last executing test programs: 23.04438273s ago: executing program 1 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) capset(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22.445055332s ago: executing program 1 (id=2274): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9", 0xa) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 19.205703932s ago: executing program 1 (id=2279): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 16.835801585s ago: executing program 1 (id=2286): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 16.734629863s ago: executing program 1 (id=2287): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7fff, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9, 0xfffffffd}, 0x20) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x2ece, @loopback, 0x5, 0x4}, 0x20) 16.272097595s ago: executing program 1 (id=2288): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 16.271931275s ago: executing program 32 (id=2288): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 4.463709595s ago: executing program 2 (id=2292): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 4.114823209s ago: executing program 0 (id=2306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f56", 0x7c}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) 3.965761768s ago: executing program 0 (id=2307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x2], &(0x7f0000000580), 0x0, 0x0, 0x2000}) accept4(r4, 0x0, 0x0, 0x0) 3.88270878s ago: executing program 2 (id=2308): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001c000f800800034000000006080002400000000108000140000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 3.344283289s ago: executing program 2 (id=2309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x250}}, 0x2000c000) 3.082429837s ago: executing program 2 (id=2310): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000c40)="0d32818e2fa06d", 0x7}]) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) 607.224802ms ago: executing program 0 (id=2311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002fc0)=""/4090, 0xffa}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000006c0)=""/185, 0xb9}], 0x1}, 0x5}], 0x2, 0x40010088, 0x0) 395.299767ms ago: executing program 0 (id=2312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x762b}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x10, 0x3, 0x4, 0x6c, 0x505c], 0x1, &(0x7f0000000000), 0x0, [{}]}, 0x88) 262.176052ms ago: executing program 0 (id=2313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0x7}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x2d}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 231.685099ms ago: executing program 2 (id=2314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000080000000000000025000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000003100000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x8613d313acb45a43, 0x4}, 0x94) 46.75241ms ago: executing program 2 (id=2315): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x85, 0x4, 0x6, "67833a47f0082149f56e5a7747b6a80a932e8e", 0x7f, 0x3}) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 0s ago: executing program 0 (id=2316): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r0 = syz_io_uring_setup(0x6bb1, &(0x7f0000000400)={0x0, 0x7e10, 0x8, 0x0, 0x249}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x5, 0x80000000, 0x0, 0xd, 0x0, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x4}}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62273' (ED25519) to the list of known hosts. syzkaller login: [ 84.883125][ T3371] cgroup: Unknown subsys name 'net' [ 85.064967][ T3371] cgroup: Unknown subsys name 'cpuset' [ 85.090048][ T3371] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.476066][ T3371] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.755284][ T3377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.809239][ T3377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.827585][ T3376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.876718][ T3376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.737097][ T3377] hsr_slave_0: entered promiscuous mode [ 96.742058][ T3377] hsr_slave_1: entered promiscuous mode [ 96.769730][ T3376] hsr_slave_0: entered promiscuous mode [ 96.772953][ T3376] hsr_slave_1: entered promiscuous mode [ 96.777810][ T3376] debugfs: 'hsr0' already exists in 'hsr' [ 96.778496][ T3376] Cannot create hsr debugfs directory [ 97.524242][ T3376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.558441][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.564016][ T3376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.576999][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.587820][ T3376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.601204][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.605072][ T3376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.624235][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.746630][ T3377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.754541][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.760803][ T3377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.771185][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.776840][ T3377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.787302][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.791100][ T3377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.802144][ T3377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.480374][ T3377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.584685][ T3376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.312929][ T3376] veth0_vlan: entered promiscuous mode [ 101.413938][ T3376] veth1_vlan: entered promiscuous mode [ 101.433909][ T3377] veth0_vlan: entered promiscuous mode [ 101.504950][ T3377] veth1_vlan: entered promiscuous mode [ 101.613465][ T3376] veth0_macvtap: entered promiscuous mode [ 101.642683][ T3376] veth1_macvtap: entered promiscuous mode [ 101.752086][ T3377] veth0_macvtap: entered promiscuous mode [ 101.814593][ T3377] veth1_macvtap: entered promiscuous mode [ 101.967240][ T2697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.021224][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.022109][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.022396][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.022558][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.026636][ T842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.029453][ T842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.029862][ T842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.428699][ T3376] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.428698][ T3377] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.198277][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.201557][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.655168][ T3531] ip_tables: iptables: counters copy to user failed while replacing table [ 103.750862][ T3534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4'. [ 104.581048][ T3538] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 106.468526][ T3544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.477965][ T3544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.356806][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.551492][ T11] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 114.576570][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.576850][ T11] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.657603][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.657978][ T11] usb 1-1: Product: syz [ 114.658231][ T11] usb 1-1: Manufacturer: syz [ 114.658336][ T11] usb 1-1: SerialNumber: syz [ 115.070644][ T11] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 116.866917][ T23] usb 1-1: USB disconnect, device number 2 [ 116.881762][ T23] usblp0: removed [ 123.623283][ T3624] Zero length message leads to an empty skb [ 124.468126][ T3632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 124.501116][ T3632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.39'. [ 124.630651][ T3634] syzkaller0: entered promiscuous mode [ 124.632112][ T3634] syzkaller0: entered allmulticast mode [ 126.600242][ T3642] loop0: detected capacity change from 0 to 3904 [ 126.724536][ T3642] loop0: [ 126.952839][ T3646] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88re' [ 126.968582][ T3646] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 131.203114][ T3669] bond0: (slave bond_slave_0): Releasing backup interface [ 131.264639][ T3669] bond0: (slave bond_slave_1): Releasing backup interface [ 131.342685][ T3669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.613826][ T3672] loop0: detected capacity change from 0 to 128 [ 131.766534][ T3672] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.673875][ T3684] syzkaller0: entered promiscuous mode [ 132.675250][ T3684] syzkaller0: entered allmulticast mode [ 138.633894][ T3706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.640579][ T3706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.132867][ T3735] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 147.276369][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.430894][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.453762][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.454209][ T11] usb 1-1: config 1 interface 1 has no altsetting 0 [ 147.498875][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.500381][ T11] usb 1-1: Product: syz [ 147.503083][ T11] usb 1-1: Manufacturer: syz [ 147.504983][ T11] usb 1-1: SerialNumber: syz [ 147.545249][ T11] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 147.548010][ T11] cdc_ncm 1-1:1.0: bind() failure [ 147.957191][ T11] usb 1-1: USB disconnect, device number 3 [ 148.178447][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 151.372993][ T3761] syzkaller0: entered promiscuous mode [ 151.374680][ T3761] syzkaller0: entered allmulticast mode [ 152.094762][ T3773] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 157.140278][ T3796] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 157.140743][ T3796] nbd: couldn't find device at index 131080 [ 157.154332][ T28] audit: type=1326 audit(157.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.154907][ T28] audit: type=1326 audit(157.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.175889][ T28] audit: type=1326 audit(157.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.176342][ T28] audit: type=1326 audit(157.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.178528][ T28] audit: type=1326 audit(157.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.180135][ T28] audit: type=1326 audit(157.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.181687][ T28] audit: type=1326 audit(157.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.185553][ T28] audit: type=1326 audit(157.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.192060][ T28] audit: type=1326 audit(157.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 157.196955][ T28] audit: type=1326 audit(157.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3794 comm="syz.0.99" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 159.927301][ T3803] syzkaller0: entered promiscuous mode [ 159.929467][ T3803] syzkaller0: entered allmulticast mode [ 160.631100][ T3808] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 162.411270][ T3820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.109'. [ 162.729345][ T3824] null_blk: nullb1: using native zone append [ 162.813817][ T3824] null_blk: disk nullb1 created [ 167.231068][ T3858] FAULT_INJECTION: forcing a failure. [ 167.231068][ T3858] name failslab, interval 1, probability 0, space 0, times 1 [ 167.233719][ T3858] CPU: 0 UID: 0 PID: 3858 Comm: syz.1.122 Tainted: G W syzkaller #0 PREEMPT [ 167.234028][ T3858] Tainted: [W]=WARN [ 167.234097][ T3858] Hardware name: linux,dummy-virt (DT) [ 167.234411][ T3858] Call trace: [ 167.234768][ T3858] show_stack+0x18/0x24 (C) [ 167.235788][ T3858] dump_stack_lvl+0x60/0x80 [ 167.235881][ T3858] dump_stack+0x18/0x24 [ 167.235955][ T3858] should_fail_ex+0x1e0/0x238 [ 167.236031][ T3858] should_failslab+0x54/0x80 [ 167.236102][ T3858] __kmalloc_noprof+0xac/0x520 [ 167.236178][ T3858] apply_wqattrs_prepare+0x48/0x23c [ 167.236257][ T3858] apply_workqueue_attrs_locked+0x24/0x60 [ 167.236343][ T3858] __alloc_workqueue+0x260/0x704 [ 167.236414][ T3858] alloc_workqueue_noprof+0x64/0x9c [ 167.236483][ T3858] nci_register_device+0x108/0x264 [ 167.236560][ T3858] virtual_ncidev_open+0x84/0xdc [ 167.236645][ T3858] misc_open+0xcc/0x180 [ 167.236721][ T3858] chrdev_open+0xac/0x220 [ 167.236798][ T3858] do_dentry_open+0x128/0x4fc [ 167.236877][ T3858] vfs_open+0x2c/0xe8 [ 167.236953][ T3858] path_openat+0x5b4/0x960 [ 167.237026][ T3858] do_file_open+0xb0/0x168 [ 167.237099][ T3858] do_sys_openat2+0x84/0x104 [ 167.237179][ T3858] __arm64_sys_openat+0x64/0xc0 [ 167.237258][ T3858] invoke_syscall+0x54/0x10c [ 167.237344][ T3858] el0_svc_common.constprop.0+0x40/0xe0 [ 167.237416][ T3858] do_el0_svc+0x1c/0x34 [ 167.237483][ T3858] el0_svc+0x38/0x1fc [ 167.237558][ T3858] el0t_64_sync_handler+0xa0/0xe4 [ 167.237628][ T3858] el0t_64_sync+0x1a4/0x1a8 [ 174.566240][ T3892] Illegal XDP return value 3212382208 on prog (id 2) dev syz_tun, expect packet loss! [ 175.093088][ T3899] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 175.130670][ T3899] netlink: 84 bytes leftover after parsing attributes in process `syz.0.134'. [ 175.141002][ T3899] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 175.708461][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 175.714051][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 175.719904][ T3907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 176.117239][ T3523] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 176.219199][ T3916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 176.304133][ T3523] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.310336][ T3523] usb 1-1: not running at top speed; connect to a high speed hub [ 176.312007][ T3523] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.318794][ T3523] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 176.322779][ T3523] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 176.326322][ T3523] usb 1-1: config 1 interface 0 has no altsetting 0 [ 176.806517][ T3523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.807814][ T3523] usb 1-1: Product: syz [ 176.808012][ T3523] usb 1-1: Manufacturer: syz [ 176.808118][ T3523] usb 1-1: SerialNumber: syz [ 176.829412][ T3911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.830891][ T3911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.256138][ T3523] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 177.516498][ T3441] usb 1-1: USB disconnect, device number 4 [ 178.303183][ T3441] usblp0: removed [ 180.529800][ T28] kauditd_printk_skb: 3450 callbacks suppressed [ 180.530233][ T28] audit: type=1326 audit(180.420:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.531332][ T28] audit: type=1326 audit(180.420:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.541758][ T28] audit: type=1326 audit(180.420:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.555825][ T28] audit: type=1326 audit(180.440:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.566511][ T28] audit: type=1326 audit(180.430:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.574508][ T28] audit: type=1326 audit(180.460:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.580398][ T28] audit: type=1326 audit(180.470:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.581873][ T28] audit: type=1326 audit(180.470:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.583179][ T28] audit: type=1326 audit(180.470:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 180.584800][ T28] audit: type=1326 audit(180.470:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3946 comm="syz.1.150" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 182.074548][ T3961] nvme_fabrics: missing parameter 'transport=%s' [ 182.075977][ T3961] nvme_fabrics: missing parameter 'nqn=%s' [ 182.264859][ T3967] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 conventional PCI endpoint [ 182.422864][ T3970] FAULT_INJECTION: forcing a failure. [ 182.422864][ T3970] name failslab, interval 1, probability 0, space 0, times 0 [ 182.424695][ T3970] CPU: 0 UID: 0 PID: 3970 Comm: syz.0.159 Tainted: G W syzkaller #0 PREEMPT [ 182.424784][ T3970] Tainted: [W]=WARN [ 182.424804][ T3970] Hardware name: linux,dummy-virt (DT) [ 182.424825][ T3970] Call trace: [ 182.424850][ T3970] show_stack+0x18/0x24 (C) [ 182.424911][ T3970] dump_stack_lvl+0x60/0x80 [ 182.424949][ T3970] dump_stack+0x18/0x24 [ 182.424985][ T3970] should_fail_ex+0x1e0/0x238 [ 182.425024][ T3970] should_failslab+0x54/0x80 [ 182.425061][ T3970] __kmalloc_cache_noprof+0x58/0x470 [ 182.425101][ T3970] call_usermodehelper_setup+0x68/0xcc [ 182.425142][ T3970] __request_module+0x17c/0x220 [ 182.425182][ T3970] get_fs_type+0x94/0x130 [ 182.425222][ T3970] __arm64_sys_fsopen+0x48/0x128 [ 182.425258][ T3970] invoke_syscall+0x54/0x10c [ 182.425294][ T3970] el0_svc_common.constprop.0+0x40/0xe0 [ 182.425330][ T3970] do_el0_svc+0x1c/0x34 [ 182.425368][ T3970] el0_svc+0x38/0x1fc [ 182.425409][ T3970] el0t_64_sync_handler+0xa0/0xe4 [ 182.425448][ T3970] el0t_64_sync+0x1a4/0x1a8 [ 182.880111][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.881456][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.252873][ T3992] FAULT_INJECTION: forcing a failure. [ 185.252873][ T3992] name failslab, interval 1, probability 0, space 0, times 0 [ 185.253629][ T3992] CPU: 1 UID: 0 PID: 3992 Comm: syz.0.168 Tainted: G W syzkaller #0 PREEMPT [ 185.253762][ T3992] Tainted: [W]=WARN [ 185.253799][ T3992] Hardware name: linux,dummy-virt (DT) [ 185.253881][ T3992] Call trace: [ 185.253921][ T3992] show_stack+0x18/0x24 (C) [ 185.254037][ T3992] dump_stack_lvl+0x60/0x80 [ 185.254144][ T3992] dump_stack+0x18/0x24 [ 185.254221][ T3992] should_fail_ex+0x1e0/0x238 [ 185.254298][ T3992] should_failslab+0x54/0x80 [ 185.254382][ T3992] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 185.254468][ T3992] kmemdup_noprof+0x34/0x60 [ 185.254550][ T3992] setup_ipc_sysctls+0x4c/0x1e8 [ 185.254633][ T3992] copy_ipcs+0x238/0x300 [ 185.254701][ T3992] create_new_namespaces+0xa8/0x370 [ 185.254787][ T3992] unshare_nsproxy_namespaces+0x70/0xbc [ 185.254869][ T3992] ksys_unshare+0x1cc/0x3b8 [ 185.254948][ T3992] __arm64_sys_unshare+0x14/0x24 [ 185.255024][ T3992] invoke_syscall+0x54/0x10c [ 185.255099][ T3992] el0_svc_common.constprop.0+0x40/0xe0 [ 185.255173][ T3992] do_el0_svc+0x1c/0x34 [ 185.255245][ T3992] el0_svc+0x38/0x1fc [ 185.255328][ T3992] el0t_64_sync_handler+0xa0/0xe4 [ 185.255449][ T3992] el0t_64_sync+0x1a4/0x1a8 [ 185.527352][ T3994] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.351320][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 189.351790][ T28] audit: type=1326 audit(189.240:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.358312][ T28] audit: type=1326 audit(189.250:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.358852][ T28] audit: type=1326 audit(189.250:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.376527][ T28] audit: type=1326 audit(189.260:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.416577][ T28] audit: type=1326 audit(189.300:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.417004][ T28] audit: type=1326 audit(189.300:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.450490][ T28] audit: type=1326 audit(189.320:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.450883][ T28] audit: type=1326 audit(189.340:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.451232][ T28] audit: type=1326 audit(189.340:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.451433][ T28] audit: type=1326 audit(189.340:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.1.178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7ffc0000 [ 189.929176][ T4024] FAULT_INJECTION: forcing a failure. [ 189.929176][ T4024] name failslab, interval 1, probability 0, space 0, times 0 [ 189.936322][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.1.181 Tainted: G W syzkaller #0 PREEMPT [ 189.936490][ T4024] Tainted: [W]=WARN [ 189.936528][ T4024] Hardware name: linux,dummy-virt (DT) [ 189.936569][ T4024] Call trace: [ 189.936604][ T4024] show_stack+0x18/0x24 (C) [ 189.936724][ T4024] dump_stack_lvl+0x60/0x80 [ 189.936802][ T4024] dump_stack+0x18/0x24 [ 189.936873][ T4024] should_fail_ex+0x1e0/0x238 [ 189.936950][ T4024] should_failslab+0x54/0x80 [ 189.937022][ T4024] __kmalloc_cache_noprof+0x58/0x470 [ 189.937101][ T4024] get_mountpoint+0xb4/0x1d0 [ 189.937180][ T4024] do_lock_mount.part.0+0x270/0x350 [ 189.937254][ T4024] path_mount+0x444/0xabc [ 189.937324][ T4024] __arm64_sys_mount+0x1b0/0x204 [ 189.937394][ T4024] invoke_syscall+0x54/0x10c [ 189.937467][ T4024] el0_svc_common.constprop.0+0x40/0xe0 [ 189.937538][ T4024] do_el0_svc+0x1c/0x34 [ 189.937607][ T4024] el0_svc+0x38/0x1fc [ 189.937687][ T4024] el0t_64_sync_handler+0xa0/0xe4 [ 189.937771][ T4024] el0t_64_sync+0x1a4/0x1a8 [ 190.066637][ T4026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.068180][ T4026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.705111][ T4071] could not allocate digest TFM handle rmd256 [ 195.983103][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.012178][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.592263][ T4106] process 'syz.0.212' launched './file1' with NULL argv: empty string added [ 198.753519][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 198.753818][ T28] audit: type=1326 audit(198.630:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4114 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 198.754204][ T28] audit: type=1326 audit(198.640:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4114 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 198.763618][ T28] audit: type=1326 audit(198.650:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4114 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 198.770098][ T28] audit: type=1326 audit(198.660:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4114 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 198.771197][ T28] audit: type=1326 audit(198.660:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4114 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df792a8 code=0x7ffc0000 [ 199.085171][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 199.270055][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 199.603828][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 199.742666][ T4135] FAULT_INJECTION: forcing a failure. [ 199.742666][ T4135] name failslab, interval 1, probability 0, space 0, times 0 [ 199.748586][ T4135] CPU: 0 UID: 0 PID: 4135 Comm: syz.1.224 Tainted: G W syzkaller #0 PREEMPT [ 199.748764][ T4135] Tainted: [W]=WARN [ 199.748805][ T4135] Hardware name: linux,dummy-virt (DT) [ 199.748848][ T4135] Call trace: [ 199.748885][ T4135] show_stack+0x18/0x24 (C) [ 199.749000][ T4135] dump_stack_lvl+0x60/0x80 [ 199.749081][ T4135] dump_stack+0x18/0x24 [ 199.749159][ T4135] should_fail_ex+0x1e0/0x238 [ 199.749255][ T4135] should_failslab+0x54/0x80 [ 199.749339][ T4135] __kmalloc_cache_noprof+0x58/0x470 [ 199.749427][ T4135] fsnotify_alloc_group+0x54/0xe0 [ 199.749509][ T4135] __arm64_sys_fanotify_init+0xdc/0x3c0 [ 199.749582][ T4135] invoke_syscall+0x54/0x10c [ 199.749652][ T4135] el0_svc_common.constprop.0+0x40/0xe0 [ 199.749725][ T4135] do_el0_svc+0x1c/0x34 [ 199.749797][ T4135] el0_svc+0x38/0x1fc [ 199.749884][ T4135] el0t_64_sync_handler+0xa0/0xe4 [ 199.749964][ T4135] el0t_64_sync+0x1a4/0x1a8 [ 200.176095][ T3441] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 200.326438][ T3441] usb 1-1: Using ep0 maxpacket: 8 [ 200.332678][ T3441] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 200.338175][ T3441] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.338482][ T3441] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.338907][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.354259][ T3441] usb 1-1: config 0 descriptor?? [ 200.812305][ T23] usb 1-1: USB disconnect, device number 5 [ 201.050689][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 201.354819][ T4155] syz.1.232 uses obsolete (PF_INET,SOCK_PACKET) [ 202.192296][ T4167] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 204.958336][ T4187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.959187][ T4187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.320158][ T4194] binder: 4193:4194 cannot find target node [ 205.326808][ T4194] binder: 4193:4194 transaction call to 0:0 failed 1/29189/-22, code 0 size 0-0 line 3252 [ 205.346654][ T3441] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.576498][ T4201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 214.404949][ T4267] nftables ruleset with unbound chain [ 215.237759][ T2697] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.239357][ T2697] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.240833][ T2697] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.242113][ T2697] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.930397][ T4276] FAULT_INJECTION: forcing a failure. [ 216.930397][ T4276] name failslab, interval 1, probability 0, space 0, times 0 [ 216.933381][ T4276] CPU: 0 UID: 0 PID: 4276 Comm: syz.1.278 Tainted: G W syzkaller #0 PREEMPT [ 216.933520][ T4276] Tainted: [W]=WARN [ 216.933556][ T4276] Hardware name: linux,dummy-virt (DT) [ 216.933596][ T4276] Call trace: [ 216.933626][ T4276] show_stack+0x18/0x24 (C) [ 216.933725][ T4276] dump_stack_lvl+0x60/0x80 [ 216.933792][ T4276] dump_stack+0x18/0x24 [ 216.933865][ T4276] should_fail_ex+0x1e0/0x238 [ 216.933933][ T4276] should_failslab+0x54/0x80 [ 216.933997][ T4276] __kvmalloc_node_noprof+0xc8/0x65c [ 216.934067][ T4276] bucket_table_alloc.isra.0+0x38/0x138 [ 216.934133][ T4276] __rhashtable_init_noprof+0x118/0x238 [ 216.934196][ T4276] __rhltable_init_noprof+0x18/0x30 [ 216.934258][ T4276] nf_tables_newtable+0x3cc/0x640 [ 216.934334][ T4276] nfnetlink_rcv_batch+0x7a8/0x9e0 [ 216.934399][ T4276] nfnetlink_rcv+0x164/0x1b8 [ 216.934459][ T4276] netlink_unicast+0x328/0x3ac [ 216.934532][ T4276] netlink_sendmsg+0x194/0x410 [ 216.934648][ T4276] __sock_sendmsg+0x54/0x60 [ 216.934719][ T4276] ____sys_sendmsg+0x250/0x2a8 [ 216.934792][ T4276] ___sys_sendmsg+0xb0/0x108 [ 216.934864][ T4276] __sys_sendmsg+0x9c/0x100 [ 216.934928][ T4276] __arm64_sys_sendmsg+0x20/0x38 [ 216.934994][ T4276] invoke_syscall+0x54/0x10c [ 216.935058][ T4276] el0_svc_common.constprop.0+0x40/0xe0 [ 216.935123][ T4276] do_el0_svc+0x1c/0x34 [ 216.935184][ T4276] el0_svc+0x38/0x1fc [ 216.935255][ T4276] el0t_64_sync_handler+0xa0/0xe4 [ 216.935324][ T4276] el0t_64_sync+0x1a4/0x1a8 [ 220.182500][ T4285] capability: warning: `syz.1.282' uses 32-bit capabilities (legacy support in use) [ 221.242019][ T4303] capability: warning: `syz.0.289' uses deprecated v2 capabilities in a way that may be insecure [ 225.591716][ T4320] macvlan0: entered promiscuous mode [ 226.998540][ T4339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.000129][ T4339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.024887][ T4339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.028960][ T4339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.647074][ T4352] lo: entered allmulticast mode [ 227.704102][ T4352] lo: left allmulticast mode [ 228.445177][ T4364] xt_l2tp: missing protocol rule (udp|l2tpip) [ 231.171854][ T4371] bonding: no command found in bonding_masters - use +ifname or -ifname [ 231.327158][ T4375] binder: tried to use weak ref as strong ref [ 231.327591][ T4375] binder: 4373:4375 Acquire 1 refcount change on invalid ref 0 ret -22 [ 233.803633][ T28] audit: type=1326 audit(233.690:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4372 comm="syz.1.313" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff805792a8 code=0x7fc00000 [ 235.104685][ T4428] netlink: 88 bytes leftover after parsing attributes in process `syz.0.336'. [ 235.486159][ T3441] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 235.636275][ T3441] usb 1-1: Using ep0 maxpacket: 16 [ 235.655075][ T3441] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.657125][ T3441] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 235.666017][ T3441] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 235.666448][ T3441] usb 1-1: can't read configurations, error -71 [ 238.503457][ T4457] input: syz1 as /devices/virtual/input/input1 [ 238.728531][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.730162][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.266940][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 242.416571][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 242.448053][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.452680][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.477297][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.477799][ T804] usb 1-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 242.483647][ T804] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 242.484157][ T804] usb 1-1: can't read configurations, error -71 [ 243.639701][ T4488] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 243.649948][ T4488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.823288][ T4492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 243.825050][ T4492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 249.993083][ T4533] binder: 4532:4533 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 250.005093][ T4533] binder: 4532:4533 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 250.626501][ T3441] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 250.791827][ T3441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 250.805421][ T3441] usb 1-1: config index 0 descriptor too short (expected 71, got 53) [ 250.806145][ T3441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.834612][ T3441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.834942][ T3441] usb 1-1: Product: syz [ 250.835232][ T3441] usb 1-1: Manufacturer: syz [ 250.835334][ T3441] usb 1-1: SerialNumber: syz [ 251.096562][ T3441] usb 1-1: USB disconnect, device number 10 [ 255.353186][ T4607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 256.162087][ T4628] FAULT_INJECTION: forcing a failure. [ 256.162087][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 256.162428][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.0.420 Tainted: G W syzkaller #0 PREEMPT [ 256.162546][ T4628] Tainted: [W]=WARN [ 256.162582][ T4628] Hardware name: linux,dummy-virt (DT) [ 256.162623][ T4628] Call trace: [ 256.162657][ T4628] show_stack+0x18/0x24 (C) [ 256.162766][ T4628] dump_stack_lvl+0x60/0x80 [ 256.162853][ T4628] dump_stack+0x18/0x24 [ 256.162925][ T4628] should_fail_ex+0x1e0/0x238 [ 256.163006][ T4628] should_failslab+0x54/0x80 [ 256.163083][ T4628] __kmalloc_noprof+0xac/0x520 [ 256.163163][ T4628] lsm_blob_alloc+0x40/0x64 [ 256.163240][ T4628] security_sem_alloc+0x28/0x1c0 [ 256.163325][ T4628] newary+0x84/0x280 [ 256.163401][ T4628] ipcget+0x270/0x2a0 [ 256.163507][ T4628] __arm64_sys_semget+0x64/0x9c [ 256.163582][ T4628] invoke_syscall+0x54/0x10c [ 256.163655][ T4628] el0_svc_common.constprop.0+0x40/0xe0 [ 256.163727][ T4628] do_el0_svc+0x1c/0x34 [ 256.163806][ T4628] el0_svc+0x38/0x1fc [ 256.163890][ T4628] el0t_64_sync_handler+0xa0/0xe4 [ 256.163966][ T4628] el0t_64_sync+0x1a4/0x1a8 [ 257.617269][ T4648] input: syz1 as /devices/virtual/input/input2 [ 260.042349][ T4677] FAULT_INJECTION: forcing a failure. [ 260.042349][ T4677] name failslab, interval 1, probability 0, space 0, times 0 [ 260.045052][ T4677] CPU: 1 UID: 0 PID: 4677 Comm: syz.0.438 Tainted: G W syzkaller #0 PREEMPT [ 260.045230][ T4677] Tainted: [W]=WARN [ 260.045342][ T4677] Hardware name: linux,dummy-virt (DT) [ 260.045390][ T4677] Call trace: [ 260.045425][ T4677] show_stack+0x18/0x24 (C) [ 260.045592][ T4677] dump_stack_lvl+0x60/0x80 [ 260.045673][ T4677] dump_stack+0x18/0x24 [ 260.045749][ T4677] should_fail_ex+0x1e0/0x238 [ 260.045871][ T4677] should_failslab+0x54/0x80 [ 260.045957][ T4677] __kmalloc_cache_noprof+0x58/0x470 [ 260.046041][ T4677] call_usermodehelper_setup+0x68/0xcc [ 260.046126][ T4677] __request_module+0x17c/0x220 [ 260.046208][ T4677] get_fs_type+0x94/0x130 [ 260.046290][ T4677] __arm64_sys_fsopen+0x48/0x128 [ 260.046398][ T4677] invoke_syscall+0x54/0x10c [ 260.046562][ T4677] el0_svc_common.constprop.0+0x40/0xe0 [ 260.046643][ T4677] do_el0_svc+0x1c/0x34 [ 260.046715][ T4677] el0_svc+0x38/0x1fc [ 260.046800][ T4677] el0t_64_sync_handler+0xa0/0xe4 [ 260.046919][ T4677] el0t_64_sync+0x1a4/0x1a8 [ 261.016683][ T3448] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 261.176106][ T3448] usb 1-1: Using ep0 maxpacket: 8 [ 261.182485][ T3448] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.196123][ T3448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.198072][ T3448] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.199768][ T3448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 261.201941][ T3448] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 261.204025][ T3448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.224129][ T3448] hub 1-1:1.0: bad descriptor, ignoring hub [ 261.236403][ T3448] hub 1-1:1.0: probe with driver hub failed with error -5 [ 261.239835][ T3448] cdc_wdm 1-1:1.0: skipping garbage [ 261.240840][ T3448] cdc_wdm 1-1:1.0: skipping garbage [ 261.257262][ T3448] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 262.554105][ T4706] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 262.816142][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 262.816396][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 262.817419][ T3441] usb 1-1: USB disconnect, device number 11 [ 262.817926][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 262.818024][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 262.818141][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 262.823032][ T4682] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 266.685132][ T4768] FAULT_INJECTION: forcing a failure. [ 266.685132][ T4768] name failslab, interval 1, probability 0, space 0, times 0 [ 266.686976][ T4768] CPU: 1 UID: 0 PID: 4768 Comm: syz.0.474 Tainted: G W syzkaller #0 PREEMPT [ 266.687107][ T4768] Tainted: [W]=WARN [ 266.687144][ T4768] Hardware name: linux,dummy-virt (DT) [ 266.687185][ T4768] Call trace: [ 266.687218][ T4768] show_stack+0x18/0x24 (C) [ 266.687334][ T4768] dump_stack_lvl+0x60/0x80 [ 266.687410][ T4768] dump_stack+0x18/0x24 [ 266.687517][ T4768] should_fail_ex+0x1e0/0x238 [ 266.687597][ T4768] should_failslab+0x54/0x80 [ 266.687668][ T4768] kmem_cache_alloc_noprof+0x54/0x458 [ 266.687745][ T4768] skb_clone+0x60/0xc4 [ 266.687832][ T4768] nfnetlink_rcv_batch+0xb8/0x9e0 [ 266.687981][ T4768] nfnetlink_rcv+0x164/0x1b8 [ 266.688087][ T4768] netlink_unicast+0x328/0x3ac [ 266.688163][ T4768] netlink_sendmsg+0x194/0x410 [ 266.688238][ T4768] __sock_sendmsg+0x54/0x60 [ 266.688313][ T4768] ____sys_sendmsg+0x250/0x2a8 [ 266.688379][ T4768] ___sys_sendmsg+0xb0/0x108 [ 266.688446][ T4768] __sys_sendmsg+0x9c/0x100 [ 266.688515][ T4768] __arm64_sys_sendmsg+0x20/0x38 [ 266.688584][ T4768] invoke_syscall+0x54/0x10c [ 266.688657][ T4768] el0_svc_common.constprop.0+0x40/0xe0 [ 266.688726][ T4768] do_el0_svc+0x1c/0x34 [ 266.688806][ T4768] el0_svc+0x38/0x1fc [ 266.688886][ T4768] el0t_64_sync_handler+0xa0/0xe4 [ 266.688961][ T4768] el0t_64_sync+0x1a4/0x1a8 [ 266.912569][ T4776] binder: 4775:4776 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 266.917846][ T4776] binder: 4775:4776 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 268.131742][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.487'. [ 273.819568][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 273.869584][ T4832] bond0: (slave macvlan2): Opening slave failed [ 277.339486][ T4883] af_packet: tpacket_rcv: packet too big, clamped from 3967 to 3966. macoff=82 [ 280.803535][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 281.106235][ T3448] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 281.268613][ T3448] usb 1-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 281.277809][ T3448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.278117][ T3448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.278522][ T3448] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.278770][ T3448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.293338][ T3448] usb 1-1: config 0 descriptor?? [ 281.904404][ T3448] usbhid 1-1:0.0: can't add hid device: -71 [ 281.905531][ T3448] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.942996][ T3448] usb 1-1: USB disconnect, device number 12 [ 284.090042][ T4965] binder: 4964:4965 tried to acquire reference to desc 0, got 1 instead [ 284.098031][ T4965] binder: release 4964:4965 transaction 8 out, still active [ 284.099491][ T4965] binder: undelivered TRANSACTION_COMPLETE [ 284.109799][ T804] binder: send failed reply for transaction 8, target dead [ 289.169797][ T5010] netlink: 33 bytes leftover after parsing attributes in process `syz.1.566'. [ 289.496640][ T3448] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.656485][ T3448] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.667230][ T3448] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 289.667652][ T3448] usb 1-1: config 0 interface 0 has no altsetting 0 [ 289.705042][ T3448] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.705457][ T3448] usb 1-1: Product: syz [ 289.706148][ T3448] usb 1-1: Manufacturer: syz [ 289.706278][ T3448] usb 1-1: SerialNumber: syz [ 289.719348][ T3448] usb 1-1: config 0 descriptor?? [ 289.773734][ T3448] usb 1-1: selecting invalid altsetting 0 [ 289.986740][ T3448] usb 1-1: USB disconnect, device number 13 [ 290.252995][ T5031] udevd[5031]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.976519][ T3441] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.136166][ T3441] usb 1-1: Using ep0 maxpacket: 16 [ 292.140484][ T3441] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 292.154454][ T3441] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.154876][ T3441] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.155124][ T3441] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.155260][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.166084][ T3441] usb 1-1: config 0 descriptor?? [ 292.602002][ T3441] hid-generic 0003:1241:5015.0001: unknown main item tag 0x1 [ 292.602449][ T3441] hid-generic 0003:1241:5015.0001: unknown main item tag 0x7 [ 292.603165][ T3441] hid-generic 0003:1241:5015.0001: item fetching failed at offset 38/40 [ 292.605297][ T3441] hid-generic 0003:1241:5015.0001: probe with driver hid-generic failed with error -22 [ 292.792052][ T3441] usb 1-1: USB disconnect, device number 14 [ 293.326317][ T3441] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 293.480336][ T3441] usb 1-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.00 [ 293.487791][ T3441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 293.488190][ T3441] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.488502][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.501167][ T3441] usb 1-1: config 0 descriptor?? [ 293.531766][ T5065] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.960958][ T3441] hid-generic 0003:18D1:5044.0002: item fetching failed at offset 5/6 [ 293.962098][ T3441] hid-generic 0003:18D1:5044.0002: probe with driver hid-generic failed with error -22 [ 294.175387][ T3441] usb 1-1: USB disconnect, device number 15 [ 294.373897][ T5085] netlink: 104 bytes leftover after parsing attributes in process `syz.0.594'. [ 295.333570][ T5112] mmap: syz.1.608 (5112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 301.567946][ T3448] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 301.769106][ T3448] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 301.817864][ T3448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.822499][ T3448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.828017][ T3448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.841229][ T3448] usb 1-1: config 0 descriptor?? [ 302.333796][ T3448] hid-generic 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 312.534493][ T3448] usb 1-1: USB disconnect, device number 16 [ 312.986469][ T3448] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 313.138810][ T3448] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 313.146815][ T3448] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 313.147205][ T3448] usb 1-1: config 1 has no interface number 0 [ 313.147483][ T3448] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 313.147716][ T3448] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 313.147868][ T3448] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 313.167001][ T3448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.167248][ T3448] usb 1-1: Product: syz [ 313.167556][ T3448] usb 1-1: Manufacturer: syz [ 313.167623][ T3448] usb 1-1: SerialNumber: syz [ 313.475065][ T3448] usb 1-1: 1:0 : does not exist [ 313.482346][ T3448] usb 1-1: BAAD HEADPHONE p_chmask mismatch [ 313.608874][ T3448] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 313.653411][ T3448] usb 1-1: USB disconnect, device number 17 [ 313.854242][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.256678][ T3441] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 314.416391][ T3441] usb 1-1: not running at top speed; connect to a high speed hub [ 314.416664][ T3441] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 314.429602][ T3441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.449293][ T3441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.449646][ T3441] usb 1-1: Product: syz [ 314.449929][ T3441] usb 1-1: Manufacturer: syz [ 314.480260][ T3441] hub 1-1:1.0: USB hub found [ 314.681900][ T3441] hub 1-1:1.0: config failed, hub has too many ports! (err -19) [ 315.006976][ T804] usb 1-1: USB disconnect, device number 18 [ 315.406884][ T804] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 315.566284][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 315.582890][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.583276][ T804] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 315.590593][ T804] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 315.609232][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.609601][ T804] usb 1-1: Product: syz [ 315.609969][ T804] usb 1-1: Manufacturer: syz [ 315.610040][ T804] usb 1-1: SerialNumber: syz [ 315.847523][ T804] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 315.848510][ T804] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 316.248253][ T804] usb 1-1: 2:1 : can't get Cluster Descriptor [ 316.455236][ T804] usb 1-1: USB disconnect, device number 19 [ 316.639379][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.086542][ T803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 320.236590][ T803] usb 1-1: Using ep0 maxpacket: 32 [ 320.255963][ T803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.256309][ T803] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 320.270925][ T803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.284793][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.285119][ T803] usb 1-1: Product: syz [ 320.285408][ T803] usb 1-1: Manufacturer: syz [ 320.285566][ T803] usb 1-1: SerialNumber: syz [ 323.742990][ T5317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.694'. [ 323.957848][ T5321] tc_dump_action: action bad kind [ 325.424004][ T803] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 325.448615][ T803] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 325.596661][ T803] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 325.799823][ T5236] udevd[5236]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.341555][ T804] usb 1-1: USB disconnect, device number 20 [ 333.378491][ T5399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 334.494405][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 334.798427][ T5433] Invalid ELF header magic: != ELF [ 356.065311][ T5504] FAULT_INJECTION: forcing a failure. [ 356.065311][ T5504] name failslab, interval 1, probability 0, space 0, times 0 [ 356.066293][ T5504] CPU: 1 UID: 0 PID: 5504 Comm: syz.0.771 Tainted: G W syzkaller #0 PREEMPT [ 356.066417][ T5504] Tainted: [W]=WARN [ 356.066453][ T5504] Hardware name: linux,dummy-virt (DT) [ 356.066492][ T5504] Call trace: [ 356.066525][ T5504] show_stack+0x18/0x24 (C) [ 356.066633][ T5504] dump_stack_lvl+0x60/0x80 [ 356.066784][ T5504] dump_stack+0x18/0x24 [ 356.066863][ T5504] should_fail_ex+0x1e0/0x238 [ 356.066948][ T5504] should_failslab+0x54/0x80 [ 356.067024][ T5504] kmem_cache_alloc_noprof+0x54/0x458 [ 356.067101][ T5504] do_getname_kernel+0x4c/0x12c [ 356.067229][ T5504] kern_path+0x20/0x60 [ 356.067362][ T5504] lookup_bdev+0x44/0xf0 [ 356.067521][ T5504] __arm64_sys_quotactl+0x94/0x43c [ 356.067726][ T5504] invoke_syscall+0x54/0x10c [ 356.067834][ T5504] el0_svc_common.constprop.0+0x40/0xe0 [ 356.067911][ T5504] do_el0_svc+0x1c/0x34 [ 356.068119][ T5504] el0_svc+0x38/0x1fc [ 356.068216][ T5504] el0t_64_sync_handler+0xa0/0xe4 [ 356.068299][ T5504] el0t_64_sync+0x1a4/0x1a8 [ 356.087237][ T5503] ip_tables: iptables: counters copy to user failed while replacing table [ 356.688817][ T5519] fuse: Bad value for 'fd' [ 358.538062][ T5538] ip_tables: iptables: counters copy to user failed while replacing table [ 359.445155][ T5545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.790'. [ 361.081385][ T5560] kvm [5560]: Failed to find VMA for hva 0x20c79000 [ 373.747082][ T5723] Injecting memory failure for pfn 0x474d2 at process virtual address 0x20001000 [ 373.764297][ T5723] Memory failure: 0x474d2: recovery action for clean LRU page: Recovered [ 373.766835][ T5723] Injecting memory failure for pfn 0x47d5e at process virtual address 0x20002000 [ 373.771198][ T5723] Memory failure: 0x47d5e: recovery action for clean LRU page: Recovered [ 373.772782][ T5723] Injecting memory failure for pfn 0x474df at process virtual address 0x20003000 [ 373.777362][ T5723] Memory failure: 0x474df: recovery action for clean LRU page: Recovered [ 376.670694][ T5739] fuse: Bad value for 'fd' [ 378.983136][ T5756] syzkaller0: entered promiscuous mode [ 378.983470][ T5756] syzkaller0: entered allmulticast mode [ 379.179050][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 379.225046][ T5758] hsr_slave_1 (unregistering): left promiscuous mode [ 379.471084][ T5764] fuse: Bad value for 'fd' [ 382.197863][ T5783] fuse: Bad value for 'fd' [ 382.278911][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 388.109756][ T5831] fuse: Bad value for 'fd' [ 389.530883][ T5848] device-mapper: ioctl: Invalid ioctl structure: name rÊÏ, dev 6668851739e45441 [ 392.549729][ T5881] syzkaller1: entered promiscuous mode [ 392.551037][ T5881] syzkaller1: entered allmulticast mode [ 403.967741][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 404.316593][ T5964] ======================================================= [ 404.316593][ T5964] WARNING: The mand mount option has been deprecated and [ 404.316593][ T5964] and is ignored by this kernel. Remove the mand [ 404.316593][ T5964] option from the mount to silence this warning. [ 404.316593][ T5964] ======================================================= [ 404.984919][ T5973] ip_tables: iptables: counters copy to user failed while replacing table [ 405.062453][ T5975] ip_tables: iptables: counters copy to user failed while replacing table [ 414.860808][ T6075] netlink: 3 bytes leftover after parsing attributes in process `syz.0.992'. [ 418.363346][ T6117] netlink: 'syz.1.1010': attribute type 3 has an invalid length. [ 420.937965][ T6140] kvm [6140]: Failed to find VMA for hva 0x20c79000 [ 421.669106][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 430.611960][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.629886][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.507073][ T6181] hsr_slave_0: entered promiscuous mode [ 431.511994][ T6181] hsr_slave_1: entered promiscuous mode [ 431.517401][ T6181] debugfs: 'hsr0' already exists in 'hsr' [ 431.519473][ T6181] Cannot create hsr debugfs directory [ 432.389570][ T6181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 432.412020][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.418536][ T6181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 432.433157][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.440500][ T6181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.457200][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.464559][ T6181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.484061][ T6181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.173480][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.624692][ T6181] veth0_vlan: entered promiscuous mode [ 435.665875][ T6181] veth1_vlan: entered promiscuous mode [ 435.793020][ T6181] veth0_macvtap: entered promiscuous mode [ 435.814022][ T6181] veth1_macvtap: entered promiscuous mode [ 435.940447][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.944930][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.977331][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.007197][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.504114][ T6281] ucma_write: process 1020 (syz.0.1043) changed security contexts after opening file descriptor, this is not allowed. [ 442.987502][ T6346] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 443.603813][ T6359] device-mapper: table: 248:0: zero-length target [ 443.613344][ T6359] device-mapper: ioctl: error adding target to table [ 444.374058][ T6364] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 445.421597][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1071'. [ 447.036858][ T2697] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.037221][ T2697] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.037522][ T2697] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.037717][ T2697] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.807061][ T6390] netlink: 'syz.1.1078': attribute type 9 has an invalid length. [ 453.598582][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 454.206893][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1094'. [ 454.262779][ T6432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1094'. [ 459.678532][ T803] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 459.687979][ T803] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.059583][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 464.348428][ T6507] syzkaller0: entered promiscuous mode [ 464.348759][ T6507] syzkaller0: entered allmulticast mode [ 464.692447][ T6512] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.1127'. [ 469.414485][ T6544] FAULT_INJECTION: forcing a failure. [ 469.414485][ T6544] name fail_futex, interval 1, probability 0, space 0, times 1 [ 469.414895][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.0.1140 Tainted: G W syzkaller #0 PREEMPT [ 469.415018][ T6544] Tainted: [W]=WARN [ 469.415052][ T6544] Hardware name: linux,dummy-virt (DT) [ 469.415090][ T6544] Call trace: [ 469.415118][ T6544] show_stack+0x18/0x24 (C) [ 469.415222][ T6544] dump_stack_lvl+0x60/0x80 [ 469.415323][ T6544] dump_stack+0x18/0x24 [ 469.415444][ T6544] should_fail_ex+0x1e0/0x238 [ 469.415585][ T6544] should_fail+0x14/0x40 [ 469.415690][ T6544] get_futex_key+0xdc/0x620 [ 469.415792][ T6544] futex_wake+0x68/0x240 [ 469.415871][ T6544] do_futex+0x178/0x210 [ 469.415943][ T6544] __arm64_sys_futex+0x100/0x1a0 [ 469.416018][ T6544] invoke_syscall+0x54/0x10c [ 469.416111][ T6544] el0_svc_common.constprop.0+0x40/0xe0 [ 469.416279][ T6544] do_el0_svc+0x1c/0x34 [ 469.416374][ T6544] el0_svc+0x38/0x1fc [ 469.416477][ T6544] el0t_64_sync_handler+0xa0/0xe4 [ 469.416558][ T6544] el0t_64_sync+0x1a4/0x1a8 [ 470.660760][ T6563] nvmet: Invalid value 'tc' for trtype [ 470.661273][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 474.970794][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 475.796263][ T6623] tap0: tun_chr_ioctl cmd 2147767521 [ 483.163827][ T6787] binder: 6786:6787 tried to acquire reference to desc 0, got 1 instead [ 483.169814][ T6787] binder: 6786:6787 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 483.171110][ T6787] binder: 6787 RLIMIT_NICE not set [ 483.172906][ T6787] binder: 6787 RLIMIT_NICE not set [ 483.182638][ T803] binder: release 6786:6787 transaction 13 out, still active [ 483.183008][ T803] binder: undelivered TRANSACTION_COMPLETE [ 483.190673][ T804] binder: release 6786:6787 transaction 13 in, still active [ 483.191106][ T804] binder: send failed reply for transaction 13, target dead [ 483.260590][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.262085][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.091916][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 485.569177][ T6863] binder: 6862:6863 tried to acquire reference to desc 0, got 1 instead [ 485.570742][ T6863] binder: 6862:6863 got transaction to invalid handle, 3 [ 485.573143][ T6863] binder: 6862:6863 cannot find target node [ 485.573645][ T6863] binder: 6862:6863 transaction async to 0:0 failed 18/29201/-22, code 0 size 0-0 line 3252 [ 485.582049][ T804] binder: undelivered TRANSACTION_ERROR: 29201 [ 493.876285][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 494.038627][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 494.043547][ T9] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.043875][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 494.044043][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.059620][ T9] usb 1-1: config 0 descriptor?? [ 494.533734][ T9] hid-generic 0003:046D:C70E.0005: unknown main item tag 0x1 [ 494.535271][ T9] hid-generic 0003:046D:C70E.0005: ignoring exceeding usage max [ 494.558008][ T9] hid-generic 0003:046D:C70E.0005: hidraw0: USB HID v0.01 Device [HID 046d:c70e] on usb-dummy_hcd.0-1/input0 [ 494.710530][ T9] usb 1-1: USB disconnect, device number 21 [ 498.234115][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.263551][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.594055][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.629598][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.678037][ T6325] bond0 (unregistering): Released all slaves [ 498.894484][ T6325] hsr_slave_0: left promiscuous mode [ 499.443162][ T7075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1352'. [ 499.596523][ T7078] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1353'. [ 500.691236][ T3221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.610501][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.628825][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.063746][ T3221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.565189][ T7039] hsr_slave_0: entered promiscuous mode [ 502.569576][ T7039] hsr_slave_1: entered promiscuous mode [ 502.571872][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 502.572521][ T7039] Cannot create hsr debugfs directory [ 503.642059][ T7039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.669506][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.674860][ T7039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.692093][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.699507][ T7039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.714659][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.722064][ T7039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.743922][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.541076][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.542534][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.717539][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.075331][ T7039] veth0_vlan: entered promiscuous mode [ 507.100031][ T7039] veth1_vlan: entered promiscuous mode [ 507.183644][ T7039] veth0_macvtap: entered promiscuous mode [ 507.201481][ T7039] veth1_macvtap: entered promiscuous mode [ 507.386746][ T6326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.396507][ T6323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.397709][ T6323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.398880][ T6323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.743455][ T7218] netlink: 'syz.1.1370': attribute type 5 has an invalid length. [ 507.932147][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 508.428833][ T7235] device-mapper: ioctl: Unable to rename non-existent device, to j [ 508.845035][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 509.100277][ T7244] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 509.542014][ T7252] binder: 7251:7252 tried to acquire reference to desc 0, got 1 instead [ 509.547358][ T7252] binder: 7251:7252 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 509.549244][ T7252] binder: 7252 RLIMIT_NICE not set [ 509.552663][ T9] binder: release 7251:7252 transaction 23 out, still active [ 509.553902][ T9] binder: undelivered TRANSACTION_COMPLETE [ 509.568232][ T9] binder: send failed reply for transaction 23, target dead [ 510.107352][ T803] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 510.260615][ T803] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.272851][ T803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.273416][ T803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.294155][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.294496][ T803] usb 1-1: Product: syz [ 510.294739][ T803] usb 1-1: Manufacturer: syz [ 510.294798][ T803] usb 1-1: SerialNumber: syz [ 510.350291][ T803] usb 1-1: 0:2 : does not exist [ 510.351560][ T803] usb 1-1: unit 0 not found! [ 510.532104][ T803] usb 1-1: USB disconnect, device number 22 [ 510.661468][ T6451] udevd[6451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.813977][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.818423][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.897050][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.900802][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.108605][ T7324] netlink: 'syz.0.1418': attribute type 4 has an invalid length. [ 514.308867][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'. [ 515.725317][ T7355] FAULT_INJECTION: forcing a failure. [ 515.725317][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 515.726104][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.0.1432 Tainted: G W L syzkaller #0 PREEMPT [ 515.726230][ T7355] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 515.726273][ T7355] Hardware name: linux,dummy-virt (DT) [ 515.726363][ T7355] Call trace: [ 515.726487][ T7355] show_stack+0x18/0x24 (C) [ 515.726600][ T7355] dump_stack_lvl+0x60/0x80 [ 515.726707][ T7355] dump_stack+0x18/0x24 [ 515.726786][ T7355] should_fail_ex+0x1e0/0x238 [ 515.726905][ T7355] should_failslab+0x54/0x80 [ 515.726999][ T7355] __kmalloc_noprof+0xac/0x520 [ 515.727091][ T7355] udpv6_init_sock+0x64/0x11c [ 515.727173][ T7355] inet6_create+0x368/0x520 [ 515.727249][ T7355] __sock_create+0x130/0x260 [ 515.727331][ T7355] __sys_socket+0xa0/0x140 [ 515.727445][ T7355] __arm64_sys_socket+0x1c/0x38 [ 515.727543][ T7355] invoke_syscall+0x54/0x10c [ 515.727636][ T7355] el0_svc_common.constprop.0+0x40/0xe0 [ 515.727711][ T7355] do_el0_svc+0x1c/0x34 [ 515.727798][ T7355] el0_svc+0x38/0x1fc [ 515.727881][ T7355] el0t_64_sync_handler+0xa0/0xe4 [ 515.727977][ T7355] el0t_64_sync+0x1a4/0x1a8 [ 516.387985][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 517.406624][ T6271] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 517.569028][ T6271] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 517.580214][ T6271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.580658][ T6271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.580729][ T6271] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 517.580793][ T6271] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 517.611860][ T6271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.612263][ T6271] usb 1-1: Product: syz [ 517.614855][ T6271] usb 1-1: Manufacturer: syz [ 517.614976][ T6271] usb 1-1: SerialNumber: syz [ 517.651472][ T6271] oti6858 1-1:1.0: required endpoints missing [ 517.841299][ T9] usb 1-1: USB disconnect, device number 23 [ 518.456794][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.458655][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.369450][ T7404] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1453'. [ 519.434087][ T7406] input: syz1 as /devices/virtual/input/input7 [ 520.604100][ T7418] syz.0.1459(7418): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 520.933031][ T7421] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1458'. [ 520.976202][ T803] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 521.132914][ T803] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.144922][ T803] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.145140][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 521.168474][ T803] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.168789][ T803] usb 1-1: Product: syz [ 521.170410][ T803] usb 1-1: Manufacturer: syz [ 521.170767][ T803] usb 1-1: SerialNumber: syz [ 521.198907][ T803] usb 1-1: config 0 descriptor?? [ 521.223595][ T803] usb 1-1: selecting invalid altsetting 0 [ 521.610156][ T7436] lo: Caught tx_queue_len zero misconfig [ 521.769107][ T803] usb 1-1: USB disconnect, device number 24 [ 521.834722][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.838262][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.574404][ T7481] binder: 7480:7481 tried to acquire reference to desc 0, got 1 instead [ 525.579897][ T9] binder: release 7480:7481 transaction 28 out, still active [ 525.580610][ T9] binder: undelivered TRANSACTION_COMPLETE [ 525.588934][ T9] binder: send failed reply for transaction 28, target dead [ 527.847319][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.848723][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.969854][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 528.211688][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.214653][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.369705][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 528.844215][ T7555] syz.0.1520 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 535.092407][ T7636] binder: 7630:7636 Acquire 1 refcount change on invalid ref 0 ret -22 [ 535.092831][ T7636] binder: 7630:7636 got transaction to invalid handle, 3 [ 535.092895][ T7636] binder: 7630:7636 cannot find target node [ 535.093048][ T7636] binder: 7630:7636 transaction call to 0:0 failed 29/29201/-22, code 0 size 0-0 line 3252 [ 535.426737][ T803] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 535.578725][ T803] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 535.584946][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 535.585322][ T803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.586018][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.596245][ T803] usb 1-1: config 0 descriptor?? [ 536.030693][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031099][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031459][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031542][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031615][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031686][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031760][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031832][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031907][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.031979][ T803] hid-generic 0003:056A:0331.0006: unknown main item tag 0x0 [ 536.032118][ T803] hid-generic 0003:056A:0331.0006: unbalanced collection at end of report description [ 536.033293][ T803] hid-generic 0003:056A:0331.0006: probe with driver hid-generic failed with error -22 [ 536.228113][ T11] usb 1-1: USB disconnect, device number 25 [ 536.666649][ T11] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 536.852574][ T11] usb 1-1: not running at top speed; connect to a high speed hub [ 536.852938][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 536.860664][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.861031][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 536.861632][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.107057][ T3441] usb 1-1: USB disconnect, device number 26 [ 537.163726][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 537.642561][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 542.948953][ T28] audit: type=1326 audit(542.840:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7749 comm="syz.0.1605" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b792a8 code=0x0 [ 543.303154][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.311886][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.916754][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 547.927322][ T7787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 548.069663][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 548.079851][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.088754][ T9] usb 1-1: config 0 descriptor?? [ 548.302201][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 548.540915][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 548.541306][ T9] [drm] Initialized udl on minor 2 [ 548.709182][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.721665][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 548.753686][ T9] usb 1-1: USB disconnect, device number 27 [ 549.838134][ T7810] syzkaller0: entered promiscuous mode [ 549.838489][ T7810] syzkaller0: entered allmulticast mode [ 550.386284][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 550.559889][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.565111][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.568517][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 550.569052][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.593824][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.594243][ T9] usb 1-1: Product: syz [ 550.594302][ T9] usb 1-1: Manufacturer: syz [ 550.594351][ T9] usb 1-1: SerialNumber: syz [ 550.925139][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 551.170670][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.174419][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.688872][ T9] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 551.717275][ T9] cdc_ncm 1-1:1.0: bind() failure [ 551.733667][ T7840] binder: 7839:7840 ioctl c0306201 20000080 returned -14 [ 551.773488][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 551.773887][ T9] cdc_ncm 1-1:1.1: bind() failure [ 551.861160][ T9] usb 1-1: USB disconnect, device number 28 [ 552.664233][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 552.838120][ T7867] lo: entered promiscuous mode [ 552.838389][ T7867] lo: entered allmulticast mode [ 552.886444][ T7867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1656'. [ 552.889774][ T7867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.206300][ T3448] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 554.366411][ T3448] usb 1-1: Using ep0 maxpacket: 16 [ 554.371607][ T3448] usb 1-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=f7.c8 [ 554.385990][ T3448] usb 1-1: config 4 has an invalid interface number: 245 but max is 0 [ 554.386295][ T3448] usb 1-1: config 4 has no interface number 0 [ 554.386471][ T3448] usb 1-1: config 4 interface 245 altsetting 192 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 554.386605][ T3448] usb 1-1: config 4 interface 245 altsetting 192 endpoint 0x8 has invalid wMaxPacketSize 0 [ 554.386692][ T3448] usb 1-1: config 4 interface 245 has no altsetting 0 [ 554.408241][ T3448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.408544][ T3448] usb 1-1: Product: syz [ 554.408792][ T3448] usb 1-1: Manufacturer: syz [ 554.408862][ T3448] usb 1-1: SerialNumber: syz [ 554.661544][ T3448] appledisplay 1-1:4.245: Could not find int-in endpoint [ 554.663774][ T3448] usbhid 1-1:4.245: couldn't find an input interrupt endpoint [ 554.720681][ T3448] usb 1-1: USB disconnect, device number 29 [ 556.447935][ T7937] tap0: tun_chr_ioctl cmd 1074025694 [ 557.387543][ T7961] bridge_slave_0: entered promiscuous mode [ 557.387879][ T7961] bridge_slave_0: entered allmulticast mode [ 569.702157][ T8052] FAULT_INJECTION: forcing a failure. [ 569.702157][ T8052] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 569.727086][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.1.1744 Tainted: G W L syzkaller #0 PREEMPT [ 569.727283][ T8052] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 569.727327][ T8052] Hardware name: linux,dummy-virt (DT) [ 569.727370][ T8052] Call trace: [ 569.727405][ T8052] show_stack+0x18/0x24 (C) [ 569.727551][ T8052] dump_stack_lvl+0x60/0x80 [ 569.727632][ T8052] dump_stack+0x18/0x24 [ 569.727706][ T8052] should_fail_ex+0x1e0/0x238 [ 569.727787][ T8052] should_fail_alloc_page+0x60/0x80 [ 569.727867][ T8052] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 569.727948][ T8052] alloc_pages_mpol+0x74/0x1b8 [ 569.728022][ T8052] folio_alloc_mpol_noprof+0x14/0x68 [ 569.728095][ T8052] vma_alloc_folio_noprof+0x80/0xcc [ 569.728168][ T8052] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 569.728243][ T8052] do_wp_page+0x324/0x11e0 [ 569.728333][ T8052] __handle_mm_fault+0x9e8/0xec0 [ 569.728423][ T8052] handle_mm_fault+0x98/0x338 [ 569.728507][ T8052] do_page_fault+0x23c/0x77c [ 569.728579][ T8052] do_mem_abort+0x40/0x90 [ 569.728649][ T8052] el1_abort+0x44/0x64 [ 569.728731][ T8052] el1h_64_sync_handler+0x50/0xac [ 569.728814][ T8052] el1h_64_sync+0x6c/0x70 [ 569.729032][ T8052] __arch_copy_to_user+0x1c/0x240 (P) [ 569.729120][ T8052] copy_page_to_iter+0x104/0x160 [ 569.729202][ T8052] process_vm_rw_core.constprop.0+0x220/0x3c8 [ 569.729288][ T8052] process_vm_rw+0x148/0x178 [ 569.729362][ T8052] __arm64_sys_process_vm_readv+0x24/0x30 [ 569.729448][ T8052] invoke_syscall+0x54/0x10c [ 569.729522][ T8052] el0_svc_common.constprop.0+0x40/0xe0 [ 569.729596][ T8052] do_el0_svc+0x1c/0x34 [ 569.729668][ T8052] el0_svc+0x38/0x1fc [ 569.729742][ T8052] el0t_64_sync_handler+0xa0/0xe4 [ 569.729822][ T8052] el0t_64_sync+0x1a4/0x1a8 [ 574.086705][ T3441] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 574.241059][ T3441] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.249870][ T3441] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.250200][ T3441] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 574.250523][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.267160][ T8080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 574.292480][ T3441] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.497551][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.498922][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.820731][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.821652][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.032092][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.033522][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.755174][ T8100] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 576.015240][ T11] usb 1-1: USB disconnect, device number 30 [ 576.157815][ T8106] netlink: 'syz.1.1768': attribute type 4 has an invalid length. [ 576.830062][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 576.844973][ T11] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 577.016395][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 577.021411][ T11] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.041217][ T11] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 577.041711][ T11] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.042006][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.052679][ T8129] veth2: entered promiscuous mode [ 577.054120][ T8129] veth2: entered allmulticast mode [ 577.087741][ T11] usbtmc 1-1:16.0: bulk endpoints not found [ 578.550361][ T28] audit: type=1326 audit(578.440:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.1.1784" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x0 [ 581.216524][ T8144] syzkaller0: entered promiscuous mode [ 581.218086][ T8144] syzkaller0: entered allmulticast mode [ 581.557343][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.559200][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.268263][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.269812][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.662878][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.671505][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.895396][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.900577][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.813468][ T8159] team_slave_1: Caught tx_queue_len zero misconfig [ 585.088749][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1793'. [ 585.184520][ T28] audit: type=1326 audit(585.070:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.188746][ T28] audit: type=1326 audit(585.070:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.191800][ T28] audit: type=1326 audit(585.080:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.194148][ T28] audit: type=1326 audit(585.080:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.197070][ T28] audit: type=1326 audit(585.080:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.199862][ T28] audit: type=1326 audit(585.070:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.200212][ T28] audit: type=1326 audit(585.080:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 585.200409][ T28] audit: type=1326 audit(585.080:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8165 comm="syz.1.1794" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8d5792a8 code=0x7ffc0000 [ 591.442394][ T3441] usb 1-1: USB disconnect, device number 31 [ 593.106549][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 599.034869][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 599.335062][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 601.489363][ T8321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 602.703213][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 604.373217][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 606.316409][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1873'. [ 606.388713][ T8386] syzkaller0: entered promiscuous mode [ 606.389139][ T8386] syzkaller0: entered allmulticast mode [ 607.852217][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 608.272101][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 608.342274][ T8411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.752421][ T8420] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 608.772333][ T8420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 609.683101][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 611.994546][ C0] vcan0: j1939_tp_rxtimer: 0x00000000800ff2c6: rx timeout, send abort [ 612.495496][ C0] vcan0: j1939_tp_rxtimer: 0x00000000800ff2c6: abort rx timeout. Force session deactivation [ 612.498334][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e958843: rx timeout, send abort [ 612.620936][ T8468] syzkaller0: entered promiscuous mode [ 612.622059][ T8468] syzkaller0: entered allmulticast mode [ 612.998869][ C0] vcan0: j1939_tp_rxtimer: 0x000000004e958843: abort rx timeout. Force session deactivation [ 613.874978][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 614.510658][ T8500] syzkaller0: entered promiscuous mode [ 614.510987][ T8500] syzkaller0: entered allmulticast mode [ 618.449657][ T8576] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 620.126582][ T8599] syzkaller0: entered promiscuous mode [ 620.126816][ T8599] syzkaller0: entered allmulticast mode [ 620.426710][ T8603] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1954'. [ 620.579246][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 621.288227][ T8620] syzkaller0: entered promiscuous mode [ 621.288524][ T8620] syzkaller0: entered allmulticast mode [ 622.177267][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 623.069395][ T8644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1974'. [ 632.792348][ T8707] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2001'. [ 641.604918][ T8847] sch_fq: defrate 2 ignored. [ 641.610378][ T8847] syzkaller0: entered promiscuous mode [ 641.611267][ T8847] syzkaller0: entered allmulticast mode [ 641.713338][ T8844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2052'. [ 642.311239][ T8861] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.672612][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2060'. [ 643.497021][ T8871] netlink: 'syz.0.2063': attribute type 16 has an invalid length. [ 643.497333][ T8871] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2063'. [ 645.281293][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'. [ 645.542630][ T8905] syzkaller0: entered promiscuous mode [ 645.544295][ T8905] syzkaller0: entered allmulticast mode [ 647.622633][ T8923] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 648.453952][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2086'. [ 656.551437][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2101'. [ 659.003271][ T9006] syzkaller0: entered promiscuous mode [ 659.003606][ T9006] syzkaller0: entered allmulticast mode [ 659.360210][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2116'. [ 661.351105][ T9054] syzkaller0: entered promiscuous mode [ 661.352844][ T9054] syzkaller0: entered allmulticast mode [ 664.262610][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 664.618619][ T9076] syzkaller0: entered promiscuous mode [ 664.618979][ T9076] syzkaller0: entered allmulticast mode [ 669.937282][ T28] audit: type=1326 audit(669.820:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9118 comm="syz.1.2151" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5792a8 code=0x0 [ 670.997185][ T9123] FAULT_INJECTION: forcing a failure. [ 670.997185][ T9123] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.997444][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.0.2152 Tainted: G W L syzkaller #0 PREEMPT [ 670.997519][ T9123] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 670.997544][ T9123] Hardware name: linux,dummy-virt (DT) [ 670.997568][ T9123] Call trace: [ 670.997585][ T9123] show_stack+0x18/0x24 (C) [ 670.997644][ T9123] dump_stack_lvl+0x60/0x80 [ 670.997692][ T9123] dump_stack+0x18/0x24 [ 670.997774][ T9123] should_fail_ex+0x1e0/0x238 [ 670.997841][ T9123] should_fail+0x14/0x40 [ 670.997915][ T9123] get_futex_key+0xdc/0x620 [ 670.997994][ T9123] futex_wake+0x68/0x240 [ 670.998109][ T9123] do_futex+0x178/0x210 [ 670.998221][ T9123] __arm64_sys_futex+0x100/0x1a0 [ 670.998302][ T9123] invoke_syscall+0x54/0x10c [ 670.998345][ T9123] el0_svc_common.constprop.0+0x40/0xe0 [ 670.998385][ T9123] do_el0_svc+0x1c/0x34 [ 670.998445][ T9123] el0_svc+0x38/0x1fc [ 670.998492][ T9123] el0t_64_sync_handler+0xa0/0xe4 [ 670.998560][ T9123] el0t_64_sync+0x1a4/0x1a8 [ 671.780217][ T9129] FAULT_INJECTION: forcing a failure. [ 671.780217][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 671.780438][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.0.2155 Tainted: G W L syzkaller #0 PREEMPT [ 671.780506][ T9129] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 671.780526][ T9129] Hardware name: linux,dummy-virt (DT) [ 671.780547][ T9129] Call trace: [ 671.780564][ T9129] show_stack+0x18/0x24 (C) [ 671.780620][ T9129] dump_stack_lvl+0x60/0x80 [ 671.780658][ T9129] dump_stack+0x18/0x24 [ 671.780703][ T9129] should_fail_ex+0x1e0/0x238 [ 671.780743][ T9129] should_failslab+0x54/0x80 [ 671.780780][ T9129] __kmalloc_cache_noprof+0x58/0x470 [ 671.780842][ T9129] do_kimage_alloc_init+0x20/0x6c [ 671.780918][ T9129] do_kexec_load+0x6c/0x2ec [ 671.780958][ T9129] __arm64_sys_kexec_load+0x98/0xe4 [ 671.780998][ T9129] invoke_syscall+0x54/0x10c [ 671.781047][ T9129] el0_svc_common.constprop.0+0x40/0xe0 [ 671.781122][ T9129] do_el0_svc+0x1c/0x34 [ 671.781168][ T9129] el0_svc+0x38/0x1fc [ 671.781213][ T9129] el0t_64_sync_handler+0xa0/0xe4 [ 671.781252][ T9129] el0t_64_sync+0x1a4/0x1a8 [ 671.898919][ T9131] FAULT_INJECTION: forcing a failure. [ 671.898919][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 671.899297][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.0.2156 Tainted: G W L syzkaller #0 PREEMPT [ 671.899440][ T9131] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 671.899482][ T9131] Hardware name: linux,dummy-virt (DT) [ 671.899522][ T9131] Call trace: [ 671.899555][ T9131] show_stack+0x18/0x24 (C) [ 671.899922][ T9131] dump_stack_lvl+0x60/0x80 [ 671.900128][ T9131] dump_stack+0x18/0x24 [ 671.900297][ T9131] should_fail_ex+0x1e0/0x238 [ 671.900589][ T9131] should_failslab+0x54/0x80 [ 671.900907][ T9131] kmem_cache_alloc_noprof+0x54/0x458 [ 671.901059][ T9131] security_inode_alloc+0x30/0x1a0 [ 671.901195][ T9131] inode_init_always_gfp+0x174/0x254 [ 671.901330][ T9131] alloc_inode+0x40/0xdc [ 671.901563][ T9131] new_inode+0x14/0x88 [ 671.901779][ T9131] proc_pid_make_inode+0x20/0xac [ 671.902003][ T9131] proc_fd_instantiate+0x2c/0xcc [ 671.902215][ T9131] proc_lookupfd+0x7c/0x140 [ 671.902373][ T9131] lookup_open+0x300/0x748 [ 671.902541][ T9131] path_openat+0x55c/0x960 [ 671.902700][ T9131] do_file_open+0xb0/0x168 [ 671.902984][ T9131] do_sys_openat2+0x84/0x104 [ 671.903198][ T9131] __arm64_sys_openat+0x64/0xc0 [ 671.903278][ T9131] invoke_syscall+0x54/0x10c [ 671.903350][ T9131] el0_svc_common.constprop.0+0x40/0xe0 [ 671.903444][ T9131] do_el0_svc+0x1c/0x34 [ 671.903520][ T9131] el0_svc+0x38/0x1fc [ 671.903603][ T9131] el0t_64_sync_handler+0xa0/0xe4 [ 671.903756][ T9131] el0t_64_sync+0x1a4/0x1a8 [ 675.287623][ T9193] FAULT_INJECTION: forcing a failure. [ 675.287623][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 675.289503][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.0.2180 Tainted: G W L syzkaller #0 PREEMPT [ 675.289653][ T9193] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 675.289694][ T9193] Hardware name: linux,dummy-virt (DT) [ 675.289734][ T9193] Call trace: [ 675.289778][ T9193] show_stack+0x18/0x24 (C) [ 675.289883][ T9193] dump_stack_lvl+0x60/0x80 [ 675.289959][ T9193] dump_stack+0x18/0x24 [ 675.290028][ T9193] should_fail_ex+0x1e0/0x238 [ 675.290147][ T9193] should_failslab+0x54/0x80 [ 675.290224][ T9193] __kmalloc_cache_noprof+0x58/0x470 [ 675.290303][ T9193] landlock_create_ruleset+0x60/0x134 [ 675.290375][ T9193] __arm64_sys_landlock_create_ruleset+0x14c/0x278 [ 675.290445][ T9193] invoke_syscall+0x54/0x10c [ 675.290514][ T9193] el0_svc_common.constprop.0+0x40/0xe0 [ 675.290581][ T9193] do_el0_svc+0x1c/0x34 [ 675.290649][ T9193] el0_svc+0x38/0x1fc [ 675.290728][ T9193] el0t_64_sync_handler+0xa0/0xe4 [ 675.290808][ T9193] el0t_64_sync+0x1a4/0x1a8 [ 676.591683][ T9206] FAULT_INJECTION: forcing a failure. [ 676.591683][ T9206] name fail_futex, interval 1, probability 0, space 0, times 0 [ 676.598708][ T9206] CPU: 1 UID: 0 PID: 9206 Comm: syz.0.2186 Tainted: G W L syzkaller #0 PREEMPT [ 676.598887][ T9206] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 676.598927][ T9206] Hardware name: linux,dummy-virt (DT) [ 676.598965][ T9206] Call trace: [ 676.598997][ T9206] show_stack+0x18/0x24 (C) [ 676.599104][ T9206] dump_stack_lvl+0x60/0x80 [ 676.599174][ T9206] dump_stack+0x18/0x24 [ 676.599247][ T9206] should_fail_ex+0x1e0/0x238 [ 676.599328][ T9206] should_fail+0x14/0x40 [ 676.599398][ T9206] get_futex_key+0xdc/0x620 [ 676.599506][ T9206] futex_wait_setup+0x54/0x240 [ 676.599581][ T9206] __futex_wait+0xd4/0x180 [ 676.599659][ T9206] futex_wait+0x88/0x110 [ 676.599730][ T9206] do_futex+0x1a0/0x210 [ 676.599800][ T9206] __arm64_sys_futex+0x100/0x1a0 [ 676.599883][ T9206] invoke_syscall+0x54/0x10c [ 676.599959][ T9206] el0_svc_common.constprop.0+0x40/0xe0 [ 676.600033][ T9206] do_el0_svc+0x1c/0x34 [ 676.600104][ T9206] el0_svc+0x38/0x1fc [ 676.600188][ T9206] el0t_64_sync_handler+0xa0/0xe4 [ 676.600263][ T9206] el0t_64_sync+0x1a4/0x1a8 [ 685.717650][ T9263] gadgetfs: bound to dummy_udc driver [ 686.238255][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 686.244218][ C0] gadgetfs: connected [ 686.287658][ T9] gadgetfs: disconnected [ 686.638715][ C0] gadgetfs: connected [ 686.736694][ T9260] gadgetfs: suspended from state 3 [ 686.737782][ T9260] gadgetfs: disconnected [ 686.837178][ T9] usb 1-1: New USB device found, idVendor=8000, idProduct=0000, bcdDevice= 0.00 [ 686.847747][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 686.848082][ T9] usb 1-1: can't read configurations, error -71 [ 687.441220][ T6325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.562934][ T6325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.731311][ T6325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.853591][ T6325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.051854][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.099851][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.139602][ T6325] bond0 (unregistering): Released all slaves [ 689.155022][ T6325] bond1 (unregistering): Released all slaves [ 689.600199][ T6325] hsr_slave_0: left promiscuous mode [ 689.614024][ T6325] hsr_slave_1: left promiscuous mode [ 689.638892][ T6325] veth1_macvtap: left promiscuous mode [ 689.640082][ T6325] veth0_macvtap: left promiscuous mode [ 691.492401][ T3221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 693.073223][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.104920][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.409813][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d499c7de: rx timeout, send abort [ 694.463051][ T3221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 694.800560][ T9267] hsr_slave_0: entered promiscuous mode [ 694.806686][ T9267] hsr_slave_1: entered promiscuous mode [ 694.811132][ T9267] debugfs: 'hsr0' already exists in 'hsr' [ 694.812519][ T9267] Cannot create hsr debugfs directory [ 694.910334][ C1] vcan0: j1939_tp_rxtimer: 0x0000000033446306: rx timeout, send abort [ 694.910752][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d499c7de: abort rx timeout. Force session deactivation [ 695.410953][ C1] vcan0: j1939_tp_rxtimer: 0x0000000033446306: abort rx timeout. Force session deactivation [ 695.836877][ T3221] 8021q: adding VLAN 0 to HW filter on device eth3 [ 696.452054][ T9267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.480696][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.499521][ T9267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.518474][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.528773][ T9267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.547483][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.558725][ T9267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.577044][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 697.588680][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.754821][ C1] vcan0: j1939_tp_rxtimer: 0x000000000ecb4de9: rx timeout, send abort [ 699.256058][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aba1f63e: rx timeout, send abort [ 699.256424][ C1] vcan0: j1939_tp_rxtimer: 0x000000000ecb4de9: abort rx timeout. Force session deactivation [ 699.756511][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aba1f63e: abort rx timeout. Force session deactivation [ 700.490290][ T9267] veth0_vlan: entered promiscuous mode [ 700.516769][ T9267] veth1_vlan: entered promiscuous mode [ 700.614592][ T9267] veth0_macvtap: entered promiscuous mode [ 700.633007][ T9267] veth1_macvtap: entered promiscuous mode [ 700.811207][ T6323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.811626][ T6323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.811967][ T6323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.812149][ T6323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.149143][ T9427] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 706.573650][ T9436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2223'. [ 706.591718][ T9436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.678982][ T9531] FAULT_INJECTION: forcing a failure. [ 719.678982][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 719.681097][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.0.2262 Tainted: G W L syzkaller #0 PREEMPT [ 719.681258][ T9531] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 719.681300][ T9531] Hardware name: linux,dummy-virt (DT) [ 719.681340][ T9531] Call trace: [ 719.681374][ T9531] show_stack+0x18/0x24 (C) [ 719.681481][ T9531] dump_stack_lvl+0x60/0x80 [ 719.681554][ T9531] dump_stack+0x18/0x24 [ 719.681670][ T9531] should_fail_ex+0x1e0/0x238 [ 719.681750][ T9531] should_failslab+0x54/0x80 [ 719.681833][ T9531] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 719.681914][ T9531] kmemdup_noprof+0x34/0x60 [ 719.681994][ T9531] key_alloc+0x1ac/0x5a0 [ 719.682061][ T9531] keyring_alloc+0x54/0xb0 [ 719.682127][ T9531] install_session_keyring_to_cred+0xa0/0xd8 [ 719.682200][ T9531] join_session_keyring+0xf8/0x174 [ 719.682303][ T9531] lookup_user_key+0x4f0/0x640 [ 719.682369][ T9531] __arm64_sys_add_key+0xfc/0x21c [ 719.682436][ T9531] invoke_syscall+0x54/0x10c [ 719.682506][ T9531] el0_svc_common.constprop.0+0x40/0xe0 [ 719.682577][ T9531] do_el0_svc+0x1c/0x34 [ 719.682648][ T9531] el0_svc+0x38/0x1fc [ 719.682727][ T9531] el0t_64_sync_handler+0xa0/0xe4 [ 719.682813][ T9531] el0t_64_sync+0x1a4/0x1a8 [ 721.608798][ T9543] FAULT_INJECTION: forcing a failure. [ 721.608798][ T9543] name failslab, interval 1, probability 0, space 0, times 0 [ 721.611572][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.1.2267 Tainted: G W L syzkaller #0 PREEMPT [ 721.611730][ T9543] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 721.611772][ T9543] Hardware name: linux,dummy-virt (DT) [ 721.611811][ T9543] Call trace: [ 721.611854][ T9543] show_stack+0x18/0x24 (C) [ 721.611973][ T9543] dump_stack_lvl+0x60/0x80 [ 721.612051][ T9543] dump_stack+0x18/0x24 [ 721.612125][ T9543] should_fail_ex+0x1e0/0x238 [ 721.612212][ T9543] should_failslab+0x54/0x80 [ 721.612340][ T9543] kmem_cache_alloc_noprof+0x54/0x458 [ 721.612483][ T9543] vm_area_dup+0x24/0x138 [ 721.612575][ T9543] dup_mmap+0x188/0x820 [ 721.612692][ T9543] copy_process+0x1440/0x18a8 [ 721.612819][ T9543] kernel_clone+0x88/0x394 [ 721.612934][ T9543] __do_sys_clone+0x74/0xb0 [ 721.613081][ T9543] __arm64_sys_clone+0x1c/0x28 [ 721.613194][ T9543] invoke_syscall+0x54/0x10c [ 721.613310][ T9543] el0_svc_common.constprop.0+0x40/0xe0 [ 721.613430][ T9543] do_el0_svc+0x1c/0x34 [ 721.613566][ T9543] el0_svc+0x38/0x1fc [ 721.613714][ T9543] el0t_64_sync_handler+0xa0/0xe4 [ 721.613832][ T9543] el0t_64_sync+0x1a4/0x1a8 [ 724.604346][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2275'. [ 725.255311][ T9476] bond0 (unregistering): Released all slaves [ 725.445263][ T9476] hsr_slave_0: left promiscuous mode [ 725.451638][ T9476] hsr_slave_1: left promiscuous mode [ 726.811187][ T9580] usb usb1: usbfs: process 9580 (syz.0.2282) did not claim interface 0 before use [ 728.952834][ T9476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.115042][ T9476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.259554][ T9476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.412039][ T9476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.382920][ T9476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.404294][ T9476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.441404][ T9476] bond0 (unregistering): Released all slaves [ 730.677637][ T9476] hsr_slave_0: left promiscuous mode [ 730.681088][ T9476] hsr_slave_1: left promiscuous mode [ 730.703375][ T9476] veth1_macvtap: left promiscuous mode [ 730.703808][ T9476] veth0_macvtap: left promiscuous mode [ 730.704303][ T9476] veth1_vlan: left promiscuous mode [ 730.704586][ T9476] veth0_vlan: left promiscuous mode [ 733.438108][ T3221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 734.820347][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.837429][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.930977][ T3221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 735.916687][ T9592] hsr_slave_0: entered promiscuous mode [ 735.920814][ T9592] hsr_slave_1: entered promiscuous mode [ 736.247293][ T3221] 8021q: adding VLAN 0 to HW filter on device eth3 [ 736.568050][ T9592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 736.593848][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.601482][ T9592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 736.631729][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.640183][ T9592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 736.661729][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.668657][ T9592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 736.682907][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.781402][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.878043][ T3221] 8021q: adding VLAN 0 to HW filter on device eth4 [ 740.290833][ T9592] veth0_vlan: entered promiscuous mode [ 740.338968][ T9592] veth1_vlan: entered promiscuous mode [ 740.475201][ T9592] veth0_macvtap: entered promiscuous mode [ 740.504201][ T9592] veth1_macvtap: entered promiscuous mode [ 740.658784][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.661579][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.688516][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.688771][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.011574][ T9737] netlink: 'syz.0.2304': attribute type 2 has an invalid length. [ 742.097701][ T9750] nbd2: detected capacity change from 0 to 63 [ 742.104288][ T9750] block nbd2: NBD_DISCONNECT [ 742.109745][ T9750] block nbd2: Disconnected due to user request. [ 742.110902][ T9750] block nbd2: shutting down sockets [ 745.241109][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 745.241447][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 745.241711][ T9771] netlink: 'syz.0.2313': attribute type 14 has an invalid length. [ 745.241833][ T9771] netlink: 'syz.0.2313': attribute type 13 has an invalid length. [ 745.448309][ T9776] Unable to handle kernel paging request at virtual address ffff800083ca5000 [ 745.448731][ T9776] Mem abort info: [ 745.449046][ T9776] ESR = 0x0000000096000047 [ 745.449204][ T9776] EC = 0x25: DABT (current EL), IL = 32 bits [ 745.449339][ T9776] SET = 0, FnV = 0 [ 745.449451][ T9776] EA = 0, S1PTW = 0 [ 745.449577][ T9776] FSC = 0x07: level 3 translation fault [ 745.449702][ T9776] Data abort info: [ 745.449814][ T9776] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 745.449937][ T9776] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 745.450056][ T9776] GCS = 0, Overlay = 0, DirtyBit = 0 [ 745.450278][ T9776] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042c2c000 [ 745.450424][ T9776] [ffff800083ca5000] pgd=100000004315b003, p4d=100000004315c003, pud=100000004315d003, pmd=10000000454a8403, pte=0000000000000000 [ 745.452352][ T9776] Internal error: Oops: 0000000096000047 [#1] SMP [ 745.461766][ T9776] Modules linked in: [ 745.462380][ T9776] CPU: 1 UID: 0 PID: 9776 Comm: syz.2.2315 Tainted: G W L syzkaller #0 PREEMPT [ 745.462956][ T9776] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 745.463301][ T9776] Hardware name: linux,dummy-virt (DT) [ 745.463849][ T9776] pstate: 20402009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 745.464430][ T9776] pc : sys_fillrect+0x3a0/0x800 [ 745.464868][ T9776] lr : drm_fbdev_shmem_defio_fillrect+0x1c/0x3c [ 745.465276][ T9776] sp : ffff8000885d3910 [ 745.465703][ T9776] x29: ffff8000885d3910 x28: f8f000000516ca00 x27: 00000000000000aa [ 745.466425][ T9776] x26: 0000000000000007 x25: 0000000000000000 x24: 000000000000002a [ 745.467024][ T9776] x23: ffff800082f0dfa8 x22: 0000000000000022 x21: 0000000000000088 [ 745.467612][ T9776] x20: f9f0000005160c00 x19: ffff8000885d3950 x18: 0000000000000000 [ 745.468168][ T9776] x17: ffff8000885d3780 x16: 0000000000001000 x15: f3f0000004a8c7e4 [ 745.468805][ T9776] x14: ffffffffffffffff x13: 0000000000000000 x12: 0000000000000001 [ 745.469481][ T9776] x11: 0000000000000002 x10: 0000000000005e80 x9 : 0000000000008000 [ 745.470159][ T9776] x8 : 00000000000000cb x7 : ffff800083ca5000 x6 : 0009000000090000 [ 745.470835][ T9776] x5 : 0000000000000000 x4 : 0000000000000003 x3 : 000000000000017a [ 745.471456][ T9776] x2 : 0000000000000000 x1 : 0000000000000004 x0 : ffff800083ca5000 [ 745.472137][ T9776] Call trace: [ 745.472566][ T9776] sys_fillrect+0x3a0/0x800 (P) [ 745.472968][ T9776] drm_fbdev_shmem_defio_fillrect+0x1c/0x3c [ 745.473567][ T9776] bit_clear+0x58/0x90 [ 745.473954][ T9776] __fbcon_clear+0x1d0/0x218 [ 745.474256][ T9776] fbcon_scroll+0x138/0x168 [ 745.474562][ T9776] con_scroll+0xf0/0x1e0 [ 745.475161][ T9776] csi_ECMA.constprop.0+0x1c4/0xb5c [ 745.475641][ T9776] do_con_write+0xdcc/0x1120 [ 745.478688][ T9776] con_put_char+0x1c/0x28 [ 745.479112][ T9776] tty_put_char+0x20/0x48 [ 745.479527][ T9776] do_output_char+0x74/0x1ac [ 745.479860][ T9776] n_tty_write+0x16c/0x46c [ 745.480179][ T9776] file_tty_write.isra.0+0x11c/0x288 [ 745.480558][ T9776] tty_write+0x14/0x20 [ 745.480858][ T9776] vfs_write+0x244/0x36c [ 745.481175][ T9776] ksys_write+0x70/0x108 [ 745.481502][ T9776] __arm64_sys_write+0x18/0x24 [ 745.481844][ T9776] invoke_syscall+0x54/0x10c [ 745.482187][ T9776] el0_svc_common.constprop.0+0x40/0xe0 [ 745.482617][ T9776] do_el0_svc+0x1c/0x34 [ 745.482939][ T9776] el0_svc+0x38/0x1fc [ 745.483251][ T9776] el0t_64_sync_handler+0xa0/0xe4 [ 745.483629][ T9776] el0t_64_sync+0x1a4/0x1a8 [ 745.484345][ T9776] Code: 8b0000e0 d503201f d503201f d503201f (f9000006) [ 745.485375][ T9776] ---[ end trace 0000000000000000 ]--- [ 745.486495][ T9776] Kernel panic - not syncing: Oops: Fatal exception [ 745.487247][ T9776] SMP: stopping secondary CPUs [ 745.488426][ T9776] Kernel Offset: disabled [ 745.488712][ T9776] CPU features: 0x0,00000000,00d1982f,df188f01,2afff73f [ 745.489196][ T9776] Memory Limit: none [ 745.490067][ T9776] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:17:17 Registers: info registers vcpu 0 CPU#0 PC=ffff8000801a1fc0 X00=ffff800082f7b730 X01=ffff8000800431bc X02=0000000000000000 X03=ffff800082f7b780 X04=ffff800088504000 X05=ffff800082f7b6e0 X06=ffff800088503e40 X07=ffff800088503e80 X08=ffff800082f7b680 X09=0000000000000000 X10=000000ad8a7ec48c X11=0000000000000001 X12=000000000000005a X13=00000000000001c7 X14=0879c5772085b364 X15=0000000000000000 X16=ffff800082f78000 X17=fff07ffffcd05000 X18=0000000000000000 X19=0000000000000003 X20=ffff800082f7b780 X21=0000000000002820 X22=000000006bf49537 X23=000000000000000e X24=0000000000049537 X25=fff000007a695370 X26=fff000007a200000 X27=f0f0000003736100 X28=ffff800082f0af50 X29=ffff800082f7b760 X30=c9ff800080398fd0 SP=ffff800082f7b980 PSTATE=81402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000007325:7325732520465042 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff0f000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffffff00ff:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff0f0f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c0c0c0c0c0c00c00 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff165a32e:0000fffff165a320 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff165a349:0000fffff165a33b Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff164a090:0000fffff164a090 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000fffff164a060 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809da350 X00=ffff800082fa1000 X01=0000000000000002 X02=0000000000000000 X03=ffff800082d384a0 X04=f9f0000003f80880 X05=000000000000003d X06=ffff800082d38570 X07=0000000000000001 X08=f2f000000f01e600 X09=00000000000008a2 X10=000000000000cf48 X11=ffff800082c09338 X12=000000000002f808 X13=ffff8000885d3198 X14=ffff8000885d2fe0 X15=ffff8000885d318d X16=0000000000001000 X17=ffff8000885d3780 X18=00000000ffffffff X19=f5f0000003460028 X20=ffff8000809da308 X21=f9f0000003f80880 X22=f5f000000346002b X23=0000000000000000 X24=0000000000000000 X25=ffff800082bded18 X26=0800000000000000 X27=ffff80008291a000 X28=f2f000000f01e600 X29=ffff8000885d3310 X30=ffff8000809da330 SP=ffff8000885d3310 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000003801000000:0000003801000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000038 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:0000000000000038 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffc2580420 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000