file 0 [ 233.526725][ T4417] total_dirty 0 [ 233.526755][ T4417] total_writeback 0 [ 233.526786][ T4417] total_workingset_refault_anon 0 [ 233.526834][ T4417] total_workingset_refault_file 0 [ 233.526906][ T4417] total_swap 0 [ 233.526940][ T4417] total_swapcached 0 [ 233.526971][ T4417] total_pgpgin 0 [ 233.527002][ T4417] total_pgpgout 0 [ 233.527034][ T4417] total_pgfault 0 [ 233.527071][ T4417] total_pgmajfault 0 [ 233.527132][ T4417] total_inactive_anon 0 [ 233.527184][ T4417] total_active_anon 0 [ 233.527218][ T4417] total_inactive_file 0 [ 233.527249][ T4417] total_active_file 0 [ 233.527323][ T4417] total_unevictable 0 [ 233.527367][ T4417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.351,pid=4415,uid=0 [ 233.527972][ T4417] Memory cgroup out of memory: Killed process 4415 (syz.0.351) total-vm:40656kB, anon-rss:1296kB, file-rss:1104kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 233.620759][ T4417] socket: no more sockets [ 233.985391][ T3467] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 234.155954][ T3467] usb 1-1: Using ep0 maxpacket: 32 [ 234.161215][ T3467] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.173660][ T3467] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.173937][ T3467] usb 1-1: config 0 has no interface number 0 [ 234.192141][ T3467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.192553][ T3467] usb 1-1: Product: syz [ 234.192833][ T3467] usb 1-1: Manufacturer: syz [ 234.192933][ T3467] usb 1-1: SerialNumber: syz [ 234.203078][ T3467] usb 1-1: config 0 descriptor?? [ 235.467856][ T3467] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM is busy [ 235.886101][ T3467] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 235.887231][ T3467] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 235.937236][ T3467] usb 1-1: USB disconnect, device number 16 [ 236.320800][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.322277][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.345962][ T4429] binder: 4428:4429 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 236.370018][ T4429] binder: 4428:4429 ioctl c0306201 0 returned -14 [ 236.376375][ T4429] binder: 4428:4429 got transaction to invalid handle, 1 [ 236.376805][ T4429] binder: 4428:4429 cannot find target node [ 236.377155][ T4429] binder: 4428:4429 transaction call to 0:0 failed 9/29201/-22, code 0 size 88-24 line 3252 [ 236.391539][ T28] audit: type=1326 audit(236.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4428 comm="syz.1.357" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x0 [ 237.044078][ T4440] syzkaller1: entered promiscuous mode [ 237.048797][ T4440] syzkaller1: entered allmulticast mode [ 246.917884][ T3439] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.042510][ T4447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.046481][ T4447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.660834][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.662146][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.011166][ T37] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 250.178525][ T37] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 250.186666][ T37] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 250.187083][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.984103][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.987345][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.383938][ T3467] usb 1-1: USB disconnect, device number 17 [ 265.225978][ T4518] psci: CPU1 killed (polled 0 ms) [ 265.238748][ T28] audit: type=1326 audit(265.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4521 comm="syz.1.391" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x7ffc0000 [ 265.258226][ T28] audit: type=1326 audit(265.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4521 comm="syz.1.391" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x7ffc0000 [ 265.261022][ T28] audit: type=1326 audit(265.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4521 comm="syz.1.391" exe="/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffff9df79228 code=0x7ffc0000 [ 265.263674][ T28] audit: type=1326 audit(265.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4521 comm="syz.1.391" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x7ffc0000 [ 265.278749][ T28] audit: type=1326 audit(265.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4521 comm="syz.1.391" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79228 code=0x7ffc0000 [ 265.390034][ T0] Detected PIPT I-cache on CPU1 [ 265.393620][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 265.499920][ T4524] loop8: detected capacity change from 0 to 7 [ 265.825507][ T4530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.827018][ T4530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.759897][ T4555] nvmet: Invalid value 'ipv' for adrfam [ 269.763379][ T4555] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 272.295174][ T3438] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.465581][ T3438] usb 1-1: Using ep0 maxpacket: 32 [ 272.469522][ T3438] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 272.479825][ T3438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.480110][ T3438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.480315][ T3438] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 272.480533][ T3438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.508597][ T3438] usb 1-1: config 0 descriptor?? [ 272.665320][ T4571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.685232][ T4571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.890087][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.899010][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.975523][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.977586][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.981803][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.985272][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.988967][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.992001][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.994671][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 272.996502][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 273.005618][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 273.006009][ T3438] hid-generic 0003:0458:5011.0003: unknown main item tag 0x0 [ 273.045108][ T3438] hid-generic 0003:0458:5011.0003: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 273.153719][ T37] usb 1-1: USB disconnect, device number 18 [ 273.322633][ T4577] fido_id[4577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 278.315898][ T37] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 278.507680][ T37] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 278.513975][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.514499][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.514660][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.514842][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.524071][ T37] usb 1-1: config 0 descriptor?? [ 278.954675][ T37] hid_parser_main: 905 callbacks suppressed [ 278.954970][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x2 [ 278.955065][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955202][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955282][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x6 [ 278.955346][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955407][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955468][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955538][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955600][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955660][ T37] hid-generic 0003:1A34:0802.0004: unknown main item tag 0x0 [ 278.955840][ T37] hid-generic 0003:1A34:0802.0004: item fetching failed at offset 37/41 [ 278.956588][ T37] hid-generic 0003:1A34:0802.0004: probe with driver hid-generic failed with error -22 [ 279.155129][ T37] usb 1-1: USB disconnect, device number 19 [ 279.285707][ T4609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.625043][ T3439] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 280.775118][ T3439] usb 1-1: Using ep0 maxpacket: 16 [ 280.778019][ T3439] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 280.788105][ T3439] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 280.788326][ T3439] usb 1-1: config 0 has no interface number 0 [ 280.788716][ T3439] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 280.788808][ T3439] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 280.815680][ T3439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.815945][ T3439] usb 1-1: Product: syz [ 280.816202][ T3439] usb 1-1: Manufacturer: syz [ 280.816307][ T3439] usb 1-1: SerialNumber: syz [ 280.828582][ T3439] usb 1-1: config 0 descriptor?? [ 280.835181][ T4617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.837388][ T4617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.052874][ T4617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.057361][ T4617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.264090][ T3439] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 282.695074][ T3439] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 282.695638][ T3439] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 282.696457][ T3439] asix 1-1:0.34: probe with driver asix failed with error -71 [ 282.732868][ T3439] usb 1-1: USB disconnect, device number 20 [ 283.159249][ T4625] syzkaller1: entered promiscuous mode [ 283.160543][ T4625] syzkaller1: entered allmulticast mode [ 283.904919][ T37] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 284.061763][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.062102][ T37] usb 1-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40 [ 284.070957][ T37] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.071168][ T37] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 284.087518][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.087755][ T37] usb 1-1: Product: syz [ 284.088001][ T37] usb 1-1: Manufacturer: syz [ 284.088063][ T37] usb 1-1: SerialNumber: syz [ 284.322251][ T37] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 284.389590][ T37] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 284.523060][ T37] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 284.729475][ T37] usb 1-1: can't set first interface for hiFace device. [ 284.729815][ T37] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 284.744904][ T37] usb 1-1: can't set first interface for hiFace device. [ 284.745313][ T37] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 284.760445][ T37] usb 1-1: USB disconnect, device number 21 [ 285.048651][ T4540] udevd[4540]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.186186][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.187677][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.448362][ T4645] dlm: no local IP address has been set [ 285.448608][ T4645] dlm: cannot start dlm midcomms -107 [ 285.883001][ T4656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.886876][ T4656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.473748][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 288.836526][ T4741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 288.855773][ T4741] Zero length message leads to an empty skb [ 288.879508][ T4741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 289.559667][ T4764] ip_tables: iptables: counters copy to user failed while replacing table [ 290.008302][ T4773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.464'. [ 290.026906][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 290.030574][ T4773] hsr_slave_0: left promiscuous mode [ 290.050997][ T4773] hsr_slave_1: left promiscuous mode [ 294.699673][ T4826] syzkaller1: entered promiscuous mode [ 294.700839][ T4826] syzkaller1: entered allmulticast mode [ 298.102959][ T4844] syzkaller0: entered promiscuous mode [ 298.104241][ T4844] syzkaller0: entered allmulticast mode [ 298.667971][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 298.677508][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 298.679793][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 298.682414][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 299.677540][ T4876] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 300.083508][ C1] vcan0: j1939_tp_rxtimer: 0x0000000000e26f8c: rx timeout, send abort [ 300.263544][ T4889] netlink: 165 bytes leftover after parsing attributes in process `syz.1.505'. [ 300.584629][ C1] vcan0: j1939_tp_rxtimer: 0x0000000000e26f8c: abort rx timeout. Force session deactivation [ 301.209825][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 301.269871][ T4908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.323927][ T4908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.366335][ T4908] bond0 (unregistering): Released all slaves [ 303.540412][ T4957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.526'. [ 303.543283][ T4957] nbd: couldn't find a device at index 458752 [ 303.676735][ T4961] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 303.685343][ T4961] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 303.693207][ T4960] syzkaller0: entered promiscuous mode [ 303.693556][ T4960] syzkaller0: entered allmulticast mode [ 304.496074][ T4729] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.565570][ T4729] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.565971][ T4729] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.566267][ T4729] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.476141][ T4985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.536'. [ 305.503143][ T4975] netlink: 100 bytes leftover after parsing attributes in process `syz.1.534'. [ 308.622973][ T5040] syzkaller0: entered promiscuous mode [ 308.623296][ T5040] syzkaller0: entered allmulticast mode [ 310.843724][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 311.540516][ T5092] policy can only be matched on NF_INET_PRE_ROUTING [ 311.540945][ T5092] unable to load match [ 312.361137][ T5102] netlink: 'syz.0.577': attribute type 11 has an invalid length. [ 312.362467][ T5102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.577'. [ 315.068285][ T5170] vlan2: entered promiscuous mode [ 315.069844][ T5170] vlan2: entered allmulticast mode [ 315.071678][ T5170] veth1_vlan: entered allmulticast mode [ 315.514920][ T5177] syzkaller0: entered promiscuous mode [ 315.515207][ T5177] syzkaller0: entered allmulticast mode [ 315.875052][ T5180] syzkaller0: entered promiscuous mode [ 315.876265][ T5180] syzkaller0: entered allmulticast mode [ 318.878590][ T5238] af_packet: packet size is too long (35212 > 2016) [ 319.978604][ T5248] netlink: 88 bytes leftover after parsing attributes in process `syz.1.626'. [ 321.007395][ T5274] dlm: closing connection to node 1 [ 321.008694][ T5274] ------------[ cut here ]------------ [ 321.012050][ T5274] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x98/0x13c, CPU#0: syz.1.637/5274 [ 321.020767][ T5274] Modules linked in: [ 321.023246][ T5274] CPU: 0 UID: 0 PID: 5274 Comm: syz.1.637 Not tainted syzkaller #0 PREEMPT [ 321.024144][ T5274] Hardware name: linux,dummy-virt (DT) [ 321.024658][ T5274] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 321.025032][ T5274] pc : dlm_lowcomms_close+0x98/0x13c [ 321.025368][ T5274] lr : dlm_lowcomms_close+0x4c/0x13c [ 321.025623][ T5274] sp : ffff800088a83c00 [ 321.025984][ T5274] x29: ffff800088a83c00 x28: fdf000000b56d500 x27: 0000000000000000 [ 321.027001][ T5274] x26: ffff800082c90918 x25: f0f0000009a97d08 x24: fbf0000007d4f540 [ 321.027581][ T5274] x23: 0000000000000001 x22: 0000000000000000 x21: 0000000000000001 [ 321.028086][ T5274] x20: ffff800082c91168 x19: 0000000000000000 x18: 00000000ffffffff [ 321.028830][ T5274] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800082e0d302 [ 321.029461][ T5274] x14: 00000000ffffffea x13: ffff800088a83878 x12: 00000000000affa8 [ 321.030134][ T5274] x11: ffff800082b9ed70 x10: 000000000002ffe8 x9 : ffff800082c4ed70 [ 321.030840][ T5274] x8 : ffff800082c7ed58 x7 : 0000000000000001 x6 : ffffffffffffffff [ 321.031467][ T5274] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 321.032132][ T5274] x2 : ffff800082e6d000 x1 : 0000000000000000 x0 : 0000000000000000 [ 321.032979][ T5274] Call trace: [ 321.033709][ T5274] dlm_lowcomms_close+0x98/0x13c (P) [ 321.034444][ T5274] dlm_midcomms_close+0xe8/0x244 [ 321.034770][ T5274] drop_comm+0x30/0x80 [ 321.034982][ T5274] client_drop_item+0x2c/0x50 [ 321.035195][ T5274] configfs_rmdir+0x1e4/0x32c [ 321.035561][ T5274] vfs_rmdir+0x11c/0x278 [ 321.035856][ T5274] filename_rmdir+0x14c/0x240 [ 321.036123][ T5274] __arm64_sys_unlinkat+0x6c/0x7c [ 321.036396][ T5274] invoke_syscall+0x54/0x10c [ 321.036792][ T5274] el0_svc_common.constprop.0+0x40/0xe0 [ 321.037189][ T5274] do_el0_svc+0x1c/0x34 [ 321.037440][ T5274] el0_svc+0x38/0x1fc [ 321.037784][ T5274] el0t_64_sync_handler+0xa0/0xf0 [ 321.038018][ T5274] el0t_64_sync+0x1a4/0x1a8 [ 321.038593][ T5274] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 321.564150][ T4723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.678734][ T4723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.793722][ T4723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.903584][ T4723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.488298][ T4723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.524709][ T4723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.568729][ T4723] bond0 (unregistering): Released all slaves [ 322.642890][ T4723] hsr_slave_0: left promiscuous mode [ 322.647218][ T4723] hsr_slave_1: left promiscuous mode [ 322.666003][ T4723] veth1_macvtap: left promiscuous mode [ 322.666392][ T4723] veth0_macvtap: left promiscuous mode [ 322.668094][ T4723] veth1_vlan: left promiscuous mode [ 322.668500][ T4723] veth0_vlan: left promiscuous mode [ 323.210148][ T3221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 323.959602][ T3221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 324.550044][ T3221] 8021q: adding VLAN 0 to HW filter on device eth3 [ 325.422936][ T3221] 8021q: adding VLAN 0 to HW filter on device eth4