last executing test programs: 5.391503133s ago: executing program 1 (id=5106): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') getdents64(r0, 0xffffffffffffffff, 0x43) 5.341435288s ago: executing program 1 (id=5107): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000005c0)={0x2810, 0x1, [{0xc, 0x1}]}) 5.279907142s ago: executing program 1 (id=5108): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x894) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) 2.691567296s ago: executing program 1 (id=5121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) ioctl$KDSIGACCEPT(r0, 0x5607, 0x11) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='high-speed\n\x00', 0xb) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x3, 0x2, 0xc}) truncate(&(0x7f0000000000)='./file1\x00', 0x40) truncate(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff01) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000008000000000000000400000073110f000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.478631227s ago: executing program 0 (id=5126): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0xffffffff) 1.393158512s ago: executing program 0 (id=5127): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x1) syz_usb_connect$midi(0x3, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040392ad43f40000102030109022f0001012f10090904000001010330070905090208000107f7142501d6"], 0x0) 529.412647ms ago: executing program 0 (id=5128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/25, 0x19) 389.75204ms ago: executing program 0 (id=5129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@deltaction={0x94, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffe89, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x12}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x254}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 239.649441ms ago: executing program 0 (id=5130): r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f00000001c0)=':2:\xff\xff.0.1\x00F^\xff\x13\x88/\xe8\xdc\xd1\x942\x0f\xaf\x12TDH\xee\xc6\b\xfc\xec\x15\x00\x00\x00\x00\x1b\b\xe7>\x9b\x9f\xb2\xd2\x88!*\xaa\xe1TSk\xdc\\\x83&\xe1$\xca\x8cv\xc0\xbc\x00\xeco\x87\xf4/D\xb2\xae\b\xd33H\xd6\x0f\xc6\x9c\x9c}\xcf\xacI\x02\x9c\xc6\x1d\xc6\x1c\xbf|\xff5]\x05d\x10\x12|\x81\x7f\xbb\xcb\xd3\x01\x1d\x93\xb7o\xe5\xd1\x83\x16\xcc\xf5A[w\x02|\xd7\x13I\xd5\xed0`U!\x14\n\xceG\x921\xbc\xfc\x87\x06\xeb=\xb9\xdf\x882gvK\xd38\xd1A\x12\xb5\xa1,e\x1a\xf8\xf7~\xc3\x15#\xb3\x10\xd4i\xd2]\xaf\x04\x16\x91\\\"\xbb\x90\x82\xde\xaa\x7f\xd8\xdc\xc9n\xad\xe8E\xec\x7f\xe9\xa2\xc2\x00&M7\a\xfe8k* S\xfd\x85\x9d\x05\xe2R\xaa*\xe7f|\x1dO\xe9\nK\xe7{y\x00\xc4#\x88A\xe2\xbaE\xff\xae;\xd9\x9aL\xc6\xbd\x8c\x8e\xb6\xd3\x87\'t)\xa3\x7f#+7 HID v0.00 Device [syz1] on syz0 [ 2981.197399][T16063] fido_id[16063]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3006.066748][T16150] serio: Serial port ptm0 [ 3007.010716][T16158] fuse: fd is not a fuse device [ 3014.465359][T16179] fuse: fd is not a fuse device [ 3017.931023][T16185] fuse: fd is not a fuse device [ 3018.024844][T16187] fuse: fd is not a fuse device [ 3022.518685][T16202] fuse: fd is not a fuse device [ 3022.950143][ T9529] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3022.968124][ T9529] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3025.817538][T16227] fuse: fd is not a fuse device [ 3025.913782][T16229] fuse: fd is not a fuse device [ 3025.994681][T16231] fuse: fd is not a fuse device [ 3026.069009][T16233] fuse: fd is not a fuse device [ 3030.171224][T16259] input: syz0 as /devices/virtual/input/input16 [ 3030.705472][T16262] fuse: fd is not a fuse device [ 3042.676401][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3042.677500][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.794589][T16281] fuse: fd is not a fuse device [ 3052.446204][T16369] fuse: fd is not a fuse device [ 3053.050192][T16372] fuse: Bad value for 'fd' [ 3053.402474][T16374] FAULT_INJECTION: forcing a failure. [ 3053.402474][T16374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3053.402686][T16374] CPU: 1 UID: 0 PID: 16374 Comm: syz.1.4394 Not tainted syzkaller #0 PREEMPT [ 3053.402739][T16374] Hardware name: linux,dummy-virt (DT) [ 3053.402761][T16374] Call trace: [ 3053.402779][T16374] show_stack+0x18/0x24 (C) [ 3053.402859][T16374] dump_stack_lvl+0x60/0x80 [ 3053.402908][T16374] dump_stack+0x18/0x24 [ 3053.402942][T16374] should_fail_ex+0x1e0/0x238 [ 3053.402983][T16374] should_fail+0x14/0x40 [ 3053.403019][T16374] should_fail_usercopy+0x1c/0x40 [ 3053.403056][T16374] _inline_copy_from_user+0x24/0xa8 [ 3053.403097][T16374] copy_msghdr_from_user+0x58/0x160 [ 3053.403182][T16374] ___sys_sendmsg+0x90/0x108 [ 3053.403221][T16374] __sys_sendmsg+0x9c/0x100 [ 3053.403287][T16374] __arm64_sys_sendmsg+0x24/0x38 [ 3053.403329][T16374] invoke_syscall+0x54/0x10c [ 3053.403384][T16374] el0_svc_common.constprop.0+0x40/0xe0 [ 3053.403430][T16374] do_el0_svc+0x1c/0x34 [ 3053.403489][T16374] el0_svc+0x38/0x1fc [ 3053.403560][T16374] el0t_64_sync_handler+0xa0/0xf0 [ 3053.403621][T16374] el0t_64_sync+0x1a4/0x1a8 [ 3053.988372][T16376] FAULT_INJECTION: forcing a failure. [ 3053.988372][T16376] name failslab, interval 1, probability 0, space 0, times 1 [ 3053.988758][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.1.4395 Not tainted syzkaller #0 PREEMPT [ 3053.988860][T16376] Hardware name: linux,dummy-virt (DT) [ 3053.988904][T16376] Call trace: [ 3053.988945][T16376] show_stack+0x18/0x24 (C) [ 3053.989099][T16376] dump_stack_lvl+0x60/0x80 [ 3053.989180][T16376] dump_stack+0x18/0x24 [ 3053.989338][T16376] should_fail_ex+0x1e0/0x238 [ 3053.989432][T16376] should_failslab+0x54/0x80 [ 3053.989511][T16376] __kmalloc_noprof+0xac/0x528 [ 3053.989589][T16376] tomoyo_realpath_from_path+0x44/0x1d4 [ 3053.989690][T16376] tomoyo_path_number_perm+0xe0/0x21c [ 3053.989772][T16376] tomoyo_file_ioctl+0x1c/0x30 [ 3053.989893][T16376] security_file_ioctl+0x8c/0x19c [ 3053.989981][T16376] __arm64_sys_ioctl+0x48/0x104 [ 3053.990060][T16376] invoke_syscall+0x54/0x10c [ 3053.990152][T16376] el0_svc_common.constprop.0+0x40/0xe0 [ 3053.990225][T16376] do_el0_svc+0x1c/0x34 [ 3053.990299][T16376] el0_svc+0x38/0x1fc [ 3053.990436][T16376] el0t_64_sync_handler+0xa0/0xf0 [ 3053.990510][T16376] el0t_64_sync+0x1a4/0x1a8 [ 3053.991131][T16376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3054.664983][T16390] "syz.1.4398" (16390) uses obsolete ecb(arc4) skcipher [ 3055.271219][T16400] fuse: fd is not a fuse device [ 3056.708222][T16433] x_tables: duplicate underflow at hook 1 [ 3057.350446][T16436] FAULT_INJECTION: forcing a failure. [ 3057.350446][T16436] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.352736][T16436] CPU: 0 UID: 0 PID: 16436 Comm: syz.1.4412 Not tainted syzkaller #0 PREEMPT [ 3057.352866][T16436] Hardware name: linux,dummy-virt (DT) [ 3057.352910][T16436] Call trace: [ 3057.352945][T16436] show_stack+0x18/0x24 (C) [ 3057.353053][T16436] dump_stack_lvl+0x60/0x80 [ 3057.353128][T16436] dump_stack+0x18/0x24 [ 3057.353193][T16436] should_fail_ex+0x1e0/0x238 [ 3057.353280][T16436] should_failslab+0x54/0x80 [ 3057.353354][T16436] __kmalloc_noprof+0xac/0x528 [ 3057.353444][T16436] tomoyo_encode2+0x7c/0x13c [ 3057.353522][T16436] tomoyo_encode+0x28/0x40 [ 3057.353592][T16436] tomoyo_realpath_from_path+0x80/0x1d4 [ 3057.353665][T16436] tomoyo_path_number_perm+0xe0/0x21c [ 3057.353734][T16436] tomoyo_file_ioctl+0x1c/0x30 [ 3057.353805][T16436] security_file_ioctl+0x8c/0x19c [ 3057.353885][T16436] __arm64_sys_ioctl+0x48/0x104 [ 3057.353964][T16436] invoke_syscall+0x54/0x10c [ 3057.354033][T16436] el0_svc_common.constprop.0+0x40/0xe0 [ 3057.354104][T16436] do_el0_svc+0x1c/0x34 [ 3057.354172][T16436] el0_svc+0x38/0x1fc [ 3057.354254][T16436] el0t_64_sync_handler+0xa0/0xf0 [ 3057.354321][T16436] el0t_64_sync+0x1a4/0x1a8 [ 3057.367256][T16436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3058.164239][T16472] fuse: fd is not a fuse device [ 3061.607979][T16508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.635541][T16508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.416646][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.418432][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.442196][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.443514][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.444600][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.460245][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.461532][T16539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.462741][T16539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.637656][T16540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.639445][T16540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3077.266828][ T108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3077.381875][ T108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3077.482849][ T108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3077.597827][ T108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3078.430494][ T108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3078.461044][ T108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3078.492975][ T108] bond0 (unregistering): Released all slaves [ 3078.715418][ T108] hsr_slave_0: left promiscuous mode [ 3078.718801][ T108] hsr_slave_1: left promiscuous mode [ 3078.730898][ T108] veth1_macvtap: left promiscuous mode [ 3078.731280][ T108] veth0_macvtap: left promiscuous mode [ 3078.731533][ T108] veth1_vlan: left promiscuous mode [ 3080.511972][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3081.082562][T16611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3081.119104][T16611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3081.523286][T16676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3081.524466][T16676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3081.621043][ T3216] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3082.269818][T16611] hsr_slave_0: entered promiscuous mode [ 3082.273914][T16611] hsr_slave_1: entered promiscuous mode [ 3082.277324][T16611] debugfs: 'hsr0' already exists in 'hsr' [ 3082.278260][T16611] Cannot create hsr debugfs directory [ 3082.485374][ T3216] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3083.115352][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3083.133410][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3083.692480][T16611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3083.738970][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3083.745318][T16611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3083.794764][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3083.808231][T16611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3083.833164][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3083.843219][T16611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3083.875048][T16611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3085.099949][T16611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3089.273617][T16611] veth0_vlan: entered promiscuous mode [ 3089.343646][T16611] veth1_vlan: entered promiscuous mode [ 3089.561952][T16611] veth0_macvtap: entered promiscuous mode [ 3089.616043][T16611] veth1_macvtap: entered promiscuous mode [ 3089.900990][T12003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3089.901490][T12003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3089.901800][T12003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3089.901931][T12003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3090.602419][ T108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3090.728487][ T108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3090.858847][ T108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3090.999354][ T108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3091.552860][ T108] pimreg: left allmulticast mode [ 3092.097026][ T108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3092.143207][ T108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3092.188491][ T108] bond0 (unregistering): Released all slaves [ 3092.395447][ T108] hsr_slave_0: left promiscuous mode [ 3092.403174][ T108] hsr_slave_1: left promiscuous mode [ 3092.424360][ T108] veth1_macvtap: left promiscuous mode [ 3092.424713][ T108] veth0_macvtap: left promiscuous mode [ 3092.426593][ T108] veth1_vlan: left promiscuous mode [ 3092.427568][ T108] veth0_vlan: left promiscuous mode [ 3094.517584][ T3216] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3095.763529][T16802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3095.801562][T16802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3096.142081][ T3216] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3096.968586][T16802] hsr_slave_0: entered promiscuous mode [ 3096.971588][T16802] hsr_slave_1: entered promiscuous mode [ 3097.083395][T16897] syzkaller0: entered promiscuous mode [ 3097.083779][T16897] syzkaller0: entered allmulticast mode [ 3097.265360][ T3216] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3098.373148][T16918] netlink: 'syz.0.4514': attribute type 4 has an invalid length. [ 3098.626142][T16802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3098.722196][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3098.732919][T16802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3098.760011][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3098.765360][T16802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3098.779496][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3098.785150][T16802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3098.800168][T16802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3098.836511][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3099.013393][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3099.042423][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 3099.042765][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3099.043023][ T9] usb 1-1: Product: syz [ 3099.043090][ T9] usb 1-1: Manufacturer: syz [ 3099.083581][ T9] usb_debug 1-1:1.0: debug converter detected [ 3099.127654][ T9] usb 1-1: debug converter now attached to ttyUSB0 [ 3099.331617][ T9] usb 1-1: USB disconnect, device number 9 [ 3099.362784][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 3099.396046][ T9] usb_debug 1-1:1.0: device disconnected [ 3100.003853][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3101.278824][ T108] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3101.279208][ T108] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3101.279377][ T108] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3101.279516][ T108] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.023389][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'. [ 3102.340271][T16979] syzkaller0: entered promiscuous mode [ 3102.346324][T16979] syzkaller0: entered allmulticast mode [ 3103.032037][T16995] ubi0: attaching mtd0 [ 3103.033093][T16995] ubi0 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 3103.421523][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3103.586665][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 3103.677636][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 3103.678053][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3103.703629][ T9] usb 1-1: config 0 descriptor?? [ 3103.980412][ T9] usb 1-1: USB disconnect, device number 10 [ 3104.381689][T17026] syz_tun: entered allmulticast mode [ 3104.390329][T17026] lo: entered allmulticast mode [ 3104.404461][T17025] syz_tun: left allmulticast mode [ 3104.768764][T16802] veth0_vlan: entered promiscuous mode [ 3104.810047][T16802] veth1_vlan: entered promiscuous mode [ 3104.954933][T16802] veth0_macvtap: entered promiscuous mode [ 3104.979827][T16802] veth1_macvtap: entered promiscuous mode [ 3105.121397][ T108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3105.123178][ T108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3105.134499][ T108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3105.136956][ T108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3105.997871][T17049] macvlan0: entered allmulticast mode [ 3106.000430][T17049] veth1_vlan: entered allmulticast mode [ 3106.099594][T17051] input: syz0 as /devices/virtual/input/input18 [ 3107.686175][T15000] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3107.868330][T15000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3107.868743][T15000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3107.869152][T15000] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3107.869364][T15000] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3107.869441][T15000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.879558][T15000] usb 1-1: config 0 descriptor?? [ 3108.303698][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304018][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304281][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304333][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304369][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304404][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304438][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304473][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304508][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.304542][T15000] hid-generic 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3108.328621][T15000] hid-generic 0003:047F:FFFF.0003: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3108.516345][T15000] usb 1-1: USB disconnect, device number 11 [ 3109.086125][T17069] syzkaller0: entered promiscuous mode [ 3109.087484][T17069] syzkaller0: entered allmulticast mode [ 3109.161428][T17058] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3109.162246][T17058] block device autoloading is deprecated and will be removed. [ 3109.292453][T17072] binder: 17071:17072 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3109.301766][T17072] binder: 17071:17072 got transaction to invalid handle, 1 [ 3109.302149][T17072] binder: 17071:17072 cannot find target node [ 3109.303512][T17072] binder: 17071:17072 transaction call to 0:0 failed 2/29201/-22, code 0 size 72-24 line 3252 [ 3109.811792][T15000] binder: undelivered TRANSACTION_ERROR: 29201 [ 3114.168762][T17135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3114.171623][T17135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3114.712385][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 3115.587743][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.591127][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3119.503947][T17181] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 3119.503947][T17181] The task syz.0.4581 (17181) triggered the difference, watch for misbehavior. [ 3120.914889][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4582'. [ 3121.069083][T17184] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4582'. [ 3123.292501][ T28] audit: type=1107 audit(2000002257.920:4): pid=17219 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 3124.427563][T17224] mmap: syz.0.4586 (17224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3127.492962][T17259] ip6tnl1: entered allmulticast mode [ 3127.500908][T15256] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3127.503465][T15256] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3127.528806][ T9529] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3127.886865][T15929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3128.407436][T15929] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3129.110693][T17274] 8021q: VLANs not supported on sit0 [ 3130.603800][T17293] Illegal XDP return value 4294967294 on prog (id 85) dev syz_tun, expect packet loss! [ 3131.766720][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3132.870777][T17315] coredump: 150(syz.1.4637): Core dump to core aborted: cannot preserve file permissions [ 3133.262836][T17319] syzkaller0: entered promiscuous mode [ 3133.263136][T17319] syzkaller0: entered allmulticast mode [ 3140.486676][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3146.098378][T17392] syzkaller0: entered promiscuous mode [ 3146.099892][T17392] syzkaller0: entered allmulticast mode [ 3151.901939][T17460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4701'. [ 3156.486880][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3156.535415][ T28] audit: type=1326 audit(2000002291.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.546061][ T28] audit: type=1326 audit(2000002291.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.556473][ T28] audit: type=1326 audit(2000002291.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.556976][ T28] audit: type=1326 audit(2000002291.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.557187][ T28] audit: type=1326 audit(2000002291.170:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.557398][ T28] audit: type=1326 audit(2000002291.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3156.557595][ T28] audit: type=1326 audit(2000002291.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17513 comm="syz.0.4723" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3158.316245][ T28] audit: type=1326 audit(2000002292.940:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17540 comm="syz.0.4735" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3158.319733][ T28] audit: type=1326 audit(2000002292.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17540 comm="syz.0.4735" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3158.332759][ T28] audit: type=1326 audit(2000002292.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17540 comm="syz.0.4735" exe="/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff8bd77fe8 code=0x7ffc0000 [ 3158.414463][T17544] fuse: Unknown parameter '0x0000000000000003' [ 3161.629607][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4741'. [ 3161.691352][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4741'. [ 3161.859707][T17561] xt_connbytes: Forcing CT accounting to be enabled [ 3163.941333][T17586] xt_hashlimit: size too large, truncated to 1048576 [ 3164.894965][T17609] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4762'. [ 3169.999345][T17652] syzkaller0: entered promiscuous mode [ 3170.000616][T17652] syzkaller0: entered allmulticast mode [ 3176.216127][ T9529] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 3176.374917][ T9529] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 3176.388542][ T9529] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 3176.388827][ T9529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.389023][ T9529] usb 1-1: Product: syz [ 3176.389078][ T9529] usb 1-1: Manufacturer: syz [ 3176.389127][ T9529] usb 1-1: SerialNumber: syz [ 3176.620946][ T9529] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3176.626727][ T9529] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 3176.767660][ T9529] usb 1-1: USB disconnect, device number 12 [ 3176.939896][T17724] udevd[17724]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3178.367189][T17737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3178.374182][T17737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3184.131240][T17761] binder: 17760:17761 ioctl c0306201 0 returned -14 [ 3186.566792][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3190.351668][T17817] tun0: tun_chr_ioctl cmd 1074025675 [ 3190.352088][T17817] tun0: persist disabled [ 3193.336487][T15000] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3193.486638][T15000] usb 1-1: Using ep0 maxpacket: 16 [ 3193.500873][T15000] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3193.509144][T15000] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3193.509563][T15000] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3193.509862][T15000] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3193.537485][T15000] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 3193.537750][T15000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.541154][T15000] usb 1-1: Product: syz [ 3193.541541][T15000] usb 1-1: Manufacturer: syz [ 3193.541658][T15000] usb 1-1: SerialNumber: syz [ 3193.777374][T15000] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 3193.779123][T15000] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3194.262260][T15000] usb 1-1: USB disconnect, device number 13 [ 3194.471201][T17831] udevd[17831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3204.357019][T17893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3204.367206][T17893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3205.356866][T15929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3205.515452][T15929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3205.517819][T15929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3205.526880][T15929] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3205.527169][T15929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3205.527425][T15929] usb 1-1: SerialNumber: syz [ 3205.774975][T15929] usb 1-1: 0:2 : does not exist [ 3205.932522][T15929] usb 1-1: USB disconnect, device number 14 [ 3206.078620][T17905] udevd[17905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3216.016132][ T9386] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3216.166524][ T9386] usb 1-1: Using ep0 maxpacket: 32 [ 3216.181583][ T9386] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3216.181956][ T9386] usb 1-1: config 0 has no interface number 0 [ 3216.198039][ T9386] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3216.198363][ T9386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3216.199906][ T9386] usb 1-1: Product: syz [ 3216.199993][ T9386] usb 1-1: Manufacturer: syz [ 3216.200046][ T9386] usb 1-1: SerialNumber: syz [ 3216.209420][ T9386] usb 1-1: config 0 descriptor?? [ 3216.629167][ T9386] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3216.629530][ T9386] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3217.049254][ T9386] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3217.050608][ T9386] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3217.088221][ T9386] usb 1-1: USB disconnect, device number 15 [ 3217.894987][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4894'. [ 3221.596383][T15929] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3221.746571][T15929] usb 1-1: Using ep0 maxpacket: 32 [ 3221.763644][T15929] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 3221.763997][T15929] usb 1-1: config 0 has no interface number 0 [ 3221.782554][T15929] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3221.782869][T15929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.783204][T15929] usb 1-1: Product: syz [ 3221.783270][T15929] usb 1-1: Manufacturer: syz [ 3221.783327][T15929] usb 1-1: SerialNumber: syz [ 3221.793271][T15929] usb 1-1: config 0 descriptor?? [ 3222.210816][T17974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3222.215036][T17974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3222.223749][T15929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3222.224411][T15929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3223.073494][T15929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3223.074702][T15929] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 3223.104187][T15929] usb 1-1: USB disconnect, device number 16 [ 3232.619591][T18040] input: syz0 as /devices/virtual/input/input20 [ 3232.841588][T18044] netlink: 'syz.1.4926': attribute type 1 has an invalid length. [ 3232.843284][T18044] netlink: 'syz.1.4926': attribute type 2 has an invalid length. [ 3233.045375][T18049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4928'. [ 3236.915965][T18080] support for the xor transformation has been removed. [ 3246.398677][T18159] syz.0.4966 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3249.286531][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3254.681812][T18262] CUSE: unknown device info "" [ 3254.682219][T18262] CUSE: unknown device info "Ö" [ 3254.682426][T18262] CUSE: unknown device info "ÚË" [ 3254.682462][T18262] CUSE: unknown device info "" [ 3254.682520][T18262] CUSE: unknown device info "" [ 3254.682587][T18262] CUSE: unknown device info "" [ 3254.682622][T18262] CUSE: unknown device info "þ" [ 3254.682655][T18262] CUSE: unknown device info "" [ 3254.682711][T18262] CUSE: unknown device info "@" [ 3254.683775][T18262] CUSE: unknown device info "ÿ" [ 3254.683835][T18262] CUSE: unknown device info "" [ 3254.683869][T18262] CUSE: unknown device info "#Û" [ 3254.683900][T18262] CUSE: unknown device info "ÿÿÿÿ" [ 3254.683962][T18262] CUSE: unknown device info "" [ 3254.683992][T18262] CUSE: unknown device info "€" [ 3254.684089][T18262] CUSE: DEVNAME unspecified [ 3263.338469][T18369] tc_dump_action: action bad kind [ 3264.042303][T18394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.047571][T18394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3264.270042][T15637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3264.384375][T18402] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5068' sets config #7 [ 3264.588874][T15637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3266.324041][T18448] netlink: 'syz.0.5087': attribute type 1 has an invalid length. [ 3266.325065][T18448] netlink: 'syz.0.5087': attribute type 2 has an invalid length. [ 3266.326456][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5087'. [ 3266.327359][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5087'. [ 3266.864192][T18466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3266.871189][T18466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3271.277603][T18506] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 3271.680369][T18510] input: syz0 as /devices/virtual/input/input21 [ 3272.296557][T10928] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3272.458723][T10928] usb 1-1: config 6 has an invalid interface number: 32 but max is 0 [ 3272.459017][T10928] usb 1-1: config 6 has no interface number 0 [ 3272.459401][T10928] usb 1-1: config 6 interface 32 has no altsetting 0 [ 3272.478414][T10928] usb 1-1: string descriptor 0 read error: -22 [ 3272.479924][T10928] usb 1-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=14.4f [ 3272.480182][T10928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.521542][T10928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3272.629175][T10928] snd-usb-audio 1-1:6.32: probe with driver snd-usb-audio failed with error -2 [ 3272.664785][T18518] udevd[18518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3272.713512][T10928] usb 1-1: USB disconnect, device number 17 [ 3273.017207][T18526] fuse: Bad value for 'fd' [ 3274.026163][T10928] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 3274.182635][T10928] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4 [ 3274.197204][T10928] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 3274.197567][T10928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3274.197767][T10928] usb 1-1: Product: syz [ 3274.197825][T10928] usb 1-1: Manufacturer: syz [ 3274.197873][T10928] usb 1-1: SerialNumber: syz [ 3274.429618][T10928] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3274.438196][T10928] usb 1-1: unit 255 not found! [ 3274.561314][T10928] usb 1-1: USB disconnect, device number 18 [ 3274.757308][T18518] udevd[18518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3274.976603][T10928] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3275.152818][T10928] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8 [ 3275.168686][T10928] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 3275.169134][T10928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3275.170898][T10928] usb 1-1: Product: syz [ 3275.171054][T10928] usb 1-1: Manufacturer: syz [ 3275.171106][T10928] usb 1-1: SerialNumber: syz [ 3275.189330][T18554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3275.412392][T10928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3275.413086][T10928] usb 1-1: MIDIStreaming interface descriptor not found [ 3275.598306][T10928] usb 1-1: USB disconnect, device number 19 [ 3275.687161][T18559] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 3275.688883][T18559] netlink: 'syz.0.5129': attribute type 6 has an invalid length. [ 3275.692157][T18559] netlink: 'syz.0.5129': attribute type 31 has an invalid length. [ 3275.794699][T18560] udevd[18560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3275.920850][T18566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3275.924184][T18566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3276.038379][T18568] PM: hibernation: hibernation entry [ 3276.095451][T12003] Filesystems sync: 0.016 seconds [ 3276.099091][T18568] Freezing user space processes [ 3276.113660][T18568] Freezing user space processes completed (elapsed 0.008 seconds) [ 3276.114036][T18568] OOM killer disabled. [ 3276.115400][T18568] Freezing remaining freezable tasks [ 3276.120519][T18568] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 3276.132537][T18568] PM: hibernation: Preallocating image memory [ 3281.661772][T18568] PM: hibernation: Allocated 76687 pages for snapshot [ 3281.662173][T18568] PM: hibernation: Allocated 306748 kbytes in 5.52 seconds (55.57 MB/s) [ 3281.662455][T18568] printk: Suspending console(s) (use no_console_suspend to debug) [ 3281.873278][T18568] Disabling non-boot CPUs ... [ 3281.904839][T18568] psci: CPU1 killed (polled 0 ms) [ 3281.942604][T18568] hibernate: Saved 0 MTE pages [ 3281.942604][T18568] ================================================================== [ 3281.942604][T18568] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 3281.942604][T18568] Read at addr fdf000000341f100 by task syz.1.5132/18568 [ 3281.942604][T18568] Pointer tag: [fd], memory tag: [fe] [ 3281.942604][T18568] [ 3281.942604][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.1.5132 Tainted: G L syzkaller #0 PREEMPT [ 3281.942604][T18568] Tainted: [L]=SOFTLOCKUP [ 3281.942604][T18568] Hardware name: linux,dummy-virt (DT) [ 3281.942604][T18568] Call trace: [ 3281.942604][T18568] show_stack+0x18/0x24 (C) [ 3281.942604][T18568] dump_stack_lvl+0x60/0x80 [ 3281.942604][T18568] print_report+0x1c4/0x4b0 [ 3281.942604][T18568] kasan_report+0x84/0xac [ 3281.942604][T18568] __do_kernel_fault+0x1b4/0x220 [ 3281.942604][T18568] do_bad_area+0x68/0x80 [ 3281.942604][T18568] do_tag_check_fault+0x34/0x44 [ 3281.942604][T18568] do_mem_abort+0x40/0x90 [ 3281.942604][T18568] el1_abort+0x44/0x64 [ 3281.942604][T18568] el1h_64_sync_handler+0x50/0xac [ 3281.942604][T18568] el1h_64_sync+0x6c/0x70 [ 3281.942604][T18568] swsusp_save+0x2cc/0x590 (P) [ 3281.942604][T18568] swsusp_arch_suspend+0x74/0x618 [ 3281.942604][T18568] hibernation_snapshot+0x208/0x438 [ 3281.942604][T18568] hibernate+0x1cc/0x3c0 [ 3281.942604][T18568] state_store+0xe8/0xf4 [ 3281.942604][T18568] kobj_attr_store+0x18/0x34 [ 3281.942604][T18568] sysfs_kf_write+0x7c/0x98 [ 3281.942604][T18568] kernfs_fop_write_iter+0x138/0x200 [ 3281.942604][T18568] vfs_write+0x244/0x36c [ 3281.942604][T18568] ksys_write+0x70/0x108 [ 3281.942604][T18568] __arm64_sys_write+0x1c/0x30 [ 3281.942604][T18568] invoke_syscall+0x54/0x10c [ 3281.942604][T18568] el0_svc_common.constprop.0+0x40/0xe0 [ 3281.942604][T18568] do_el0_svc+0x1c/0x34 [ 3281.942604][T18568] el0_svc+0x38/0x1fc [ 3281.942604][T18568] el0t_64_sync_handler+0xa0/0xf0 [ 3281.942604][T18568] el0t_64_sync+0x1a4/0x1a8 [ 3281.942604][T18568] [ 3281.942604][T18568] The buggy address belongs to the physical page: [ 3281.942604][T18568] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 3281.942604][T18568] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3281.942604][T18568] flags: 0x1ffc80000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x2) [ 3281.942604][T18568] page_type: f8(unknown) [ 3281.942604][T18568] raw: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 3281.942604][T18568] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 3281.942604][T18568] head: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 3281.942604][T18568] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 3281.942604][T18568] head: 01ffc80000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 3281.942604][T18568] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 3281.942604][T18568] page dumped because: kasan: bad access detected [ 3281.942604][T18568] [ 3281.942604][T18568] Memory state around the buggy address: [ 3281.942604][T18568] fff000000341ef00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 3281.942604][T18568] fff000000341f000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 3281.942604][T18568] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3281.942604][T18568] ^ [ 3281.942604][T18568] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3281.942604][T18568] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 3281.942604][T18568] ================================================================== [ 3281.942604][T18568] Disabling lock debugging due to kernel taint [ 3281.966144][T18568] Enabling non-boot CPUs ... [ 3281.988949][ T0] Detected PIPT I-cache on CPU1 [ 3281.992675][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 3282.009331][T18568] CPU1 is up [ 3282.070783][T15577] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 3282.251270][T18568] PM: Cannot find swap device, try swapon -a [ 3282.252764][T18568] PM: Cannot get swap writer [ 3283.768520][T18568] OOM killer enabled. [ 3283.768921][T18568] Restarting tasks: Starting [ 3283.817969][T18568] Restarting tasks: Done [ 3283.819714][T18568] PM: hibernation: hibernation exit SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: 19:38:10 Registers: info registers vcpu 0 CPU#0 PC=ffff800080dd9834 X00=0000000000000000 X01=0000000000000000 X02=0000000000000380 X03=000000000000000c X04=00000000ffffffff X05=0000000000000027 X06=0000000000000023 X07=0000000000000023 X08=f0f00000048d867c X09=0000000000000078 X10=22e9dc238a81744b X11=00000000000000c0 X12=000000000000005a X13=000000000000000a X14=000000000000000a X15=0000000000000000 X16=ffff800082ef8000 X17=fff07ffffcd88000 X18=0000000000000000 X19=f7f000000b931b00 X20=f4f000000856c000 X21=f5f000000ebc0000 X22=ffffc1ffc0215b00 X23=000000000000005a X24=0000000000000600 X25=000000000000000c X26=000000000000000c X27=f0f0000003ee4b40 X28=f4f000000856c00c X29=ffff800082efbb40 X30=ffff800080dd981c SP=ffff800082efbb40 PSTATE=60402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2467736d646e6573:0000000000000043 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffffffff00 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000fffffff0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffffffffff00:ff00000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fffffff0f0000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffff8ccdcac0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff8ccdcaf0:0000ffff8ccdcaf0 info registers vcpu 1 CPU#1 PC=ffff8000809af29c X00=0000000000000002 X01=0000000000000030 X02=ffff800082f21030 X03=ffff800082cbc6b8 X04=0000000000000001 X05=ffff800082cbc6e8 X06=ffff800082cbc788 X07=0000000000000001 X08=f9f0000003f28000 X09=0000000000000602 X10=0000000000009048 X11=ffff800082b8ed68 X12=0000000000021108 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=f2f0000019affc80 X17=0000000000000000 X18=00000000ffffffff X19=ffff80008326bdf0 X20=f9f0000003547080 X21=0000000000000000 X22=0000000000000000 X23=0000000000000000 X24=0000000000000000 X25=f9f0000003f28000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bd00 X30=ffff8000809af724 SP=ffff80008326bd00 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000