last executing test programs: 13m14.223354215s ago: executing program 0 (id=3476): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) 13m14.066650653s ago: executing program 0 (id=3477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) write(r1, &(0x7f0000000200)="6465776561696e31fc70580c00650a4000000000000545bfcb4af989e600000000", 0xffffff99) 13m11.613144386s ago: executing program 0 (id=3485): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m11.470049512s ago: executing program 0 (id=3486): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 13m11.384223112s ago: executing program 0 (id=3487): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) 13m11.121333812s ago: executing program 0 (id=3488): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x11910da, 0x0) 13m11.121188492s ago: executing program 32 (id=3488): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x11910da, 0x0) 2m13.973648087s ago: executing program 2 (id=5366): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flistxattr(r0, &(0x7f0000000300)=""/41, 0x29) 2m13.913316654s ago: executing program 2 (id=5367): io_uring_setup(0x44da, &(0x7f0000000240)={0x0, 0x1b8a, 0x2, 0x3, 0x28b}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000440), 0x2, 0x0) 2m13.804529617s ago: executing program 2 (id=5368): syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0xffffffffffffff9b, 0x0, 0xfffffffffffffffe}) 2m13.722987997s ago: executing program 2 (id=5369): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') 2m13.633110087s ago: executing program 2 (id=5371): mount(0x0, 0x0, 0x0, 0x8000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000001811fffe8000000000000000008000000000aafe8000000000000000000000000000aa4e1d4e2000189078040000"], 0x0) 2m13.425234651s ago: executing program 2 (id=5374): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 2m13.425105051s ago: executing program 33 (id=5374): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 55.202612504s ago: executing program 3 (id=5708): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da22b4f9d5c3b90400000000000000c279f035580839066668ffce540b5a293e387768570000000000007a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70f4e179109268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800000000000000000000000000000000000000000000000000ffffffffffffff7f00", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22941, 0x2, 0x10}, 0x5a) 55.083790578s ago: executing program 3 (id=5709): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040050) 54.963429212s ago: executing program 3 (id=5710): munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 54.872779042s ago: executing program 3 (id=5711): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 54.730722139s ago: executing program 3 (id=5712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000100001042cbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000007c00128009000100766c616e000000006c0002800c000200000c0001008400"], 0xb0}}, 0x0) 54.340140704s ago: executing program 3 (id=5713): unshare(0xa000400) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x800412f9, &(0x7f0000000100)=0x3) 54.340025294s ago: executing program 34 (id=5713): unshare(0xa000400) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x800412f9, &(0x7f0000000100)=0x3) 1.533788922s ago: executing program 1 (id=5901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="662e0f1f840000000000c348c7c00f0000000f0500"/32, 0x20) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x11, r1, 0x0) rt_sigaction(0xa, &(0x7f0000000500)={&(0x7f0000001000), 0x4000000, &(0x7f000000100b)}, 0x0, 0x8, &(0x7f0000000600)) r2 = getpid() r3 = gettid() tgkill(r2, r3, 0xa) 1.284194742s ago: executing program 4 (id=5902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0123456789abcdef", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="00112233445566778899aabbccddeeff", 0x10}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f0000000600)=""/16, 0x10) 1.03371185s ago: executing program 4 (id=5903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/cpu_core\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/event_source/devices/cpu_atom\x00', 0x0, 0x0) 963.607779ms ago: executing program 4 (id=5904): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 831.872543ms ago: executing program 1 (id=5905): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/format\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/cpu/cpu0\x00', 0x0, 0x0) 284.344307ms ago: executing program 1 (id=5906): madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 202.039267ms ago: executing program 4 (id=5907): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10, &(0x7f0000000200)=""/16, 0x10, &(0x7f0000000300)=""/16, 0x10, &(0x7f0000000400)=""/16}) 201.865887ms ago: executing program 1 (id=5908): nanosleep(&(0x7f0000000000)={0x0, 0x1000000}, 0x0) 91.792689ms ago: executing program 1 (id=5909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu0/cache/index3/subcaches\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='f\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu0/cache/index2/subcaches\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='f\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/cpu1/cache/index3/subcaches\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='f\x00', 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/cpuinfo\x00', 0x0, 0x0) read(r3, &(0x7f0000000800)=""/1024, 0x400) 91.627289ms ago: executing program 4 (id=5910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/nmi_watchdog\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) close(r0) 172.45µs ago: executing program 4 (id=5911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/event_source/devices/uncore_rbox_0/format/xbr_mm_cfg\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/64, 0x40) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) 0s ago: executing program 1 (id=5912): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\x00', 0x4) kernel console output (not intermixed with test programs): NOTIFICATION death notification cookie mismatch 0000000000000003 != 0000000000000000 [ 3919.665952][T17083] batadv_slave_1: entered promiscuous mode [ 3919.854343][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3919.855722][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3921.941834][T17097] block device autoloading is deprecated and will be removed. [ 3921.970817][T17097] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 3921.971006][T17097] device-mapper: block manager: superblock validator check failed for block 0 [ 3921.971108][T17097] device-mapper: thin metadata: couldn't read superblock [ 3922.097407][T17097] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EILSEQ) [ 3922.097755][T17097] device-mapper: ioctl: error adding target to table [ 3922.158411][T17101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 3922.422776][T17107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4307'. [ 3922.847384][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3922.848472][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3922.942324][T17127] netlink: 'syz.1.4315': attribute type 2 has an invalid length. [ 3922.942442][T17127] netlink: 'syz.1.4315': attribute type 1 has an invalid length. [ 3922.942482][T17127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4315'. [ 3922.942573][T17127] netlink: 'syz.1.4315': attribute type 2 has an invalid length. [ 3922.942618][T17127] netlink: 'syz.1.4315': attribute type 1 has an invalid length. [ 3922.942658][T17127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4315'. [ 3922.942813][T17127] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 3923.048473][T17130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.050585][T17130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3923.333938][T17139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3923.335221][T17139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3924.942477][T17191] block nbd2: NBD_DISCONNECT [ 3925.461063][T10456] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 3925.480206][T10456] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3925.796982][T17210] fido_id[17210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3926.098711][T17226] netlink: 'syz.2.4355': attribute type 1 has an invalid length. [ 3926.175383][T17226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3926.236007][T17226] bond2: (slave geneve2): making interface the new active one [ 3926.246723][T17226] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 3926.514496][T16199] input: syz0 as /devices/virtual/misc/uhid/0003:056A:003F.0006/input/input67 [ 3926.543389][T16199] hid-generic 0003:056A:003F.0006: input,hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 3926.925111][T17241] fido_id[17241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3928.216267][T17257] FAULT_INJECTION: forcing a failure. [ 3928.216267][T17257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3928.216408][T17257] CPU: 1 UID: 0 PID: 17257 Comm: syz.1.4368 Tainted: G L syzkaller #0 PREEMPT [ 3928.216462][T17257] Tainted: [L]=SOFTLOCKUP [ 3928.216481][T17257] Hardware name: linux,dummy-virt (DT) [ 3928.216502][T17257] Call trace: [ 3928.216518][T17257] show_stack+0x18/0x24 (C) [ 3928.216617][T17257] dump_stack_lvl+0x60/0x80 [ 3928.216663][T17257] dump_stack+0x18/0x24 [ 3928.216695][T17257] should_fail_ex+0x1e0/0x238 [ 3928.216741][T17257] should_fail+0x14/0x40 [ 3928.216785][T17257] get_futex_key+0xdc/0x620 [ 3928.216858][T17257] futex_wake+0x68/0x240 [ 3928.216942][T17257] do_futex+0x178/0x210 [ 3928.216977][T17257] __arm64_sys_futex+0x100/0x1a0 [ 3928.217010][T17257] invoke_syscall+0x54/0x10c [ 3928.217046][T17257] el0_svc_common.constprop.0+0x40/0xe0 [ 3928.217096][T17257] do_el0_svc+0x1c/0x34 [ 3928.217163][T17257] el0_svc+0x38/0x1fc [ 3928.217209][T17257] el0t_64_sync_handler+0xa0/0xe4 [ 3928.217246][T17257] el0t_64_sync+0x1a4/0x1a8 [ 3928.890895][T17272] autofs4:pid:17272:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 3930.377982][T17283] binder: 17282:17283 Release 1 refcount change on invalid ref 2 ret -22 [ 3930.378403][T17283] binder: 17282:17283 got reply transaction with no transaction stack [ 3930.378740][T17283] binder: 17282:17283 transaction reply to 0:0 failed 11/29201/-71, code 0 size 0-0 line 3156 [ 3930.390352][T10456] binder: undelivered TRANSACTION_ERROR: 29201 [ 3931.058326][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3931.062527][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3931.797482][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3931.798657][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3933.750755][T17310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3933.752095][T17310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3934.740306][T17334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3934.741556][T17334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3934.747110][T17329] nvme_fabrics: no handler found for transport }dma. [ 3937.881513][T17351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3937.882670][T17351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3938.376829][T17353] FAULT_INJECTION: forcing a failure. [ 3938.376829][T17353] name failslab, interval 1, probability 0, space 0, times 0 [ 3938.377006][T17353] CPU: 0 UID: 0 PID: 17353 Comm: syz.1.4407 Tainted: G L syzkaller #0 PREEMPT [ 3938.377098][T17353] Tainted: [L]=SOFTLOCKUP [ 3938.377130][T17353] Hardware name: linux,dummy-virt (DT) [ 3938.377165][T17353] Call trace: [ 3938.377196][T17353] show_stack+0x18/0x24 (C) [ 3938.377289][T17353] dump_stack_lvl+0x60/0x80 [ 3938.377351][T17353] dump_stack+0x18/0x24 [ 3938.377412][T17353] should_fail_ex+0x1e0/0x238 [ 3938.377480][T17353] should_failslab+0x54/0x80 [ 3938.377544][T17353] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 3938.377616][T17353] kmemdup_noprof+0x34/0x60 [ 3938.377685][T17353] setup_ipc_sysctls+0x4c/0x1e8 [ 3938.377753][T17353] copy_ipcs+0x238/0x300 [ 3938.377812][T17353] create_new_namespaces+0xa8/0x370 [ 3938.377883][T17353] unshare_nsproxy_namespaces+0x70/0xbc [ 3938.377951][T17353] ksys_unshare+0x1cc/0x3b8 [ 3938.378013][T17353] __arm64_sys_unshare+0x14/0x24 [ 3938.378075][T17353] invoke_syscall+0x54/0x10c [ 3938.378135][T17353] el0_svc_common.constprop.0+0x40/0xe0 [ 3938.378196][T17353] do_el0_svc+0x1c/0x34 [ 3938.378253][T17353] el0_svc+0x38/0x1fc [ 3938.378318][T17353] el0t_64_sync_handler+0xa0/0xe4 [ 3938.378379][T17353] el0t_64_sync+0x1a4/0x1a8 [ 3938.605317][T17359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3938.606675][T17359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3938.664176][T17361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4411'. [ 3946.028724][T17397] syzkaller0: entered promiscuous mode [ 3946.028841][T17397] syzkaller0: entered allmulticast mode [ 3946.295673][T17405] FAULT_INJECTION: forcing a failure. [ 3946.295673][T17405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3946.295869][T17405] CPU: 0 UID: 0 PID: 17405 Comm: syz.1.4429 Tainted: G L syzkaller #0 PREEMPT [ 3946.295976][T17405] Tainted: [L]=SOFTLOCKUP [ 3946.296013][T17405] Hardware name: linux,dummy-virt (DT) [ 3946.296053][T17405] Call trace: [ 3946.296089][T17405] show_stack+0x18/0x24 (C) [ 3946.296192][T17405] dump_stack_lvl+0x60/0x80 [ 3946.296266][T17405] dump_stack+0x18/0x24 [ 3946.296336][T17405] should_fail_ex+0x1e0/0x238 [ 3946.296417][T17405] should_fail+0x14/0x40 [ 3946.296492][T17405] should_fail_usercopy+0x1c/0x40 [ 3946.296568][T17405] io_uring_setup+0x6ac/0x7ec [ 3946.296650][T17405] __arm64_sys_io_uring_setup+0x60/0xb4 [ 3946.296719][T17405] invoke_syscall+0x54/0x10c [ 3946.296795][T17405] el0_svc_common.constprop.0+0x40/0xe0 [ 3946.296862][T17405] do_el0_svc+0x1c/0x34 [ 3946.296966][T17405] el0_svc+0x38/0x1fc [ 3946.297044][T17405] el0t_64_sync_handler+0xa0/0xe4 [ 3946.297119][T17405] el0t_64_sync+0x1a4/0x1a8 [ 3947.150928][T17422] random: crng reseeded on system resumption [ 3947.157909][T17422] FAULT_INJECTION: forcing a failure. [ 3947.157909][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 3947.158097][T17422] CPU: 0 UID: 0 PID: 17422 Comm: syz.2.4435 Tainted: G L syzkaller #0 PREEMPT [ 3947.158200][T17422] Tainted: [L]=SOFTLOCKUP [ 3947.158239][T17422] Hardware name: linux,dummy-virt (DT) [ 3947.158282][T17422] Call trace: [ 3947.158318][T17422] show_stack+0x18/0x24 (C) [ 3947.158433][T17422] dump_stack_lvl+0x60/0x80 [ 3947.158512][T17422] dump_stack+0x18/0x24 [ 3947.158588][T17422] should_fail_ex+0x1e0/0x238 [ 3947.158670][T17422] should_failslab+0x54/0x80 [ 3947.158754][T17422] __kmalloc_cache_noprof+0x58/0x470 [ 3947.158834][T17422] memory_bm_create+0x100/0x8ec [ 3947.158912][T17422] create_basic_memory_bitmaps+0xd0/0x1dc [ 3947.158989][T17422] snapshot_open+0x104/0x130 [ 3947.159067][T17422] misc_open+0xcc/0x180 [ 3947.159207][T17422] chrdev_open+0xac/0x220 [ 3947.159287][T17422] do_dentry_open+0x128/0x4fc [ 3947.159423][T17422] vfs_open+0x2c/0xe8 [ 3947.159502][T17422] path_openat+0x5b4/0x960 [ 3947.159576][T17422] do_file_open+0xb0/0x168 [ 3947.159653][T17422] do_sys_openat2+0x84/0x104 [ 3947.159738][T17422] __arm64_sys_openat+0x64/0xc0 [ 3947.159822][T17422] invoke_syscall+0x54/0x10c [ 3947.159898][T17422] el0_svc_common.constprop.0+0x40/0xe0 [ 3947.159969][T17422] do_el0_svc+0x1c/0x34 [ 3947.160037][T17422] el0_svc+0x38/0x1fc [ 3947.160110][T17422] el0t_64_sync_handler+0xa0/0xe4 [ 3947.160184][T17422] el0t_64_sync+0x1a4/0x1a8 [ 3950.536834][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3950.538147][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3951.680542][T17454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3951.681724][T17454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3951.716911][ T28] audit: type=1326 audit(2000003210.070:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17453 comm="syz.2.4441" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x0 [ 3960.586610][T17483] ptrace attach of "/syz-executor exec"[14230] was attempted by "/syz-executor exec"[17483] [ 3963.676481][T17504] FAULT_INJECTION: forcing a failure. [ 3963.676481][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 3963.676603][T17504] CPU: 0 UID: 0 PID: 17504 Comm: syz.2.4459 Tainted: G L syzkaller #0 PREEMPT [ 3963.676657][T17504] Tainted: [L]=SOFTLOCKUP [ 3963.676675][T17504] Hardware name: linux,dummy-virt (DT) [ 3963.676703][T17504] Call trace: [ 3963.676738][T17504] show_stack+0x18/0x24 (C) [ 3963.676821][T17504] dump_stack_lvl+0x60/0x80 [ 3963.676859][T17504] dump_stack+0x18/0x24 [ 3963.676957][T17504] should_fail_ex+0x1e0/0x238 [ 3963.677021][T17504] should_failslab+0x54/0x80 [ 3963.677058][T17504] __kmalloc_cache_noprof+0x58/0x470 [ 3963.677098][T17504] ioc_cpd_alloc+0x44/0x78 [ 3963.677132][T17504] blkcg_css_alloc+0xe0/0x210 [ 3963.677168][T17504] cgroup_apply_control_enable+0x14c/0x32c [ 3963.677211][T17504] cgroup_mkdir+0x114/0x520 [ 3963.677248][T17504] kernfs_iop_mkdir+0x6c/0xc0 [ 3963.677300][T17504] vfs_mkdir+0xc4/0x210 [ 3963.677376][T17504] filename_mkdirat+0x1dc/0x218 [ 3963.677450][T17504] __arm64_sys_mkdirat+0x40/0x64 [ 3963.677492][T17504] invoke_syscall+0x54/0x10c [ 3963.677526][T17504] el0_svc_common.constprop.0+0x40/0xe0 [ 3963.677559][T17504] do_el0_svc+0x1c/0x34 [ 3963.677616][T17504] el0_svc+0x38/0x1fc [ 3963.677695][T17504] el0t_64_sync_handler+0xa0/0xe4 [ 3963.677748][T17504] el0t_64_sync+0x1a4/0x1a8 [ 3964.167127][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3964.167826][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3964.313348][T17513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3964.314221][T17513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3965.056188][T17528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4469'. [ 3965.056536][T17528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4469'. [ 3977.338097][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3977.340086][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3977.715691][T17583] FAULT_INJECTION: forcing a failure. [ 3977.715691][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 3977.715870][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.2.4488 Tainted: G L syzkaller #0 PREEMPT [ 3977.715969][T17583] Tainted: [L]=SOFTLOCKUP [ 3977.716001][T17583] Hardware name: linux,dummy-virt (DT) [ 3977.716038][T17583] Call trace: [ 3977.716070][T17583] show_stack+0x18/0x24 (C) [ 3977.716166][T17583] dump_stack_lvl+0x60/0x80 [ 3977.716247][T17583] dump_stack+0x18/0x24 [ 3977.716315][T17583] should_fail_ex+0x1e0/0x238 [ 3977.716449][T17583] should_failslab+0x54/0x80 [ 3977.716597][T17583] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 3977.716696][T17583] kstrdup+0x48/0xa0 [ 3977.716761][T17583] kstrdup_const+0x40/0x4c [ 3977.716857][T17583] __kernfs_new_node+0x54/0x254 [ 3977.716954][T17583] kernfs_new_node+0x88/0xa4 [ 3977.717036][T17583] __kernfs_create_file+0x30/0xfc [ 3977.717103][T17583] cgroup_addrm_files+0x140/0x2e0 [ 3977.717222][T17583] css_populate_dir+0x6c/0x1e0 [ 3977.717265][T17583] cgroup_apply_control_enable+0x100/0x32c [ 3977.717311][T17583] cgroup_mkdir+0x114/0x520 [ 3977.717365][T17583] kernfs_iop_mkdir+0x6c/0xc0 [ 3977.717443][T17583] vfs_mkdir+0xc4/0x210 [ 3977.717507][T17583] filename_mkdirat+0x1dc/0x218 [ 3977.717554][T17583] __arm64_sys_mkdirat+0x40/0x64 [ 3977.717619][T17583] invoke_syscall+0x54/0x10c [ 3977.717703][T17583] el0_svc_common.constprop.0+0x40/0xe0 [ 3977.717750][T17583] do_el0_svc+0x1c/0x34 [ 3977.717822][T17583] el0_svc+0x38/0x1fc [ 3977.717909][T17583] el0t_64_sync_handler+0xa0/0xe4 [ 3977.717953][T17583] el0t_64_sync+0x1a4/0x1a8 [ 3977.718112][T17583] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 3981.500192][T17595] syzkaller1: entered promiscuous mode [ 3981.500316][T17595] syzkaller1: entered allmulticast mode [ 3982.186685][T17599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3982.189229][T17599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3982.305869][T17602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3982.307010][T17602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3995.829870][T17656] binder: 17655:17656 tried to acquire reference to desc 0, got 1 instead [ 3996.341188][T17657] binder: 17655:17657 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 3996.341439][T17657] binder: 17657 RLIMIT_NICE not set [ 3996.341676][T17657] binder: 17657 RLIMIT_NICE not set [ 3996.356911][T17657] binder: 17657 RLIMIT_NICE not set [ 3999.312285][T16199] binder: undelivered TRANSACTION_COMPLETE [ 3999.312491][T16199] binder: undelivered transaction 17, process died. [ 3999.313200][T16199] binder: undelivered TRANSACTION_COMPLETE [ 3999.658103][T17680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3999.660145][T17680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4000.110394][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4000.111832][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4002.026940][T17708] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 4002.115769][T17710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4002.116928][T17710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4006.046278][ T28] audit: type=1326 audit(2000003520.408:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17721 comm="syz.2.4531" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x0 [ 4012.033430][T17750] : renamed from bond_slave_0 (while UP) [ 4014.331268][T17757] syzkaller0: entered promiscuous mode [ 4014.331397][T17757] syzkaller0: entered allmulticast mode [ 4014.967016][T17774] FAULT_INJECTION: forcing a failure. [ 4014.967016][T17774] name failslab, interval 1, probability 0, space 0, times 0 [ 4014.967174][T17774] CPU: 0 UID: 0 PID: 17774 Comm: syz.1.4548 Tainted: G L syzkaller #0 PREEMPT [ 4014.967278][T17774] Tainted: [L]=SOFTLOCKUP [ 4014.967314][T17774] Hardware name: linux,dummy-virt (DT) [ 4014.967354][T17774] Call trace: [ 4014.967386][T17774] show_stack+0x18/0x24 (C) [ 4014.967484][T17774] dump_stack_lvl+0x60/0x80 [ 4014.967550][T17774] dump_stack+0x18/0x24 [ 4014.967615][T17774] should_fail_ex+0x1e0/0x238 [ 4014.967691][T17774] should_failslab+0x54/0x80 [ 4014.967759][T17774] __kmalloc_node_noprof+0xb4/0x524 [ 4014.967838][T17774] blk_mq_alloc_tag_set+0x15c/0x414 [ 4014.967913][T17774] loop_add+0x134/0x344 [ 4014.967983][T17774] loop_control_ioctl+0x5c/0x270 [ 4014.968051][T17774] __arm64_sys_ioctl+0xa8/0x100 [ 4014.968125][T17774] invoke_syscall+0x54/0x10c [ 4014.968189][T17774] el0_svc_common.constprop.0+0x40/0xe0 [ 4014.968264][T17774] do_el0_svc+0x1c/0x34 [ 4014.968330][T17774] el0_svc+0x38/0x1fc [ 4014.968399][T17774] el0t_64_sync_handler+0xa0/0xe4 [ 4014.968465][T17774] el0t_64_sync+0x1a4/0x1a8 [ 4015.170024][T17764] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4545'. [ 4015.626964][T11933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4015.726403][T11933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4015.898284][T11933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4016.023596][T11933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4016.863890][T11933] bond0 (unregistering): (slave 30): Releasing backup interface [ 4016.941418][T11933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4016.978188][T11933] bond0 (unregistering): Released all slaves [ 4017.168177][T11933] hsr_slave_0: left promiscuous mode [ 4017.176352][T11933] hsr_slave_1: left promiscuous mode [ 4017.201161][T11933] veth1_vlan: left promiscuous mode [ 4017.201539][T11933] veth0_vlan: left promiscuous mode [ 4020.923507][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4021.097708][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4021.115853][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4023.743504][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4023.966481][T17852] UDC core: g1: couldn't find an available UDC or it's busy [ 4024.223522][T17778] hsr_slave_0: entered promiscuous mode [ 4024.227433][T17778] hsr_slave_1: entered promiscuous mode [ 4024.236411][T17778] debugfs: 'hsr0' already exists in 'hsr' [ 4024.236526][T17778] Cannot create hsr debugfs directory [ 4025.942789][T17778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4025.966460][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4025.973938][T17778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4025.998417][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4026.006286][T17778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4026.023384][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4026.032716][T17778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4026.053312][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4027.036738][T17778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4030.736326][T17778] veth0_vlan: entered promiscuous mode [ 4030.772923][T17778] veth1_vlan: entered promiscuous mode [ 4030.857326][T17778] veth0_macvtap: entered promiscuous mode [ 4030.894748][T17778] veth1_macvtap: entered promiscuous mode [ 4031.061275][T11933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4031.061938][T11933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4031.062068][T11933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4031.062187][T11933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4031.377695][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4031.378977][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4031.405666][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4031.406381][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4035.025475][T17983] ip_tables: iptables: counters copy to user failed while replacing table [ 4035.372204][ T28] audit: type=1326 audit(2000003549.738:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17984 comm="syz.1.4569" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4035.374216][ T28] audit: type=1326 audit(2000003549.738:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17984 comm="syz.1.4569" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4035.374415][ T28] audit: type=1326 audit(2000003549.738:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17984 comm="syz.1.4569" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4035.374556][ T28] audit: type=1326 audit(2000003549.738:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17984 comm="syz.1.4569" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4035.503404][ T28] audit: type=1326 audit(2000003549.868:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4035.503623][ T28] audit: type=1326 audit(2000003549.868:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4035.505359][ T28] audit: type=1326 audit(2000003549.868:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4035.506512][ T28] audit: type=1326 audit(2000003549.868:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4035.514320][ T28] audit: type=1326 audit(2000003549.868:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4035.514533][ T28] audit: type=1326 audit(2000003549.868:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17988 comm="syz.2.4571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b78828 code=0x7ffc0000 [ 4038.553076][T18007] FAULT_INJECTION: forcing a failure. [ 4038.553076][T18007] name failslab, interval 1, probability 0, space 0, times 0 [ 4038.553219][T18007] CPU: 0 UID: 0 PID: 18007 Comm: syz.1.4577 Tainted: G L syzkaller #0 PREEMPT [ 4038.553314][T18007] Tainted: [L]=SOFTLOCKUP [ 4038.553345][T18007] Hardware name: linux,dummy-virt (DT) [ 4038.553380][T18007] Call trace: [ 4038.553410][T18007] show_stack+0x18/0x24 (C) [ 4038.553499][T18007] dump_stack_lvl+0x60/0x80 [ 4038.553562][T18007] dump_stack+0x18/0x24 [ 4038.553621][T18007] should_fail_ex+0x1e0/0x238 [ 4038.553706][T18007] should_failslab+0x54/0x80 [ 4038.553788][T18007] kmem_cache_alloc_noprof+0x54/0x458 [ 4038.553875][T18007] vm_area_dup+0x24/0x150 [ 4038.553952][T18007] __split_vma+0x90/0x3a0 [ 4038.554026][T18007] vma_modify+0x578/0x650 [ 4038.554086][T18007] vma_modify_flags_uffd+0xd4/0x110 [ 4038.554145][T18007] userfaultfd_register_range.isra.0+0x158/0x1a0 [ 4038.554216][T18007] userfaultfd_register+0x240/0x41c [ 4038.554290][T18007] userfaultfd_ioctl+0x8b4/0x1a14 [ 4038.554357][T18007] __arm64_sys_ioctl+0xa8/0x100 [ 4038.554424][T18007] invoke_syscall+0x54/0x10c [ 4038.554484][T18007] el0_svc_common.constprop.0+0x40/0xe0 [ 4038.554545][T18007] do_el0_svc+0x1c/0x34 [ 4038.554602][T18007] el0_svc+0x38/0x1fc [ 4038.554666][T18007] el0t_64_sync_handler+0xa0/0xe4 [ 4038.554727][T18007] el0t_64_sync+0x1a4/0x1a8 [ 4038.914548][T18016] gadgetfs: bound to dummy_udc driver [ 4039.068918][T18019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4039.077537][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4039.153706][T18021] FAULT_INJECTION: forcing a failure. [ 4039.153706][T18021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4039.153878][T18021] CPU: 1 UID: 0 PID: 18021 Comm: syz.1.4582 Tainted: G L syzkaller #0 PREEMPT [ 4039.153983][T18021] Tainted: [L]=SOFTLOCKUP [ 4039.154022][T18021] Hardware name: linux,dummy-virt (DT) [ 4039.154062][T18021] Call trace: [ 4039.154095][T18021] show_stack+0x18/0x24 (C) [ 4039.154195][T18021] dump_stack_lvl+0x60/0x80 [ 4039.154273][T18021] dump_stack+0x18/0x24 [ 4039.154345][T18021] should_fail_ex+0x1e0/0x238 [ 4039.154426][T18021] should_fail+0x14/0x40 [ 4039.154496][T18021] should_fail_usercopy+0x1c/0x40 [ 4039.154569][T18021] strncpy_from_user+0x24/0x1c0 [ 4039.154641][T18021] path_setxattrat+0x94/0x1e0 [ 4039.154720][T18021] __arm64_sys_fsetxattr+0x28/0x40 [ 4039.154806][T18021] invoke_syscall+0x54/0x10c [ 4039.154877][T18021] el0_svc_common.constprop.0+0x40/0xe0 [ 4039.154972][T18021] do_el0_svc+0x1c/0x34 [ 4039.155045][T18021] el0_svc+0x38/0x1fc [ 4039.155121][T18021] el0t_64_sync_handler+0xa0/0xe4 [ 4039.155192][T18021] el0t_64_sync+0x1a4/0x1a8 [ 4039.409741][T18025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4039.410688][T18025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4042.504234][T18049] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 4042.513859][T18049] bond0: (slave bond_slave_1): Releasing backup interface [ 4044.616003][T18054] syz.1.4595 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 4044.738561][T18058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4044.742695][T18058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4044.827153][T18061] FAULT_INJECTION: forcing a failure. [ 4044.827153][T18061] name failslab, interval 1, probability 0, space 0, times 0 [ 4044.827329][T18061] CPU: 1 UID: 0 PID: 18061 Comm: syz.2.4598 Tainted: G L syzkaller #0 PREEMPT [ 4044.827425][T18061] Tainted: [L]=SOFTLOCKUP [ 4044.827459][T18061] Hardware name: linux,dummy-virt (DT) [ 4044.827496][T18061] Call trace: [ 4044.827527][T18061] show_stack+0x18/0x24 (C) [ 4044.827624][T18061] dump_stack_lvl+0x60/0x80 [ 4044.827694][T18061] dump_stack+0x18/0x24 [ 4044.827761][T18061] should_fail_ex+0x1e0/0x238 [ 4044.827838][T18061] should_failslab+0x54/0x80 [ 4044.827911][T18061] kmem_cache_alloc_noprof+0x54/0x458 [ 4044.827982][T18061] dup_fd+0x30/0x370 [ 4044.828057][T18061] __arm64_sys_close_range+0x218/0x270 [ 4044.828127][T18061] invoke_syscall+0x54/0x10c [ 4044.828197][T18061] el0_svc_common.constprop.0+0x40/0xe0 [ 4044.828263][T18061] do_el0_svc+0x1c/0x34 [ 4044.828330][T18061] el0_svc+0x38/0x1fc [ 4044.828402][T18061] el0t_64_sync_handler+0xa0/0xe4 [ 4044.828466][T18061] el0t_64_sync+0x1a4/0x1a8 [ 4044.940512][T18065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4044.941863][T18065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4048.556071][T18078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4048.557269][T18078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4048.987192][T18083] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4607'. [ 4055.195612][T18147] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4630'. [ 4055.417076][T18154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 4055.423415][T18154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 4055.428950][T18154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4632'. [ 4055.933706][T18160] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4635'. [ 4059.668340][T18214] netlink: 'syz.1.4658': attribute type 10 has an invalid length. [ 4059.668453][T18214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4658'. [ 4059.673639][T18214] ipvlan0: entered promiscuous mode [ 4059.674249][T18214] ipvlan0: entered allmulticast mode [ 4059.674387][T18214] veth0_vlan: entered allmulticast mode [ 4059.705690][T18214] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 4060.245388][T18230] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4666'. [ 4060.834836][T18251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4674'. [ 4060.928525][T18263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4677'. [ 4060.937238][T18263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4677'. [ 4060.945028][T18263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4677'. [ 4061.132225][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4680'. [ 4061.418365][T18280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4685'. [ 4061.427836][T18280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4685'. [ 4061.434516][T18280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4685'. [ 4061.576694][T18286] netlink: 'syz.2.4687': attribute type 29 has an invalid length. [ 4061.578582][T18286] netlink: 'syz.2.4687': attribute type 29 has an invalid length. [ 4061.585214][T18286] netlink: 'syz.2.4687': attribute type 29 has an invalid length. [ 4061.674928][T18275] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4682'. [ 4067.026625][T18344] __nla_validate_parse: 4 callbacks suppressed [ 4067.026738][T18344] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4708'. [ 4067.983856][T14152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4068.116778][T14152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4068.234814][T14152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4068.402950][T14152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4068.926700][T14152] pimreg3: left allmulticast mode [ 4069.498694][T14152] bond2 (unregistering): (slave geneve2): Releasing active interface [ 4069.583753][T14152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4069.606105][T14152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4069.625611][T14152] bond0 (unregistering): Released all slaves [ 4069.637373][T14152] bond1 (unregistering): Released all slaves [ 4069.655711][T14152] bond2 (unregistering): Released all slaves [ 4069.856801][T14152] hsr_slave_0: left promiscuous mode [ 4069.860975][T14152] hsr_slave_1: left promiscuous mode [ 4069.874544][T14152] batadv_slave_1: left promiscuous mode [ 4069.874808][T14152] veth1_macvtap: left promiscuous mode [ 4069.874932][T14152] veth0_macvtap: left promiscuous mode [ 4069.875277][T14152] veth1_vlan: left promiscuous mode [ 4069.875522][T14152] veth0_vlan: left promiscuous mode [ 4071.529095][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4071.559018][T18358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4071.590640][T18358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4072.015679][T18415] netlink: 'syz.1.4721': attribute type 7 has an invalid length. [ 4072.015783][T18415] netlink: 'syz.1.4721': attribute type 1 has an invalid length. [ 4072.847146][T18358] hsr_slave_0: entered promiscuous mode [ 4072.854951][T18358] hsr_slave_1: entered promiscuous mode [ 4072.993095][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4073.262058][T18434] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4725'. [ 4073.789948][T18452] netlink: 'syz.1.4729': attribute type 29 has an invalid length. [ 4073.798319][T18452] netlink: 'syz.1.4729': attribute type 29 has an invalid length. [ 4073.805464][T18452] netlink: 'syz.1.4729': attribute type 29 has an invalid length. [ 4073.908120][T18456] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4730'. [ 4074.395173][T18358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4074.433147][T18358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4074.438231][T18358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4074.462866][T18358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4074.466088][T18358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4074.482407][T18358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4074.488848][T18358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4074.513260][T18358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4075.735997][T18358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4079.095989][T18358] veth0_vlan: entered promiscuous mode [ 4079.147421][T18358] veth1_vlan: entered promiscuous mode [ 4079.328803][T18358] veth0_macvtap: entered promiscuous mode [ 4079.356326][T18358] veth1_macvtap: entered promiscuous mode [ 4079.503131][T10333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4079.503344][T10333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4080.546569][T14152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4080.546782][T14152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4081.207404][T18574] syzkaller0: entered promiscuous mode [ 4081.207551][T18574] syzkaller0: entered allmulticast mode [ 4081.373017][T18582] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.4758'. [ 4082.082405][T18609] netlink: 774 bytes leftover after parsing attributes in process `syz.2.4770'. [ 4082.696830][T18637] netlink: 'syz.1.4784': attribute type 17 has an invalid length. [ 4082.697110][T18637] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4784'. [ 4082.698729][T18637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 4082.742112][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 4082.918133][T18646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4788'. [ 4082.918332][T18646] : renamed from ip_vti0 (while UP) [ 4091.981080][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4791'. [ 4091.981492][T18654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4791'. [ 4096.287046][T18693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 4096.625545][T18700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4096.626905][T18700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4097.771210][T18707] infiniband syz0: set down [ 4097.773899][T18707] infiniband syz0: added team_slave_0 [ 4097.932603][T18707] RDS/IB: syz0: added [ 4097.932811][T18707] smc: adding ib device syz0 with port count 1 [ 4097.932915][T18707] smc: ib device syz0 port 1 has no pnetid [ 4099.351158][T18717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4099.352435][T18717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4099.466047][T18719] Format for deleting device is "id" (uint). [ 4099.567539][T18721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4099.568737][T18721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4100.807420][T18748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4100.808594][T18748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4101.175365][T18757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4101.176045][T18757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4101.246540][T18759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4101.247635][T18759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4101.757675][T18768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4101.760594][T18768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4102.052839][T18770] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4830'. [ 4103.202579][T18777] FAULT_INJECTION: forcing a failure. [ 4103.202579][T18777] name failslab, interval 1, probability 0, space 0, times 0 [ 4103.202747][T18777] CPU: 1 UID: 0 PID: 18777 Comm: syz.2.4833 Tainted: G L syzkaller #0 PREEMPT [ 4103.202840][T18777] Tainted: [L]=SOFTLOCKUP [ 4103.202874][T18777] Hardware name: linux,dummy-virt (DT) [ 4103.202908][T18777] Call trace: [ 4103.202937][T18777] show_stack+0x18/0x24 (C) [ 4103.203029][T18777] dump_stack_lvl+0x60/0x80 [ 4103.203103][T18777] dump_stack+0x18/0x24 [ 4103.203162][T18777] should_fail_ex+0x1e0/0x238 [ 4103.203240][T18777] should_failslab+0x54/0x80 [ 4103.203306][T18777] kmem_cache_alloc_noprof+0x54/0x458 [ 4103.203374][T18777] sk_prot_alloc+0x38/0x140 [ 4103.203450][T18777] sk_alloc+0x3c/0x288 [ 4103.203514][T18777] inet6_create+0xf4/0x520 [ 4103.203581][T18777] __sock_create+0x130/0x260 [ 4103.203650][T18777] __sys_socket+0xa0/0x140 [ 4103.203718][T18777] __arm64_sys_socket+0x1c/0x38 [ 4103.203847][T18777] invoke_syscall+0x54/0x10c [ 4103.203916][T18777] el0_svc_common.constprop.0+0x40/0xe0 [ 4103.203981][T18777] do_el0_svc+0x1c/0x34 [ 4103.204043][T18777] el0_svc+0x38/0x1fc [ 4103.204110][T18777] el0t_64_sync_handler+0xa0/0xe4 [ 4103.204176][T18777] el0t_64_sync+0x1a4/0x1a8 [ 4103.323929][T18780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4103.325100][T18780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4105.865445][T18789] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4837'. [ 4105.976795][T18791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4105.978069][T18791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4106.437105][T18803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4106.437806][T18803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4106.545241][T18806] FAULT_INJECTION: forcing a failure. [ 4106.545241][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 4106.545401][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.1.4845 Tainted: G L syzkaller #0 PREEMPT [ 4106.545507][T18806] Tainted: [L]=SOFTLOCKUP [ 4106.545543][T18806] Hardware name: linux,dummy-virt (DT) [ 4106.545582][T18806] Call trace: [ 4106.545629][T18806] show_stack+0x18/0x24 (C) [ 4106.545818][T18806] dump_stack_lvl+0x60/0x80 [ 4106.545891][T18806] dump_stack+0x18/0x24 [ 4106.545957][T18806] should_fail_ex+0x1e0/0x238 [ 4106.546051][T18806] should_failslab+0x54/0x80 [ 4106.546126][T18806] __kmalloc_node_noprof+0xb4/0x524 [ 4106.546209][T18806] __blk_mq_realloc_hw_ctxs+0x154/0x1e4 [ 4106.546288][T18806] blk_mq_init_allocated_queue+0xe0/0x3c0 [ 4106.546366][T18806] blk_mq_alloc_queue+0x98/0xf4 [ 4106.546443][T18806] __blk_mq_alloc_disk+0x20/0xa4 [ 4106.546519][T18806] loop_add+0x1e0/0x344 [ 4106.546610][T18806] loop_control_ioctl+0x5c/0x270 [ 4106.546718][T18806] __arm64_sys_ioctl+0xa8/0x100 [ 4106.546795][T18806] invoke_syscall+0x54/0x10c [ 4106.546867][T18806] el0_svc_common.constprop.0+0x40/0xe0 [ 4106.546931][T18806] do_el0_svc+0x1c/0x34 [ 4106.546999][T18806] el0_svc+0x38/0x1fc [ 4106.547074][T18806] el0t_64_sync_handler+0xa0/0xe4 [ 4106.547366][T18806] el0t_64_sync+0x1a4/0x1a8 [ 4106.797035][T18817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4849'. [ 4106.990364][T18824] FAULT_INJECTION: forcing a failure. [ 4106.990364][T18824] name failslab, interval 1, probability 0, space 0, times 0 [ 4106.990526][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.1.4853 Tainted: G L syzkaller #0 PREEMPT [ 4106.990627][T18824] Tainted: [L]=SOFTLOCKUP [ 4106.990664][T18824] Hardware name: linux,dummy-virt (DT) [ 4106.990713][T18824] Call trace: [ 4106.990750][T18824] show_stack+0x18/0x24 (C) [ 4106.990851][T18824] dump_stack_lvl+0x60/0x80 [ 4106.990926][T18824] dump_stack+0x18/0x24 [ 4106.990993][T18824] should_fail_ex+0x1e0/0x238 [ 4106.991073][T18824] should_failslab+0x54/0x80 [ 4106.991145][T18824] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4106.991228][T18824] __d_alloc+0x3c/0x280 [ 4106.991295][T18824] d_alloc_pseudo+0x10/0x50 [ 4106.991365][T18824] alloc_file_pseudo+0x7c/0x160 [ 4106.991436][T18824] sock_alloc_file+0x40/0xd8 [ 4106.991512][T18824] __sys_socket+0xe0/0x140 [ 4106.991587][T18824] __arm64_sys_socket+0x1c/0x38 [ 4106.991661][T18824] invoke_syscall+0x54/0x10c [ 4106.991743][T18824] el0_svc_common.constprop.0+0x40/0xe0 [ 4106.991813][T18824] do_el0_svc+0x1c/0x34 [ 4106.991878][T18824] el0_svc+0x38/0x1fc [ 4106.991951][T18824] el0t_64_sync_handler+0xa0/0xe4 [ 4106.992021][T18824] el0t_64_sync+0x1a4/0x1a8 [ 4109.614859][T18837] FAULT_INJECTION: forcing a failure. [ 4109.614859][T18837] name failslab, interval 1, probability 0, space 0, times 0 [ 4109.615006][T18837] CPU: 0 UID: 0 PID: 18837 Comm: syz.2.4858 Tainted: G L syzkaller #0 PREEMPT [ 4109.615097][T18837] Tainted: [L]=SOFTLOCKUP [ 4109.615129][T18837] Hardware name: linux,dummy-virt (DT) [ 4109.615164][T18837] Call trace: [ 4109.615194][T18837] show_stack+0x18/0x24 (C) [ 4109.615285][T18837] dump_stack_lvl+0x60/0x80 [ 4109.615352][T18837] dump_stack+0x18/0x24 [ 4109.615412][T18837] should_fail_ex+0x1e0/0x238 [ 4109.615481][T18837] should_failslab+0x54/0x80 [ 4109.615547][T18837] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4109.615619][T18837] __d_alloc+0x3c/0x280 [ 4109.615678][T18837] d_alloc_pseudo+0x10/0x50 [ 4109.615739][T18837] alloc_file_pseudo+0x7c/0x160 [ 4109.615808][T18837] sock_alloc_file+0x40/0xd8 [ 4109.615875][T18837] __sys_socket+0xe0/0x140 [ 4109.615939][T18837] __arm64_sys_socket+0x1c/0x38 [ 4109.616004][T18837] invoke_syscall+0x54/0x10c [ 4109.616065][T18837] el0_svc_common.constprop.0+0x40/0xe0 [ 4109.616127][T18837] do_el0_svc+0x1c/0x34 [ 4109.616186][T18837] el0_svc+0x38/0x1fc [ 4109.616250][T18837] el0t_64_sync_handler+0xa0/0xe4 [ 4109.616313][T18837] el0t_64_sync+0x1a4/0x1a8 [ 4110.819053][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4110.821696][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4110.924209][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4110.924831][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4110.939762][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4110.940448][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4111.127347][T18885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4111.140687][T18885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4111.158384][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4111.168504][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4112.752965][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4885'. [ 4112.843332][T18887] loop9: detected capacity change from 0 to 7 [ 4113.576711][T18910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4888'. [ 4114.138014][T18923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4114.150245][T18923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4114.438365][T18936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4114.457333][T18936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4114.631343][T18940] FAULT_INJECTION: forcing a failure. [ 4114.631343][T18940] name failslab, interval 1, probability 0, space 0, times 0 [ 4114.631524][T18940] CPU: 1 UID: 0 PID: 18940 Comm: syz.2.4900 Tainted: G L syzkaller #0 PREEMPT [ 4114.631624][T18940] Tainted: [L]=SOFTLOCKUP [ 4114.631659][T18940] Hardware name: linux,dummy-virt (DT) [ 4114.631700][T18940] Call trace: [ 4114.631745][T18940] show_stack+0x18/0x24 (C) [ 4114.631846][T18940] dump_stack_lvl+0x60/0x80 [ 4114.631919][T18940] dump_stack+0x18/0x24 [ 4114.631986][T18940] should_fail_ex+0x1e0/0x238 [ 4114.632061][T18940] should_failslab+0x54/0x80 [ 4114.632133][T18940] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4114.632204][T18940] sock_alloc_inode+0x24/0x94 [ 4114.632275][T18940] alloc_inode+0x28/0xdc [ 4114.632342][T18940] sock_alloc+0x20/0xa0 [ 4114.632406][T18940] __sock_create+0xa4/0x260 [ 4114.632472][T18940] __sys_socket+0xa0/0x140 [ 4114.632542][T18940] __arm64_sys_socket+0x1c/0x38 [ 4114.632639][T18940] invoke_syscall+0x54/0x10c [ 4114.632703][T18940] el0_svc_common.constprop.0+0x40/0xe0 [ 4114.632782][T18940] do_el0_svc+0x1c/0x34 [ 4114.632844][T18940] el0_svc+0x38/0x1fc [ 4114.632953][T18940] el0t_64_sync_handler+0xa0/0xe4 [ 4114.633016][T18940] el0t_64_sync+0x1a4/0x1a8 [ 4114.633225][T18940] socket: no more sockets [ 4119.321192][T18927] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4119.553169][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4119.554396][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4119.793947][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4119.795165][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4119.915667][T18972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4119.916990][T18972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.030270][T18976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.031503][T18976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.126982][T18978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.128203][T18978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.449137][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.451421][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.555650][T18985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4120.566248][T18985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4120.771954][T18989] binder: 18988:18989 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4120.772081][T18989] binder: 18989 RLIMIT_NICE not set [ 4120.773209][T18989] binder: 18988:18989 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4120.773279][T18989] binder: 18989 RLIMIT_NICE not set [ 4120.856264][T18974] syz.1.4912 (18974): drop_caches: 1 [ 4120.938383][T18991] FAULT_INJECTION: forcing a failure. [ 4120.938383][T18991] name failslab, interval 1, probability 0, space 0, times 0 [ 4120.938480][T18991] CPU: 1 UID: 0 PID: 18991 Comm: syz.1.4920 Tainted: G L syzkaller #0 PREEMPT [ 4120.938533][T18991] Tainted: [L]=SOFTLOCKUP [ 4120.938551][T18991] Hardware name: linux,dummy-virt (DT) [ 4120.938571][T18991] Call trace: [ 4120.938588][T18991] show_stack+0x18/0x24 (C) [ 4120.938660][T18991] dump_stack_lvl+0x60/0x80 [ 4120.938740][T18991] dump_stack+0x18/0x24 [ 4120.938810][T18991] should_fail_ex+0x1e0/0x238 [ 4120.938854][T18991] should_failslab+0x54/0x80 [ 4120.938924][T18991] __kmalloc_noprof+0xac/0x520 [ 4120.938986][T18991] genl_family_rcv_msg_attrs_parse.isra.0+0x58/0x130 [ 4120.939028][T18991] genl_family_rcv_msg_doit+0x74/0x150 [ 4120.939119][T18991] genl_rcv_msg+0x218/0x29c [ 4120.939202][T18991] netlink_rcv_skb+0x60/0x130 [ 4120.939246][T18991] genl_rcv+0x38/0x50 [ 4120.939282][T18991] netlink_unicast+0x328/0x3b4 [ 4120.939319][T18991] netlink_sendmsg+0x194/0x410 [ 4120.939419][T18991] __sock_sendmsg+0x54/0x60 [ 4120.939496][T18991] __sys_sendto+0x114/0x180 [ 4120.939574][T18991] __arm64_sys_sendto+0x24/0x40 [ 4120.939761][T18991] invoke_syscall+0x54/0x10c [ 4120.939845][T18991] el0_svc_common.constprop.0+0x40/0xe0 [ 4120.939919][T18991] do_el0_svc+0x1c/0x34 [ 4120.939985][T18991] el0_svc+0x38/0x1fc [ 4120.940051][T18991] el0t_64_sync_handler+0xa0/0xe4 [ 4120.940086][T18991] el0t_64_sync+0x1a4/0x1a8 [ 4121.040118][T18993] ubi0: attaching mtd0 [ 4121.078831][T18993] ubi0: scanning is finished [ 4121.082914][T18993] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 4121.099934][T18993] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 4122.048715][T19002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.051008][T19002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.408826][T19009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.412767][T19009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.493005][T19011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.495742][T19011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.592941][T19013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.593851][T19013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.682315][T19015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.683391][T19015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.790415][T19019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.791126][T19019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4122.878006][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4122.887939][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.258209][T19029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.264181][T19029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.361352][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.362557][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.514540][T19038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.515299][T19038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.578300][T19041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.583151][T19041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.622056][T19042] FAULT_INJECTION: forcing a failure. [ 4123.622056][T19042] name failslab, interval 1, probability 0, space 0, times 0 [ 4123.622220][T19042] CPU: 1 UID: 0 PID: 19042 Comm: syz.2.4944 Tainted: G L syzkaller #0 PREEMPT [ 4123.622325][T19042] Tainted: [L]=SOFTLOCKUP [ 4123.622364][T19042] Hardware name: linux,dummy-virt (DT) [ 4123.622404][T19042] Call trace: [ 4123.622445][T19042] show_stack+0x18/0x24 (C) [ 4123.622562][T19042] dump_stack_lvl+0x60/0x80 [ 4123.622649][T19042] dump_stack+0x18/0x24 [ 4123.622759][T19042] should_fail_ex+0x1e0/0x238 [ 4123.622857][T19042] should_failslab+0x54/0x80 [ 4123.622945][T19042] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 4123.623039][T19042] kstrdup+0x48/0xa0 [ 4123.623124][T19042] __request_module+0x134/0x220 [ 4123.623216][T19042] dev_load+0x94/0xa0 [ 4123.623421][T19042] devinet_ioctl+0x54/0x5fc [ 4123.623526][T19042] inet_ioctl+0x214/0x260 [ 4123.623610][T19042] packet_ioctl+0x6c/0x1a0 [ 4123.623714][T19042] sock_do_ioctl+0x64/0x130 [ 4123.623810][T19042] sock_ioctl+0x264/0x35c [ 4123.623896][T19042] __arm64_sys_ioctl+0xa8/0x100 [ 4123.623989][T19042] invoke_syscall+0x54/0x10c [ 4123.624119][T19042] el0_svc_common.constprop.0+0x40/0xe0 [ 4123.624210][T19042] do_el0_svc+0x1c/0x34 [ 4123.624304][T19042] el0_svc+0x38/0x1fc [ 4123.624390][T19042] el0t_64_sync_handler+0xa0/0xe4 [ 4123.624476][T19042] el0t_64_sync+0x1a4/0x1a8 [ 4123.675211][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.676986][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4123.746115][T19042] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 4123.787584][T19042] dvmrp0: entered allmulticast mode [ 4124.211146][T19053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4124.216101][T19053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4128.790686][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4128.791849][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4128.984703][T19099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 4129.488911][T19109] FAULT_INJECTION: forcing a failure. [ 4129.488911][T19109] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4129.489094][T19109] CPU: 1 UID: 0 PID: 19109 Comm: syz.2.4971 Tainted: G L syzkaller #0 PREEMPT [ 4129.489292][T19109] Tainted: [L]=SOFTLOCKUP [ 4129.489337][T19109] Hardware name: linux,dummy-virt (DT) [ 4129.489383][T19109] Call trace: [ 4129.489424][T19109] show_stack+0x18/0x24 (C) [ 4129.489537][T19109] dump_stack_lvl+0x60/0x80 [ 4129.489626][T19109] dump_stack+0x18/0x24 [ 4129.489703][T19109] should_fail_ex+0x1e0/0x238 [ 4129.489789][T19109] should_fail+0x14/0x40 [ 4129.489869][T19109] get_futex_key+0xdc/0x620 [ 4129.489950][T19109] futex_wait_setup+0x54/0x240 [ 4129.490029][T19109] __futex_wait+0xd4/0x180 [ 4129.490108][T19109] futex_wait+0x88/0x110 [ 4129.490185][T19109] do_futex+0x1a0/0x210 [ 4129.490262][T19109] __arm64_sys_futex+0x100/0x1a0 [ 4129.490339][T19109] invoke_syscall+0x54/0x10c [ 4129.490416][T19109] el0_svc_common.constprop.0+0x40/0xe0 [ 4129.490495][T19109] do_el0_svc+0x1c/0x34 [ 4129.490570][T19109] el0_svc+0x38/0x1fc [ 4129.490658][T19109] el0t_64_sync_handler+0xa0/0xe4 [ 4129.490736][T19109] el0t_64_sync+0x1a4/0x1a8 [ 4129.621950][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4129.623061][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4130.935015][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4130.937442][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4131.040370][T19127] FAULT_INJECTION: forcing a failure. [ 4131.040370][T19127] name failslab, interval 1, probability 0, space 0, times 0 [ 4131.040534][T19127] CPU: 0 UID: 0 PID: 19127 Comm: syz.1.4977 Tainted: G L syzkaller #0 PREEMPT [ 4131.040635][T19127] Tainted: [L]=SOFTLOCKUP [ 4131.040671][T19127] Hardware name: linux,dummy-virt (DT) [ 4131.040711][T19127] Call trace: [ 4131.040745][T19127] show_stack+0x18/0x24 (C) [ 4131.040852][T19127] dump_stack_lvl+0x60/0x80 [ 4131.040959][T19127] dump_stack+0x18/0x24 [ 4131.041030][T19127] should_fail_ex+0x1e0/0x238 [ 4131.041111][T19127] should_failslab+0x54/0x80 [ 4131.041182][T19127] kmem_cache_alloc_noprof+0x54/0x458 [ 4131.041269][T19127] __kernfs_new_node+0x70/0x254 [ 4131.041337][T19127] kernfs_new_node+0x88/0xa4 [ 4131.041400][T19127] __kernfs_create_file+0x30/0xfc [ 4131.041468][T19127] sysfs_add_file_mode_ns+0x74/0x130 [ 4131.041537][T19127] sysfs_merge_group+0x8c/0x138 [ 4131.041604][T19127] dpm_sysfs_add+0xfc/0x124 [ 4131.041674][T19127] device_add+0x338/0x800 [ 4131.041739][T19127] device_create_groups_vargs+0xe0/0x140 [ 4131.041813][T19127] device_create+0x60/0x8c [ 4131.041883][T19127] bdi_register_va+0x80/0x244 [ 4131.041953][T19127] super_setup_bdi_name+0x88/0x110 [ 4131.042027][T19127] fuse_fill_super_common+0x16c/0x3cc [ 4131.042100][T19127] fuse_fill_super+0x34/0x74 [ 4131.042157][T19127] get_tree_nodev+0x70/0xc0 [ 4131.042223][T19127] fuse_get_tree+0x12c/0x1a4 [ 4131.042304][T19127] vfs_get_tree+0x28/0x100 [ 4131.042371][T19127] fc_mount+0x18/0xa0 [ 4131.042436][T19127] path_mount+0x3e8/0xabc [ 4131.042502][T19127] __arm64_sys_mount+0x1b0/0x204 [ 4131.042567][T19127] invoke_syscall+0x54/0x10c [ 4131.042631][T19127] el0_svc_common.constprop.0+0x40/0xe0 [ 4131.042700][T19127] do_el0_svc+0x1c/0x34 [ 4131.042764][T19127] el0_svc+0x38/0x1fc [ 4131.042839][T19127] el0t_64_sync_handler+0xa0/0xe4 [ 4131.042904][T19127] el0t_64_sync+0x1a4/0x1a8 [ 4131.400750][T19133] syzkaller1: entered promiscuous mode [ 4131.400823][T19133] syzkaller1: entered allmulticast mode [ 4131.546958][T19135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4131.548140][T19135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4134.213364][T19140] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 4134.894049][T19143] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4984'. [ 4135.240421][T19120] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4135.743681][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4135.744816][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4135.820487][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4135.821655][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.057685][T19166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4136.063412][T19166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.119982][T19169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4136.121110][T19169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.235275][T19174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4136.236406][T19174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4137.270141][T19191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4137.271168][T19191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4140.487741][T19203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4140.488971][T19203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4140.667992][T19205] syzkaller1: entered promiscuous mode [ 4140.668108][T19205] syzkaller1: entered allmulticast mode [ 4141.146990][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4141.148905][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4141.500243][T19213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4141.502245][T19213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4141.936837][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4141.938153][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4142.837381][T19231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4142.838099][T19231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4151.959900][T19254] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4155.551030][T19279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4155.551808][T19279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4156.736375][T19292] FAULT_INJECTION: forcing a failure. [ 4156.736375][T19292] name failslab, interval 1, probability 0, space 0, times 0 [ 4156.736543][T19292] CPU: 1 UID: 0 PID: 19292 Comm: syz.2.5039 Tainted: G L syzkaller #0 PREEMPT [ 4156.736648][T19292] Tainted: [L]=SOFTLOCKUP [ 4156.736684][T19292] Hardware name: linux,dummy-virt (DT) [ 4156.736723][T19292] Call trace: [ 4156.736764][T19292] show_stack+0x18/0x24 (C) [ 4156.736888][T19292] dump_stack_lvl+0x60/0x80 [ 4156.736961][T19292] dump_stack+0x18/0x24 [ 4156.737026][T19292] should_fail_ex+0x1e0/0x238 [ 4156.737103][T19292] should_failslab+0x54/0x80 [ 4156.737174][T19292] __kvmalloc_node_noprof+0xc8/0x65c [ 4156.737258][T19292] nf_hook_entries_grow+0xd4/0x280 [ 4156.737337][T19292] __nf_register_net_hook+0x80/0x1b4 [ 4156.737408][T19292] nf_register_net_hook+0x68/0xb0 [ 4156.737479][T19292] nf_register_net_hooks+0x58/0xd0 [ 4156.737550][T19292] nf_defrag_ipv6_enable+0x78/0xb0 [ 4156.737629][T19292] nf_ct_netns_do_get+0xec/0x220 [ 4156.737700][T19292] nf_ct_netns_get+0x2c/0xe0 [ 4156.737779][T19292] helper_mt_check+0x28/0x7c [ 4156.737854][T19292] xt_check_match+0x4c/0x9c [ 4156.737926][T19292] find_check_entry.isra.0+0x104/0x288 [ 4156.737999][T19292] translate_table+0x32c/0x508 [ 4156.738072][T19292] do_ip6t_set_ctl+0x23c/0x43c [ 4156.738143][T19292] nf_setsockopt+0x68/0xa0 [ 4156.738214][T19292] ipv6_setsockopt+0x90/0xe4 [ 4156.738289][T19292] rawv6_setsockopt+0xc4/0x1e8 [ 4156.738359][T19292] sock_common_setsockopt+0x1c/0x30 [ 4156.738440][T19292] do_sock_setsockopt+0xa4/0x198 [ 4156.738534][T19292] __sys_setsockopt+0x7c/0x100 [ 4156.738610][T19292] __arm64_sys_setsockopt+0x24/0x40 [ 4156.738685][T19292] invoke_syscall+0x54/0x10c [ 4156.738768][T19292] el0_svc_common.constprop.0+0x40/0xe0 [ 4156.738850][T19292] do_el0_svc+0x1c/0x34 [ 4156.738919][T19292] el0_svc+0x38/0x1fc [ 4156.738991][T19292] el0t_64_sync_handler+0xa0/0xe4 [ 4156.739141][T19292] el0t_64_sync+0x1a4/0x1a8 [ 4156.781127][T19292] xt_helper: cannot load conntrack support for proto=10 [ 4161.914300][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5062'. [ 4161.984774][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5063'. [ 4165.875090][T19389] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 4166.035517][T19392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5078'. [ 4170.207776][T19451] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5104'. [ 4170.575867][T12636] syz0: Port: 1 Link ACTIVE [ 4171.476040][T19473] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5114'. [ 4171.947792][T19484] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5119'. [ 4173.286644][ T4787] syz0: Port: 1 Link DOWN [ 4173.302795][T18745] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4173.303017][T18745] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4173.303148][T18745] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4173.303284][T18745] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4173.726580][T19495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5124'. [ 4175.409964][T19522] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5135'. [ 4176.472977][T19533] IPv6: sit2: Disabled Multicast RS [ 4176.476001][T19533] sit2: entered allmulticast mode [ 4176.771454][T19536] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5140'. [ 4178.313160][T19548] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5145'. [ 4180.533416][T19572] FAULT_INJECTION: forcing a failure. [ 4180.533416][T19572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4180.533605][T19572] CPU: 1 UID: 0 PID: 19572 Comm: syz.2.5154 Tainted: G L syzkaller #0 PREEMPT [ 4180.533717][T19572] Tainted: [L]=SOFTLOCKUP [ 4180.533752][T19572] Hardware name: linux,dummy-virt (DT) [ 4180.533792][T19572] Call trace: [ 4180.533825][T19572] show_stack+0x18/0x24 (C) [ 4180.533939][T19572] dump_stack_lvl+0x60/0x80 [ 4180.534014][T19572] dump_stack+0x18/0x24 [ 4180.534103][T19572] should_fail_ex+0x1e0/0x238 [ 4180.534188][T19572] should_fail+0x14/0x40 [ 4180.534259][T19572] should_fail_usercopy+0x1c/0x40 [ 4180.534328][T19572] _inline_copy_from_user+0x24/0xa8 [ 4180.534403][T19572] set_user_sigmask+0x44/0x108 [ 4180.534481][T19572] __arm64_sys_pselect6+0xdc/0x1a8 [ 4180.534564][T19572] invoke_syscall+0x54/0x10c [ 4180.534640][T19572] el0_svc_common.constprop.0+0x40/0xe0 [ 4180.534713][T19572] do_el0_svc+0x1c/0x34 [ 4180.534787][T19572] el0_svc+0x38/0x1fc [ 4180.534861][T19572] el0t_64_sync_handler+0xa0/0xe4 [ 4180.534938][T19572] el0t_64_sync+0x1a4/0x1a8 [ 4191.188316][T19620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5169'. [ 4192.798711][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 4192.798815][ T28] audit: type=1326 audit(2000003707.158:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19630 comm="syz.2.5173" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac778828 code=0x0 [ 4195.806904][T19658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4196.226061][T19667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5188'. [ 4196.462826][T19677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5191'. [ 4196.463163][T19677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5191'. [ 4196.895596][T19682] batadv_slave_1: entered promiscuous mode [ 4196.898559][T19681] batadv_slave_1: left promiscuous mode [ 4199.795334][T19718] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5206'. [ 4205.362981][T19760] FAULT_INJECTION: forcing a failure. [ 4205.362981][T19760] name failslab, interval 1, probability 0, space 0, times 0 [ 4205.363139][T19760] CPU: 0 UID: 0 PID: 19760 Comm: syz.1.5224 Tainted: G L syzkaller #0 PREEMPT [ 4205.363236][T19760] Tainted: [L]=SOFTLOCKUP [ 4205.363269][T19760] Hardware name: linux,dummy-virt (DT) [ 4205.363306][T19760] Call trace: [ 4205.363335][T19760] show_stack+0x18/0x24 (C) [ 4205.363426][T19760] dump_stack_lvl+0x60/0x80 [ 4205.363489][T19760] dump_stack+0x18/0x24 [ 4205.363549][T19760] should_fail_ex+0x1e0/0x238 [ 4205.363617][T19760] should_failslab+0x54/0x80 [ 4205.363681][T19760] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 4205.363762][T19760] mqueue_alloc_inode+0x20/0x38 [ 4205.363832][T19760] alloc_inode+0x28/0xdc [ 4205.363900][T19760] new_inode+0x14/0x88 [ 4205.363968][T19760] mqueue_get_inode+0x28/0x318 [ 4205.364032][T19760] mqueue_create_attr+0x8c/0x1c0 [ 4205.364098][T19760] vfs_mkobj+0x98/0x100 [ 4205.364163][T19760] do_mq_open+0x28c/0x320 [ 4205.364236][T19760] __arm64_sys_mq_open+0x78/0xc0 [ 4205.364300][T19760] invoke_syscall+0x54/0x10c [ 4205.364362][T19760] el0_svc_common.constprop.0+0x40/0xe0 [ 4205.364423][T19760] do_el0_svc+0x1c/0x34 [ 4205.364483][T19760] el0_svc+0x38/0x1fc [ 4205.364547][T19760] el0t_64_sync_handler+0xa0/0xe4 [ 4205.364609][T19760] el0t_64_sync+0x1a4/0x1a8 [ 4207.125538][T19766] 0: reclassify loop, rule prio 0, protocol 03 [ 4210.327323][T19787] bond0: invalid ARP target specified [ 4210.414640][T19789] FAULT_INJECTION: forcing a failure. [ 4210.414640][T19789] name failslab, interval 1, probability 0, space 0, times 0 [ 4210.414744][T19789] CPU: 0 UID: 0 PID: 19789 Comm: syz.2.5236 Tainted: G L syzkaller #0 PREEMPT [ 4210.414798][T19789] Tainted: [L]=SOFTLOCKUP [ 4210.414816][T19789] Hardware name: linux,dummy-virt (DT) [ 4210.414837][T19789] Call trace: [ 4210.414855][T19789] show_stack+0x18/0x24 (C) [ 4210.414943][T19789] dump_stack_lvl+0x60/0x80 [ 4210.414997][T19789] dump_stack+0x18/0x24 [ 4210.415031][T19789] should_fail_ex+0x1e0/0x238 [ 4210.415075][T19789] should_failslab+0x54/0x80 [ 4210.415111][T19789] __kvmalloc_node_noprof+0xc8/0x65c [ 4210.415151][T19789] listxattr+0x78/0x158 [ 4210.415227][T19789] path_listxattrat+0x130/0x188 [ 4210.415266][T19789] __arm64_sys_flistxattr+0x20/0x2c [ 4210.415303][T19789] invoke_syscall+0x54/0x10c [ 4210.415339][T19789] el0_svc_common.constprop.0+0x40/0xe0 [ 4210.415373][T19789] do_el0_svc+0x1c/0x34 [ 4210.415406][T19789] el0_svc+0x38/0x1fc [ 4210.415442][T19789] el0t_64_sync_handler+0xa0/0xe4 [ 4210.415476][T19789] el0t_64_sync+0x1a4/0x1a8 [ 4213.967844][T19816] netlink: 'syz.2.5247': attribute type 1 has an invalid length. [ 4214.027888][T19816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4214.035697][T19816] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 4215.853033][T19830] ip_tables: iptables: counters copy to user failed while replacing table [ 4219.562146][T19868] lo: entered promiscuous mode [ 4219.563028][T19868] tunl0: entered promiscuous mode [ 4219.563684][T19868] gre0: entered promiscuous mode [ 4219.564216][T19868] gretap0: entered promiscuous mode [ 4219.564750][T19868] erspan0: entered promiscuous mode [ 4219.565324][T19868] ip_vti0: entered promiscuous mode [ 4219.565903][T19868] ip6_vti0: entered promiscuous mode [ 4219.566403][T19868] sit0: entered promiscuous mode [ 4219.566944][T19868] ip6tnl0: entered promiscuous mode [ 4219.567455][T19868] ip6gre0: entered promiscuous mode [ 4219.567959][T19868] syz_tun: entered promiscuous mode [ 4219.568535][T19868] ip6gretap0: entered promiscuous mode [ 4219.569125][T19868] vcan0: entered promiscuous mode [ 4219.580809][T19868] bond0: entered promiscuous mode [ 4219.581091][T19868] bond_slave_0: entered promiscuous mode [ 4219.581845][T19868] bond_slave_1: entered promiscuous mode [ 4219.583059][T19868] dummy0: entered promiscuous mode [ 4219.583636][T19868] nlmon0: entered promiscuous mode [ 4219.584161][T19868] veth0: entered promiscuous mode [ 4219.584715][T19868] veth1: entered promiscuous mode [ 4219.585315][T19868] wg0: entered promiscuous mode [ 4219.585868][T19868] wg1: entered promiscuous mode [ 4219.586383][T19868] wg2: entered promiscuous mode [ 4219.586912][T19868] veth0_to_bridge: entered promiscuous mode [ 4219.587463][T19868] bridge_slave_0: entered promiscuous mode [ 4219.587996][T19868] veth1_to_bridge: entered promiscuous mode [ 4219.588568][T19868] bridge_slave_1: entered promiscuous mode [ 4219.601607][T19868] veth0_to_bond: entered promiscuous mode [ 4219.603029][T19868] veth1_to_bond: entered promiscuous mode [ 4219.604089][T19868] veth0_to_team: entered promiscuous mode [ 4219.604615][T19868] team_slave_0: entered promiscuous mode [ 4219.605186][T19868] veth1_to_team: entered promiscuous mode [ 4219.605750][T19868] team_slave_1: entered promiscuous mode [ 4219.606271][T19868] veth0_to_batadv: entered promiscuous mode [ 4219.606805][T19868] batadv_slave_0: entered promiscuous mode [ 4219.607330][T19868] veth1_to_batadv: entered promiscuous mode [ 4219.607859][T19868] batadv_slave_1: entered promiscuous mode [ 4219.608405][T19868] xfrm0: entered promiscuous mode [ 4219.609026][T19868] veth0_to_hsr: entered promiscuous mode [ 4219.621295][T19868] veth1_to_hsr: entered promiscuous mode [ 4219.622402][T19868] hsr0: entered promiscuous mode [ 4219.623119][T19868] veth1_virt_wifi: entered promiscuous mode [ 4219.623683][T19868] veth0_virt_wifi: entered promiscuous mode [ 4219.625283][T19868] vlan0: entered promiscuous mode [ 4219.626519][T19868] vlan1: entered promiscuous mode [ 4219.627587][T19868] macvlan0: entered promiscuous mode [ 4219.628259][T19868] macvlan1: entered promiscuous mode [ 4219.628826][T19868] ipvlan0: entered promiscuous mode [ 4219.636992][T19868] ipvlan1: entered promiscuous mode [ 4219.638810][T19868] macvtap0: entered promiscuous mode [ 4219.642052][T19868] macsec0: entered promiscuous mode [ 4219.642799][T19868] geneve0: entered promiscuous mode [ 4219.643370][T19868] geneve1: entered promiscuous mode [ 4219.643959][T19868] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 4219.644491][T19868] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 4219.645015][T19868] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 4219.645507][T19868] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 4219.645996][T19868] sit1: entered promiscuous mode [ 4219.646520][T19868] dvmrp0: entered promiscuous mode [ 4219.653940][T19868] bond1: entered promiscuous mode [ 4219.727570][T19870] FAULT_INJECTION: forcing a failure. [ 4219.727570][T19870] name failslab, interval 1, probability 0, space 0, times 0 [ 4219.727751][T19870] CPU: 0 UID: 0 PID: 19870 Comm: syz.2.5270 Tainted: G L syzkaller #0 PREEMPT [ 4219.727860][T19870] Tainted: [L]=SOFTLOCKUP [ 4219.727901][T19870] Hardware name: linux,dummy-virt (DT) [ 4219.727942][T19870] Call trace: [ 4219.727977][T19870] show_stack+0x18/0x24 (C) [ 4219.728082][T19870] dump_stack_lvl+0x60/0x80 [ 4219.728157][T19870] dump_stack+0x18/0x24 [ 4219.728242][T19870] should_fail_ex+0x1e0/0x238 [ 4219.728319][T19870] should_failslab+0x54/0x80 [ 4219.728388][T19870] __kvmalloc_node_noprof+0xc8/0x65c [ 4219.728464][T19870] bpf_compute_scc+0x8c/0x340 [ 4219.728534][T19870] bpf_check+0x21e4/0x2a70 [ 4219.728598][T19870] bpf_prog_load+0x778/0xbec [ 4219.728673][T19870] __sys_bpf+0x8e4/0x1d1c [ 4219.728748][T19870] __arm64_sys_bpf+0x2c/0x40 [ 4219.728818][T19870] invoke_syscall+0x54/0x10c [ 4219.728928][T19870] el0_svc_common.constprop.0+0x40/0xe0 [ 4219.729005][T19870] do_el0_svc+0x1c/0x34 [ 4219.729077][T19870] el0_svc+0x38/0x1fc [ 4219.729203][T19870] el0t_64_sync_handler+0xa0/0xe4 [ 4219.729309][T19870] el0t_64_sync+0x1a4/0x1a8 [ 4220.821748][T19880] fuse: Bad value for 'fd' [ 4225.108037][ T28] audit: type=1326 audit(2000003739.468:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.112044][ T28] audit: type=1326 audit(2000003739.468:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.112263][ T28] audit: type=1326 audit(2000003739.478:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.119043][ T28] audit: type=1326 audit(2000003739.478:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120100][ T28] audit: type=1326 audit(2000003739.478:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120262][ T28] audit: type=1326 audit(2000003739.478:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120416][ T28] audit: type=1326 audit(2000003739.478:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120567][ T28] audit: type=1326 audit(2000003739.478:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120716][ T28] audit: type=1326 audit(2000003739.478:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.120909][ T28] audit: type=1326 audit(2000003739.478:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19935 comm="syz.1.5298" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4225.141627][T19936] FAULT_INJECTION: forcing a failure. [ 4225.141627][T19936] name failslab, interval 1, probability 0, space 0, times 0 [ 4225.141788][T19936] CPU: 0 UID: 0 PID: 19936 Comm: syz.1.5298 Tainted: G L syzkaller #0 PREEMPT [ 4225.141893][T19936] Tainted: [L]=SOFTLOCKUP [ 4225.141932][T19936] Hardware name: linux,dummy-virt (DT) [ 4225.141972][T19936] Call trace: [ 4225.142004][T19936] show_stack+0x18/0x24 (C) [ 4225.142097][T19936] dump_stack_lvl+0x60/0x80 [ 4225.142162][T19936] dump_stack+0x18/0x24 [ 4225.142225][T19936] should_fail_ex+0x1e0/0x238 [ 4225.142299][T19936] should_failslab+0x54/0x80 [ 4225.142365][T19936] kmem_cache_alloc_noprof+0x54/0x458 [ 4225.142439][T19936] audit_log_start+0x23c/0x3d8 [ 4225.142501][T19936] audit_seccomp+0x38/0xb0 [ 4225.142565][T19936] __seccomp_filter+0x44c/0x660 [ 4225.142632][T19936] __seccomp_permit_syscall+0x8c/0xe4 [ 4225.142699][T19936] syscall_trace_enter+0xf4/0x11c [ 4225.142767][T19936] el0_svc_common.constprop.0+0xa4/0xe0 [ 4225.142833][T19936] do_el0_svc+0x1c/0x34 [ 4225.142895][T19936] el0_svc+0x38/0x1fc [ 4225.142962][T19936] el0t_64_sync_handler+0xa0/0xe4 [ 4225.143027][T19936] el0t_64_sync+0x1a4/0x1a8 [ 4226.054695][T19947] FAULT_INJECTION: forcing a failure. [ 4226.054695][T19947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4226.054839][T19947] CPU: 1 UID: 0 PID: 19947 Comm: syz.2.5303 Tainted: G L syzkaller #0 PREEMPT [ 4226.054926][T19947] Tainted: [L]=SOFTLOCKUP [ 4226.054960][T19947] Hardware name: linux,dummy-virt (DT) [ 4226.054995][T19947] Call trace: [ 4226.055025][T19947] show_stack+0x18/0x24 (C) [ 4226.055116][T19947] dump_stack_lvl+0x60/0x80 [ 4226.055179][T19947] dump_stack+0x18/0x24 [ 4226.055240][T19947] should_fail_ex+0x1e0/0x238 [ 4226.055316][T19947] should_fail+0x14/0x40 [ 4226.055378][T19947] should_fail_usercopy+0x1c/0x40 [ 4226.055447][T19947] bpf_verifier_vlog+0x27c/0x3e8 [ 4226.055515][T19947] btf_verifier_log+0x9c/0xa4 [ 4226.055574][T19947] btf_func_proto_log+0xa0/0x29c [ 4226.055635][T19947] __btf_verifier_log_type+0x108/0x1e8 [ 4226.055696][T19947] btf_func_proto_check_meta+0x38/0x9c [ 4226.055757][T19947] btf_check_all_metas+0xf0/0x2d4 [ 4226.055817][T19947] btf_new_fd+0x2fc/0xf18 [ 4226.055881][T19947] __sys_bpf+0xb28/0x1d1c [ 4226.055946][T19947] __arm64_sys_bpf+0x2c/0x40 [ 4226.056010][T19947] invoke_syscall+0x54/0x10c [ 4226.056070][T19947] el0_svc_common.constprop.0+0x40/0xe0 [ 4226.056132][T19947] do_el0_svc+0x1c/0x34 [ 4226.056190][T19947] el0_svc+0x38/0x1fc [ 4226.056260][T19947] el0t_64_sync_handler+0xa0/0xe4 [ 4226.056322][T19947] el0t_64_sync+0x1a4/0x1a8 [ 4226.168242][T19949] FAULT_INJECTION: forcing a failure. [ 4226.168242][T19949] name failslab, interval 1, probability 0, space 0, times 0 [ 4226.168429][T19949] CPU: 0 UID: 0 PID: 19949 Comm: syz.2.5304 Tainted: G L syzkaller #0 PREEMPT [ 4226.168535][T19949] Tainted: [L]=SOFTLOCKUP [ 4226.168571][T19949] Hardware name: linux,dummy-virt (DT) [ 4226.168611][T19949] Call trace: [ 4226.168646][T19949] show_stack+0x18/0x24 (C) [ 4226.168749][T19949] dump_stack_lvl+0x60/0x80 [ 4226.168829][T19949] dump_stack+0x18/0x24 [ 4226.168929][T19949] should_fail_ex+0x1e0/0x238 [ 4226.169010][T19949] should_failslab+0x54/0x80 [ 4226.169117][T19949] __kvmalloc_node_noprof+0xc8/0x65c [ 4226.169203][T19949] vmemdup_user+0x34/0xc0 [ 4226.169272][T19949] path_setxattrat+0xbc/0x1e0 [ 4226.169352][T19949] __arm64_sys_setxattr+0x2c/0x40 [ 4226.169428][T19949] invoke_syscall+0x54/0x10c [ 4226.169496][T19949] el0_svc_common.constprop.0+0x40/0xe0 [ 4226.169564][T19949] do_el0_svc+0x1c/0x34 [ 4226.169632][T19949] el0_svc+0x38/0x1fc [ 4226.169713][T19949] el0t_64_sync_handler+0xa0/0xe4 [ 4226.169804][T19949] el0t_64_sync+0x1a4/0x1a8 [ 4228.576374][T18358] cgroup: fork rejected by pids controller in /syz2 [ 4231.542547][T18734] dvmrp0: left allmulticast mode [ 4232.014914][T18734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4232.038618][T18734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4232.064681][T18734] bond0 (unregistering): Released all slaves [ 4232.077718][T18734] bond1 (unregistering): Released all slaves [ 4233.580263][T18742] smc: removing ib device syz0 [ 4233.837117][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4235.641036][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4236.161733][T20062] block device autoloading is deprecated and will be removed. [ 4236.801244][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 4236.878499][T19980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4236.898427][T19980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4237.723397][T19980] hsr_slave_0: entered promiscuous mode [ 4237.727293][T19980] hsr_slave_1: entered promiscuous mode [ 4237.744968][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4238.967697][T19980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4238.988827][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4238.994421][T19980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4239.012952][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4239.018890][T19980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4239.043091][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4239.046853][T19980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4239.063867][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4239.744230][T19980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4242.021931][T20172] FAULT_INJECTION: forcing a failure. [ 4242.021931][T20172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4242.022109][T20172] CPU: 1 UID: 0 PID: 20172 Comm: syz.1.5343 Tainted: G L syzkaller #0 PREEMPT [ 4242.022213][T20172] Tainted: [L]=SOFTLOCKUP [ 4242.022252][T20172] Hardware name: linux,dummy-virt (DT) [ 4242.022292][T20172] Call trace: [ 4242.022323][T20172] show_stack+0x18/0x24 (C) [ 4242.022415][T20172] dump_stack_lvl+0x60/0x80 [ 4242.022478][T20172] dump_stack+0x18/0x24 [ 4242.022540][T20172] should_fail_ex+0x1e0/0x238 [ 4242.022614][T20172] should_fail+0x14/0x40 [ 4242.022675][T20172] get_futex_key+0xdc/0x620 [ 4242.022744][T20172] futex_wake+0x68/0x240 [ 4242.022813][T20172] do_futex+0x178/0x210 [ 4242.022880][T20172] __arm64_sys_futex+0x100/0x1a0 [ 4242.022943][T20172] invoke_syscall+0x54/0x10c [ 4242.023008][T20172] el0_svc_common.constprop.0+0x40/0xe0 [ 4242.023089][T20172] do_el0_svc+0x1c/0x34 [ 4242.023159][T20172] el0_svc+0x38/0x1fc [ 4242.023230][T20172] el0t_64_sync_handler+0xa0/0xe4 [ 4242.023298][T20172] el0t_64_sync+0x1a4/0x1a8 [ 4242.326968][T19980] veth0_vlan: entered promiscuous mode [ 4242.390664][T19980] veth1_vlan: entered promiscuous mode [ 4242.554155][T19980] veth0_macvtap: entered promiscuous mode [ 4242.593561][T19980] veth1_macvtap: entered promiscuous mode [ 4242.598329][T20184] FAULT_INJECTION: forcing a failure. [ 4242.598329][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 4242.598506][T20184] CPU: 0 UID: 0 PID: 20184 Comm: syz.1.5348 Tainted: G L syzkaller #0 PREEMPT [ 4242.598616][T20184] Tainted: [L]=SOFTLOCKUP [ 4242.598658][T20184] Hardware name: linux,dummy-virt (DT) [ 4242.598712][T20184] Call trace: [ 4242.598750][T20184] show_stack+0x18/0x24 (C) [ 4242.598861][T20184] dump_stack_lvl+0x60/0x80 [ 4242.598940][T20184] dump_stack+0x18/0x24 [ 4242.599015][T20184] should_fail_ex+0x1e0/0x238 [ 4242.599128][T20184] should_failslab+0x54/0x80 [ 4242.599243][T20184] __kvmalloc_node_noprof+0xc8/0x65c [ 4242.599336][T20184] io_alloc_cache_init+0x38/0x74 [ 4242.599422][T20184] io_uring_setup+0x218/0x7ec [ 4242.599502][T20184] __arm64_sys_io_uring_setup+0x60/0xb4 [ 4242.599572][T20184] invoke_syscall+0x54/0x10c [ 4242.599723][T20184] el0_svc_common.constprop.0+0x40/0xe0 [ 4242.599805][T20184] do_el0_svc+0x1c/0x34 [ 4242.599879][T20184] el0_svc+0x38/0x1fc [ 4242.599960][T20184] el0t_64_sync_handler+0xa0/0xe4 [ 4242.600036][T20184] el0t_64_sync+0x1a4/0x1a8 [ 4242.826427][T18745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4242.826638][T18745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4242.826791][T18745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4242.861380][T18745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4243.588684][T20195] FAULT_INJECTION: forcing a failure. [ 4243.588684][T20195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4243.589627][T20195] CPU: 1 UID: 0 PID: 20195 Comm: syz.1.5353 Tainted: G L syzkaller #0 PREEMPT [ 4243.589756][T20195] Tainted: [L]=SOFTLOCKUP [ 4243.589987][T20195] Hardware name: linux,dummy-virt (DT) [ 4243.590245][T20195] Call trace: [ 4243.590298][T20195] show_stack+0x18/0x24 (C) [ 4243.591142][T20195] dump_stack_lvl+0x60/0x80 [ 4243.591293][T20195] dump_stack+0x18/0x24 [ 4243.591361][T20195] should_fail_ex+0x1e0/0x238 [ 4243.591434][T20195] should_fail+0x14/0x40 [ 4243.591500][T20195] should_fail_usercopy+0x1c/0x40 [ 4243.591567][T20195] bpf_verifier_vlog+0x1c4/0x3e8 [ 4243.591640][T20195] __btf_verifier_log+0x5c/0x88 [ 4243.591703][T20195] btf_parse_hdr+0x280/0x3e4 [ 4243.591769][T20195] btf_new_fd+0x1c4/0xf18 [ 4243.591838][T20195] __sys_bpf+0xb28/0x1d1c [ 4243.591906][T20195] __arm64_sys_bpf+0x2c/0x40 [ 4243.591973][T20195] invoke_syscall+0x54/0x10c [ 4243.592039][T20195] el0_svc_common.constprop.0+0x40/0xe0 [ 4243.592117][T20195] do_el0_svc+0x1c/0x34 [ 4243.592181][T20195] el0_svc+0x38/0x1fc [ 4243.592256][T20195] el0t_64_sync_handler+0xa0/0xe4 [ 4243.592327][T20195] el0t_64_sync+0x1a4/0x1a8 [ 4244.841236][T20221] FAULT_INJECTION: forcing a failure. [ 4244.841236][T20221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4244.841388][T20221] CPU: 0 UID: 0 PID: 20221 Comm: syz.1.5363 Tainted: G L syzkaller #0 PREEMPT [ 4244.841480][T20221] Tainted: [L]=SOFTLOCKUP [ 4244.841512][T20221] Hardware name: linux,dummy-virt (DT) [ 4244.841550][T20221] Call trace: [ 4244.841580][T20221] show_stack+0x18/0x24 (C) [ 4244.841679][T20221] dump_stack_lvl+0x60/0x80 [ 4244.841760][T20221] dump_stack+0x18/0x24 [ 4244.841828][T20221] should_fail_ex+0x1e0/0x238 [ 4244.841902][T20221] should_fail+0x14/0x40 [ 4244.841949][T20221] should_fail_usercopy+0x1c/0x40 [ 4244.841984][T20221] bpf_verifier_vlog+0x13c/0x3e8 [ 4244.842022][T20221] btf_verifier_log+0x9c/0xa4 [ 4244.842054][T20221] btf_func_proto_log+0x34/0x29c [ 4244.842088][T20221] __btf_verifier_log_type+0x108/0x1e8 [ 4244.842121][T20221] btf_func_proto_check_meta+0x38/0x9c [ 4244.842154][T20221] btf_check_all_metas+0xf0/0x2d4 [ 4244.842187][T20221] btf_new_fd+0x2fc/0xf18 [ 4244.842226][T20221] __sys_bpf+0xb28/0x1d1c [ 4244.842262][T20221] __arm64_sys_bpf+0x2c/0x40 [ 4244.842312][T20221] invoke_syscall+0x54/0x10c [ 4244.842348][T20221] el0_svc_common.constprop.0+0x40/0xe0 [ 4244.842382][T20221] do_el0_svc+0x1c/0x34 [ 4244.842414][T20221] el0_svc+0x38/0x1fc [ 4244.842451][T20221] el0t_64_sync_handler+0xa0/0xe4 [ 4244.842484][T20221] el0t_64_sync+0x1a4/0x1a8 [ 4247.763057][T18744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4247.873514][T18744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4247.994560][T18744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4248.102073][T18744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4250.907507][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4250.944642][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4250.985909][T18744] bond0 (unregistering): Released all slaves [ 4251.105774][T18744] hsr_slave_0: left promiscuous mode [ 4251.111832][T18744] hsr_slave_1: left promiscuous mode [ 4251.127947][T18744] veth1_macvtap: left promiscuous mode [ 4251.128154][T18744] veth0_macvtap: left promiscuous mode [ 4251.128495][T18744] veth1_vlan: left promiscuous mode [ 4251.128764][T18744] veth0_vlan: left promiscuous mode [ 4252.544897][ T3225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 4252.980357][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4252.998076][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4253.342512][T20290] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 4253.358772][ T3225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 4254.146673][T20243] hsr_slave_0: entered promiscuous mode [ 4254.152625][T20243] hsr_slave_1: entered promiscuous mode [ 4254.214258][ T3225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 4254.304231][T20313] ip_tables: iptables: counters copy to user failed while replacing table [ 4254.807445][T20243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 4254.828005][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4254.833805][T20243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 4254.848655][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4254.856569][T20243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 4254.871306][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4254.881665][T20243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 4254.898549][T20243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4255.594458][T20243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4255.618922][ T3225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4257.735136][T20243] veth0_vlan: entered promiscuous mode [ 4257.771754][T20243] veth1_vlan: entered promiscuous mode [ 4257.916010][T20243] veth0_macvtap: entered promiscuous mode [ 4257.945953][T20243] veth1_macvtap: entered promiscuous mode [ 4258.260360][T18745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4258.260588][T18745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4258.260727][T18745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4258.260861][T18745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4259.883029][T20395] syz.3.5390 (20395): drop_caches: 2 [ 4260.497860][T20407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4260.863317][T20414] FAULT_INJECTION: forcing a failure. [ 4260.863317][T20414] name failslab, interval 1, probability 0, space 0, times 0 [ 4260.863471][T20414] CPU: 0 UID: 0 PID: 20414 Comm: syz.3.5399 Tainted: G L syzkaller #0 PREEMPT [ 4260.863560][T20414] Tainted: [L]=SOFTLOCKUP [ 4260.863593][T20414] Hardware name: linux,dummy-virt (DT) [ 4260.863629][T20414] Call trace: [ 4260.863660][T20414] show_stack+0x18/0x24 (C) [ 4260.863760][T20414] dump_stack_lvl+0x60/0x80 [ 4260.863824][T20414] dump_stack+0x18/0x24 [ 4260.863884][T20414] should_fail_ex+0x1e0/0x238 [ 4260.863954][T20414] should_failslab+0x54/0x80 [ 4260.864017][T20414] kmem_cache_alloc_noprof+0x54/0x458 [ 4260.864088][T20414] dup_fd+0x30/0x370 [ 4260.864155][T20414] __arm64_sys_close_range+0x218/0x270 [ 4260.864225][T20414] invoke_syscall+0x54/0x10c [ 4260.864287][T20414] el0_svc_common.constprop.0+0x40/0xe0 [ 4260.864349][T20414] do_el0_svc+0x1c/0x34 [ 4260.864408][T20414] el0_svc+0x38/0x1fc [ 4260.864472][T20414] el0t_64_sync_handler+0xa0/0xe4 [ 4260.864535][T20414] el0t_64_sync+0x1a4/0x1a8 [ 4261.159080][T20424] fuse: Bad value for 'fd' [ 4261.481869][T20434] ======================================================= [ 4261.481869][T20434] WARNING: The mand mount option has been deprecated and [ 4261.481869][T20434] and is ignored by this kernel. Remove the mand [ 4261.481869][T20434] option from the mount to silence this warning. [ 4261.481869][T20434] ======================================================= [ 4261.483419][T20434] tmpfs: Too few inodes for current use [ 4261.553793][T20437] fuse: Bad value for 'fd' [ 4262.332811][T20445] FAULT_INJECTION: forcing a failure. [ 4262.332811][T20445] name failslab, interval 1, probability 0, space 0, times 0 [ 4262.332969][T20445] CPU: 0 UID: 0 PID: 20445 Comm: syz.1.5413 Tainted: G L syzkaller #0 PREEMPT [ 4262.333026][T20445] Tainted: [L]=SOFTLOCKUP [ 4262.333044][T20445] Hardware name: linux,dummy-virt (DT) [ 4262.333065][T20445] Call trace: [ 4262.333103][T20445] show_stack+0x18/0x24 (C) [ 4262.333198][T20445] dump_stack_lvl+0x60/0x80 [ 4262.333237][T20445] dump_stack+0x18/0x24 [ 4262.333270][T20445] should_fail_ex+0x1e0/0x238 [ 4262.333309][T20445] should_failslab+0x54/0x80 [ 4262.333345][T20445] __kmalloc_noprof+0xac/0x520 [ 4262.333384][T20445] tomoyo_realpath_from_path+0x44/0x1d4 [ 4262.333424][T20445] tomoyo_check_open_permission+0x128/0x190 [ 4262.333461][T20445] tomoyo_file_open+0x30/0x3c [ 4262.333493][T20445] security_file_open+0x74/0x148 [ 4262.333532][T20445] do_dentry_open+0xe0/0x4fc [ 4262.333574][T20445] vfs_open+0x2c/0xe8 [ 4262.333652][T20445] path_openat+0x5b4/0x960 [ 4262.333737][T20445] do_file_open+0xb0/0x168 [ 4262.333807][T20445] do_sys_openat2+0x84/0x104 [ 4262.333877][T20445] __arm64_sys_openat+0x64/0xc0 [ 4262.333949][T20445] invoke_syscall+0x54/0x10c [ 4262.334017][T20445] el0_svc_common.constprop.0+0x40/0xe0 [ 4262.334085][T20445] do_el0_svc+0x1c/0x34 [ 4262.334155][T20445] el0_svc+0x38/0x1fc [ 4262.334224][T20445] el0t_64_sync_handler+0xa0/0xe4 [ 4262.334296][T20445] el0t_64_sync+0x1a4/0x1a8 [ 4262.334382][T20445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4263.416529][T20489] FAULT_INJECTION: forcing a failure. [ 4263.416529][T20489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4263.416689][T20489] CPU: 0 UID: 0 PID: 20489 Comm: syz.1.5432 Tainted: G L syzkaller #0 PREEMPT [ 4263.416797][T20489] Tainted: [L]=SOFTLOCKUP [ 4263.416834][T20489] Hardware name: linux,dummy-virt (DT) [ 4263.416898][T20489] Call trace: [ 4263.416932][T20489] show_stack+0x18/0x24 (C) [ 4263.417029][T20489] dump_stack_lvl+0x60/0x80 [ 4263.417099][T20489] dump_stack+0x18/0x24 [ 4263.417164][T20489] should_fail_ex+0x1e0/0x238 [ 4263.417240][T20489] should_fail_alloc_page+0x60/0x80 [ 4263.417310][T20489] __alloc_frozen_pages_noprof+0x234/0x13d8 [ 4263.417386][T20489] alloc_pages_mpol+0x74/0x1b8 [ 4263.417459][T20489] folio_alloc_mpol_noprof+0x14/0x68 [ 4263.417526][T20489] vma_alloc_folio_noprof+0x80/0xcc [ 4263.417593][T20489] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 4263.417661][T20489] do_anonymous_page+0x2b0/0x9b8 [ 4263.417743][T20489] __handle_mm_fault+0xa5c/0xec0 [ 4263.417815][T20489] handle_mm_fault+0x88/0x318 [ 4263.417886][T20489] do_page_fault+0x23c/0x77c [ 4263.417948][T20489] do_translation_fault+0x5c/0x6c [ 4263.418009][T20489] do_mem_abort+0x40/0x90 [ 4263.418076][T20489] el1_abort+0x44/0x64 [ 4263.418145][T20489] el1h_64_sync_handler+0x50/0xac [ 4263.418211][T20489] el1h_64_sync+0x6c/0x70 [ 4263.418392][T20489] __arch_copy_to_user+0x18/0x240 (P) [ 4263.418473][T20489] __sys_bpf+0x1aa0/0x1d1c [ 4263.418544][T20489] __arm64_sys_bpf+0x2c/0x40 [ 4263.418611][T20489] invoke_syscall+0x54/0x10c [ 4263.418678][T20489] el0_svc_common.constprop.0+0x40/0xe0 [ 4263.418755][T20489] do_el0_svc+0x1c/0x34 [ 4263.418803][T20489] el0_svc+0x38/0x1fc [ 4263.418836][T20489] el0t_64_sync_handler+0xa0/0xe4 [ 4263.418869][T20489] el0t_64_sync+0x1a4/0x1a8 [ 4266.264469][T20550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4266.893005][T20569] FAULT_INJECTION: forcing a failure. [ 4266.893005][T20569] name failslab, interval 1, probability 0, space 0, times 0 [ 4266.893175][T20569] CPU: 0 UID: 0 PID: 20569 Comm: syz.3.5463 Tainted: G L syzkaller #0 PREEMPT [ 4266.893281][T20569] Tainted: [L]=SOFTLOCKUP [ 4266.893318][T20569] Hardware name: linux,dummy-virt (DT) [ 4266.893360][T20569] Call trace: [ 4266.893394][T20569] show_stack+0x18/0x24 (C) [ 4266.893525][T20569] dump_stack_lvl+0x60/0x80 [ 4266.893595][T20569] dump_stack+0x18/0x24 [ 4266.893657][T20569] should_fail_ex+0x1e0/0x238 [ 4266.893729][T20569] should_failslab+0x54/0x80 [ 4266.893797][T20569] kmem_cache_alloc_noprof+0x54/0x458 [ 4266.893878][T20569] prepare_creds+0x24/0x33c [ 4266.893946][T20569] __arm64_sys_capset+0x18c/0x290 [ 4266.894023][T20569] invoke_syscall+0x54/0x10c [ 4266.894096][T20569] el0_svc_common.constprop.0+0x40/0xe0 [ 4266.894165][T20569] do_el0_svc+0x1c/0x34 [ 4266.894241][T20569] el0_svc+0x38/0x1fc [ 4266.894311][T20569] el0t_64_sync_handler+0xa0/0xe4 [ 4266.894373][T20569] el0t_64_sync+0x1a4/0x1a8 [ 4267.001766][T20571] FAULT_INJECTION: forcing a failure. [ 4267.001766][T20571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4267.001940][T20571] CPU: 1 UID: 0 PID: 20571 Comm: syz.3.5464 Tainted: G L syzkaller #0 PREEMPT [ 4267.002046][T20571] Tainted: [L]=SOFTLOCKUP [ 4267.002088][T20571] Hardware name: linux,dummy-virt (DT) [ 4267.002130][T20571] Call trace: [ 4267.002167][T20571] show_stack+0x18/0x24 (C) [ 4267.002286][T20571] dump_stack_lvl+0x60/0x80 [ 4267.002364][T20571] dump_stack+0x18/0x24 [ 4267.002437][T20571] should_fail_ex+0x1e0/0x238 [ 4267.002518][T20571] should_fail+0x14/0x40 [ 4267.002589][T20571] should_fail_usercopy+0x1c/0x40 [ 4267.002667][T20571] _inline_copy_from_user+0x24/0xa8 [ 4267.002753][T20571] ucma_join_multicast+0x54/0xc0 [ 4267.002832][T20571] ucma_write+0xc0/0x174 [ 4267.002907][T20571] vfs_write+0xd4/0x36c [ 4267.002984][T20571] ksys_write+0xec/0x108 [ 4267.003055][T20571] __arm64_sys_write+0x18/0x24 [ 4267.003125][T20571] invoke_syscall+0x54/0x10c [ 4267.003207][T20571] el0_svc_common.constprop.0+0x40/0xe0 [ 4267.003281][T20571] do_el0_svc+0x1c/0x34 [ 4267.003356][T20571] el0_svc+0x38/0x1fc [ 4267.003433][T20571] el0t_64_sync_handler+0xa0/0xe4 [ 4267.003508][T20571] el0t_64_sync+0x1a4/0x1a8 [ 4268.211881][T20605] FAULT_INJECTION: forcing a failure. [ 4268.211881][T20605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4268.212059][T20605] CPU: 0 UID: 0 PID: 20605 Comm: syz.1.5476 Tainted: G L syzkaller #0 PREEMPT [ 4268.212163][T20605] Tainted: [L]=SOFTLOCKUP [ 4268.212200][T20605] Hardware name: linux,dummy-virt (DT) [ 4268.212257][T20605] Call trace: [ 4268.212291][T20605] show_stack+0x18/0x24 (C) [ 4268.212385][T20605] dump_stack_lvl+0x60/0x80 [ 4268.212449][T20605] dump_stack+0x18/0x24 [ 4268.212509][T20605] should_fail_ex+0x1e0/0x238 [ 4268.212605][T20605] should_fail+0x14/0x40 [ 4268.212669][T20605] should_fail_usercopy+0x1c/0x40 [ 4268.212734][T20605] _inline_copy_from_user.constprop.0+0x24/0xc4 [ 4268.212807][T20605] io_register_pbuf_ring+0x58/0x2e8 [ 4268.212899][T20605] __arm64_sys_io_uring_register+0x6e0/0xdb0 [ 4268.212973][T20605] invoke_syscall+0x54/0x10c [ 4268.213035][T20605] el0_svc_common.constprop.0+0x40/0xe0 [ 4268.213097][T20605] do_el0_svc+0x1c/0x34 [ 4268.213156][T20605] el0_svc+0x38/0x1fc [ 4268.213230][T20605] el0t_64_sync_handler+0xa0/0xe4 [ 4268.213300][T20605] el0t_64_sync+0x1a4/0x1a8 [ 4271.347122][T20632] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 4271.675309][T20644] fuse: Bad value for 'fd' [ 4274.798425][T20669] fuse: Invalid rootmode [ 4277.402343][T20685] syzkaller0: entered promiscuous mode [ 4277.402462][T20685] syzkaller0: entered allmulticast mode [ 4277.582475][T20687] FAULT_INJECTION: forcing a failure. [ 4277.582475][T20687] name fail_futex, interval 1, probability 0, space 0, times 0 [ 4277.582655][T20687] CPU: 0 UID: 0 PID: 20687 Comm: syz.1.5506 Tainted: G L syzkaller #0 PREEMPT [ 4277.582764][T20687] Tainted: [L]=SOFTLOCKUP [ 4277.582801][T20687] Hardware name: linux,dummy-virt (DT) [ 4277.582842][T20687] Call trace: [ 4277.582876][T20687] show_stack+0x18/0x24 (C) [ 4277.582976][T20687] dump_stack_lvl+0x60/0x80 [ 4277.583048][T20687] dump_stack+0x18/0x24 [ 4277.583128][T20687] should_fail_ex+0x1e0/0x238 [ 4277.583205][T20687] should_fail+0x14/0x40 [ 4277.583273][T20687] get_futex_key+0xdc/0x620 [ 4277.583342][T20687] futex_wake+0x68/0x240 [ 4277.583410][T20687] do_futex+0x178/0x210 [ 4277.583478][T20687] __arm64_sys_futex+0x100/0x1a0 [ 4277.583550][T20687] invoke_syscall+0x54/0x10c [ 4277.583628][T20687] el0_svc_common.constprop.0+0x40/0xe0 [ 4277.583704][T20687] do_el0_svc+0x1c/0x34 [ 4277.583774][T20687] el0_svc+0x38/0x1fc [ 4277.583855][T20687] el0t_64_sync_handler+0xa0/0xe4 [ 4277.583930][T20687] el0t_64_sync+0x1a4/0x1a8 [ 4278.160455][T20689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4278.161297][T20689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4278.386831][T20696] fuse: Unknown parameter 'use00000000000000000000' [ 4278.573845][T20700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4278.575061][T20700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4278.989658][T20710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4278.990478][T20710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4287.139978][T20754] fuse: Bad value for 'fd' [ 4291.443435][T20766] fuse: Bad value for 'fd' [ 4291.698390][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 4291.698498][ T28] audit: type=1326 audit(2000004062.060:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20771 comm="syz.3.5544" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x0 [ 4298.935472][T20811] fuse: Bad value for 'fd' [ 4304.649481][ T28] audit: type=1326 audit(2000004075.010:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.651607][ T28] audit: type=1326 audit(2000004075.020:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.651710][ T28] audit: type=1326 audit(2000004075.020:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.651858][ T28] audit: type=1326 audit(2000004075.020:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652010][ T28] audit: type=1326 audit(2000004075.020:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652112][ T28] audit: type=1326 audit(2000004075.020:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652220][ T28] audit: type=1326 audit(2000004075.020:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652355][ T28] audit: type=1326 audit(2000004075.020:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=45 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652503][ T28] audit: type=1326 audit(2000004075.020:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4304.652607][ T28] audit: type=1326 audit(2000004075.020:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20869 comm="syz.3.5588" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.200730][T20965] binfmt_misc: register: failed to install interpreter ./file0 [ 4312.257109][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 4312.257206][ T28] audit: type=1326 audit(2000004082.620:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.258260][ T28] audit: type=1326 audit(2000004082.620:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.259862][ T28] audit: type=1326 audit(2000004082.620:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.265400][ T28] audit: type=1326 audit(2000004082.630:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.268127][ T28] audit: type=1326 audit(2000004082.630:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.283631][ T28] audit: type=1326 audit(2000004082.650:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.286635][ T28] audit: type=1326 audit(2000004082.650:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.286850][ T28] audit: type=1326 audit(2000004082.650:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20968 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa6f5b6ec code=0x7ffc0000 [ 4312.286987][ T28] audit: type=1326 audit(2000004082.650:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f78828 code=0x7ffc0000 [ 4312.289732][ T28] audit: type=1326 audit(2000004082.650:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20966 comm="syz.3.5632" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa7da58f0 code=0x7ffc0000 [ 4312.895300][T20985] FAULT_INJECTION: forcing a failure. [ 4312.895300][T20985] name failslab, interval 1, probability 0, space 0, times 0 [ 4312.895404][T20985] CPU: 0 UID: 0 PID: 20985 Comm: syz.1.5640 Tainted: G L syzkaller #0 PREEMPT [ 4312.895485][T20985] Tainted: [L]=SOFTLOCKUP [ 4312.895517][T20985] Hardware name: linux,dummy-virt (DT) [ 4312.895538][T20985] Call trace: [ 4312.895555][T20985] show_stack+0x18/0x24 (C) [ 4312.895613][T20985] dump_stack_lvl+0x60/0x80 [ 4312.895649][T20985] dump_stack+0x18/0x24 [ 4312.895682][T20985] should_fail_ex+0x1e0/0x238 [ 4312.895722][T20985] should_failslab+0x54/0x80 [ 4312.895774][T20985] __kvmalloc_node_noprof+0xc8/0x65c [ 4312.895837][T20985] alloc_fdtable+0x94/0x150 [ 4312.895876][T20985] dup_fd+0x2fc/0x370 [ 4312.895912][T20985] __arm64_sys_close_range+0x218/0x270 [ 4312.895950][T20985] invoke_syscall+0x54/0x10c [ 4312.895984][T20985] el0_svc_common.constprop.0+0x40/0xe0 [ 4312.896018][T20985] do_el0_svc+0x1c/0x34 [ 4312.896051][T20985] el0_svc+0x38/0x1fc [ 4312.896088][T20985] el0t_64_sync_handler+0xa0/0xe4 [ 4312.896123][T20985] el0t_64_sync+0x1a4/0x1a8 [ 4319.212502][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 4319.212648][ T28] audit: type=1326 audit(2000004089.580:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.212975][ T28] audit: type=1326 audit(2000004089.580:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.215450][ T28] audit: type=1326 audit(2000004089.580:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.216844][ T28] audit: type=1326 audit(2000004089.580:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.217083][ T28] audit: type=1326 audit(2000004089.580:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.217989][ T28] audit: type=1326 audit(2000004089.580:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.218162][ T28] audit: type=1326 audit(2000004089.580:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.230995][ T28] audit: type=1326 audit(2000004089.580:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.235074][ T28] audit: type=1326 audit(2000004089.600:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4319.235405][ T28] audit: type=1326 audit(2000004089.600:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21026 comm="syz.1.5659" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8f978828 code=0x7ffc0000 [ 4320.107368][T21042] xt_TCPMSS: Only works on TCP SYN packets [ 4320.453624][T21052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4320.834984][T21052] ipvlan0: left promiscuous mode [ 4320.835128][T21052] ipvlan0: left allmulticast mode [ 4320.835184][T21052] veth0_vlan: left allmulticast mode [ 4320.936127][T21052] sit2: left allmulticast mode [ 4320.971085][T21052] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4322.322175][T21075] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4322.955143][T21090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5683'. [ 4323.054457][T21094] Injecting memory failure for pfn 0x41f58 at process virtual address 0x20001000 [ 4323.055103][T21094] Memory failure: 0x41f58: Sending SIGBUS to syz.3.5680:21094 due to hardware memory corruption [ 4323.055451][T21094] Memory failure: 0x41f58: recovery action for already poisoned page: Failed [ 4324.137317][T21104] netlink: 'syz.3.5689': attribute type 8 has an invalid length. [ 4324.414321][T21110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5692'. [ 4324.793564][T21120] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5696'. [ 4324.951217][T21127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4325.675971][T18734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4325.811884][T18734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4325.934927][T18734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4326.068714][T18734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4327.267263][T18734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4327.296962][T18734] bond0 (unregistering): Released all slaves [ 4327.467188][T18734] hsr_slave_0: left promiscuous mode [ 4327.473053][T18734] hsr_slave_1: left promiscuous mode [ 4327.508956][T18734] veth1_macvtap: left promiscuous mode [ 4327.520197][T18734] veth0_macvtap: left promiscuous mode [ 4327.520775][T18734] veth1_vlan: left promiscuous mode [ 4327.520934][T18734] veth0_vlan: left promiscuous mode [ 4328.850431][T18734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4329.187672][T18734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4329.328434][T18734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4329.480574][T18734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4329.591530][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4329.692013][T21139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4329.714274][T21139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4330.785953][T18734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4330.825355][T18734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4330.875420][T18734] bond0 (unregistering): Released all slaves [ 4331.102985][T18734] hsr_slave_0: left promiscuous mode [ 4331.105790][T18734] hsr_slave_1: left promiscuous mode [ 4331.125465][T18734] veth1_macvtap: left promiscuous mode [ 4331.125662][T18734] veth0_macvtap: left promiscuous mode [ 4331.126023][T18734] veth1_vlan: left promiscuous mode [ 4331.126257][T18734] veth0_vlan: left promiscuous mode [ 4331.767647][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4332.264263][T21139] hsr_slave_0: entered promiscuous mode [ 4332.267656][T21139] hsr_slave_1: entered promiscuous mode [ 4332.471214][T21163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4332.547609][T21163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4333.886271][T21139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4333.911703][T21139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4333.962998][T21139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4333.982176][T21139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4334.020317][T21139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4334.040523][T21139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4334.044208][T21139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4334.063272][T21139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4334.090939][T21163] hsr_slave_0: entered promiscuous mode [ 4334.094151][T21163] hsr_slave_1: entered promiscuous mode [ 4334.096278][T21163] debugfs: 'hsr0' already exists in 'hsr' [ 4334.096355][T21163] Cannot create hsr debugfs directory [ 4334.422533][ T3225] 8021q: adding VLAN 0 to HW filter on device eth14 [ 4334.998896][T21163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 4335.011687][T21163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4335.043096][T21163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 4335.063504][T21163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4335.078452][T21163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 4335.106454][T21163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4335.118537][T21163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 4335.143977][T21163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4335.326056][T21139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4335.503542][ T3225] 8021q: adding VLAN 0 to HW filter on device eth15 [ 4336.143622][T21163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4336.636296][ T3225] 8021q: adding VLAN 0 to HW filter on device eth16 [ 4338.032983][ T3225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 4339.016934][T21139] veth0_vlan: entered promiscuous mode [ 4339.097269][T21139] veth1_vlan: entered promiscuous mode [ 4339.287102][T21139] veth0_macvtap: entered promiscuous mode [ 4339.351632][T21139] veth1_macvtap: entered promiscuous mode [ 4339.640749][T18745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4339.640995][T18745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4339.641123][T18745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4339.641250][T18745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4340.802304][T21163] veth0_vlan: entered promiscuous mode [ 4340.830461][T21163] veth1_vlan: entered promiscuous mode [ 4340.993699][T21163] veth0_macvtap: entered promiscuous mode [ 4341.028008][T21163] veth1_macvtap: entered promiscuous mode [ 4341.261434][T14152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4341.265213][T14152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4341.266487][T14152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4341.266623][T14152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4342.470291][T21412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4342.470432][T21412] IPv6: NLM_F_CREATE should be set when creating new route [ 4342.470657][T21412] IPv6: NLM_F_CREATE should be set when creating new route [ 4343.962732][T21437] ip_tables: iptables: counters copy to user failed while replacing table [ 4344.457316][T21447] loop2: detected capacity change from 0 to 7 [ 4344.813186][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 4344.813286][ T28] audit: type=1326 audit(2000004115.180:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.813491][ T28] audit: type=1326 audit(2000004115.180:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.815287][ T28] audit: type=1326 audit(2000004115.180:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.816544][ T28] audit: type=1326 audit(2000004115.180:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.816745][ T28] audit: type=1326 audit(2000004115.180:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.817270][ T28] audit: type=1326 audit(2000004115.180:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.820103][ T28] audit: type=1326 audit(2000004115.180:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.820300][ T28] audit: type=1326 audit(2000004115.180:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=169 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.820456][ T28] audit: type=1326 audit(2000004115.180:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4344.820596][ T28] audit: type=1326 audit(2000004115.180:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21452 comm="syz.1.5744" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3578828 code=0x7ffc0000 [ 4347.809940][T21486] sit0: entered promiscuous mode [ 4347.824252][T21486] netlink: 'syz.4.5757': attribute type 1 has an invalid length. [ 4347.824362][T21486] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5757'. [ 4349.644609][T21512] netlink: 'syz.1.5767': attribute type 30 has an invalid length. [ 4349.685506][T21512] bond1: option arp_missed_max: invalid value (0) [ 4349.685690][T21512] bond1: option arp_missed_max: allowed values 1 - 255 [ 4349.691631][T21512] bond1 (unregistering): Released all slaves [ 4350.478475][T21533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4350.862904][T21541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4352.901910][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5786'. [ 4352.980364][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4353.017027][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4353.018552][T21564] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 4353.024222][T21564] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 4353.073597][T21564] bond1: (slave vlan2): Opening slave failed [ 4356.277396][T21609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 4356.277518][T21609] IPv6: NLM_F_CREATE should be set when creating new route [ 4358.661908][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 4358.662124][ T28] audit: type=1326 audit(2000004129.030:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.662404][ T28] audit: type=1326 audit(2000004129.030:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.664375][ T28] audit: type=1326 audit(2000004129.030:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.670143][ T28] audit: type=1326 audit(2000004129.030:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.684808][ T28] audit: type=1326 audit(2000004129.050:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.685116][ T28] audit: type=1326 audit(2000004129.050:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.685288][ T28] audit: type=1326 audit(2000004129.050:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.692780][ T28] audit: type=1326 audit(2000004129.050:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4358.693044][ T28] audit: type=1326 audit(2000004129.060:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21644 comm="syz.4.5812" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff83378828 code=0x7ffc0000 [ 4362.320483][T21691] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 4362.328040][T20252] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 4362.461821][T21695] binder: 21694:21695 cannot find target node [ 4362.462042][T21695] binder: 21694:21695 transaction call to 0:0 failed 20/29189/-22, code 0 size 0-0 line 3253 [ 4362.463515][T11623] binder: undelivered TRANSACTION_ERROR: 29189 [ 4364.645148][T21705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4364.646418][T21705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4365.070289][T21707] nvme nvme0: failed to connect socket: -111 [ 4365.347266][T21716] FAULT_INJECTION: forcing a failure. [ 4365.347266][T21716] name failslab, interval 1, probability 0, space 0, times 0 [ 4365.347444][T21716] CPU: 0 UID: 0 PID: 21716 Comm: syz.4.5844 Tainted: G L syzkaller #0 PREEMPT [ 4365.347554][T21716] Tainted: [L]=SOFTLOCKUP [ 4365.347593][T21716] Hardware name: linux,dummy-virt (DT) [ 4365.347631][T21716] Call trace: [ 4365.347667][T21716] show_stack+0x18/0x24 (C) [ 4365.347770][T21716] dump_stack_lvl+0x60/0x80 [ 4365.347847][T21716] dump_stack+0x18/0x24 [ 4365.347913][T21716] should_fail_ex+0x1e0/0x238 [ 4365.347992][T21716] should_failslab+0x54/0x80 [ 4365.348063][T21716] kmem_cache_alloc_noprof+0x54/0x458 [ 4365.348142][T21716] alloc_empty_file+0x60/0x130 [ 4365.348212][T21716] alloc_file_pseudo+0xb0/0x160 [ 4365.348289][T21716] __anon_inode_getfd+0x94/0x18c [ 4365.348364][T21716] anon_inode_getfd+0x18/0x24 [ 4365.348431][T21716] map_create+0x6b4/0xb54 [ 4365.348506][T21716] __sys_bpf+0x9b8/0x1d1c [ 4365.348579][T21716] __arm64_sys_bpf+0x2c/0x40 [ 4365.348651][T21716] invoke_syscall+0x54/0x10c [ 4365.348717][T21716] el0_svc_common.constprop.0+0x40/0xe0 [ 4365.348789][T21716] do_el0_svc+0x1c/0x34 [ 4365.348858][T21716] el0_svc+0x38/0x1fc [ 4365.348967][T21716] el0t_64_sync_handler+0xa0/0xe4 [ 4365.349041][T21716] el0t_64_sync+0x1a4/0x1a8 [ 4365.686941][T21729] bond0: (slave macsec0): Error: Device can not be enslaved while up [ 4366.083190][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 4366.083340][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 4366.234922][T21744] Invalid logical block size (-1) [ 4367.086597][T21749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4367.087736][T21749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4367.567026][T21757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4367.568155][T21757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4371.342072][T21765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4371.783956][T21769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4371.785140][T21769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4378.101545][T21796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4378.103286][T21796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4380.420328][T21857] psci: CPU1 killed (polled 0 ms) [ 4380.673790][ T0] Detected PIPT I-cache on CPU1 [ 4380.679030][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 4381.238549][T21872] PM: hibernation: hibernation entry [ 4381.289673][T14152] Filesystems sync: 0.017 seconds [ 4381.296673][T21872] Freezing user space processes [ 4381.318735][T21872] Freezing user space processes completed (elapsed 0.021 seconds) [ 4381.320223][T21872] OOM killer disabled. [ 4381.338785][T21872] PM: hibernation: Preallocating image memory [ 4388.466875][T21872] PM: hibernation: Allocated 134107 pages for snapshot [ 4388.467060][T21872] PM: hibernation: Allocated 536428 kbytes in 7.12 seconds (75.34 MB/s) [ 4388.467220][T21872] Freezing remaining freezable tasks [ 4388.473459][T21872] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 4388.473663][T21872] printk: Suspending console(s) (use no_console_suspend to debug) [ 4388.666270][T21872] Disabling non-boot CPUs ... [ 4388.678691][T21872] psci: CPU1 killed (polled 0 ms) [ 4388.716209][T21872] hibernate: Saved 0 MTE pages [ 4388.716209][T21872] ================================================================== [ 4388.716209][T21872] BUG: KASAN: invalid-access in swsusp_save+0x2d4/0x5a0 [ 4388.716209][T21872] Read at addr fbf0000003c1f100 by task syz.1.5912/21872 [ 4388.716209][T21872] Pointer tag: [fb], memory tag: [fe] [ 4388.716209][T21872] [ 4388.716209][T21872] CPU: 0 UID: 0 PID: 21872 Comm: syz.1.5912 Tainted: G L syzkaller #0 PREEMPT [ 4388.716209][T21872] Tainted: [L]=SOFTLOCKUP [ 4388.716209][T21872] Hardware name: linux,dummy-virt (DT) [ 4388.716209][T21872] Call trace: [ 4388.716209][T21872] show_stack+0x18/0x24 (C) [ 4388.716209][T21872] dump_stack_lvl+0x60/0x80 [ 4388.716209][T21872] print_report+0x1c4/0x4b0 [ 4388.716209][T21872] kasan_report+0x84/0xac [ 4388.716209][T21872] __do_kernel_fault+0x1b4/0x220 [ 4388.716209][T21872] do_bad_area+0x68/0x80 [ 4388.716209][T21872] do_tag_check_fault+0x34/0x44 [ 4388.716209][T21872] do_mem_abort+0x40/0x90 [ 4388.716209][T21872] el1_abort+0x44/0x64 [ 4388.716209][T21872] el1h_64_sync_handler+0x50/0xac [ 4388.716209][T21872] el1h_64_sync+0x6c/0x70 [ 4388.716209][T21872] swsusp_save+0x2d4/0x5a0 (P) [ 4388.716209][T21872] swsusp_arch_suspend+0x74/0x618 [ 4388.716209][T21872] hibernation_snapshot+0x218/0x43c [ 4388.716209][T21872] hibernate+0x1cc/0x3c0 [ 4388.716209][T21872] state_store+0xe8/0xf4 [ 4388.716209][T21872] kobj_attr_store+0x18/0x34 [ 4388.716209][T21872] sysfs_kf_write+0x7c/0x98 [ 4388.716209][T21872] kernfs_fop_write_iter+0x138/0x200 [ 4388.716209][T21872] vfs_write+0x244/0x36c [ 4388.716209][T21872] ksys_write+0x70/0x108 [ 4388.716209][T21872] __arm64_sys_write+0x18/0x24 [ 4388.716209][T21872] invoke_syscall+0x54/0x10c [ 4388.716209][T21872] el0_svc_common.constprop.0+0x40/0xe0 [ 4388.716209][T21872] do_el0_svc+0x1c/0x34 [ 4388.716209][T21872] el0_svc+0x38/0x1fc [ 4388.716209][T21872] el0t_64_sync_handler+0xa0/0xe4 [ 4388.716209][T21872] el0t_64_sync+0x1a4/0x1a8 [ 4388.716209][T21872] [ 4388.716209][T21872] The buggy address belongs to the physical page: [ 4388.716209][T21872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43c1c [ 4388.716209][T21872] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 4388.716209][T21872] flags: 0x1ffd00000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x4) [ 4388.716209][T21872] page_type: f8(unknown) [ 4388.716209][T21872] raw: 01ffd00000000040 0000000000000000 dead000000000122 0000000000000000 [ 4388.716209][T21872] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 4388.716209][T21872] head: 01ffd00000000040 0000000000000000 dead000000000122 0000000000000000 [ 4388.716209][T21872] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 4388.716209][T21872] head: 01ffd00000000002 ffffc1ffc00f0701 00000000ffffffff 00000000ffffffff [ 4388.716209][T21872] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 4388.716209][T21872] page dumped because: kasan: bad access detected [ 4388.716209][T21872] [ 4388.716209][T21872] Memory state around the buggy address: [ 4388.716209][T21872] fff0000003c1ef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 4388.716209][T21872] fff0000003c1f000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 4388.716209][T21872] >fff0000003c1f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 4388.716209][T21872] ^ [ 4388.716209][T21872] fff0000003c1f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 4388.716209][T21872] fff0000003c1f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 4388.716209][T21872] ================================================================== [ 4388.716209][T21872] Disabling lock debugging due to kernel taint [ 4388.752481][T21872] Enabling non-boot CPUs ... [ 4388.778528][ T0] Detected PIPT I-cache on CPU1 [ 4388.779631][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 4388.803202][T21872] CPU1 is up [ 4388.881330][T18744] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 4389.017165][T21872] PM: Cannot find swap device, try swapon -a [ 4389.017322][T21872] PM: Cannot get swap writer [ 4390.955350][T21872] OOM killer enabled. [ 4390.955462][T21872] Restarting tasks: Starting [ 4390.993621][T21872] Restarting tasks: Done SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4391.061472][T21872] PM: hibernation: hibernation exit [ 4391.557398][T18744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4391.663545][T18744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4391.801799][T18744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4391.867906][T18744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4392.409107][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4392.424231][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4392.460550][T18744] bond0 (unregistering): Released all slaves [ 4392.468490][T18744] bond1 (unregistering): Released all slaves [ 4392.537409][T18744] hsr_slave_0: left promiscuous mode [ 4392.545240][T18744] hsr_slave_1: left promiscuous mode [ 4392.559948][T18744] veth1_macvtap: left promiscuous mode [ 4392.560245][T18744] veth0_macvtap: left promiscuous mode [ 4392.560597][T18744] veth1_vlan: left promiscuous mode [ 4392.560890][T18744] veth0_vlan: left promiscuous mode [ 4393.491851][T18744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4393.593251][T18744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4393.654356][T18744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4393.710570][ T3225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4393.777751][T18744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4394.227721][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4394.255671][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4394.263732][T18744] bond0 (unregistering): Released all slaves [ 4394.277877][T18744] bond1 (unregistering): Released all slaves [ 4394.372679][T18744] hsr_slave_0: left promiscuous mode [ 4394.375179][T18744] hsr_slave_1: left promiscuous mode [ 4394.389413][T18744] veth1_macvtap: left promiscuous mode [ 4394.389553][T18744] veth0_macvtap: left promiscuous mode [ 4394.389718][T18744] veth1_vlan: left promiscuous mode [ 4394.389848][T18744] veth0_vlan: left promiscuous mode [ 4394.951907][ T3225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4395.668685][ T3225] 8021q: adding VLAN 0 to HW filter on device eth13 [ 4396.249411][ T3225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 4396.851108][ T3225] 8021q: adding VLAN 0 to HW filter on device eth18 [ 4397.419240][ T3225] 8021q: adding VLAN 0 to HW filter on device eth19 [ 4398.093879][ T3225] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4398.711569][ T3225] 8021q: adding VLAN 0 to HW filter on device eth20 VM DIAGNOSIS: 21:51:44 Registers: info registers vcpu 0 CPU#0 PC=ffff800080e0f7d4 X00=0000000000000000 X01=f1f0000035b73300 X02=f5f0000009c32b00 X03=0000000000000000 X04=0000000000000000 X05=fbf000001c11ecc0 X06=0000000000000000 X07=0000000000000140 X08=fbf0000005a0375c X09=0000000000000078 X10=00000000d2e55d79 X11=000000004a8a709d X12=000000000000005a X13=00000000ace5158f X14=0000000043bf79d6 X15=00000000dab5ab3c X16=ffff8000839a8000 X17=fff07ffffc2d5000 X18=0000000000000014 X19=fbf000002c8cfe00 X20=fdf0000006c51b40 X21=fdf0000006f1f048 X22=0000000000000000 X23=fbf000002c8cfe28 X24=fdf0000006c51000 X25=ffffc1ffc0831100 X26=fdf0000006c51b40 X27=0000000000000000 X28=fbf000002c8cfe00 X29=ffff8000839abb50 X30=ffff800080e0f7f4 SP=ffff8000839abb50 PSTATE=60402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c2570:6f6f6c2f7665642f Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fffffff0000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe5125e00 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe5125e30:0000ffffe5125e30 info registers vcpu 1 CPU#1 PC=ffff8000809df3e0 X00=0000000000000002 X01=0000000000000018 X02=ffff8000839d1018 X03=ffff800083768768 X04=f8f0000004780080 X05=000000000000006c X06=ffff800083768838 X07=0000000000000001 X08=f4f0000004870000 X09=00000000000024aa X10=0000000000007008 X11=ffff800083639438 X12=0000000000019ac8 X13=ffff800083d23b58 X14=ffff800083d239a0 X15=ffff800083d23b4d X16=f3f000001c880980 X17=0000000000000000 X18=00000000ffffffff X19=f5f0000003c6001a X20=ffff8000809df628 X21=f8f0000004780080 X22=f5f0000003c6001a X23=ffff8000809df628 X24=0000000000000023 X25=f4f0000004870000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff800083d23cc0 X30=ffff8000809df650 SP=ffff800083d23cc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000