last executing test programs: 11.869220347s ago: executing program 1 (id=7151): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 11.598719528s ago: executing program 1 (id=7153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) semtimedop(0x0, 0x0, 0x0, 0x0) 11.409566845s ago: executing program 1 (id=7155): r0 = io_uring_setup(0xca6, &(0x7f00000000c0)={0x0, 0x6844, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 11.269326482s ago: executing program 1 (id=7157): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r3) 7.649840385s ago: executing program 1 (id=7159): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000012000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x40c080, 0x40, 0x32}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000080)={{}, "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"}) 3.933240553s ago: executing program 0 (id=7162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) 3.679883173s ago: executing program 0 (id=7163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 3.438388873s ago: executing program 0 (id=7164): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 3.200216472s ago: executing program 0 (id=7165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0), r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r6, 0x6}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 2.842194547s ago: executing program 0 (id=7166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 2.49907488s ago: executing program 0 (id=7167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xffffffffffffffff, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) 0s ago: executing program 1 (id=7168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r1, 0x2000000, 0xe, 0xe00, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:63992' (ED25519) to the list of known hosts. syzkaller login: [ 140.665208][ T3308] cgroup: Unknown subsys name 'net' [ 140.900382][ T3308] cgroup: Unknown subsys name 'cpuset' [ 140.945321][ T3308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 141.495024][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 152.985948][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.021074][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.410002][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.445695][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.747298][ T3313] hsr_slave_0: entered promiscuous mode [ 154.756861][ T3313] hsr_slave_1: entered promiscuous mode [ 155.135914][ T3314] hsr_slave_0: entered promiscuous mode [ 155.142632][ T3314] hsr_slave_1: entered promiscuous mode [ 155.148879][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 155.149691][ T3314] Cannot create hsr debugfs directory [ 156.616424][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.677392][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.741016][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.817378][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.090319][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.147452][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.189199][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.225035][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.711142][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.007603][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.713108][ T3313] veth0_vlan: entered promiscuous mode [ 163.786291][ T3313] veth1_vlan: entered promiscuous mode [ 163.995299][ T3313] veth0_macvtap: entered promiscuous mode [ 164.028387][ T3313] veth1_macvtap: entered promiscuous mode [ 164.297610][ T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.298303][ T94] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.298538][ T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.298743][ T94] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.886161][ T3314] veth0_vlan: entered promiscuous mode [ 164.921746][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 164.956618][ T3314] veth1_vlan: entered promiscuous mode [ 165.258454][ T3314] veth0_macvtap: entered promiscuous mode [ 165.349457][ T3314] veth1_macvtap: entered promiscuous mode [ 165.590138][ T1749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.590618][ T1749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.599558][ T1749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.621175][ T94] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.498411][ T3463] Zero length message leads to an empty skb [ 168.754906][ T3480] input: syz0 as /devices/virtual/input/input1 [ 174.814526][ T3507] input: syz0 as /devices/virtual/input/input2 [ 187.300206][ T3552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.123399][ T3573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.623300][ T3390] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.793290][ T3390] usb 1-1: Using ep0 maxpacket: 8 [ 202.829514][ T3390] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.833382][ T3390] usb 1-1: config 179 has no interface number 0 [ 202.839026][ T3390] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.844409][ T3390] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 202.850009][ T3390] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.855581][ T3390] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 202.859374][ T3390] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.866989][ T3390] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 202.878126][ T3390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.959234][ T3636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.205576][ T3390] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 203.455213][ T3390] usb 1-1: USB disconnect, device number 2 [ 203.455612][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.776419][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 231.255533][ T3827] input: syz0 as /devices/virtual/input/input4 [ 233.566535][ T3835] fuse: root generation should be zero [ 254.331039][ T3922] input: syz0 as /devices/virtual/input/input5 [ 266.522682][ T3935] serio: Serial port pts0 [ 273.167263][ T3940] serio: Serial port pts1 [ 278.951597][ T3946] input: syz0 as /devices/virtual/input/input6 [ 299.899133][ T4042] serio: Serial port pts0 [ 307.419656][ T4078] input: syz0 as /devices/virtual/input/input7 [ 358.758263][ C1] hrtimer: interrupt took 814270 ns [ 396.245617][ T4562] syz.0.368 uses obsolete (PF_INET,SOCK_PACKET) [ 411.485071][ T4675] input: syz0 as /devices/virtual/input/input8 [ 416.872931][ T4677] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 438.283400][ T4763] input: syz0 as /devices/virtual/input/input9 [ 446.257600][ T4784] input: syz0 as /devices/virtual/input/input10 [ 466.814575][ T4821] input: syz0 as /devices/virtual/input/input11 [ 484.769101][ T4863] serio: Serial port pts0 [ 497.069515][ T4919] input: syz0 as /devices/virtual/input/input12 [ 562.473169][ T3390] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 562.653306][ T3390] usb 1-1: Using ep0 maxpacket: 16 [ 562.790378][ T3390] usb 1-1: config 0 has no interfaces? [ 562.876258][ T3390] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 562.876877][ T3390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.877135][ T3390] usb 1-1: Product: syz [ 562.877327][ T3390] usb 1-1: Manufacturer: syz [ 562.877551][ T3390] usb 1-1: SerialNumber: syz [ 562.954647][ T3390] usb 1-1: config 0 descriptor?? [ 568.586840][ T3460] usb 1-1: USB disconnect, device number 3 [ 613.599026][ T5576] input: syz0 as /devices/virtual/input/input13 [ 613.648601][ T5577] input: syz0 as /devices/virtual/input/input14 [ 633.829322][ T5604] serio: Serial port pts0 [ 673.613025][ T5835] input: syz0 as /devices/virtual/input/input15 [ 680.379717][ T5841] input: syz1 as /devices/virtual/input/input16 [ 756.094773][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.098800][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.003370][ T6364] serio: Serial port pts0 [ 879.630688][ T7067] input: syz1 as /devices/virtual/input/input17 [ 973.765226][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.775895][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.047177][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 1062.733470][ T8282] loop7: detected capacity change from 0 to 16385 [ 1263.424097][ T3460] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1263.436369][ T3460] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1454.770714][T10941] input: syz0 as /devices/virtual/input/input19 [ 1476.725512][T11033] input: syz0 as /devices/virtual/input/input20 [ 1491.855904][T11094] dvmrp1: entered allmulticast mode [ 1551.710797][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1623.189272][T11914] input: syz0 as /devices/virtual/input/input21 [ 1645.854205][T12020] lo: entered promiscuous mode [ 1645.915569][T12020] lo: left promiscuous mode [ 1691.294684][T12265] lo: entered promiscuous mode [ 1691.334944][T12265] lo: left promiscuous mode [ 1717.916039][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1736.239828][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1751.777487][T12610] : renamed from ipvlan1 [ 1774.372978][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3172'. [ 1777.998987][T12778] input: syz0 as /devices/virtual/input/input22 [ 1841.973609][ T4869] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1842.177087][ T4869] usb 1-1: config 1 interface 0 altsetting 80 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1842.182811][ T4869] usb 1-1: config 1 interface 0 altsetting 80 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1842.187960][ T4869] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1842.207052][ T4869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1842.210501][ T4869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.215426][ T4869] usb 1-1: Product: syz [ 1842.217627][ T4869] usb 1-1: Manufacturer: syz [ 1842.222755][ T4869] usb 1-1: SerialNumber: syz [ 1842.267082][T13063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1843.416153][ T4869] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1843.465718][ T4869] usb 1-1: USB disconnect, device number 4 [ 1881.163449][T13328] syz_tun: entered allmulticast mode [ 1881.188049][T13327] syz_tun: left allmulticast mode [ 1895.020497][T13390] Process accounting resumed [ 1960.618806][T13745] input: syz0 as /devices/virtual/input/input23 [ 1994.685094][T13909] input: syz0 as /devices/virtual/input/input24 [ 2026.320648][T14002] 8021q: VLANs not supported on ip6_vti0 [ 2062.378560][T14180] input: syz0 as /devices/virtual/input/input25 [ 2100.136307][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 2111.908627][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2111.929415][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.402901][T14038] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2148.591194][T14038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2148.592280][T14038] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2148.592674][T14038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2148.593156][T14038] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2148.593819][T14038] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2148.642652][T14038] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2148.643197][T14038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2148.643706][T14038] usb 1-1: SerialNumber: syz [ 2148.697067][T14038] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2160.897879][ T7359] usb 1-1: USB disconnect, device number 5 [ 2218.198473][T14808] serio: Serial port pts0 [ 2232.361023][T14890] syz.1.3912 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2232.380702][T14890] 8021q: VLANs not supported on ip6_vti0 [ 2312.666944][T15259] kernel profiling enabled (shift: 0) [ 2321.762701][T15275] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2350.483322][T14038] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2350.683048][T14038] usb 1-1: Using ep0 maxpacket: 32 [ 2350.867064][T14038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.871312][T14038] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2350.885254][T14038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.990543][T14038] usb 1-1: config 0 descriptor?? [ 2352.137695][T14038] usb 1-1: string descriptor 0 read error: -71 [ 2352.159587][T14038] hub 1-1:0.0: bad descriptor, ignoring hub [ 2352.163683][T14038] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2352.283215][T14038] usb 1-1: USB disconnect, device number 6 [ 2362.660951][T15459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4101'. [ 2366.368334][T13457] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.373837][T13457] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.378011][T13457] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.386104][T13457] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2374.389953][T15503] serio: Serial port pts0 [ 2387.097858][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 2387.227892][T15524] vxcan1: entered promiscuous mode [ 2387.766064][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 2410.123216][T15598] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 2427.273385][T14821] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 2427.495774][T14821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2427.517121][T14821] usb 1-1: not running at top speed; connect to a high speed hub [ 2427.568399][T14821] usb 1-1: config 7 has an invalid interface number: 200 but max is 0 [ 2427.568866][T14821] usb 1-1: config 7 has no interface number 0 [ 2427.569626][T14821] usb 1-1: config 7 interface 200 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2427.569883][T14821] usb 1-1: config 7 interface 200 altsetting 8 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2427.570137][T14821] usb 1-1: config 7 interface 200 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2427.570358][T14821] usb 1-1: config 7 interface 200 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2427.570575][T14821] usb 1-1: config 7 interface 200 has no altsetting 0 [ 2427.624679][T14821] usb 1-1: New USB device found, idVendor=22b8, idProduct=2a70, bcdDevice=ff.6f [ 2427.625064][T14821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.627540][T14821] usb 1-1: Product: syz [ 2427.627682][T14821] usb 1-1: Manufacturer: syz [ 2427.627785][T14821] usb 1-1: SerialNumber: syz [ 2427.748245][T14821] option 1-1:7.200: GSM modem (1-port) converter detected [ 2427.938361][T14821] usb 1-1: USB disconnect, device number 7 [ 2427.955949][T14821] option 1-1:7.200: device disconnected [ 2452.000226][T15757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2455.718294][T15764] serio: Serial port pts0 [ 2463.101473][T15785] serio: Serial port pts0 [ 2474.591232][T15812] serio: Serial port pts0 [ 2487.226704][T15847] 8021q: VLANs not supported on ip6_vti0 [ 2503.244706][T15904] 8021q: VLANs not supported on vcan0 [ 2505.564409][T15921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4253'. [ 2507.194548][T15927] input: syz0 as /devices/virtual/input/input27 [ 2524.283399][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'. [ 2531.586769][T15991] process 'syz.1.4275' launched './file1' with NULL argv: empty string added [ 2548.835295][T16067] fuse: Bad value for 'fd' [ 2571.888570][T16144] 8021q: VLANs not supported on ip6gre0 [ 2599.255768][T16233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2606.171679][T16251] 8021q: VLANs not supported on vcan0 [ 2633.957611][T16363] 8021q: VLANs not supported on ip_vti0 [ 2641.415982][T16390] serio: Serial port pts0 [ 2646.664065][T16400] input: syz0 as /devices/virtual/input/input28 [ 2665.816404][T16440] input: syz0 as /devices/virtual/input/input30 [ 2725.569127][T16610] input: syz0 as /devices/virtual/input/input31 [ 2738.121608][T16641] input: syz0 as /devices/virtual/input/input32 [ 2746.650838][T16648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.680636][T16648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.656405][T16663] "syz.1.4497" (16663) uses obsolete ecb(arc4) skcipher [ 2756.510780][T16693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2756.517045][T16693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2766.006452][T16754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2766.015808][T16754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2769.395194][T16793] input: syz0 as /devices/virtual/input/input33 [ 2771.253653][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.264408][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2773.656516][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2773.658822][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2899.058043][T17257] input: syz0 as /devices/virtual/input/input34 [ 2911.985064][T17303] "syz.0.4734" (17303) uses obsolete ecb(arc4) skcipher [ 2918.035054][T17329] input: syz0 as /devices/virtual/input/input35 [ 2930.273496][T17377] input: syz0 as /devices/virtual/input/input36 [ 2938.174937][T17410] input: syz0 as /devices/virtual/input/input37 [ 2958.833604][T17465] syz_tun: entered promiscuous mode [ 2959.974803][T17483] input: syz0 as /devices/virtual/input/input38 [ 2970.541670][T17526] input: syz0 as /devices/virtual/input/input39 [ 2984.313125][T17561] input: syz0 as /devices/virtual/input/input40 [ 2999.790624][T17589] input: syz0 as /devices/virtual/input/input41 [ 3003.125603][T17597] input: syz0 as /devices/virtual/input/input42 [ 3018.264457][T17617] input: syz0 as /devices/virtual/input/input43 [ 3025.627560][T17652] input: syz0 as /devices/virtual/input/input44 [ 3035.753449][T17659] serio: Serial port pts0 [ 3037.709994][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3037.718491][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.396646][T17772] input: syz0 as /devices/virtual/input/input45 [ 3057.321134][T17778] input: syz0 as /devices/virtual/input/input46 [ 3082.588207][T17839] input: syz0 as /devices/virtual/input/input47 [ 3100.989974][T17874] input: syz0 as /devices/virtual/input/input48 [ 3107.250158][T17897] input: syz0 as /devices/virtual/input/input49 [ 3141.406407][T17964] input: syz0 as /devices/virtual/input/input50 [ 3158.064886][T17997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3158.070462][T17997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3159.686814][T18011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3159.698918][T18011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.260377][T18055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.268556][T18055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3170.451385][T18125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3170.461229][T18125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3189.080445][T18219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3195.873831][T18260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3195.881255][T18260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3216.835445][T18358] input: syz0 as /devices/virtual/input/input69 [ 3229.353891][T18379] input: syz0 as /devices/virtual/input/input70 [ 3230.854998][T18386] input: syz0 as /devices/virtual/input/input71 [ 3242.244711][T18402] input: syz0 as /devices/virtual/input/input72 [ 3250.727678][T18425] input: syz0 as /devices/virtual/input/input73 [ 3282.780088][T18487] input: syz0 as /devices/virtual/input/input76 [ 3294.423374][T18513] input: syz0 as /devices/virtual/input/input77 [ 3300.874010][T18521] input: syz0 as /devices/virtual/input/input78 [ 3329.014361][T18553] input: syz0 as /devices/virtual/input/input80 [ 3333.777082][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3333.791584][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3335.351506][T18566] input: syz0 as /devices/virtual/input/input81 [ 3368.047665][T18600] ======================================================= [ 3368.047665][T18600] WARNING: The mand mount option has been deprecated and [ 3368.047665][T18600] and is ignored by this kernel. Remove the mand [ 3368.047665][T18600] option from the mount to silence this warning. [ 3368.047665][T18600] ======================================================= [ 3368.641600][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3368.668623][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3370.310899][T18633] input: syz1 as /devices/virtual/input/input82 [ 3389.095752][T18671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3389.127887][T18671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3393.597617][T18685] input: syz0 as /devices/virtual/input/input83 [ 3408.079816][T18717] input: syz0 as /devices/virtual/input/input84 [ 3414.585644][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3414.596385][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3418.472766][T18735] input: syz0 as /devices/virtual/input/input85 [ 3427.311221][T18741] serio: Serial port pts0 [ 3441.209877][T18755] input: syz0 as /devices/virtual/input/input86 [ 3451.463948][T18793] input: syz0 as /devices/virtual/input/input87 [ 3463.476682][T18798] input: syz0 as /devices/virtual/input/input88 [ 3476.641559][T18841] input: syz0 as /devices/virtual/input/input95 [ 3498.184355][T18860] input: syz0 as /devices/virtual/input/input98 [ 3519.901126][T18877] FAULT_INJECTION: forcing a failure. [ 3519.901126][T18877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3519.904433][T18877] CPU: 1 UID: 0 PID: 18877 Comm: syz.0.5286 Not tainted syzkaller #0 PREEMPT [ 3519.904982][T18877] Hardware name: linux,dummy-virt (DT) [ 3519.905474][T18877] Call trace: [ 3519.905984][T18877] show_stack+0x18/0x24 (C) [ 3519.907055][T18877] dump_stack_lvl+0x78/0x90 [ 3519.907360][T18877] dump_stack+0x18/0x24 [ 3519.907637][T18877] should_fail_ex+0x1dc/0x234 [ 3519.907958][T18877] should_fail+0x14/0x24 [ 3519.908228][T18877] should_fail_usercopy+0x1c/0x28 [ 3519.908486][T18877] _inline_copy_from_user+0x24/0xb0 [ 3519.908768][T18877] copy_msghdr_from_user+0x54/0xcc [ 3519.909027][T18877] ___sys_sendmsg+0x8c/0x100 [ 3519.909279][T18877] __sys_sendmsg+0x98/0xf8 [ 3519.909566][T18877] __arm64_sys_sendmsg+0x24/0x30 [ 3519.909817][T18877] invoke_syscall+0x48/0x110 [ 3519.910099][T18877] el0_svc_common.constprop.0+0x40/0xe0 [ 3519.910379][T18877] do_el0_svc+0x1c/0x28 [ 3519.910629][T18877] el0_svc+0x34/0x10c [ 3519.910892][T18877] el0t_64_sync_handler+0xa0/0xe4 [ 3519.911179][T18877] el0t_64_sync+0x1a4/0x1a8 [ 3525.425600][T18907] FAULT_INJECTION: forcing a failure. [ 3525.425600][T18907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3525.429186][T18907] CPU: 0 UID: 0 PID: 18907 Comm: syz.0.5289 Not tainted syzkaller #0 PREEMPT [ 3525.429419][T18907] Hardware name: linux,dummy-virt (DT) [ 3525.429496][T18907] Call trace: [ 3525.429564][T18907] show_stack+0x18/0x24 (C) [ 3525.429739][T18907] dump_stack_lvl+0x78/0x90 [ 3525.429895][T18907] dump_stack+0x18/0x24 [ 3525.430072][T18907] should_fail_ex+0x1dc/0x234 [ 3525.430272][T18907] should_fail+0x14/0x24 [ 3525.430416][T18907] should_fail_usercopy+0x1c/0x28 [ 3525.430569][T18907] simple_read_from_buffer+0x5c/0x138 [ 3525.430719][T18907] proc_fail_nth_read+0xac/0x134 [ 3525.430872][T18907] vfs_read+0xc0/0x318 [ 3525.431060][T18907] ksys_read+0x6c/0x100 [ 3525.431205][T18907] __arm64_sys_read+0x1c/0x28 [ 3525.431389][T18907] invoke_syscall+0x48/0x110 [ 3525.431584][T18907] el0_svc_common.constprop.0+0x40/0xe0 [ 3525.431735][T18907] do_el0_svc+0x1c/0x28 [ 3525.431976][T18907] el0_svc+0x34/0x10c [ 3525.432144][T18907] el0t_64_sync_handler+0xa0/0xe4 [ 3525.432293][T18907] el0t_64_sync+0x1a4/0x1a8 [ 3526.148763][T18917] FAULT_INJECTION: forcing a failure. [ 3526.148763][T18917] name failslab, interval 1, probability 0, space 0, times 1 [ 3526.149483][T18917] CPU: 1 UID: 0 PID: 18917 Comm: syz.1.5290 Not tainted syzkaller #0 PREEMPT [ 3526.149861][T18917] Hardware name: linux,dummy-virt (DT) [ 3526.150011][T18917] Call trace: [ 3526.150123][T18917] show_stack+0x18/0x24 (C) [ 3526.150433][T18917] dump_stack_lvl+0x78/0x90 [ 3526.150702][T18917] dump_stack+0x18/0x24 [ 3526.150937][T18917] should_fail_ex+0x1dc/0x234 [ 3526.151191][T18917] should_failslab+0x54/0x80 [ 3526.151499][T18917] __kvmalloc_node_noprof+0x114/0x528 [ 3526.151822][T18917] fuse_readdir_uncached+0x7c/0x818 [ 3526.152127][T18917] fuse_readdir+0xe8/0x5b4 [ 3526.152443][T18917] iterate_dir+0xa8/0x250 [ 3526.152758][T18917] __arm64_sys_getdents64+0x68/0x148 [ 3526.153088][T18917] invoke_syscall+0x48/0x110 [ 3526.153405][T18917] el0_svc_common.constprop.0+0x40/0xe0 [ 3526.153711][T18917] do_el0_svc+0x1c/0x28 [ 3526.153999][T18917] el0_svc+0x34/0x10c [ 3526.154291][T18917] el0t_64_sync_handler+0xa0/0xe4 [ 3526.154587][T18917] el0t_64_sync+0x1a4/0x1a8 [ 3528.764311][T18943] fuse: Bad value for 'fd' [ 3534.344404][T18972] input: syz0 as /devices/virtual/input/input103 [ 3551.580415][T19014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3551.620019][T19014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3551.713528][T19018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3551.764392][T19018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3551.845885][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3551.895624][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3559.981164][T19095] fuse: Unknown parameter 'rootmod‚' [ 3563.605837][T19135] fuse: Unknown parameter 'r' [ 3563.621427][T19135] fuse: Bad value for 'user_id' [ 3563.626582][T19135] fuse: Bad value for 'user_id' [ 3567.594686][T19161] input: syz0 as /devices/virtual/input/input110 [ 3571.170993][T19169] fuse: Bad value for 'rootmode' [ 3585.928458][T19214] input: syz0 as /devices/virtual/input/input112 [ 3606.598974][T19274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3606.606328][T19274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3607.120937][T19288] input: syz0 as /devices/virtual/input/input113 [ 3609.226656][T19291] "syz.0.5414" (19291) uses obsolete ecb(arc4) skcipher [ 3612.777632][T19318] FAULT_INJECTION: forcing a failure. [ 3612.777632][T19318] name failslab, interval 1, probability 0, space 0, times 0 [ 3612.788047][T19318] CPU: 0 UID: 0 PID: 19318 Comm: syz.0.5422 Not tainted syzkaller #0 PREEMPT [ 3612.788454][T19318] Hardware name: linux,dummy-virt (DT) [ 3612.788603][T19318] Call trace: [ 3612.788707][T19318] show_stack+0x18/0x24 (C) [ 3612.789039][T19318] dump_stack_lvl+0x78/0x90 [ 3612.789298][T19318] dump_stack+0x18/0x24 [ 3612.789544][T19318] should_fail_ex+0x1dc/0x234 [ 3612.789807][T19318] should_failslab+0x54/0x80 [ 3612.790057][T19318] kmem_cache_alloc_noprof+0x54/0x368 [ 3612.790343][T19318] getname_flags.part.0+0x2c/0x1bc [ 3612.790635][T19318] getname_flags+0x38/0x60 [ 3612.790914][T19318] do_sys_openat2+0x5c/0xe8 [ 3612.791262][T19318] __arm64_sys_openat+0x64/0xa8 [ 3612.791535][T19318] invoke_syscall+0x48/0x110 [ 3612.791854][T19318] el0_svc_common.constprop.0+0x40/0xe0 [ 3612.792132][T19318] do_el0_svc+0x1c/0x28 [ 3612.792417][T19318] el0_svc+0x34/0x10c [ 3612.792715][T19318] el0t_64_sync_handler+0xa0/0xe4 [ 3612.793040][T19318] el0t_64_sync+0x1a4/0x1a8 [ 3622.990938][T19395] "syz.0.5453" (19395) uses obsolete ecb(arc4) skcipher [ 3628.433844][T19425] input: syz0 as /devices/virtual/input/input119 [ 3648.444165][T19494] input: syz0 as /devices/virtual/input/input122 [ 3670.033931][T19555] input: syz0 as /devices/virtual/input/input124 [ 3692.819965][T19637] input: syz0 as /devices/virtual/input/input126 [ 3693.667886][T19662] input: syz0 as /devices/virtual/input/input127 [ 3727.267216][T19726] input: syz0 as /devices/virtual/input/input129 [ 3733.565149][T19793] binder: Unknown parameter 'dont_hash' [ 3762.283688][T19880] input: syz0 as /devices/virtual/input/input132 [ 3784.876017][T19978] input: syz0 as /devices/virtual/input/input133 [ 3797.009610][T20041] input: syz0 as /devices/virtual/input/input136 [ 3804.437867][T20078] input: syz0 as /devices/virtual/input/input138 [ 3804.844837][T20082] FAULT_INJECTION: forcing a failure. [ 3804.844837][T20082] name failslab, interval 1, probability 0, space 0, times 0 [ 3804.851616][T20082] CPU: 0 UID: 0 PID: 20082 Comm: syz.1.5685 Not tainted syzkaller #0 PREEMPT [ 3804.852134][T20082] Hardware name: linux,dummy-virt (DT) [ 3804.852264][T20082] Call trace: [ 3804.852371][T20082] show_stack+0x18/0x24 (C) [ 3804.852662][T20082] dump_stack_lvl+0x78/0x90 [ 3804.852971][T20082] dump_stack+0x18/0x24 [ 3804.853244][T20082] should_fail_ex+0x1dc/0x234 [ 3804.853516][T20082] should_failslab+0x54/0x80 [ 3804.853785][T20082] __kvmalloc_node_noprof+0x114/0x528 [ 3804.854071][T20082] simple_xattr_alloc+0x38/0x74 [ 3804.854368][T20082] simple_xattr_set+0x38/0x1ac [ 3804.854640][T20082] shmem_xattr_handler_set+0x184/0x1a8 [ 3804.854925][T20082] __vfs_setxattr+0xac/0xe8 [ 3804.855197][T20082] __vfs_setxattr_noperm+0x88/0x22c [ 3804.855470][T20082] __vfs_setxattr_locked+0xe0/0x120 [ 3804.855742][T20082] vfs_setxattr+0x94/0x170 [ 3804.856018][T20082] do_setxattr+0xa0/0xb8 [ 3804.856307][T20082] file_setxattr+0x64/0xb0 [ 3804.856594][T20082] path_setxattrat+0x10c/0x18c [ 3804.856970][T20082] __arm64_sys_fsetxattr+0x2c/0x3c [ 3804.857243][T20082] invoke_syscall+0x48/0x110 [ 3804.857518][T20082] el0_svc_common.constprop.0+0x40/0xe0 [ 3804.857791][T20082] do_el0_svc+0x1c/0x28 [ 3804.858069][T20082] el0_svc+0x34/0x10c [ 3804.858342][T20082] el0t_64_sync_handler+0xa0/0xe4 [ 3804.858614][T20082] el0t_64_sync+0x1a4/0x1a8 [ 3831.904366][T20211] input: syz0 as /devices/virtual/input/input140 [ 3844.597135][T20264] input: syz0 as /devices/virtual/input/input141 [ 3854.909255][T20285] lo: entered promiscuous mode [ 3854.930238][T20284] lo: left promiscuous mode [ 3859.534617][T20300] fuse: Bad value for 'fd' [ 3894.675101][ T31] audit: type=1800 audit(3894.280:2): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.5825" name="/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=18094 res=0 errno=0 [ 3895.595682][ T31] audit: type=1800 audit(3895.270:3): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.5825" name="/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=18094 res=0 errno=0 [ 3896.335328][ T31] audit: type=1800 audit(3896.020:4): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.5825" name="/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=18094 res=0 errno=0 [ 3896.740805][ T31] audit: type=1800 audit(3896.420:5): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.5825" name="/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=18094 res=0 errno=0 [ 3903.604357][T20690] input: syz0 as /devices/virtual/input/input149 [ 3906.295348][T20694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3906.298436][T20694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3906.414564][T20694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3906.444813][T20694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3906.510865][T20694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3906.541024][T20694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3906.637511][T20694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3906.670002][T20694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3927.005093][T20770] input: syz0 as /devices/virtual/input/input153 [ 3927.561011][T20774] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5880'. [ 3927.566760][T20774] ksmbd: Unknown IPC event: 0, ignore. [ 3945.100929][T20854] FAULT_INJECTION: forcing a failure. [ 3945.100929][T20854] name failslab, interval 1, probability 0, space 0, times 0 [ 3945.101649][T20854] CPU: 1 UID: 0 PID: 20854 Comm: syz.0.5900 Not tainted syzkaller #0 PREEMPT [ 3945.102106][T20854] Hardware name: linux,dummy-virt (DT) [ 3945.102247][T20854] Call trace: [ 3945.102397][T20854] show_stack+0x18/0x24 (C) [ 3945.102699][T20854] dump_stack_lvl+0x78/0x90 [ 3945.102997][T20854] dump_stack+0x18/0x24 [ 3945.103253][T20854] should_fail_ex+0x1dc/0x234 [ 3945.103528][T20854] should_failslab+0x54/0x80 [ 3945.103811][T20854] kmem_cache_alloc_node_noprof+0x5c/0x370 [ 3945.104133][T20854] __alloc_skb+0x150/0x194 [ 3945.104428][T20854] kcm_sendmsg+0x860/0x9ac [ 3945.104792][T20854] __sock_sendmsg+0x54/0x60 [ 3945.105080][T20854] sock_write_iter+0x98/0xf8 [ 3945.105383][T20854] vfs_write+0x308/0x368 [ 3945.105691][T20854] ksys_write+0xe4/0x100 [ 3945.106003][T20854] __arm64_sys_write+0x1c/0x28 [ 3945.106304][T20854] invoke_syscall+0x48/0x110 [ 3945.106597][T20854] el0_svc_common.constprop.0+0x40/0xe0 [ 3945.106923][T20854] do_el0_svc+0x1c/0x28 [ 3945.107210][T20854] el0_svc+0x34/0x10c [ 3945.107526][T20854] el0t_64_sync_handler+0xa0/0xe4 [ 3945.107808][T20854] el0t_64_sync+0x1a4/0x1a8 [ 3949.023791][T20869] input: syz0 as /devices/virtual/input/input156 [ 3955.804356][T20886] input: syz0 as /devices/virtual/input/input157 [ 3988.804993][T20974] input: syz0 as /devices/virtual/input/input159 [ 3989.166722][T20975] mmap: syz.1.5939 (20975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3994.214764][T20992] FAULT_INJECTION: forcing a failure. [ 3994.214764][T20992] name failslab, interval 1, probability 0, space 0, times 0 [ 3994.215590][T20992] CPU: 1 UID: 0 PID: 20992 Comm: syz.1.5944 Not tainted syzkaller #0 PREEMPT [ 3994.215928][T20992] Hardware name: linux,dummy-virt (DT) [ 3994.216069][T20992] Call trace: [ 3994.216179][T20992] show_stack+0x18/0x24 (C) [ 3994.216591][T20992] dump_stack_lvl+0x78/0x90 [ 3994.216943][T20992] dump_stack+0x18/0x24 [ 3994.217218][T20992] should_fail_ex+0x1dc/0x234 [ 3994.217525][T20992] should_failslab+0x54/0x80 [ 3994.217879][T20992] kmem_cache_alloc_node_noprof+0x5c/0x370 [ 3994.218196][T20992] __alloc_skb+0x150/0x194 [ 3994.218484][T20992] alloc_skb_with_frags+0x50/0x1e8 [ 3994.218779][T20992] sock_alloc_send_pskb+0x284/0x2b4 [ 3994.219029][T20992] unix_dgram_sendmsg+0x110/0x7d0 [ 3994.219307][T20992] unix_seqpacket_sendmsg+0x40/0x7c [ 3994.219672][T20992] __sock_sendmsg+0x54/0x60 [ 3994.220070][T20992] sock_write_iter+0x98/0xf8 [ 3994.220462][T20992] vfs_write+0x308/0x368 [ 3994.220946][T20992] ksys_write+0xe4/0x100 [ 3994.221294][T20992] __arm64_sys_write+0x1c/0x28 [ 3994.221613][T20992] invoke_syscall+0x48/0x110 [ 3994.222121][T20992] el0_svc_common.constprop.0+0x40/0xe0 [ 3994.222460][T20992] do_el0_svc+0x1c/0x28 [ 3994.222795][T20992] el0_svc+0x34/0x10c [ 3994.223171][T20992] el0t_64_sync_handler+0xa0/0xe4 [ 3994.223645][T20992] el0t_64_sync+0x1a4/0x1a8 [ 3999.128200][T21023] FAULT_INJECTION: forcing a failure. [ 3999.128200][T21023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3999.137170][T21023] CPU: 0 UID: 0 PID: 21023 Comm: syz.1.5955 Not tainted syzkaller #0 PREEMPT [ 3999.137628][T21023] Hardware name: linux,dummy-virt (DT) [ 3999.137768][T21023] Call trace: [ 3999.137883][T21023] show_stack+0x18/0x24 (C) [ 3999.138166][T21023] dump_stack_lvl+0x78/0x90 [ 3999.138437][T21023] dump_stack+0x18/0x24 [ 3999.138682][T21023] should_fail_ex+0x1dc/0x234 [ 3999.138945][T21023] should_fail+0x14/0x24 [ 3999.139183][T21023] should_fail_usercopy+0x1c/0x28 [ 3999.139437][T21023] simple_read_from_buffer+0x5c/0x138 [ 3999.139713][T21023] proc_fail_nth_read+0xac/0x134 [ 3999.140001][T21023] vfs_read+0xc0/0x318 [ 3999.140304][T21023] ksys_read+0x6c/0x100 [ 3999.140574][T21023] __arm64_sys_read+0x1c/0x28 [ 3999.140894][T21023] invoke_syscall+0x48/0x110 [ 3999.141179][T21023] el0_svc_common.constprop.0+0x40/0xe0 [ 3999.141461][T21023] do_el0_svc+0x1c/0x28 [ 3999.141878][T21023] el0_svc+0x34/0x10c [ 3999.142235][T21023] el0t_64_sync_handler+0xa0/0xe4 [ 3999.142528][T21023] el0t_64_sync+0x1a4/0x1a8 [ 4024.128100][T21139] 8021q: VLANs not supported on sit0 [ 4024.135406][T21138] 8021q: VLANs not supported on sit0 [ 4032.507193][T21209] input: syz0 as /devices/virtual/input/input160 [ 4051.853920][T21283] input: syz0 as /devices/virtual/input/input162 [ 4059.767146][T21323] input: syz0 as /devices/virtual/input/input163 [ 4075.761670][T21414] input: syz0 as /devices/virtual/input/input164 [ 4076.624133][T21431] fuse: Bad value for 'fd' [ 4077.009078][T21437] input: syz0 as /devices/virtual/input/input165 [ 4104.224073][T21487] input: syz0 as /devices/virtual/input/input166 [ 4120.819794][T21543] fuse: Bad value for 'fd' [ 4123.631021][T21557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4123.636160][T21557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4124.670013][T21570] input: syz0 as /devices/virtual/input/input167 [ 4133.189397][T21607] input: syz0 as /devices/virtual/input/input168 [ 4144.416961][T21614] FAULT_INJECTION: forcing a failure. [ 4144.416961][T21614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4144.417626][T21614] CPU: 0 UID: 0 PID: 21614 Comm: syz.0.6102 Not tainted syzkaller #0 PREEMPT [ 4144.417957][T21614] Hardware name: linux,dummy-virt (DT) [ 4144.418098][T21614] Call trace: [ 4144.418239][T21614] show_stack+0x18/0x24 (C) [ 4144.418566][T21614] dump_stack_lvl+0x78/0x90 [ 4144.418846][T21614] dump_stack+0x18/0x24 [ 4144.419116][T21614] should_fail_ex+0x1dc/0x234 [ 4144.419410][T21614] should_fail+0x14/0x24 [ 4144.419716][T21614] should_fail_usercopy+0x1c/0x28 [ 4144.419988][T21614] _inline_copy_from_user.constprop.0+0x24/0xc8 [ 4144.420270][T21614] __arm64_sys_signalfd4+0x3c/0x90 [ 4144.420551][T21614] invoke_syscall+0x48/0x110 [ 4144.420861][T21614] el0_svc_common.constprop.0+0x40/0xe0 [ 4144.421116][T21614] do_el0_svc+0x1c/0x28 [ 4144.421348][T21614] el0_svc+0x34/0x10c [ 4144.421583][T21614] el0t_64_sync_handler+0xa0/0xe4 [ 4144.421882][T21614] el0t_64_sync+0x1a4/0x1a8 [ 4149.817745][T21661] input: syz0 as /devices/virtual/input/input169 [ 4163.781266][T21679] input: syz0 as /devices/virtual/input/input170 [ 4169.764492][T21696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6119'. [ 4178.209600][T21739] input: syz0 as /devices/virtual/input/input171 [ 4191.294836][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4191.325005][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4191.900140][T21769] input: syz0 as /devices/virtual/input/input172 [ 4198.169135][T21804] can: request_module (can-proto-3) failed. [ 4236.578444][T22104] input: syz0 as /devices/virtual/input/input175 [ 4257.958348][T22185] input: syz0 as /devices/virtual/input/input176 [ 4273.587533][T22228] binder: Bad value for 'max' [ 4273.618931][T22229] binder: Bad value for 'max' [ 4280.563422][T22271] input: syz0 as /devices/virtual/input/input177 [ 4325.121447][T22517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4329.795484][T22551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4329.807515][T22551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4333.988551][T22612] "syz.0.6355" (22612) uses obsolete ecb(arc4) skcipher [ 4340.388829][T22679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6371'. [ 4341.285644][T22695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6376'. [ 4342.536791][T22711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6381'. [ 4363.275170][T22870] input: syz0 as /devices/virtual/input/input185 [ 4374.707320][T22973] input: syz0 as /devices/virtual/input/input186 [ 4384.503673][T23054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6457'. [ 4384.556512][T23054] FAULT_INJECTION: forcing a failure. [ 4384.556512][T23054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4384.557392][T23054] CPU: 1 UID: 0 PID: 23054 Comm: syz.0.6457 Not tainted syzkaller #0 PREEMPT [ 4384.557691][T23054] Hardware name: linux,dummy-virt (DT) [ 4384.557822][T23054] Call trace: [ 4384.557926][T23054] show_stack+0x18/0x24 (C) [ 4384.558201][T23054] dump_stack_lvl+0x78/0x90 [ 4384.558456][T23054] dump_stack+0x18/0x24 [ 4384.558735][T23054] should_fail_ex+0x1dc/0x234 [ 4384.558980][T23054] should_fail+0x14/0x24 [ 4384.559236][T23054] should_fail_usercopy+0x1c/0x28 [ 4384.559492][T23054] _inline_copy_from_user+0x24/0xb0 [ 4384.559771][T23054] copy_msghdr_from_user+0x54/0xcc [ 4384.560077][T23054] ___sys_sendmsg+0x8c/0x100 [ 4384.560358][T23054] __sys_sendmsg+0x98/0xf8 [ 4384.560657][T23054] __arm64_sys_sendmsg+0x24/0x30 [ 4384.560950][T23054] invoke_syscall+0x48/0x110 [ 4384.561227][T23054] el0_svc_common.constprop.0+0x40/0xe0 [ 4384.561486][T23054] do_el0_svc+0x1c/0x28 [ 4384.561854][T23054] el0_svc+0x34/0x10c [ 4384.562168][T23054] el0t_64_sync_handler+0xa0/0xe4 [ 4384.562483][T23054] el0t_64_sync+0x1a4/0x1a8 [ 4390.053425][T23118] input: syz0 as /devices/virtual/input/input187 [ 4393.337832][T23135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4393.377481][T23135] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 4395.394640][T23161] FAULT_INJECTION: forcing a failure. [ 4395.394640][T23161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4395.395289][T23161] CPU: 1 UID: 0 PID: 23161 Comm: syz.0.6480 Not tainted syzkaller #0 PREEMPT [ 4395.395490][T23161] Hardware name: linux,dummy-virt (DT) [ 4395.395572][T23161] Call trace: [ 4395.395632][T23161] show_stack+0x18/0x24 (C) [ 4395.395804][T23161] dump_stack_lvl+0x78/0x90 [ 4395.395979][T23161] dump_stack+0x18/0x24 [ 4395.396130][T23161] should_fail_ex+0x1dc/0x234 [ 4395.396300][T23161] should_fail+0x14/0x24 [ 4395.396462][T23161] should_fail_usercopy+0x1c/0x28 [ 4395.396642][T23161] simple_read_from_buffer+0x5c/0x138 [ 4395.396898][T23161] proc_fail_nth_read+0xac/0x134 [ 4395.397067][T23161] vfs_read+0xc0/0x318 [ 4395.397237][T23161] ksys_read+0x6c/0x100 [ 4395.397402][T23161] __arm64_sys_read+0x1c/0x28 [ 4395.397576][T23161] invoke_syscall+0x48/0x110 [ 4395.397739][T23161] el0_svc_common.constprop.0+0x40/0xe0 [ 4395.397942][T23161] do_el0_svc+0x1c/0x28 [ 4395.398118][T23161] el0_svc+0x34/0x10c [ 4395.398297][T23161] el0t_64_sync_handler+0xa0/0xe4 [ 4395.398470][T23161] el0t_64_sync+0x1a4/0x1a8 [ 4395.928189][T23166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4395.968311][T23166] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 4398.169158][T23193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4398.201738][T23193] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 4402.824320][T23228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4404.028575][T23244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 4414.457081][T23266] input: syz0 as /devices/virtual/input/input188 [ 4429.328398][T23281] input: syz0 as /devices/virtual/input/input189 [ 4439.244673][T23301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4439.283410][T23301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4443.455945][T23317] ucma_write: process 9617 (syz.1.6513) changed security contexts after opening file descriptor, this is not allowed. [ 4450.378276][T23365] input: syz0 as /devices/virtual/input/input190 [ 4460.803298][T23393] 8021q: VLANs not supported on xfrm0 [ 4473.789305][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6555'. [ 4475.460204][T23494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6560'. [ 4480.623224][T23534] FAULT_INJECTION: forcing a failure. [ 4480.623224][T23534] name failslab, interval 1, probability 0, space 0, times 0 [ 4480.623761][T23534] CPU: 0 UID: 0 PID: 23534 Comm: syz.0.6570 Not tainted syzkaller #0 PREEMPT [ 4480.624085][T23534] Hardware name: linux,dummy-virt (DT) [ 4480.624225][T23534] Call trace: [ 4480.624376][T23534] show_stack+0x18/0x24 (C) [ 4480.624690][T23534] dump_stack_lvl+0x78/0x90 [ 4480.625054][T23534] dump_stack+0x18/0x24 [ 4480.625376][T23534] should_fail_ex+0x1dc/0x234 [ 4480.625639][T23534] should_failslab+0x54/0x80 [ 4480.625941][T23534] __kmalloc_noprof+0xa8/0x430 [ 4480.626215][T23534] tomoyo_realpath_from_path+0x44/0x1b4 [ 4480.626498][T23534] tomoyo_path_number_perm+0xd8/0x20c [ 4480.626832][T23534] tomoyo_file_ioctl+0x1c/0x28 [ 4480.627101][T23534] security_file_ioctl+0x8c/0x19c [ 4480.627398][T23534] __arm64_sys_ioctl+0x48/0x104 [ 4480.627710][T23534] invoke_syscall+0x48/0x110 [ 4480.628047][T23534] el0_svc_common.constprop.0+0x40/0xe0 [ 4480.628424][T23534] do_el0_svc+0x1c/0x28 [ 4480.628660][T23534] el0_svc+0x34/0x10c [ 4480.629010][T23534] el0t_64_sync_handler+0xa0/0xe4 [ 4480.629266][T23534] el0t_64_sync+0x1a4/0x1a8 [ 4480.636562][T23534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4483.857654][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4483.868623][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4484.019012][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4484.074100][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4484.541231][T23570] FAULT_INJECTION: forcing a failure. [ 4484.541231][T23570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4484.543259][T23570] CPU: 0 UID: 0 PID: 23570 Comm: syz.1.6580 Not tainted syzkaller #0 PREEMPT [ 4484.543586][T23570] Hardware name: linux,dummy-virt (DT) [ 4484.543711][T23570] Call trace: [ 4484.543824][T23570] show_stack+0x18/0x24 (C) [ 4484.544140][T23570] dump_stack_lvl+0x78/0x90 [ 4484.544432][T23570] dump_stack+0x18/0x24 [ 4484.544777][T23570] should_fail_ex+0x1dc/0x234 [ 4484.545066][T23570] should_fail+0x14/0x24 [ 4484.545345][T23570] should_fail_usercopy+0x1c/0x28 [ 4484.545632][T23570] simple_read_from_buffer+0x5c/0x138 [ 4484.545902][T23570] proc_fail_nth_read+0xac/0x134 [ 4484.546194][T23570] vfs_read+0xc0/0x318 [ 4484.546462][T23570] ksys_read+0x6c/0x100 [ 4484.546731][T23570] __arm64_sys_read+0x1c/0x28 [ 4484.546988][T23570] invoke_syscall+0x48/0x110 [ 4484.547264][T23570] el0_svc_common.constprop.0+0x40/0xe0 [ 4484.547561][T23570] do_el0_svc+0x1c/0x28 [ 4484.547844][T23570] el0_svc+0x34/0x10c [ 4484.548126][T23570] el0t_64_sync_handler+0xa0/0xe4 [ 4484.548421][T23570] el0t_64_sync+0x1a4/0x1a8 [ 4485.000708][T23574] input: syz0 as /devices/virtual/input/input191 [ 4517.395866][T23681] FAULT_INJECTION: forcing a failure. [ 4517.395866][T23681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4517.404269][T23681] CPU: 1 UID: 0 PID: 23681 Comm: syz.0.6613 Not tainted syzkaller #0 PREEMPT [ 4517.404682][T23681] Hardware name: linux,dummy-virt (DT) [ 4517.404865][T23681] Call trace: [ 4517.404981][T23681] show_stack+0x18/0x24 (C) [ 4517.405302][T23681] dump_stack_lvl+0x78/0x90 [ 4517.405591][T23681] dump_stack+0x18/0x24 [ 4517.405864][T23681] should_fail_ex+0x1dc/0x234 [ 4517.406139][T23681] should_fail+0x14/0x24 [ 4517.406407][T23681] should_fail_usercopy+0x1c/0x28 [ 4517.406684][T23681] simple_read_from_buffer+0x5c/0x138 [ 4517.406962][T23681] proc_fail_nth_read+0xac/0x134 [ 4517.407238][T23681] vfs_read+0xc0/0x318 [ 4517.407488][T23681] ksys_read+0x6c/0x100 [ 4517.407771][T23681] __arm64_sys_read+0x1c/0x28 [ 4517.408045][T23681] invoke_syscall+0x48/0x110 [ 4517.408324][T23681] el0_svc_common.constprop.0+0x40/0xe0 [ 4517.408610][T23681] do_el0_svc+0x1c/0x28 [ 4517.408921][T23681] el0_svc+0x34/0x10c [ 4517.409202][T23681] el0t_64_sync_handler+0xa0/0xe4 [ 4517.409471][T23681] el0t_64_sync+0x1a4/0x1a8 [ 4524.077070][ C1] vkms_vblank_simulate: vblank timer overrun [ 4563.380541][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4563.396395][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4563.515326][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4563.527902][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4563.554299][T23749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4563.566545][T23749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4571.378691][T23810] nvme_fabrics: unknown parameter or missing value 'eÉ