last executing test programs: 23m14.463103461s ago: executing program 1 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) 23m14.331081256s ago: executing program 1 (id=127): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x1, 0x0, 0x2cb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 23m14.138675174s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='namespace0.0', 0xc) 23m13.897544824s ago: executing program 1 (id=129): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0}) 23m13.681815433s ago: executing program 1 (id=130): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) 23m13.457571529s ago: executing program 1 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000020900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) 22m27.906535657s ago: executing program 32 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000020900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) 2m56.971195027s ago: executing program 2 (id=2770): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000740)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000740)={{}, {0x0, 0x989680}}, 0x0) 2m56.970927217s ago: executing program 2 (id=2771): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d5000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m56.849881723s ago: executing program 2 (id=2772): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x48) 2m56.787647497s ago: executing program 2 (id=2773): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m56.712062733s ago: executing program 2 (id=2774): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x8000000800, 0x0, 0xfffff, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffff, 0x1, 0x800000000004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m56.620701243s ago: executing program 2 (id=2775): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r0, 0x15, 0x0, @void}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, 0xffffffffffffffff, &(0x7f0000000040)) 2m56.620586013s ago: executing program 33 (id=2775): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r0, 0x15, 0x0, @void}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, 0xffffffffffffffff, &(0x7f0000000040)) 5.000197577s ago: executing program 3 (id=3440): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000004b40)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x7}, {0x0}, &(0x7f0000004ac0)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1, 0x7, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0xc}, {0x0}, 0x0, 0x0, 0x2, 0x5}}], 0x90, 0x8004}, 0x0) 4.861207978s ago: executing program 3 (id=3442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.190118849s ago: executing program 3 (id=3443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005) unshare(0x4a000480) 1.390484547s ago: executing program 3 (id=3447): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x434, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.246967762s ago: executing program 3 (id=3448): write(0xffffffffffffffff, &(0x7f00000006c0)=';', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.140659675s ago: executing program 3 (id=3451): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 380.218098ms ago: executing program 0 (id=3457): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000130001002cbd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="141004001f4c0500d00016807800018014000a000002000000000000020000000000000014000b00010001000000000001000080000000000c000500faffffffe4000000280001"], 0xf0}}, 0x20040000) 291.361886ms ago: executing program 0 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 230.949679ms ago: executing program 0 (id=3459): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}}, 0x20000800) 173.101149ms ago: executing program 0 (id=3460): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 82.214528ms ago: executing program 0 (id=3461): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB='noswap']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 0s ago: executing program 0 (id=3462): syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x2c00, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 0s ago: executing program 0 (id=3463): r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) kernel console output (not intermixed with test programs): 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.895454][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.580256][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.588902][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.958074][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.959581][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.828181][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.829627][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.024788][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.026652][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.153828][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'. [ 1449.009379][ T5636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.010811][ T5636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.203633][ T11] usb 1-1: USB disconnect, device number 42 [ 1450.948689][ T5643] capability: warning: `syz.0.706' uses deprecated v2 capabilities in a way that may be insecure [ 1453.632297][ T3370] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1453.802113][ T3370] usb 1-1: Using ep0 maxpacket: 8 [ 1453.806444][ T3370] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1453.815351][ T3370] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1453.815722][ T3370] usb 1-1: config 0 has no interface number 0 [ 1453.816028][ T3370] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1453.816113][ T3370] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1453.816177][ T3370] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1453.816331][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.831922][ T3370] usb 1-1: config 0 descriptor?? [ 1453.878272][ T3370] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1454.110452][ T3370] usb 1-1: USB disconnect, device number 43 [ 1454.531900][ T3370] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1454.681735][ T3370] usb 1-1: Using ep0 maxpacket: 8 [ 1454.685720][ T3370] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1454.696540][ T3370] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1454.696858][ T3370] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.697030][ T3370] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.697174][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.735253][ T3370] usbtmc 1-1:16.0: bulk endpoints not found [ 1459.390461][ T5655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.397127][ T5655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.498922][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.500316][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.825820][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.831118][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.916015][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.917426][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.853157][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.856855][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.967623][ T5687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.970413][ T5687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.463688][ T5697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.466175][ T5697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.552861][ T5699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.554322][ T5699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.841565][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.843369][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.982255][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.983913][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.209757][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.214437][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.278178][ T5715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.279091][ T5715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.872511][ T5724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.874224][ T5724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.217216][ T11] usb 1-1: USB disconnect, device number 44 [ 1470.074102][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.080761][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.205159][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.215752][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.331034][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.332744][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.377666][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.380043][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.821828][ T11] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1473.982188][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1473.986592][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1473.997947][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1473.998257][ T11] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.998689][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.432343][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.433971][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.653827][ T5760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.659517][ T5760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.400364][ T5766] binder: 5765:5766 tried to acquire reference to desc 0, got 1 instead [ 1477.403184][ T5766] binder: tried to use weak ref as strong ref [ 1477.403366][ T5766] binder: 5765:5766 got transaction with invalid handle, 0 [ 1477.403451][ T5766] binder: 5766:5765 translate handle failed [ 1477.403787][ T5766] binder: 5765:5766 transaction call to 5765:0 failed 14/29201/-22, code 0 size 72-24 line 3571 [ 1477.406183][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 1477.465274][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.468861][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.836166][ T5770] gretap1: entered promiscuous mode [ 1477.969664][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.970646][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.563637][ T11] usb 1-1: USB disconnect, device number 45 [ 1489.092624][ T11] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1489.242026][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1489.246327][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1489.259343][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1489.259789][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1489.262511][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1489.262622][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1489.262710][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1489.262803][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1489.263008][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.313753][ T11] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 1493.629270][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.634195][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.728799][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.730227][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.876113][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.877526][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.988925][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 1494.163562][ T5806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.170577][ T5806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.261820][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.264422][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.361800][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.363338][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.606619][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.616890][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.719932][ T5818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.724565][ T5818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.815050][ T5820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.816552][ T5820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.546903][ T11] usb 1-1: USB disconnect, device number 46 [ 1500.071885][ T11] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1500.231788][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 1500.237498][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1500.258927][ T11] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1500.260650][ T11] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.263894][ T11] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1500.267554][ T11] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1500.270597][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1500.273749][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.323612][ T11] usbtmc 1-1:16.0: bulk endpoints not found [ 1503.678531][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.694211][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.794246][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.795983][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.917796][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 1504.376235][ T5857] binder: 5856:5857 tried to acquire reference to desc 0, got 1 instead [ 1504.384477][ T5857] binder: 5856:5857 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1504.384764][ T5857] binder: 5857 RLIMIT_NICE not set [ 1504.385177][ T5857] binder: 5857 RLIMIT_NICE not set [ 1504.387372][ T5857] binder: 5857 RLIMIT_NICE not set [ 1504.400378][ T4134] binder: undelivered TRANSACTION_COMPLETE [ 1504.403429][ T4134] binder: undelivered TRANSACTION_COMPLETE [ 1504.403762][ T4134] binder: undelivered transaction 20, process died. [ 1504.469535][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.470411][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.416492][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 1514.823700][ T11] usb 1-1: USB disconnect, device number 47 [ 1519.017629][ T5914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.019165][ T5914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.144123][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.153772][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.288806][ T5921] binder: 5920:5921 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1519.298982][ T5921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.807'. [ 1519.472273][ T3543] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1519.638302][ T3543] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1519.683371][ T3543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.684858][ T3543] usb 1-1: Product: syz [ 1519.688920][ T3543] usb 1-1: Manufacturer: syz [ 1519.692948][ T3543] usb 1-1: SerialNumber: syz [ 1519.708670][ T3543] usb 1-1: config 0 descriptor?? [ 1521.929706][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.933150][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.881961][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.883096][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.242606][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.244358][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.600822][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.818'. [ 1526.662920][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.664452][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.830102][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.842318][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.217225][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.222881][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.332076][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.335163][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.503993][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.507128][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.088139][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.089181][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.246118][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.249990][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.787193][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.794369][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.377648][ T3369] usb 1-1: USB disconnect, device number 48 [ 1532.181828][ T3369] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1532.332300][ T3369] usb 1-1: Using ep0 maxpacket: 8 [ 1532.335591][ T3369] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1532.345299][ T3369] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1532.345592][ T3369] usb 1-1: config 0 has no interface number 0 [ 1532.345808][ T3369] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1532.345884][ T3369] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1532.345980][ T3369] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1532.346067][ T3369] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1532.346217][ T3369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.374232][ T3369] usb 1-1: config 0 descriptor?? [ 1532.456600][ T3369] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1533.231985][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1533.231987][ T3370] usb 1-1: USB disconnect, device number 49 [ 1537.163467][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.165689][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.083298][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.086960][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.763231][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.767119][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.023072][ T3370] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1545.739229][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.740673][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.052840][ T3370] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1546.562377][ T3370] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1546.953861][ T3370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.954319][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.630515][ T3370] usb 1-1: config 0 descriptor?? [ 1551.704916][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.707416][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.862660][ T6075] netlink: 128 bytes leftover after parsing attributes in process `syz.2.861'. [ 1556.182090][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.193322][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.887084][ T4134] usb 1-1: USB disconnect, device number 50 [ 1559.008309][ T6096] input: syz1 as /devices/virtual/input/input3 [ 1559.098704][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 1560.856905][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.858398][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.179617][ T6123] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1566.751922][ T5209] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1566.913573][ T5209] usb 1-1: Using ep0 maxpacket: 8 [ 1566.924549][ T5209] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1566.937662][ T5209] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1566.937958][ T5209] usb 1-1: config 0 has no interface number 0 [ 1566.938324][ T5209] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1566.938407][ T5209] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1566.938489][ T5209] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1566.938563][ T5209] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1566.938706][ T5209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.958527][ T5209] usb 1-1: config 0 descriptor?? [ 1567.017188][ T5209] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1567.267600][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-1) [ 1567.272605][ T3390] usb 1-1: USB disconnect, device number 51 [ 1567.296234][ T3390] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1570.725853][ T28] audit: type=1326 audit(1570.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6140 comm="syz.0.884" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffacd781a8 code=0x0 [ 1572.616838][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.618100][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.025990][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 1573.307925][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 1577.112054][ T3390] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1577.148310][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.149713][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.281790][ T3390] usb 1-1: Using ep0 maxpacket: 8 [ 1577.287393][ T3390] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1577.298138][ T3390] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1577.300144][ T3390] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1577.307098][ T3390] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1577.309938][ T3390] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1577.313415][ T3390] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.316508][ T3390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.562472][ T3390] usb 1-1: usb_control_msg returned -32 [ 1577.565716][ T3390] usbtmc 1-1:16.0: can't read capabilities [ 1577.780252][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.787581][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.077355][ T6196] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1581.083842][ T3369] usb 1-1: USB disconnect, device number 52 [ 1584.445230][ T6208] UDC core: g1: couldn't find an available UDC or it's busy [ 1584.508929][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.523784][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.142213][ T5209] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1588.348404][ T5209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1588.349623][ T5209] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1588.356890][ T5209] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1588.358006][ T5209] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.358883][ T5209] usb 1-1: config 63 has no interface number 0 [ 1588.359583][ T5209] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1588.372761][ T5209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.372959][ T5209] usb 1-1: Product: syz [ 1588.373080][ T5209] usb 1-1: Manufacturer: syz [ 1588.373136][ T5209] usb 1-1: SerialNumber: syz [ 1588.652460][ T5209] usb 1-1: USB disconnect, device number 53 [ 1591.730744][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.735490][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.465398][ T6288] tmpfs: Cannot enable quota on remount [ 1595.583271][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.586294][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.318123][ T6301] syzkaller0: entered promiscuous mode [ 1598.318397][ T6301] syzkaller0: entered allmulticast mode [ 1608.317450][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'. [ 1608.318754][ T6341] netlink: 64 bytes leftover after parsing attributes in process `syz.0.950'. [ 1608.941848][ T5209] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1609.092021][ T5209] usb 1-1: Using ep0 maxpacket: 8 [ 1609.103523][ T5209] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1609.125034][ T5209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.125304][ T5209] usb 1-1: Product: syz [ 1609.125637][ T5209] usb 1-1: Manufacturer: syz [ 1609.125734][ T5209] usb 1-1: SerialNumber: syz [ 1609.140625][ T5209] usb 1-1: config 0 descriptor?? [ 1611.460978][ T6353] binder: 6352:6353 ioctl c0306201 20000080 returned -14 [ 1611.469017][ T6353] binder: 6352:6353 tried to acquire reference to desc 0, got 1 instead [ 1611.469452][ T6353] binder: 6352:6353 ioctl c0306201 200003c0 returned -14 [ 1611.473346][ T6353] binder: 6352:6353 got transaction with invalid data ptr [ 1611.474173][ T6353] binder: 6352:6353 transaction call to 6352:0 failed 25/29201/-14, code 0 size 112-4280 line 3511 [ 1611.477295][ T5209] binder: undelivered TRANSACTION_ERROR: 29201 [ 1611.579133][ T6355] binder: 6354:6355 tried to acquire reference to desc 0, got 1 instead [ 1611.586425][ T6355] binder: 6354:6355 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1611.586825][ T6355] binder: 6355 RLIMIT_NICE not set [ 1611.587094][ T6355] binder: 6355 RLIMIT_NICE not set [ 1611.588546][ T6355] binder: 6354:6355 got transaction to context manager from process owning it [ 1611.588740][ T6355] binder: 6354:6355 transaction call to 6354:0 failed 37/29201/-22, code 0 size 0-0 line 3243 [ 1611.590391][ T6355] binder_alloc: 6354: binder_alloc_buf, no vma [ 1611.590518][ T6355] binder: cannot allocate buffer: vma cleared, target dead or dying [ 1611.590758][ T6355] binder: 6354:6355 transaction call to 6354:6355 failed 38/29189/-3, code 0 size 0-0 line 3408 [ 1611.607238][ T5209] binder: release 6354:6355 transaction 30 in, still active [ 1611.607780][ T5209] binder: send failed reply for transaction 30 to 6354:6355 [ 1611.608095][ T5209] binder: undelivered TRANSACTION_ERROR: 29189 [ 1611.655454][ T4134] binder: undelivered TRANSACTION_COMPLETE [ 1611.655930][ T4134] binder: undelivered TRANSACTION_ERROR: 29201 [ 1611.889615][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.892784][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.379846][ T5209] usb 1-1: USB disconnect, device number 54 [ 1623.082458][ T5209] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1623.242255][ T5209] usb 1-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.02 [ 1623.248583][ T5209] usb 1-1: Dual-Role OTG device on HNP port [ 1623.256006][ T5209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.279166][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 1623.350175][ T5209] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 2 vid 0x1234 pid 0x0000 [ 1623.390841][ T5209] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1624.234795][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.236107][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.473196][ T6452] lo: entered allmulticast mode [ 1629.527939][ T6452] lo: left allmulticast mode [ 1630.695847][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.702478][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.499196][ T3390] hsr0: entered promiscuous mode [ 1631.523621][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 1633.243142][ T6490] smc: net device lo applied user defined pnetid SYZ0 [ 1637.832413][ T6519] kernel profiling enabled (shift: 7) [ 1638.077065][ T6519] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1638.548296][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.569275][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.104675][ T6494] hsr_slave_0: entered promiscuous mode [ 1640.124547][ T6494] hsr_slave_1: entered promiscuous mode [ 1640.130177][ T6494] debugfs: 'hsr0' already exists in 'hsr' [ 1640.130628][ T6494] Cannot create hsr debugfs directory [ 1640.796674][ T6554] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 1641.059294][ T6494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.201916][ T6494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.340785][ T6494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.452578][ T6494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.682969][ T6494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1641.696887][ T6494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1641.700753][ T6494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1641.713968][ T6494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.717662][ T6494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1641.732245][ T6494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1641.736105][ T6494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1641.750544][ T6494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1642.473938][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.705253][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 1645.937523][ T6621] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1027'. [ 1645.938110][ T6621] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1646.113452][ T6625] bond0: (slave erspan0): Error: Device can not be enslaved while up [ 1646.654604][ T6494] veth0_vlan: entered promiscuous mode [ 1646.714536][ T6494] veth1_vlan: entered promiscuous mode [ 1646.855311][ T6494] veth0_macvtap: entered promiscuous mode [ 1646.878969][ T6494] veth1_macvtap: entered promiscuous mode [ 1647.024665][ T3896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.026697][ T3896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.027350][ T3896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.027904][ T3896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.090671][ T6655] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 1648.094406][ T6655] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 1648.096224][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1037'. [ 1651.467935][ T6698] loop3: detected capacity change from 0 to 7 [ 1653.870840][ T6706] syzkaller0: entered promiscuous mode [ 1653.871379][ T6706] syzkaller0: entered allmulticast mode [ 1656.822719][ T6755] gretap0: entered promiscuous mode [ 1656.823742][ T6755] macsec1: entered allmulticast mode [ 1656.823863][ T6755] gretap0: entered allmulticast mode [ 1656.830028][ T6755] gretap0: left allmulticast mode [ 1656.833032][ T6755] gretap0: left promiscuous mode [ 1657.399776][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1076'. [ 1657.400215][ T6764] netlink: 'syz.2.1076': attribute type 7 has an invalid length. [ 1657.400250][ T6764] netlink: 'syz.2.1076': attribute type 8 has an invalid length. [ 1657.400274][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 1657.414896][ T6764] gretap0: entered promiscuous mode [ 1657.419417][ T6764] gretap0: left promiscuous mode [ 1657.658414][ T6769] fuse: Bad value for 'group_id' [ 1657.658881][ T6769] fuse: Bad value for 'group_id' [ 1657.749646][ T6771] UHID_CREATE from different security context by process 49 (syz.2.1079), this is not allowed. [ 1657.818721][ T6773] ip_tables: iptables: counters copy to user failed while replacing table [ 1658.499835][ T6781] fuse: Bad value for 'group_id' [ 1658.500261][ T6781] fuse: Bad value for 'group_id' [ 1658.579666][ T6783] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 1658.603295][ T6783] syz_tun: entered promiscuous mode [ 1659.075312][ T6794] fuse: Bad value for 'group_id' [ 1659.076784][ T6794] fuse: Bad value for 'group_id' [ 1659.812988][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.814472][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.764922][ T6836] xt_bpf: check failed: parse error [ 1660.943742][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.976864][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.404969][ T6848] loop4: detected capacity change from 0 to 7 [ 1665.797743][ T6887] fuse: Unknown parameter 'grou00000000000000000000' [ 1668.675988][ T6900] fuse: Unknown parameter 'grou00000000000000000000' [ 1669.160410][ T6904] syzkaller0: entered promiscuous mode [ 1669.163883][ T6904] syzkaller0: entered allmulticast mode [ 1669.872745][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 1670.612257][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.614760][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.990057][ T6944] fuse: Unknown parameter 'group_i00000000000000000000' [ 1674.424766][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.434062][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.492396][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.510922][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.707580][ T6978] loop4: detected capacity change from 0 to 7 [ 1674.723238][ T6978] loop4: [ 1680.830685][ T6994] fuse: Unknown parameter 'group_id00000000000000000000' [ 1681.422577][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.438179][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.732179][ T7008] fuse: Unknown parameter 'group_id00000000000000000000' [ 1687.858435][ T7023] fuse: Bad value for 'user_id' [ 1687.860492][ T7023] fuse: Bad value for 'user_id' [ 1689.819665][ T7031] input: syz0 as /devices/virtual/input/input5 [ 1690.140665][ T7036] fuse: Bad value for 'user_id' [ 1690.143958][ T7036] fuse: Bad value for 'user_id' [ 1690.844107][ T7047] fuse: Bad value for 'user_id' [ 1690.845342][ T7047] fuse: Bad value for 'user_id' [ 1691.873634][ T7058] fuse: Bad value for 'fd' [ 1693.569356][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.575362][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.978102][ T7071] fuse: Bad value for 'fd' [ 1695.096399][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 1695.227993][ T7073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1695.240814][ T7073] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1695.245924][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 1695.267641][ T7073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1698.396966][ T7084] fuse: Bad value for 'fd' [ 1699.162722][ T7096] fuse: Bad value for 'fd' [ 1699.605793][ T7102] netlink: 'syz.0.1212': attribute type 13 has an invalid length. [ 1700.309561][ T7109] fuse: Bad value for 'fd' [ 1701.107571][ T7121] fuse: Bad value for 'fd' [ 1701.978786][ T7133] fuse: Invalid rootmode [ 1703.133367][ T7138] binder: 7137:7138 tried to acquire reference to desc 0, got 1 instead [ 1703.159911][ T3543] binder_debug: 1 callbacks suppressed [ 1703.160475][ T3543] binder: release 7137:7138 transaction 50 out, still active [ 1703.164834][ T3543] binder: undelivered TRANSACTION_COMPLETE [ 1703.168894][ T3543] binder: send failed reply for transaction 43 to 7137:7138 [ 1703.215004][ T11] binder: undelivered TRANSACTION_COMPLETE [ 1703.215729][ T11] binder: undelivered TRANSACTION_ERROR: 29189 [ 1703.217383][ T11] binder: send failed reply for transaction 50, target dead [ 1703.388258][ T7142] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1703.509864][ T7144] fuse: Invalid rootmode [ 1703.673637][ T7146] ip_tables: iptables: counters copy to user failed while replacing table [ 1704.216898][ T7155] fuse: Invalid rootmode [ 1705.045042][ T7170] fuse: Bad value for 'rootmode' [ 1705.518081][ T7180] fuse: Bad value for 'rootmode' [ 1705.775844][ T7186] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1248'. [ 1705.850177][ T7190] netlink: 'syz.2.1251': attribute type 3 has an invalid length. [ 1705.903011][ T7192] fuse: Bad value for 'rootmode' [ 1707.084341][ T7208] fuse: Unknown parameter 'use00000000000000000000' [ 1709.186897][ T7223] fuse: Unknown parameter 'use00000000000000000000' [ 1709.323751][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 1711.835087][ T7237] fuse: Unknown parameter 'use00000000000000000000' [ 1712.087038][ T28] audit: type=1326 audit(1711.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.1272" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffacd781a8 code=0x0 [ 1714.870911][ T7249] fuse: Unknown parameter 'user_i00000000000000000000' [ 1714.980478][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.994732][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.833641][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 1715.933181][ T7261] fuse: Unknown parameter 'user_i00000000000000000000' [ 1717.332756][ T7273] fuse: Unknown parameter 'user_i00000000000000000000' [ 1717.465226][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'. [ 1717.615740][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 1718.372573][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.375974][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.788737][ T7290] fuse: Unknown parameter 'user_id00000000000000000000' [ 1721.918618][ T7303] fuse: Unknown parameter 'user_id00000000000000000000' [ 1722.093686][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 1722.095014][ T7308] vcan0: tx drop: invalid da for name 0x0e00000000000000 [ 1723.336942][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dd447b38: rx timeout, send abort [ 1723.339586][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000dd447b38: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1723.414335][ T7316] fuse: Unknown parameter 'user_id00000000000000000000' [ 1723.503906][ T7318] pimreg: entered allmulticast mode [ 1724.374469][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1303'. [ 1724.556872][ T7334] fuse: Bad value for 'fd' [ 1724.736517][ T7336] binder: 7335:7336 tried to acquire reference to desc 0, got 1 instead [ 1724.745133][ T7336] binder: 7335:7336 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1724.745538][ T7336] binder: 7336 RLIMIT_NICE not set [ 1724.749079][ T7336] binder: 7336 RLIMIT_NICE not set [ 1724.756609][ T7336] binder: 7335:7336 got transaction to context manager from process owning it [ 1724.757071][ T7336] binder: 7335:7336 transaction call to 7335:0 failed 56/29201/-22, code 0 size 0-0 line 3243 [ 1724.764311][ T7336] binder: 7336 RLIMIT_NICE not set [ 1724.768583][ T7336] binder_alloc: 7335: binder_alloc_buf, no vma [ 1724.770085][ T7336] binder: cannot allocate buffer: vma cleared, target dead or dying [ 1724.770642][ T7336] binder: 7335:7336 transaction reply to 7335:7336 failed 57/29189/-3, code 0 size 0-0 line 3408 [ 1724.771537][ T7336] binder: send failed reply for transaction 55 to 7335:7336 [ 1724.785136][ T5209] binder: undelivered TRANSACTION_ERROR: 29190 [ 1724.822185][ T5209] binder: undelivered TRANSACTION_COMPLETE [ 1724.822444][ T5209] binder: undelivered TRANSACTION_ERROR: 29201 [ 1724.822586][ T5209] binder: undelivered TRANSACTION_ERROR: 29189 [ 1724.961083][ T7340] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1307'. [ 1725.063268][ T7344] fuse: Bad value for 'fd' [ 1726.287034][ T7349] tc action pedit offset must be on 32 bit boundaries [ 1727.910001][ T7358] fuse: Bad value for 'fd' [ 1728.108895][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.111019][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.629095][ T7372] fuse: Unknown parameter '0x0000000000000004' [ 1729.258942][ T7389] fuse: Unknown parameter '0x0000000000000004' [ 1730.037514][ T7406] fuse: Unknown parameter '0x0000000000000004' [ 1730.334013][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.339908][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.489643][ T7418] fuse: Unknown parameter '0x0000000000000004' [ 1730.906607][ T7432] fuse: Unknown parameter '0x0000000000000004' [ 1731.175652][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.183211][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.376723][ T7445] fuse: Unknown parameter '0x0000000000000004' [ 1731.580142][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.591134][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.782604][ T7452] bond0: (slave bond_slave_0): Releasing backup interface [ 1731.840116][ T7452] bond0: (slave bond_slave_1): Releasing backup interface [ 1731.909355][ T7452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1731.929599][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1731.941068][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1732.173593][ T7457] fuse: Unknown parameter 'fd0x0000000000000004' [ 1732.759214][ T7467] fuse: Unknown parameter 'fd0x0000000000000004' [ 1733.208693][ T7476] syzkaller0: entered promiscuous mode [ 1733.208887][ T7476] syzkaller0: entered allmulticast mode [ 1734.173931][ T7481] fuse: Unknown parameter 'fd0x0000000000000004' [ 1738.116492][ T7511] netlink: 'syz.0.1369': attribute type 16 has an invalid length. [ 1738.116846][ T7511] netlink: 'syz.0.1369': attribute type 17 has an invalid length. [ 1745.744014][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 1747.198657][ T7570] syzkaller0: entered promiscuous mode [ 1747.198892][ T7570] syzkaller0: entered allmulticast mode [ 1750.954953][ T7598] syzkaller0: entered promiscuous mode [ 1750.955137][ T7598] syzkaller0: entered allmulticast mode [ 1751.963295][ T7605] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 1762.474647][ T3543] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1762.490531][ T3543] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1762.779707][ T7693] fido_id[7693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1763.555031][ T7698] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1430'. [ 1763.568177][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.578178][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.629263][ T7733] »»»»»»: renamed from vlan0 (while UP) [ 1770.713886][ T7735] input: syz0 as /devices/virtual/input/input6 [ 1771.222168][ T7739] xt_nfacct: accounting object `syz0' does not exist [ 1771.333171][ T7741] loop4: detected capacity change from 0 to 7 [ 1771.745808][ T7745] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 1773.233633][ T7757] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1452'. [ 1774.307082][ T7763] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1777.973274][ T7788] xt_cgroup: invalid path, errno=-2 [ 1779.763639][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 1786.957327][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 1787.084522][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.085546][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.223812][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.229096][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.053049][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.060498][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.069406][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.070246][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.266041][ T7892] lo: entered allmulticast mode [ 1788.284622][ T7891] lo: left allmulticast mode [ 1789.523582][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.527406][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.586452][ T7906] vlan2: entered promiscuous mode [ 1789.589396][ T7906] vlan2: entered allmulticast mode [ 1789.590830][ T7906] veth1_vlan: entered allmulticast mode [ 1789.669928][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 1789.681932][ T7906] hsr_slave_0: left promiscuous mode [ 1789.689524][ T7906] hsr_slave_1: left promiscuous mode [ 1789.788641][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.803144][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.454654][ T7917] vlan2: left promiscuous mode [ 1790.500508][ T7917] xt_hashlimit: size too large, truncated to 1048576 [ 1791.740693][ T7931] xt_hashlimit: size too large, truncated to 1048576 [ 1792.528143][ T7944] misc userio: No port type given on /dev/userio [ 1792.529611][ T7944] misc userio: The device must be registered before sending interrupts [ 1792.530817][ T7944] misc userio: The device must be registered before sending interrupts [ 1793.006644][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 1793.320341][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.326803][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.433731][ T7978] lo: entered allmulticast mode [ 1795.434932][ T7978] lo: left allmulticast mode [ 1795.534800][ T7980] random: crng reseeded on system resumption [ 1799.280003][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1544'. [ 1800.800856][ T8017] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 1801.544533][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.548755][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.822305][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'. [ 1801.830873][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'. [ 1801.952303][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 1803.758110][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.884673][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.023487][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.142165][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.536641][ T50] pimreg: left allmulticast mode [ 1805.167162][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.196873][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.237527][ T50] bond0 (unregistering): Released all slaves [ 1805.255986][ T50] bond1 (unregistering): Released all slaves [ 1805.289463][ T50] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1805.343725][ T50] bond2 (unregistering): Released all slaves [ 1805.358825][ T50] bond3 (unregistering): Released all slaves [ 1805.512930][ T8057] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1805.637111][ T50] veth1_macvtap: left promiscuous mode [ 1805.637773][ T50] veth0_macvtap: left promiscuous mode [ 1805.649519][ T50] veth1_vlan: left promiscuous mode [ 1805.650179][ T50] veth0_vlan: left promiscuous mode [ 1807.468053][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.476044][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.735075][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1807.775589][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.783259][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.501050][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.508533][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.518293][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.520984][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.082664][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1810.054582][ T8040] hsr_slave_0: entered promiscuous mode [ 1810.064175][ T8040] hsr_slave_1: entered promiscuous mode [ 1810.068914][ T8040] debugfs: 'hsr0' already exists in 'hsr' [ 1810.073615][ T8040] Cannot create hsr debugfs directory [ 1810.830136][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1811.747253][ T8040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1811.818598][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1811.839598][ T8040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1811.881139][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.887144][ T8040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1811.906551][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1811.914290][ T8040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1811.935405][ T8040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.524886][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.756416][ T8040] veth0_vlan: entered promiscuous mode [ 1817.784801][ T8040] veth1_vlan: entered promiscuous mode [ 1817.885694][ T8040] veth0_macvtap: entered promiscuous mode [ 1817.915182][ T8040] veth1_macvtap: entered promiscuous mode [ 1818.112560][ T3896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.117263][ T3896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.119115][ T3896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.134453][ T3896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.253358][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 1819.253724][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1579'. [ 1819.255715][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1579'. [ 1819.497799][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.498868][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.642528][ C1] vcan0: j1939_tp_rxtimer: 0x000000009d095077: rx timeout, send abort [ 1821.142675][ C1] vcan0: j1939_tp_rxtimer: 0x00000000dc67c67e: rx timeout, send abort [ 1821.143256][ C1] vcan0: j1939_tp_rxtimer: 0x000000009d095077: abort rx timeout. Force session deactivation [ 1821.643401][ C1] vcan0: j1939_tp_rxtimer: 0x00000000dc67c67e: abort rx timeout. Force session deactivation [ 1822.498610][ T8254] netlink: 'syz.2.1595': attribute type 4 has an invalid length. [ 1822.726339][ T8258] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1823.214409][ T8265] ptrace attach of "/syz-executor exec"[6494] was attempted by " Ŕ˙ Đ˙ đĄ Ŕ˙ Ŕ˙ Đ˙ ŕ˙ đ˙ °˙ Ŕ˙ ˙˙˙˙ "[8265] [ 1823.595211][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.608636][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.038467][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.041089][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.069981][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 1824.105138][ T8277] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1604'. [ 1826.082748][ T8279] vlan2: left allmulticast mode [ 1826.083129][ T8279] veth1_vlan: left allmulticast mode [ 1826.114546][ T3896] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.115013][ T3896] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.115143][ T3896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.115267][ T3896] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.903122][ T8333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1619'. [ 1831.018061][ T8349] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1627'. [ 1831.364558][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1831.377111][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1831.774835][ T8361] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1632'. [ 1831.822526][ T8361] netlink: 'syz.0.1632': attribute type 12 has an invalid length. [ 1832.059904][ T28] audit: type=1326 audit(1831.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.067848][ T28] audit: type=1326 audit(1831.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.070848][ T28] audit: type=1326 audit(1831.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.074486][ T28] audit: type=1326 audit(1831.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.077392][ T28] audit: type=1326 audit(1831.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.079990][ T28] audit: type=1326 audit(1831.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.083446][ T28] audit: type=1326 audit(1831.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.086150][ T28] audit: type=1326 audit(1831.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.088676][ T28] audit: type=1326 audit(1831.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.0.1633" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1832.220058][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.225610][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.505782][ T3896] syzkaller0: tun_net_xmit 76 [ 1833.512308][ T3896] syzkaller0: tun_net_xmit 48 [ 1834.260133][ T8427] binder: 8425:8427 cannot find target node [ 1834.262383][ T8427] binder: 8425:8427 transaction call to 0:0 failed 58/29189/-22, code 0 size 0-0 line 3252 [ 1834.312436][ T3369] binder: undelivered TRANSACTION_ERROR: 29189 [ 1835.024188][ T8448] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1666'. [ 1835.074624][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 1835.075036][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1667'. [ 1836.182825][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 1836.650531][ T8497] syzkaller0: entered promiscuous mode [ 1836.652957][ T8497] syzkaller0: entered allmulticast mode [ 1836.917584][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.923153][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.712564][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 1841.742371][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.743952][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.745249][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1841.746481][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1842.570483][ T8586] netlink: 'syz.0.1723': attribute type 39 has an invalid length. [ 1845.811728][ T8600] binder: 8599:8600 tried to acquire reference to desc 0, got 1 instead [ 1845.819771][ T8600] binder: 8599:8600 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1845.823469][ T8600] binder: 8600 RLIMIT_NICE not set [ 1845.825640][ T8600] binder: 8600 RLIMIT_NICE not set [ 1845.833907][ T8600] binder: 8599:8600 got transaction to context manager from process owning it [ 1845.834324][ T8600] binder: 8599:8600 transaction call to 8599:0 failed 64/29201/-22, code 0 size 0-0 line 3243 [ 1845.839726][ T8600] binder: 8600 RLIMIT_NICE not set [ 1845.934617][ T3369] binder: undelivered TRANSACTION_COMPLETE [ 1845.935159][ T3369] binder: undelivered TRANSACTION_ERROR: 29201 [ 1845.935394][ T3369] binder: undelivered transaction 65, process died. [ 1845.936101][ T3369] binder: undelivered TRANSACTION_COMPLETE [ 1848.556586][ T28] audit: type=1326 audit(1848.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.559330][ T28] audit: type=1326 audit(1848.380:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.559757][ T28] audit: type=1326 audit(1848.380:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.559976][ T28] audit: type=1326 audit(1848.380:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.560168][ T28] audit: type=1326 audit(1848.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.560366][ T28] audit: type=1326 audit(1848.380:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.560582][ T28] audit: type=1326 audit(1848.380:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.560791][ T28] audit: type=1326 audit(1848.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.565735][ T28] audit: type=1326 audit(1848.380:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1848.565929][ T28] audit: type=1326 audit(1848.380:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.2.1742" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1856.205175][ T8731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.207109][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.208379][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.209555][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.210857][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.220329][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.224135][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.229214][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.232742][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1856.235440][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1868.902478][ T28] audit: type=1326 audit(1868.730:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.902990][ T28] audit: type=1326 audit(1868.730:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.916035][ T28] audit: type=1326 audit(1868.730:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.916705][ T28] audit: type=1326 audit(1868.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.916877][ T28] audit: type=1326 audit(1868.730:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.917037][ T28] audit: type=1326 audit(1868.730:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.917200][ T28] audit: type=1326 audit(1868.730:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.917366][ T28] audit: type=1326 audit(1868.740:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.917535][ T28] audit: type=1326 audit(1868.740:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1868.917688][ T28] audit: type=1326 audit(1868.740:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.0.1795" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a3781a8 code=0x7ffc0000 [ 1885.186627][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 1885.189366][ T28] audit: type=1326 audit(1885.010:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.193722][ T28] audit: type=1326 audit(1885.010:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.193991][ T28] audit: type=1326 audit(1885.020:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.194141][ T28] audit: type=1326 audit(1885.020:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.198831][ T28] audit: type=1326 audit(1885.020:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.200265][ T28] audit: type=1326 audit(1885.020:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.209073][ T28] audit: type=1326 audit(1885.030:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.210506][ T28] audit: type=1326 audit(1885.030:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1885.229943][ T28] audit: type=1326 audit(1885.050:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8920 comm="syz.2.1859" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e3781a8 code=0x7ffc0000 [ 1887.726514][ T8956] __nla_validate_parse: 26 callbacks suppressed [ 1887.728673][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.732194][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.735469][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.739772][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.744822][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.750224][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.759899][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.761175][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.762124][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1887.776016][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1892.612524][ T6329] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.612815][ T6329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.617007][ T6329] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.619082][ T6329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.622238][ T6329] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.622544][ T6329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.622660][ T6329] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.622708][ T6329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.003006][ T9018] __nla_validate_parse: 26 callbacks suppressed [ 1894.003378][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 1894.585818][ T9025] syzkaller0: entered promiscuous mode [ 1894.587744][ T9025] syzkaller0: entered allmulticast mode [ 1895.679021][ T9038] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1897.460688][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.576268][ T9061] veth1_vlan: left promiscuous mode [ 1897.584152][ T9061] veth0_vlan: left promiscuous mode [ 1897.593721][ T9061] veth0_vlan: entered promiscuous mode [ 1897.604657][ T9061] veth1_vlan: entered promiscuous mode [ 1897.626899][ T9061] veth1_macvtap: left promiscuous mode [ 1897.635201][ T9061] veth0_macvtap: left promiscuous mode [ 1897.640069][ T9061] veth0_macvtap: entered promiscuous mode [ 1897.648467][ T9061] veth1_macvtap: entered promiscuous mode [ 1897.677643][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1897.683160][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1897.693829][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1897.699074][ T9061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1897.887772][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.888208][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.888505][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.888692][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.156008][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1898.614739][ T9057] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1898.616961][ T9057] block device autoloading is deprecated and will be removed. [ 1902.238628][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1935'. [ 1902.563466][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1903.380785][ T9125] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 1907.704442][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1910.866805][ T9201] vlan4: entered allmulticast mode [ 1910.867859][ T9201] bridge_slave_0: entered allmulticast mode [ 1911.628096][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.629328][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.683288][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1911.808520][ T9222] ip6gre2: entered promiscuous mode [ 1911.810512][ T9222] ip6gre2: entered allmulticast mode [ 1911.829432][ T6329] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1911.832705][ T6329] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1911.853445][ T3369] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1912.192621][ T3369] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1912.882931][ T3369] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1912.888174][ T9229] GUP no longer grows the stack in syz.0.1985 (9229): 20001000-20c01000 (20000000) [ 1912.888513][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.0.1985 Tainted: G L syzkaller #0 PREEMPT [ 1912.888628][ T9229] Tainted: [L]=SOFTLOCKUP [ 1912.888699][ T9229] Hardware name: linux,dummy-virt (DT) [ 1912.888739][ T9229] Call trace: [ 1912.888772][ T9229] show_stack+0x18/0x24 (C) [ 1912.888893][ T9229] dump_stack_lvl+0x60/0x80 [ 1912.888980][ T9229] dump_stack+0x18/0x24 [ 1912.889050][ T9229] gup_vma_lookup+0xac/0xc0 [ 1912.889188][ T9229] __get_user_pages+0x90/0xc94 [ 1912.889308][ T9229] __gup_longterm_locked+0x270/0x6f4 [ 1912.889389][ T9229] gup_fast_fallback+0x520/0xb9c [ 1912.889529][ T9229] pin_user_pages_fast+0x48/0x60 [ 1912.889679][ T9229] iov_iter_extract_pages+0xf0/0x760 [ 1912.889935][ T9229] fuse_direct_io+0x180/0x894 [ 1912.890206][ T9229] fuse_direct_IO+0x2cc/0x3b8 [ 1912.890289][ T9229] generic_file_direct_write+0x84/0x140 [ 1912.890467][ T9229] fuse_file_write_iter+0x198/0x2a0 [ 1912.890565][ T9229] vfs_write+0x244/0x36c [ 1912.890698][ T9229] ksys_write+0x70/0x108 [ 1912.890841][ T9229] __arm64_sys_write+0x1c/0x30 [ 1912.890945][ T9229] invoke_syscall+0x54/0x10c [ 1912.891043][ T9229] el0_svc_common.constprop.0+0x40/0xe0 [ 1912.891185][ T9229] do_el0_svc+0x1c/0x34 [ 1912.891390][ T9229] el0_svc+0x38/0x1fc [ 1912.891477][ T9229] el0t_64_sync_handler+0xa0/0xf0 [ 1912.891592][ T9229] el0t_64_sync+0x1a4/0x1a8 [ 1916.162251][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1919.169659][ T28] audit: type=1326 audit(1918.990:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9246 comm="syz.2.1994" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e3781a8 code=0x0 [ 1924.482639][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1928.708886][ T3566] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1928.783570][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1928.837981][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1928.869546][ T3566] bond0 (unregistering): Released all slaves [ 1928.885627][ T3566] bond1 (unregistering): Released all slaves [ 1928.907137][ T3566] bond2 (unregistering): Released all slaves [ 1928.964146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1929.065435][ T3566] hsr_slave_0: left promiscuous mode [ 1929.069932][ T3566] hsr_slave_1: left promiscuous mode [ 1929.086110][ T3566] veth1_macvtap: left promiscuous mode [ 1929.086565][ T3566] veth0_macvtap: left promiscuous mode [ 1929.087205][ T3566] veth1_vlan: left promiscuous mode [ 1929.087617][ T3566] veth0_vlan: left promiscuous mode [ 1929.800777][ T3566] smc: removing net device lo with user defined pnetid SYZ0 [ 1932.809966][ T9331] gretap1: entered promiscuous mode [ 1933.024839][ T9335] xt_hashlimit: max too large, truncated to 1048576 [ 1933.025758][ T9335] xt_hashlimit: size too large, truncated to 1048576 [ 1934.534012][ T9352] syzkaller0: entered promiscuous mode [ 1934.534293][ T9352] syzkaller0: entered allmulticast mode [ 1938.849207][ T9375] Injecting memory failure for pfn 0x4d8ee at process virtual address 0x20000000 [ 1938.855975][ T9375] Memory failure: 0x4d8ee: Sending SIGBUS to syz.2.2044:9375 due to hardware memory corruption [ 1938.857344][ T9375] Memory failure: 0x4d8ee: Sending SIGBUS to syz.2.2044:9375 due to hardware memory corruption [ 1938.859302][ T9375] Memory failure: 0x4d8ee: recovery action for dirty LRU page: Recovered [ 1938.860234][ T9375] Injecting memory failure for pfn 0x5164c at process virtual address 0x20001000 [ 1938.862404][ T9375] Memory failure: 0x5164c: recovery action for clean LRU page: Recovered [ 1938.863506][ T9375] Injecting memory failure for pfn 0x492ea at process virtual address 0x20002000 [ 1938.865044][ T9375] Memory failure: 0x492ea: recovery action for clean LRU page: Recovered [ 1938.866010][ T9375] Injecting memory failure for pfn 0x4f81c at process virtual address 0x20003000 [ 1938.867586][ T9375] Memory failure: 0x4f81c: recovery action for clean LRU page: Recovered [ 1940.274584][ T9386] syzkaller0: entered promiscuous mode [ 1940.276118][ T9386] syzkaller0: entered allmulticast mode [ 1940.482205][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1940.635362][ T9392] xt_hashlimit: size too large, truncated to 1048576 [ 1942.037451][ T9411] tap0: tun_chr_ioctl cmd 3224918122 [ 1942.039386][ T9411] tap0: tun_chr_ioctl cmd 2148553947 [ 1951.692722][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.696422][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.522816][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1964.827671][ T9638] fuse: Bad value for 'fd' [ 1965.518538][ T3566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.656695][ T3566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.760087][ T3566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.903303][ T3566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.146111][ T3566] bond0 (unregistering): Released all slaves [ 1967.426160][ T3566] veth1_macvtap: left promiscuous mode [ 1967.426572][ T3566] veth0_macvtap: left promiscuous mode [ 1967.427243][ T3566] veth1_vlan: left promiscuous mode [ 1967.427510][ T3566] veth0_vlan: left promiscuous mode [ 1969.470033][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1970.515792][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.544182][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.868645][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1971.975862][ T6329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.009177][ T6329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.045551][ T6329] bond0 (unregistering): Released all slaves [ 1972.063797][ T6329] bond1 (unregistering): Released all slaves [ 1972.099096][ T6329] bond2 (unregistering): Released all slaves [ 1972.353749][ T6329] hsr_slave_0: left promiscuous mode [ 1972.357550][ T6329] hsr_slave_1: left promiscuous mode [ 1973.045795][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1973.156379][ T9659] hsr_slave_0: entered promiscuous mode [ 1973.159567][ T9659] hsr_slave_1: entered promiscuous mode [ 1975.207742][ T3220] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1975.236788][ T9659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1975.276684][ T9659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1975.283977][ T9659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1975.305413][ T9659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1975.316777][ T9659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1975.345481][ T9659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1975.359176][ T9659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1975.376124][ T9659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1975.763275][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1975.770644][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.284591][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1976.724675][ T3220] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1976.940589][ T9745] hsr_slave_0: entered promiscuous mode [ 1976.945826][ T9745] hsr_slave_1: entered promiscuous mode [ 1976.948123][ T9745] debugfs: 'hsr0' already exists in 'hsr' [ 1976.950381][ T9745] Cannot create hsr debugfs directory [ 1977.835427][ T3220] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1978.606091][ T9745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1978.627284][ T9745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1978.633132][ T9745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1978.660525][ T9745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1978.666833][ T9745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1978.702565][ T9745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1978.707245][ T9745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1978.718988][ T9745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1979.845191][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.348873][ T9659] veth0_vlan: entered promiscuous mode [ 1980.406639][ T9659] veth1_vlan: entered promiscuous mode [ 1980.570119][ T9659] veth0_macvtap: entered promiscuous mode [ 1980.640799][ T9659] veth1_macvtap: entered promiscuous mode [ 1980.992300][ T2184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.993046][ T2184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.993189][ T2184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.993341][ T2184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.357673][ T9745] veth0_vlan: entered promiscuous mode [ 1984.418038][ T9745] veth1_vlan: entered promiscuous mode [ 1984.630492][ T9745] veth0_macvtap: entered promiscuous mode [ 1984.686463][ T9745] veth1_macvtap: entered promiscuous mode [ 1984.923437][ T3566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.923882][ T3566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.924066][ T3566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.924203][ T3566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.649049][ T9986] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1985.755558][ T9988] fuse: Bad value for 'fd' [ 1986.679013][ T9999] fuse: Bad value for 'fd' [ 1987.223439][T10010] fuse: Bad value for 'fd' [ 1987.929491][T10025] xt_hashlimit: size too large, truncated to 1048576 [ 1989.385117][T10035] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1992.517556][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2244'. [ 1997.004306][T10105] Non-string source [ 2000.329581][T10129] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2270'. [ 2000.413392][T10131] binfmt_misc: register: failed to install interpreter file ./file1 [ 2003.645925][T10161] zswap: compressor zs not available [ 2007.586829][T10196] Soft offlining pfn 0x4ec37 at process virtual address 0x204b4000 [ 2007.600906][T10196] Soft offlining pfn 0x4f3d3 at process virtual address 0x204b5000 [ 2007.603273][T10196] Soft offlining pfn 0x4f6e1 at process virtual address 0x204b6000 [ 2008.120996][T10205] tun0: tun_chr_ioctl cmd 2147767511 [ 2008.123077][T10205] tun0: tun_chr_ioctl cmd 1074025681 [ 2008.291051][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 2008.437271][T10198] Injecting memory failure for pfn 0x58e00 at process virtual address 0x20000000 [ 2008.453598][T10198] Memory failure: 0x58e00: recovery action for dirty LRU page: Recovered [ 2015.905248][ T28] audit: type=1326 audit(2015.730:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.905846][ T28] audit: type=1326 audit(2015.730:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.914488][ T28] audit: type=1326 audit(2015.740:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.916656][ T28] audit: type=1326 audit(2015.740:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.918119][ T28] audit: type=1326 audit(2015.740:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.919967][ T28] audit: type=1326 audit(2015.740:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.923488][ T28] audit: type=1326 audit(2015.750:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.927305][ T28] audit: type=1326 audit(2015.750:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.927720][ T28] audit: type=1326 audit(2015.750:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2015.928051][ T28] audit: type=1326 audit(2015.750:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.2.2322" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805781a8 code=0x7ffc0000 [ 2021.592928][T10291] syzkaller0: entered promiscuous mode [ 2021.595463][T10291] syzkaller0: entered allmulticast mode [ 2021.619212][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.097714][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 2030.218626][T10355] syzkaller0: entered promiscuous mode [ 2030.219038][T10355] syzkaller0: entered allmulticast mode [ 2033.050574][T10367] ip6gre1: entered promiscuous mode [ 2033.052650][T10367] ip6gre1: entered allmulticast mode [ 2033.060709][ T2184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2033.062743][ T2184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2033.082735][ T3369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2033.203136][ T3369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2034.004058][ T8286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2037.132397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2043.811021][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.832193][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.712935][T10453] hsr_slave_0: entered promiscuous mode [ 2044.717151][T10453] hsr_slave_1: entered promiscuous mode [ 2044.725759][T10453] debugfs: 'hsr0' already exists in 'hsr' [ 2044.726163][T10453] Cannot create hsr debugfs directory [ 2045.356035][T10453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.452186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2045.486072][T10453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.582031][T10453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.780650][T10453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2046.179372][T10453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2046.213872][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2046.219714][T10453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2046.237593][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2046.294301][T10453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2046.308917][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2046.360084][T10453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2046.378322][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2046.398348][T10484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.415742][T10484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.379682][T10453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2047.632648][T10484] hsr_slave_0: entered promiscuous mode [ 2047.635966][T10484] hsr_slave_1: entered promiscuous mode [ 2047.638476][T10484] debugfs: 'hsr0' already exists in 'hsr' [ 2047.639213][T10484] Cannot create hsr debugfs directory [ 2048.188002][T10484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.290947][T10484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.430533][T10484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.555748][T10484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.816246][T10484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2048.835954][T10484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2048.839088][T10484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2048.857459][T10484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2048.860481][T10484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2048.873617][T10484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2048.878671][T10484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2048.889425][T10484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2049.668689][T10484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2050.405363][T10453] veth0_vlan: entered promiscuous mode [ 2050.444625][T10453] veth1_vlan: entered promiscuous mode [ 2050.709900][T10453] veth0_macvtap: entered promiscuous mode [ 2050.762545][T10453] veth1_macvtap: entered promiscuous mode [ 2050.977787][ T4229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.063241][ T6329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.063704][ T6329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.123936][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.175802][T10589] Injecting memory failure for pfn 0x4d3cc at process virtual address 0x20000000 [ 2052.192647][T10589] Memory failure: 0x4d3cc: recovery action for clean LRU page: Recovered [ 2052.194321][T10589] Injecting memory failure for pfn 0x4f3c7 at process virtual address 0x20001000 [ 2052.198089][T10589] Memory failure: 0x4f3c7: recovery action for clean LRU page: Recovered [ 2052.200756][T10589] Injecting memory failure for pfn 0x4b9bd at process virtual address 0x20002000 [ 2052.206416][T10589] Memory failure: 0x4b9bd: recovery action for clean LRU page: Recovered [ 2052.208611][T10589] Injecting memory failure for pfn 0x4d9e6 at process virtual address 0x20003000 [ 2052.214258][T10589] Memory failure: 0x4d9e6: recovery action for clean LRU page: Recovered [ 2053.416683][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.417723][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.591025][T10484] veth0_vlan: entered promiscuous mode [ 2053.657815][T10484] veth1_vlan: entered promiscuous mode [ 2053.919174][T10484] veth0_macvtap: entered promiscuous mode [ 2054.024769][T10484] veth1_macvtap: entered promiscuous mode [ 2054.272529][ T2184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.272975][ T2184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.273295][ T2184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.273495][ T2184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.520809][T10633] xt_hashlimit: size too large, truncated to 1048576 [ 2058.859397][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2058.860848][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.443103][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2061.912893][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.921085][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.180003][T10683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.187264][T10683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.269757][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.273815][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.199214][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.200408][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.881668][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 2075.854003][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.859181][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.602334][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.605838][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.035307][T10793] fuse: Bad value for 'fd' [ 2086.316039][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.329563][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.705268][T10803] fuse: Bad value for 'fd' [ 2087.220131][T10817] fuse: Bad value for 'fd' [ 2090.234487][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2090.237669][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.164577][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2093.756261][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.773396][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.959485][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.968730][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.266612][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.268358][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.333412][T10877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2094.333695][T10877] IPv6: NLM_F_CREATE should be set when creating new route [ 2100.616007][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.617722][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2102.262030][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 2102.263193][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 2102.322396][ T3896] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2102.323450][ T3896] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2102.324464][ T3896] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2102.325158][ T3896] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2106.039823][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'. [ 2107.108417][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.114832][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.934552][ T8282] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 2111.944606][ T8282] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2118.829524][T10993] ip_tables: iptables: counters copy to user failed while replacing table [ 2119.050893][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2540'. [ 2123.048577][ T28] audit: type=1326 audit(2122.870:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11012 comm="syz.2.2546" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4d781a8 code=0x0 [ 2127.028611][T11024] input: syz0 as /devices/virtual/input/input7 [ 2136.650046][T11052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.673876][T11052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.737213][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.738163][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.866176][ T3896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2138.923078][ T3896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2138.960815][ T3896] bond0 (unregistering): Released all slaves [ 2139.123675][ T3896] hsr_slave_0: left promiscuous mode [ 2139.128454][ T3896] hsr_slave_1: left promiscuous mode [ 2139.149264][ T3896] veth1_macvtap: left promiscuous mode [ 2139.150505][ T3896] veth0_macvtap: left promiscuous mode [ 2139.152205][ T3896] veth1_vlan: left promiscuous mode [ 2139.153226][ T3896] veth0_vlan: left promiscuous mode [ 2144.002961][T11074] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2144.249721][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.250757][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.052852][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.055241][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2151.895799][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 2153.569947][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.573673][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.911587][T11226] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2194.825597][T11297] ipvlan2: entered allmulticast mode [ 2194.827209][T11297] batadv_slave_1: entered allmulticast mode [ 2203.842022][T11319] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2217.866196][T11385] dummy0: entered promiscuous mode [ 2217.874570][T11385] gretap0: entered promiscuous mode [ 2217.882049][T11385] hsr1: entered allmulticast mode [ 2217.882408][T11385] dummy0: entered allmulticast mode [ 2217.882847][T11385] gretap0: entered allmulticast mode [ 2226.300064][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.313026][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2229.000781][T11436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.004911][T11436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.148469][T11443] fuse: Bad value for 'fd' [ 2231.698570][T11447] syzkaller0: entered promiscuous mode [ 2231.698892][T11447] syzkaller0: entered allmulticast mode [ 2232.929477][T11454] fuse: Bad value for 'fd' [ 2234.850813][T11467] fuse: Bad value for 'fd' [ 2240.919415][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.921008][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.123664][T11503] fuse: Bad value for 'fd' [ 2259.604831][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 2263.124380][ T2184] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2263.124641][ T2184] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.124866][ T2184] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2263.124948][ T2184] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.125043][ T2184] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2263.125116][ T2184] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.125201][ T2184] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2263.125273][ T2184] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.704505][T11572] EXT4-fs (loop4): unable to read superblock [ 2269.555851][T11599] bond0: (slave bond_slave_0): Releasing backup interface [ 2269.747686][T11601] loop4: detected capacity change from 0 to 7 [ 2269.760453][T11601] loop4: [ 2269.869926][T11604] tmpfs: Unknown parameter '/dev/net/tun' [ 2269.875830][T11604] cgroup: No subsys list or none specified [ 2272.554196][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 2279.782413][ T6329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2279.820219][ T6329] bond0 (unregistering): Released all slaves [ 2279.966466][ T6329] hsr_slave_0: left promiscuous mode [ 2279.973874][ T6329] hsr_slave_1: left promiscuous mode [ 2281.828175][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2282.288974][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2282.304684][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2282.684596][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2283.350978][T11682] hsr_slave_0: entered promiscuous mode [ 2283.355520][T11682] hsr_slave_1: entered promiscuous mode [ 2283.360440][T11682] debugfs: 'hsr0' already exists in 'hsr' [ 2283.365407][T11682] Cannot create hsr debugfs directory [ 2283.683151][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2284.234844][T11682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2284.283827][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2284.294897][T11682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2284.316193][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2284.337518][T11682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2284.405541][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2284.410893][T11682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2284.471191][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2284.915009][ T3220] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2286.002171][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2286.081559][T11793] ptrace attach of "/syz-executor exec"[11796] was attempted by "/syz-executor exec"[11793] [ 2288.680604][T11682] veth0_vlan: entered promiscuous mode [ 2288.730926][T11682] veth1_vlan: entered promiscuous mode [ 2288.956519][T11682] veth0_macvtap: entered promiscuous mode [ 2289.008818][T11682] veth1_macvtap: entered promiscuous mode [ 2289.239678][T11836] "syz.0.2792" (11836) uses obsolete ecb(arc4) skcipher [ 2289.259962][T11836] tun0: tun_chr_ioctl cmd 2147767507 [ 2289.314078][ T3566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.352947][ T3896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.354840][ T3896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.355011][ T3896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.927691][T11864] syzkaller0: entered promiscuous mode [ 2290.927926][T11864] syzkaller0: entered allmulticast mode [ 2295.370570][T11894] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 2295.376878][T11894] syzkaller0: entered promiscuous mode [ 2295.377223][T11894] syzkaller0: entered allmulticast mode [ 2296.016008][ T2184] syzkaller0: tun_net_xmit 76 [ 2296.016885][ T2184] syzkaller0: tun_net_xmit 48 [ 2296.030378][T11900] syzkaller0: create flow: hash 1303742972 index 1 [ 2296.043836][ T3390] syzkaller0: tun_net_xmit 76 [ 2296.075378][T11900] syzkaller0: delete flow: hash 1303742972 index 1 [ 2296.685276][T11915] fuse: Bad value for 'group_id' [ 2296.694143][T11915] fuse: Bad value for 'group_id' [ 2297.245345][ T28] audit: type=1326 audit(2297.070:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11926 comm="syz.3.2827" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x0 [ 2297.568141][T11936] tmpfs: Too small a size for current use [ 2309.096961][T12012] Injecting memory failure for pfn 0x5081c at process virtual address 0x20000000 [ 2309.117263][T12012] Memory failure: 0x5081c: Sending SIGBUS to syz.3.2851:12012 due to hardware memory corruption [ 2309.118012][T12012] Memory failure: 0x5081c: recovery action for dirty LRU page: Recovered [ 2309.118321][T12012] Injecting memory failure for pfn 0x41ef5 at process virtual address 0x20001000 [ 2309.118462][T12012] Memory failure: 0x41ef5: unhandlable page. [ 2309.118594][T12012] Memory failure: 0x41ef5: recovery action for get hwpoison page: Ignored [ 2310.086356][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 2310.130469][T12025] bond1: entered allmulticast mode [ 2310.134159][T12025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2318.126179][T12076] fuse: Unknown parameter 'grou00000000000000000000' [ 2318.409935][T12082] xt_connbytes: Forcing CT accounting to be enabled [ 2318.742958][T12090] fuse: Unknown parameter 'grou00000000000000000000' [ 2318.913468][T12092] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2319.360081][T12101] fuse: Unknown parameter 'grou00000000000000000000' [ 2321.422841][T12115] fuse: Unknown parameter 'group_i00000000000000000000' [ 2321.784434][T12124] fuse: Unknown parameter 'group_i00000000000000000000' [ 2325.866542][T12140] fuse: Unknown parameter 'group_i00000000000000000000' [ 2327.345448][T12154] fuse: Unknown parameter 'group_id00000000000000000000' [ 2329.000079][T12165] fuse: Unknown parameter 'group_id00000000000000000000' [ 2329.681903][T12177] fuse: Unknown parameter 'group_id00000000000000000000' [ 2330.734923][T12189] fuse: Bad value for 'user_id' [ 2330.735470][T12189] fuse: Bad value for 'user_id' [ 2334.117373][T12206] fuse: Bad value for 'user_id' [ 2334.117579][T12206] fuse: Bad value for 'user_id' [ 2334.177280][T12208] ±˙arameters: renamed from lo (while UP) [ 2338.412107][T12219] fuse: Bad value for 'user_id' [ 2338.415500][T12219] fuse: Bad value for 'user_id' [ 2338.566997][T12221] syzkaller0: entered promiscuous mode [ 2338.567403][T12221] syzkaller0: entered allmulticast mode [ 2340.618142][T12231] fuse: Bad value for 'fd' [ 2340.832255][T12233] af_packet: tpacket_rcv: packet too big, clamped from 32834 to 3966. macoff=82 [ 2342.067349][T12240] netlink: 'syz.3.2942': attribute type 15 has an invalid length. [ 2344.481118][T12265] fuse: Bad value for 'fd' [ 2344.912241][T12275] fuse: Bad value for 'fd' [ 2345.900213][T12285] fuse: Invalid rootmode [ 2348.579837][T12298] fuse: Invalid rootmode [ 2348.878203][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2348.938149][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2348.978173][ T3566] bond0 (unregistering): Released all slaves [ 2349.096643][ T3566] hsr_slave_0: left promiscuous mode [ 2349.099405][ T3566] hsr_slave_1: left promiscuous mode [ 2349.109921][ T3566] veth1_macvtap: left promiscuous mode [ 2349.110247][ T3566] veth0_macvtap: left promiscuous mode [ 2349.110639][ T3566] veth1_vlan: left promiscuous mode [ 2349.110881][ T3566] veth0_vlan: left promiscuous mode [ 2350.171541][T12312] fuse: Invalid rootmode [ 2350.989263][T12323] fuse: Bad value for 'rootmode' [ 2359.181824][T12388] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 2362.155333][T12411] bond2: (slave gretap0): Device is not bonding slave [ 2362.157156][T12411] bond2: option active_slave: invalid value (gretap0) [ 2362.166124][T12411] bond2 (unregistering): Released all slaves [ 2362.488731][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3014'. [ 2363.955059][T12428] fuse: Unknown parameter 'user_id00000000000000000000' [ 2364.469388][T12442] fuse: Unknown parameter 'user_id00000000000000000000' [ 2364.696370][ T28] audit: type=1326 audit(2364.520:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12447 comm="syz.0.3029" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x0 [ 2365.632838][T12456] fuse: Unknown parameter 'user_id00000000000000000000' [ 2367.540942][T12468] fuse: Bad value for 'fd' [ 2368.800861][ T28] audit: type=1326 audit(2368.620:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.803836][ T28] audit: type=1326 audit(2368.620:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.806061][ T28] audit: type=1326 audit(2368.620:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.806381][ T28] audit: type=1326 audit(2368.630:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.815451][ T28] audit: type=1326 audit(2368.630:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=149 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.816080][ T28] audit: type=1326 audit(2368.640:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.816259][ T28] audit: type=1326 audit(2368.640:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.818252][ T28] audit: type=1326 audit(2368.640:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2368.819994][ T28] audit: type=1326 audit(2368.640:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.0.3040" exe="/syz-executor" sig=0 arch=c00000b7 syscall=266 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2370.796498][T12491] bond0: option packets_per_slave: invalid value (65536) [ 2370.797050][T12491] bond0: option packets_per_slave: allowed values 0 - 65535 [ 2372.232634][T12514] fuse: Unknown parameter '0x0000000000000004' [ 2372.577510][T12520] ptrace attach of "/syz-executor exec"[12521] was attempted by "/syz-executor exec"[12520] [ 2373.121782][ T8299] page_pool_release_retry() stalled pool shutdown: id 74, 1 inflight 61 sec [ 2375.196769][T12526] fuse: Unknown parameter '0x0000000000000004' [ 2375.405919][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2375.406292][ T28] audit: type=1326 audit(2375.230:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.406611][ T28] audit: type=1326 audit(2375.230:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.415300][ T28] audit: type=1326 audit(2375.230:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.415754][ T28] audit: type=1326 audit(2375.230:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.422822][ T28] audit: type=1326 audit(2375.240:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.427603][ T28] audit: type=1326 audit(2375.240:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.428036][ T28] audit: type=1326 audit(2375.240:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.428255][ T28] audit: type=1326 audit(2375.240:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.428465][ T28] audit: type=1326 audit(2375.240:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12531 comm="syz.0.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2375.560726][T12536] fuse: Unknown parameter '0x0000000000000004' [ 2380.885438][T12607] fuse: Unknown parameter 'fd0x0000000000000004' [ 2388.129967][T12660] xt_connbytes: Forcing CT accounting to be enabled [ 2391.891994][ T28] audit: type=1326 audit(2391.710:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.894827][ T28] audit: type=1326 audit(2391.710:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.898863][ T28] audit: type=1326 audit(2391.720:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.907533][ T28] audit: type=1326 audit(2391.730:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.910005][ T28] audit: type=1326 audit(2391.730:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.913188][ T28] audit: type=1326 audit(2391.730:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.916646][ T28] audit: type=1326 audit(2391.730:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.919506][ T28] audit: type=1326 audit(2391.730:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2391.922994][ T28] audit: type=1326 audit(2391.740:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12703 comm="syz.0.3139" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2397.803021][T12748] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 2397.867732][T12748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2397.895726][T12748] bond1: (slave dummy0): making interface the new active one [ 2397.900529][T12748] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2398.196898][T12756] ip_tables: iptables: counters copy to user failed while replacing table [ 2400.000602][ T28] audit: type=1326 audit(2399.820:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.006150][ T28] audit: type=1326 audit(2399.830:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.006673][ T28] audit: type=1326 audit(2399.830:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.007017][ T28] audit: type=1326 audit(2399.830:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.007186][ T28] audit: type=1326 audit(2399.830:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.007405][ T28] audit: type=1326 audit(2399.830:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.007575][ T28] audit: type=1326 audit(2399.830:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.022411][ T28] audit: type=1326 audit(2399.840:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.025089][ T28] audit: type=1326 audit(2399.850:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2400.032479][ T28] audit: type=1326 audit(2399.850:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.0.3169" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2403.604666][T12829] psci: CPU1 killed (polled 0 ms) [ 2403.825120][ T0] Detected PIPT I-cache on CPU1 [ 2403.830636][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 2410.299675][T12896] syz.3.3221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2413.295034][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 2413.295288][ T28] audit: type=1326 audit(2413.120:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.295469][ T28] audit: type=1326 audit(2413.120:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.297610][ T28] audit: type=1326 audit(2413.120:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.297742][ T28] audit: type=1326 audit(2413.120:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.298569][ T28] audit: type=1326 audit(2413.120:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.300303][ T28] audit: type=1326 audit(2413.120:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.304191][ T28] audit: type=1326 audit(2413.130:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.309982][ T28] audit: type=1326 audit(2413.130:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.319548][ T28] audit: type=1326 audit(2413.140:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2413.349257][ T28] audit: type=1326 audit(2413.170:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.0.3244" exe="/syz-executor" sig=0 arch=c00000b7 syscall=133 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2421.105237][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 2421.190719][T13028] device-mapper: ioctl: Invalid ioctl structure: uuid ˙˙˙˙, name , dev f3 [ 2425.275907][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2425.276358][ T28] audit: type=1326 audit(2425.100:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.280703][ T28] audit: type=1326 audit(2425.100:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.280957][ T28] audit: type=1326 audit(2425.100:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.298561][ T28] audit: type=1326 audit(2425.110:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.299064][ T28] audit: type=1326 audit(2425.110:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.299426][ T28] audit: type=1326 audit(2425.110:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.299636][ T28] audit: type=1326 audit(2425.110:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.299855][ T28] audit: type=1326 audit(2425.110:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.300057][ T28] audit: type=1326 audit(2425.110:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.300261][ T28] audit: type=1326 audit(2425.110:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13111 comm="syz.3.3310" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff863781a8 code=0x7ffc0000 [ 2425.678210][T13120] bond1: (slave dummy0): Releasing active interface [ 2425.760984][T13120] bond0: (slave bond_slave_0): Releasing backup interface [ 2425.809060][T13120] bond0: (slave bond_slave_1): Releasing backup interface [ 2425.861894][T13120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2427.404446][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3316'. [ 2434.984087][T13190] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 2435.086926][T13190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2435.134498][T13190] bond2: (slave gretap1): making interface the new active one [ 2435.137560][T13190] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2437.512842][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2437.514129][ T28] audit: type=1326 audit(2437.330:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.518387][ T28] audit: type=1326 audit(2437.340:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.525737][ T28] audit: type=1326 audit(2437.340:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.526193][ T28] audit: type=1326 audit(2437.340:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.532206][ T28] audit: type=1326 audit(2437.350:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.538839][ T28] audit: type=1326 audit(2437.360:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.539199][ T28] audit: type=1326 audit(2437.360:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.539509][ T28] audit: type=1326 audit(2437.360:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.539728][ T28] audit: type=1326 audit(2437.360:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2437.539936][ T28] audit: type=1326 audit(2437.360:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13211 comm="syz.0.3349" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa85781a8 code=0x7ffc0000 [ 2438.244023][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3355'. [ 2438.914109][T13241] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3362'. [ 2440.137632][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 2440.556432][T13259] syz_tun: entered allmulticast mode [ 2440.576901][T13259] syz_tun: left allmulticast mode [ 2440.817028][T13263] tmpfs: Bad value for 'mpol' [ 2442.531734][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 2444.069416][T13343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3406'. [ 2444.347083][T13351] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3411' sets config #-3 [ 2453.489193][T13425] syzkaller0: entered promiscuous mode [ 2453.489650][T13425] syzkaller0: entered allmulticast mode [ 2453.947803][T13429] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3445'. [ 2454.858732][T13447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3454'. [ 2454.983639][T13450] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3455'. [ 2455.126870][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3457'. [ 2455.236348][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'. [ 2455.570933][T13466] ------------[ cut here ]------------ [ 2455.571645][T13466] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 2455.575664][T13466] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x19c/0x1ac, CPU#1: syz.0.3463/13466 [ 2455.585007][T13466] Modules linked in: [ 2455.587255][T13466] CPU: 1 UID: 0 PID: 13466 Comm: syz.0.3463 Tainted: G L syzkaller #0 PREEMPT [ 2455.588366][T13466] Tainted: [L]=SOFTLOCKUP [ 2455.588672][T13466] Hardware name: linux,dummy-virt (DT) [ 2455.589255][T13466] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2455.589715][T13466] pc : netdev_queue_get_dma_dev+0x19c/0x1ac [ 2455.590077][T13466] lr : netdev_queue_get_dma_dev+0x19c/0x1ac [ 2455.590380][T13466] sp : ffff8000833c3b70 [ 2455.590651][T13466] x29: ffff8000833c3b70 x28: f1f0000015e23b78 x27: 0000000000000000 [ 2455.591578][T13466] x26: f8f000000ac25000 x25: fbf000000ce77d18 x24: fbf000000ce77b80 [ 2455.592342][T13466] x23: ffff8000833c3bc8 x22: 0000000020000100 x21: 0000000000000000 [ 2455.593043][T13466] x20: 0000000000000000 x19: f8f000000ac25000 x18: 0000000000000000 [ 2455.593678][T13466] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 2455.594166][T13466] x14: 000000000000027c x13: 00000000f5257d14 x12: 0000af4b34762318 [ 2455.594563][T13466] x11: 00000000000000c0 x10: 9b9d6f1c518fcdc7 x9 : 0c8b16c3af277f7e [ 2455.595033][T13466] x8 : faf000000e61e578 x7 : 0000000000000004 x6 : 0000000000000000 [ 2455.595409][T13466] x5 : faf000000e61d500 x4 : fbffff3fffffffff x3 : 000000000000ffff [ 2455.595777][T13466] x2 : 0000000000000000 x1 : 0000000000000000 x0 : faf000000e61d500 [ 2455.596346][T13466] Call trace: [ 2455.596819][T13466] netdev_queue_get_dma_dev+0x19c/0x1ac (P) [ 2455.597379][T13466] io_register_zcrx+0x370/0x9d0 [ 2455.597659][T13466] __arm64_sys_io_uring_register+0x3ec/0xdb0 [ 2455.598265][T13466] invoke_syscall+0x54/0x10c [ 2455.598507][T13466] el0_svc_common.constprop.0+0x40/0xe0 [ 2455.598808][T13466] do_el0_svc+0x1c/0x34 [ 2455.599161][T13466] el0_svc+0x38/0x1fc [ 2455.599436][T13466] el0t_64_sync_handler+0xa0/0xf0 [ 2455.599678][T13466] el0t_64_sync+0x1a4/0x1a8 [ 2455.600266][T13466] ---[ end trace 0000000000000000 ]---