last executing test programs: 10m2.262332865s ago: executing program 0 (id=14351): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 10m2.154333841s ago: executing program 0 (id=14352): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) r3 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x4207, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="130000001900010028bd7000ffdbdf251d"], 0x84}}, 0x40800) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r6, 0x0) 9m58.914167511s ago: executing program 0 (id=14354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb979", 0x51}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081", 0x23}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m58.274839306s ago: executing program 0 (id=14356): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 9m58.178416452s ago: executing program 0 (id=14357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x2000033f) 9m51.500022152s ago: executing program 0 (id=14369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000"], 0x400040) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 9m51.419478817s ago: executing program 32 (id=14369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f1000000"], 0x400040) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m26.648686699s ago: executing program 1 (id=15295): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.388539933s ago: executing program 1 (id=15296): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) 1m26.289909189s ago: executing program 1 (id=15297): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 1m23.186614243s ago: executing program 1 (id=15301): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x18, r4, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x20) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m19.968677072s ago: executing program 1 (id=15302): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf000085000000bf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1m19.348280647s ago: executing program 1 (id=15303): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)='?3', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m19.347895657s ago: executing program 33 (id=15303): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)='?3', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 8.719198434s ago: executing program 2 (id=15495): unshare(0x2040400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x10, 0x0, &(0x7f0000000040)=0xfffffffffffffe1b) 8.582699311s ago: executing program 2 (id=15496): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x60, 0x0, 0x1, {{0x0, 0xfffffffffffeffff, 0x3df, 0x199c, 0xcd05, 0x7fffffff, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 8.42534134s ago: executing program 2 (id=15497): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) recvfrom$inet(r0, &(0x7f0000000680)=""/245, 0xf5, 0x62, 0x0, 0x0) 8.07082967s ago: executing program 2 (id=15499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x48, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x48}}, 0x0) 7.777813796s ago: executing program 2 (id=15501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x60, 0x0, 0x1, {{0x0, 0xfffffffffffeffff, 0x3df, 0x199c, 0xcd05, 0x7fffffff, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 7.590077267s ago: executing program 2 (id=15502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r2}, 0x38) 4.257775543s ago: executing program 3 (id=15514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r1, 0x8182) r3 = dup3(r2, r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) 1.668558997s ago: executing program 3 (id=15515): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000884800050004ee0b80558ddbba9b37242d", 0x27}], 0x1}, 0x4) 1.419818291s ago: executing program 3 (id=15516): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7fffffff, @empty, 0x6}, 0x1c) 656.216674ms ago: executing program 3 (id=15517): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet(0x2, 0x3, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 358.37732ms ago: executing program 3 (id=15518): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 3 (id=15519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r1, 0x8182) r3 = dup3(r2, r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 6330.202610][T26939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6334.894156][ T28] kauditd_printk_skb: 1767 callbacks suppressed [ 6334.894801][ T28] audit: type=1326 audit(2000002372.522:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.901822][ T28] audit: type=1326 audit(2000002372.532:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.908720][ T28] audit: type=1326 audit(2000002372.532:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.912915][ T28] audit: type=1326 audit(2000002372.532:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.916776][ T28] audit: type=1326 audit(2000002372.542:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=450 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.920068][ T28] audit: type=1326 audit(2000002372.542:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.923430][ T28] audit: type=1326 audit(2000002372.542:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.927633][ T28] audit: type=1326 audit(2000002372.542:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6334.931084][ T28] audit: type=1326 audit(2000002372.542:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18747 comm="syz.1.12761" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6336.355138][ T28] audit: type=1326 audit(2000002373.982:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19097 comm="syz.1.12769" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6336.993965][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12774'. [ 6364.840059][T24336] fuse: Unknown parameter 'group_i00000000000000000000' [ 6367.988738][T24379] pim6reg1: entered promiscuous mode [ 6367.990857][T24379] pim6reg1: entered allmulticast mode [ 6368.314981][T24383] Illegal XDP return value 3211993088 on prog (id 134) dev syz_tun, expect packet loss! [ 6375.947815][T24435] KVM: debugfs: duplicate directory 24435-5 [ 6384.797489][T24480] fuse: Bad value for 'fd' [ 6402.534940][T24571] fuse: Invalid rootmode [ 6405.801606][T24584] fuse: Bad value for 'rootmode' [ 6412.981239][T24613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6412.985160][T24613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6413.432217][T24613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6413.440543][T24613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6417.967783][T24643] fuse: Unknown parameter 'use00000000000000000000' [ 6418.097672][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 6418.099463][ T28] audit: type=1326 audit(2000002455.732:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.103886][ T28] audit: type=1326 audit(2000002455.732:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.113758][ T28] audit: type=1326 audit(2000002455.742:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.120295][ T28] audit: type=1326 audit(2000002455.742:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.124680][ T28] audit: type=1326 audit(2000002455.752:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.130573][ T28] audit: type=1326 audit(2000002455.762:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.135075][ T28] audit: type=1326 audit(2000002455.762:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.140873][ T28] audit: type=1326 audit(2000002455.772:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.145564][ T28] audit: type=1326 audit(2000002455.772:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24644 comm="syz.1.13014" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6418.738782][T24653] fuse: Unknown parameter 'user_i00000000000000000000' [ 6419.214029][T24663] fuse: Unknown parameter 'user_i00000000000000000000' [ 6423.683312][T24694] syz.0.13036 (24694): /proc/24693/oom_adj is deprecated, please use /proc/24693/oom_score_adj instead. [ 6434.240473][T24733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.245535][T24733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.420402][T24735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.421840][T24735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.675265][T24735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.678113][T24735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.783546][T24737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.793691][T24737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.903040][T24739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.911095][T24739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.934691][T24739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.943675][T24739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6434.957363][T24739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6434.962299][T24739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6435.187209][T24739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6435.192992][T24739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6435.203505][T24739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6435.223555][T24739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6437.447458][ T28] audit: type=1326 audit(2000002475.072:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.464715][ T28] audit: type=1326 audit(2000002475.092:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.473665][ T28] audit: type=1326 audit(2000002475.102:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.478541][ T28] audit: type=1326 audit(2000002475.102:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.481499][ T28] audit: type=1326 audit(2000002475.102:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.485317][ T28] audit: type=1326 audit(2000002475.112:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.491172][ T28] audit: type=1326 audit(2000002475.112:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24744 comm="syz.1.13057" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6437.510379][T24746] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 6437.511108][T24746] syzkaller0: linktype set to 259 [ 6437.639869][T24749] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 6440.195494][T24757] fuse: Unknown parameter '0x0000000000000003' [ 6441.889423][T24793] fuse: Unknown parameter '0x0000000000000003' [ 6442.182946][T24797] loop5: detected capacity change from 0 to 7 [ 6442.376670][ T28] audit: type=1326 audit(2000002479.992:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24800 comm="syz.1.13076" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x0 [ 6443.157226][T24810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13079'. [ 6443.378562][T24815] ======================================================= [ 6443.378562][T24815] WARNING: The mand mount option has been deprecated and [ 6443.378562][T24815] and is ignored by this kernel. Remove the mand [ 6443.378562][T24815] option from the mount to silence this warning. [ 6443.378562][T24815] ======================================================= [ 6445.630376][T24819] Injecting memory failure for pfn 0x9aee8 at process virtual address 0x20000000 [ 6445.642559][T24819] Memory failure: 0x9aee8: Sending SIGBUS to syz.1.13083:24819 due to hardware memory corruption [ 6445.643818][T24819] Memory failure: 0x9aee8: recovery action for dirty LRU page: Recovered [ 6445.643921][T24819] Injecting memory failure for pfn 0x95a3e at process virtual address 0x20001000 [ 6445.644512][T24819] Memory failure: 0x95a3e: recovery action for clean LRU page: Recovered [ 6445.644598][T24819] Injecting memory failure for pfn 0x99471 at process virtual address 0x20002000 [ 6445.645041][T24819] Memory failure: 0x99471: recovery action for clean LRU page: Recovered [ 6447.365099][T24853] fuse: Unknown parameter 'fd0x0000000000000003' [ 6447.551612][T24859] IPv6: NLM_F_REPLACE set, but no existing node found! [ 6449.084460][T24889] Injecting memory failure for pfn 0x93982 at process virtual address 0x20000000 [ 6449.133707][T24889] Memory failure: 0x93982: keeping poisoned page in swap cache [ 6449.134247][T24889] Memory failure: 0x93982: Sending SIGBUS to syz.0.13115:24889 due to hardware memory corruption [ 6449.134786][T24889] Memory failure: 0x93982: recovery action for dirty swapcache page: Delayed [ 6449.134876][T24889] Injecting memory failure for pfn 0x77314 at process virtual address 0x20001000 [ 6449.135390][T24889] Memory failure: 0x77314: Sending SIGBUS to syz.0.13115:24889 due to hardware memory corruption [ 6449.135610][T24889] Memory failure: 0x77314: recovery action for dirty LRU page: Recovered [ 6449.144020][T24889] Injecting memory failure for pfn 0x42f63 at process virtual address 0x20002000 [ 6449.144616][T24889] Memory failure: 0x42f63: unhandlable page. [ 6449.144775][T24889] Memory failure: 0x42f63: recovery action for get hwpoison page: Ignored [ 6456.367267][T24942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 6456.367838][T24942] block device autoloading is deprecated and will be removed. [ 6456.373953][T24941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 6456.374275][T24941] block device autoloading is deprecated and will be removed. [ 6458.850237][T24740] udevd[24740]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 6463.966585][T25035] netlink: 'syz.1.13179': attribute type 1 has an invalid length. [ 6468.735717][ T28] audit: type=1326 audit(2000002506.362:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.743773][ T28] audit: type=1326 audit(2000002506.362:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.744110][ T28] audit: type=1326 audit(2000002506.372:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.744234][ T28] audit: type=1326 audit(2000002506.372:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.752494][ T28] audit: type=1326 audit(2000002506.372:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.762417][ T28] audit: type=1326 audit(2000002506.392:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.768053][ T28] audit: type=1326 audit(2000002506.402:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6468.772864][ T28] audit: type=1326 audit(2000002506.402:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25094 comm="syz.1.13205" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6471.490777][T25132] syzkaller0: entered promiscuous mode [ 6471.491103][T25132] syzkaller0: entered allmulticast mode [ 6472.014600][T25151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13230'. [ 6472.085083][T25151] bond2: option miimon: invalid value (18446744071562264580) [ 6472.088539][T25151] bond2: option miimon: allowed values 0 - 2147483647 [ 6472.095602][T25151] bond2 (unregistering): Released all slaves [ 6472.166724][T25151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13230'. [ 6472.230913][T25151] bond2: option miimon: invalid value (18446744071562264580) [ 6472.231348][T25151] bond2: option miimon: allowed values 0 - 2147483647 [ 6472.243106][T25151] bond2 (unregistering): Released all slaves [ 6472.963194][T25169] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13238'. [ 6473.509161][T25184] xt_hashlimit: size too large, truncated to 1048576 [ 6475.890025][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13250'. [ 6475.892436][T25197] bond0: option arp_all_targets: invalid value (172) [ 6477.212919][T25225] netlink: 312 bytes leftover after parsing attributes in process `syz.1.13264'. [ 6478.674377][T25262] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13275'. [ 6478.674924][T25262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13275'. [ 6479.375871][T25278] netlink: 'syz.0.13277': attribute type 29 has an invalid length. [ 6479.387146][T25267] netlink: 'syz.0.13277': attribute type 29 has an invalid length. [ 6479.400042][T25278] netlink: 'syz.0.13277': attribute type 29 has an invalid length. [ 6480.054933][T25301] netlink: 'syz.0.13291': attribute type 16 has an invalid length. [ 6480.055211][T25301] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13291'. [ 6482.557525][T25348] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13313'. [ 6484.104511][T25365] netlink: 'syz.0.13321': attribute type 29 has an invalid length. [ 6484.108313][T25364] netlink: 'syz.0.13321': attribute type 29 has an invalid length. [ 6484.111439][T25364] netlink: 'syz.0.13321': attribute type 29 has an invalid length. [ 6490.517676][ T4689] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 6490.729327][ T4689] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 6490.729697][ T4689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6490.729983][ T4689] usb 1-1: Product: syz [ 6490.730098][ T4689] usb 1-1: Manufacturer: syz [ 6490.730201][ T4689] usb 1-1: SerialNumber: syz [ 6490.739948][T25456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6490.744780][T25456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6490.752054][ T4689] usb 1-1: config 0 descriptor?? [ 6490.771892][ T4689] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 071 [ 6491.179588][ T4689] (null): failure reading functionality [ 6491.209546][ T4689] i2c i2c-0: connected i2c-tiny-usb device [ 6498.498045][T25562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6498.508117][T25562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6501.204790][ T2222] usb 1-1: USB disconnect, device number 71 [ 6501.472087][T25575] input: syz0 as /devices/virtual/input/input341 [ 6506.667873][T25612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6506.671062][T25612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6507.459718][T25587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6507.480304][T25587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6508.380291][T25587] hsr_slave_0: entered promiscuous mode [ 6508.385135][T25587] hsr_slave_1: entered promiscuous mode [ 6508.390169][T25587] debugfs: 'hsr0' already exists in 'hsr' [ 6508.391480][T25587] Cannot create hsr debugfs directory [ 6508.872054][T25587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6508.960843][T25587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6509.071677][T25587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6509.184252][T25587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6509.479412][T25587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 6509.504023][T25587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 6509.522404][T25587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 6509.544606][T25587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 6510.222175][T25587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6512.684819][T25587] veth0_vlan: entered promiscuous mode [ 6512.733190][T25587] veth1_vlan: entered promiscuous mode [ 6512.875333][T25587] veth0_macvtap: entered promiscuous mode [ 6512.897599][T25587] veth1_macvtap: entered promiscuous mode [ 6513.034172][T25520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6513.034673][T25520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6513.034970][T25520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6513.045384][T25520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6513.521752][T25703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6513.528138][T25703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6518.267375][ T4689] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 6518.417107][ T4689] usb 1-1: Using ep0 maxpacket: 16 [ 6518.439899][ T4689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 6518.448891][ T4689] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 6518.474214][ T4689] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 6518.474906][ T4689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6518.475219][ T4689] usb 1-1: Product: syz [ 6518.475286][ T4689] usb 1-1: Manufacturer: syz [ 6518.475357][ T4689] usb 1-1: SerialNumber: syz [ 6518.728725][ T4689] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 6518.731497][ T4689] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 6520.121272][ T4689] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 6520.880942][ T4689] usb 1-1: USB disconnect, device number 72 [ 6521.145302][T25704] udevd[25704]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 6526.130065][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13437'. [ 6539.968777][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13468'. [ 6542.298242][ T4537] bond0 (unregistering): Released all slaves [ 6542.313166][ T4537] bond1 (unregistering): Released all slaves [ 6542.515312][ T4537] hsr_slave_0: left promiscuous mode [ 6542.521291][ T4537] hsr_slave_1: left promiscuous mode [ 6542.559259][ T4537] veth1_macvtap: left promiscuous mode [ 6542.559744][ T4537] veth0_macvtap: left promiscuous mode [ 6542.560257][ T4537] veth1_vlan: left promiscuous mode [ 6542.560451][ T4537] veth0_vlan: left promiscuous mode [ 6548.441015][T25952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6548.442864][T25952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6548.758055][T25952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6548.760608][T25952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6549.227458][T25966] tun0: tun_chr_ioctl cmd 1074025675 [ 6549.229330][T25966] tun0: persist enabled [ 6549.398439][T25970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6549.400150][T25970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6553.643902][T26010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6553.651264][T26010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6558.323296][T26056] tmpfs: Bad value for 'mpol' [ 6558.440569][T26058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6558.444500][T26058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6559.063684][ T28] audit: type=1326 audit(2000002596.692:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.073257][ T28] audit: type=1326 audit(2000002596.702:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.080725][ T28] audit: type=1326 audit(2000002596.712:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.085471][ T28] audit: type=1326 audit(2000002596.712:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.091394][ T28] audit: type=1326 audit(2000002596.722:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.096943][ T28] audit: type=1326 audit(2000002596.732:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.101993][ T28] audit: type=1326 audit(2000002596.732:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.107616][ T28] audit: type=1326 audit(2000002596.742:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6559.114966][ T28] audit: type=1326 audit(2000002596.742:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26069 comm="syz.1.13539" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6561.507011][T26102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6561.508762][T26102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6563.502080][T26129] loop5: detected capacity change from 0 to 7 [ 6568.565484][T26167] loop2: detected capacity change from 0 to 7 [ 6569.700545][T24885] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 6570.956648][T24885] usb 1-1: Using ep0 maxpacket: 32 [ 6570.990293][T24885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 6571.014207][T24885] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 6571.014578][T24885] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 6571.014818][T24885] usb 1-1: Product: syz [ 6571.014935][T24885] usb 1-1: Manufacturer: syz [ 6571.015049][T24885] usb 1-1: SerialNumber: syz [ 6571.044907][T24885] usb 1-1: config 0 descriptor?? [ 6571.051172][T26170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6571.060997][T24885] hub 1-1:0.0: bad descriptor, ignoring hub [ 6571.064788][T24885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 6571.378333][ T4689] usb 1-1: USB disconnect, device number 73 [ 6571.957351][ T4689] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 6572.163149][ T4689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 6572.231827][ T4689] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 6572.232169][ T4689] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 6572.232566][ T4689] usb 1-1: Product: syz [ 6572.232697][ T4689] usb 1-1: Manufacturer: syz [ 6572.232790][ T4689] usb 1-1: SerialNumber: syz [ 6572.253595][ T4689] usb 1-1: config 0 descriptor?? [ 6572.315857][T26170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6572.358318][ T4689] hub 1-1:0.0: bad descriptor, ignoring hub [ 6572.358728][ T4689] hub 1-1:0.0: probe with driver hub failed with error -5 [ 6572.688747][T24885] usb 1-1: USB disconnect, device number 74 [ 6574.216593][ T4689] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 6574.389675][ T4689] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 6574.389970][ T4689] usb 1-1: config 0 has no interface number 0 [ 6574.411409][ T4689] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 6574.411756][ T4689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6574.411996][ T4689] usb 1-1: Product: syz [ 6574.412123][ T4689] usb 1-1: Manufacturer: syz [ 6574.412277][ T4689] usb 1-1: SerialNumber: syz [ 6574.426886][ T4689] usb 1-1: config 0 descriptor?? [ 6575.444144][ T4689] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 6575.486427][ T4689] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 6575.503353][ T4689] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 6575.511306][ T4689] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 6575.551908][ T4689] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 6576.523804][ T4689] usb 1-1: USB disconnect, device number 75 [ 6576.538144][ T4689] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 6576.542956][ T4689] keyspan 1-1:0.133: device disconnected [ 6577.275468][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13594'. [ 6577.477200][ T4689] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 6577.637432][ T4689] usb 1-1: Using ep0 maxpacket: 8 [ 6577.651644][ T4689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6577.652045][ T4689] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 6577.656546][ T4689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 6577.658709][ T4689] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 6577.680353][ T4689] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 6577.680602][ T4689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6577.680845][ T4689] usb 1-1: Product: syz [ 6577.680904][ T4689] usb 1-1: Manufacturer: syz [ 6577.680977][ T4689] usb 1-1: SerialNumber: syz [ 6577.711257][ T4689] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 6577.715174][ T4689] usbtest 1-1:1.0: Linux user mode ISO test driver [ 6577.728521][ T4689] usbtest 1-1:1.0: high-speed {control iso-out} tests (+alt) [ 6577.923268][ T4569] usb 1-1: USB disconnect, device number 76 [ 6580.038160][T26228] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13600'. [ 6580.787597][T26247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6580.794383][T26247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6581.683710][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13617'. [ 6581.689221][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13617'. [ 6582.481668][ T28] audit: type=1326 audit(2000002620.112:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26287 comm="syz.1.13624" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x0 [ 6582.606796][ T2685] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 6582.787661][ T2685] usb 1-1: Using ep0 maxpacket: 32 [ 6582.835130][ T2685] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 6582.835612][ T2685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6582.863535][ T2685] usb 1-1: config 0 descriptor?? [ 6583.425650][T26300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6583.432922][T26300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6585.555393][T26308] tun1: tun_chr_ioctl cmd 1074025673 [ 6587.801112][T26317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6587.809803][T26317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6591.829401][T26338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13641'. [ 6592.632764][T26352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6592.634342][T26352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6592.898874][T26355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6592.902656][T26355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6593.148817][T22560] usb 1-1: USB disconnect, device number 77 [ 6596.858462][T26378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13654'. [ 6597.013122][T26384] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 6597.759843][ T28] audit: type=1326 audit(2000002635.392:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.771943][ T28] audit: type=1326 audit(2000002635.392:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.772752][ T28] audit: type=1326 audit(2000002635.392:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.772994][ T28] audit: type=1326 audit(2000002635.392:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.773497][ T28] audit: type=1326 audit(2000002635.392:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.804298][ T28] audit: type=1326 audit(2000002635.402:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.804940][ T28] audit: type=1326 audit(2000002635.402:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.805178][ T28] audit: type=1326 audit(2000002635.402:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.805419][ T28] audit: type=1326 audit(2000002635.412:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6597.805648][ T28] audit: type=1326 audit(2000002635.412:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26405 comm="syz.1.13666" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91771a8 code=0x7ffc0000 [ 6598.678662][ T2222] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 6598.875274][ T2222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 6598.875617][ T2222] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 6598.876201][ T2222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6598.888945][ T2222] usb 1-1: config 0 descriptor?? [ 6598.901246][T26417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6599.135294][ T2222] usbhid 1-1:0.0: can't add hid device: -71 [ 6599.141454][ T2222] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 6599.160464][ T2222] usb 1-1: USB disconnect, device number 78 [ 6603.869397][T26481] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 6604.497670][ T2222] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 6604.647455][ T2222] usb 1-1: Using ep0 maxpacket: 8 [ 6605.671537][ T2222] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 6605.676982][ T2222] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 6605.682424][ T2222] usb 1-1: config 0 has no interface number 0 [ 6605.688388][ T2222] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 6605.697860][ T2222] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 6605.700087][ T2222] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 6605.730897][ T2222] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 6605.735281][ T2222] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 6605.742801][ T2222] usb 1-1: Product: syz [ 6605.751306][ T2222] usb 1-1: Manufacturer: syz [ 6605.810117][ T2222] usb 1-1: config 0 descriptor?? [ 6607.288507][ T2222] usb 1-1: USB disconnect, device number 79 [ 6607.592609][T26513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13706'. [ 6607.715076][T26513] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 6607.720375][T26513] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 6607.854460][T26521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13709'. [ 6607.858044][T26521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13709'. [ 6610.186924][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13726'. [ 6610.841204][T26577] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 6613.904483][T26556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6613.920269][T26556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6614.786460][T26556] hsr_slave_0: entered promiscuous mode [ 6614.792679][T26556] hsr_slave_1: entered promiscuous mode [ 6614.799333][T26556] debugfs: 'hsr0' already exists in 'hsr' [ 6614.800864][T26556] Cannot create hsr debugfs directory [ 6615.409070][T26556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6615.532935][T26556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6615.650871][T26556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6615.768937][T26556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6616.225020][T26556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 6616.268271][T26556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 6616.291970][T26556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 6616.313358][T26556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 6617.384767][T26556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6624.268780][T26556] veth0_vlan: entered promiscuous mode [ 6624.304503][T26556] veth1_vlan: entered promiscuous mode [ 6624.465212][T26556] veth0_macvtap: entered promiscuous mode [ 6624.492664][T26556] veth1_macvtap: entered promiscuous mode [ 6624.648578][T22323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6624.649145][T22323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6624.649354][T22323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6624.649517][T22323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6637.757163][T26684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13740'. [ 6637.772473][T26684] syzkaller0: entered promiscuous mode [ 6637.774006][T26684] syzkaller0: entered allmulticast mode [ 6640.428758][T26700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13747'. [ 6642.546921][ T4569] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 6642.726337][ T4569] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6642.726657][ T4569] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 6642.726936][ T4569] usb 1-1: config 1 has no interface number 0 [ 6642.727154][ T4569] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 6642.791536][ T4569] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 6642.791940][ T4569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6642.792274][ T4569] usb 1-1: Product: syz [ 6642.792343][ T4569] usb 1-1: Manufacturer: syz [ 6642.792402][ T4569] usb 1-1: SerialNumber: syz [ 6642.862675][ T4569] usb 1-1: selecting invalid altsetting 1 [ 6642.884621][T26712] batadv_slave_0: entered promiscuous mode [ 6642.892840][T26711] batadv_slave_0: left promiscuous mode [ 6643.279306][ T4569] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 6643.279765][ T4569] cdc_ncm 1-1:1.1: bind() failure [ 6643.330090][ T4569] usb 1-1: USB disconnect, device number 80 [ 6643.689983][T26725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6643.694879][T26725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6643.834019][T26727] binder: 26726:26727 tried to acquire reference to desc 0, got 1 instead [ 6643.835397][T26727] binder: 26726:26727 got transaction with invalid offsets size, 85 [ 6643.835631][T26727] binder: 26726:26727 transaction call to 26726:0 failed 55/29201/-22, code 0 size 72-85 line 3440 [ 6643.838165][ T4569] binder: undelivered TRANSACTION_ERROR: 29201 [ 6643.874184][T26729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6643.875086][T26729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6644.084145][T26736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6644.085226][T26736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6644.419575][T26747] kernel profiling enabled (shift: 9) [ 6644.517735][T26750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6644.528586][T26750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6644.813470][T26755] usb usb1: usbfs: process 26755 (syz.0.13772) did not claim interface 2 before use [ 6645.294345][T26764] binder: 26763:26764 tried to acquire reference to desc 0, got 1 instead [ 6645.304393][T26764] binder: 26763:26764 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 6645.304706][T26764] binder: 26764 RLIMIT_NICE not set [ 6645.312242][ T2685] binder: release 26763:26764 transaction 60 out, still active [ 6645.312577][ T2685] binder: undelivered TRANSACTION_COMPLETE [ 6645.324291][ T4569] binder: send failed reply for transaction 60, target dead [ 6647.636707][T26500] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 6647.807879][T26500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 6647.819201][T26500] usb 1-1: not running at top speed; connect to a high speed hub [ 6647.829662][T26500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6647.829992][T26500] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 6647.830484][T26500] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 6647.854307][T26500] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 6647.854635][T26500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6647.854875][T26500] usb 1-1: Product: syz [ 6647.854987][T26500] usb 1-1: Manufacturer: syz [ 6647.855105][T26500] usb 1-1: SerialNumber: syz [ 6648.129842][T26500] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 6648.130551][T26500] usb 1-1: 1:1 : format type 33 is not supported yet [ 6648.132508][T26500] usb 1-1: 0:2 : does not exist [ 6648.274379][T26500] usb 1-1: USB disconnect, device number 81 [ 6648.422138][T26720] udevd[26720]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 6649.437556][ T4569] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 6649.607133][ T4569] usb 1-1: Using ep0 maxpacket: 16 [ 6649.627402][ T4569] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 6649.627721][ T4569] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6649.628005][ T4569] usb 1-1: config 1 has no interface number 0 [ 6649.628170][ T4569] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 6649.628267][ T4569] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 6649.628346][ T4569] usb 1-1: config 1 interface 105 has no altsetting 0 [ 6649.674221][ T4569] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 6649.674597][ T4569] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 6649.675046][ T4569] usb 1-1: Product: syz [ 6649.675122][ T4569] usb 1-1: Manufacturer: syz [ 6649.675191][ T4569] usb 1-1: SerialNumber: syz [ 6649.709861][T26787] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 6649.931421][ T4569] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 6650.136893][ T4569] usb 1-1: USB disconnect, device number 82 [ 6651.157323][T22560] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 6651.333555][T22560] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 6651.334018][T22560] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 6651.341252][T22560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6651.361314][T22560] usb 1-1: config 0 descriptor?? [ 6651.404876][T22560] usb 1-1: bad CDC descriptors [ 6651.606794][T26500] usb 1-1: USB disconnect, device number 83 [ 6655.921909][T26813] lo: entered promiscuous mode [ 6655.954950][T26813] tunl0: entered promiscuous mode [ 6655.983297][T26813] gre0: entered promiscuous mode [ 6656.010757][T26813] gretap0: entered promiscuous mode [ 6656.034298][T26813] erspan0: entered promiscuous mode [ 6656.071947][T26813] ip_vti0: entered promiscuous mode [ 6656.079113][T26813] ip6_vti0: entered promiscuous mode [ 6656.091807][T26813] sit0: entered promiscuous mode [ 6656.120921][T26813] ip6tnl0: entered promiscuous mode [ 6656.144324][T26813] ip6gre0: entered promiscuous mode [ 6656.169226][T26813] syz_tun: entered promiscuous mode [ 6656.198798][T26813] ip6gretap0: entered promiscuous mode [ 6656.227693][T26813] vcan0: entered promiscuous mode [ 6656.254042][T26813] bond0: entered promiscuous mode [ 6656.254888][T26813] bond_slave_0: entered promiscuous mode [ 6656.259489][T26813] bond_slave_1: entered promiscuous mode [ 6656.266922][T26813] dummy0: entered promiscuous mode [ 6656.271056][T26813] nlmon0: entered promiscuous mode [ 6656.274749][T26813] vxcan0: entered promiscuous mode [ 6656.281628][T26813] vxcan1: entered promiscuous mode [ 6656.287282][T26813] veth0: entered promiscuous mode [ 6656.291650][T26813] veth1: entered promiscuous mode [ 6656.295360][T26813] wg0: entered promiscuous mode [ 6656.300278][T26813] wg1: entered promiscuous mode [ 6656.304119][T26813] wg2: entered promiscuous mode [ 6656.325501][T26813] veth0_to_bridge: entered promiscuous mode [ 6656.356742][T26813] bridge_slave_0: entered promiscuous mode [ 6656.395131][T26813] veth1_to_bridge: entered promiscuous mode [ 6656.428262][T26813] bridge_slave_1: entered promiscuous mode [ 6656.458443][T26813] veth0_to_bond: entered promiscuous mode [ 6656.547327][T26813] veth1_to_bond: entered promiscuous mode [ 6656.692849][T26813] veth0_to_team: entered promiscuous mode [ 6656.724455][T26813] team_slave_0: entered promiscuous mode [ 6656.752248][T26813] veth1_to_team: entered promiscuous mode [ 6656.779936][T26813] team_slave_1: entered promiscuous mode [ 6656.809840][T26813] veth0_to_batadv: entered promiscuous mode [ 6656.859427][T26813] batadv_slave_0: entered promiscuous mode [ 6656.903724][T26813] veth1_to_batadv: entered promiscuous mode [ 6656.940729][T26813] batadv_slave_1: entered promiscuous mode [ 6656.966494][T26813] xfrm0: entered promiscuous mode [ 6657.008524][T26813] veth0_to_hsr: entered promiscuous mode [ 6657.133950][T26813] veth1_to_hsr: entered promiscuous mode [ 6657.163719][T26813] hsr0: entered promiscuous mode [ 6657.179536][T26813] veth1_virt_wifi: entered promiscuous mode [ 6657.201255][T26813] veth0_virt_wifi: entered promiscuous mode [ 6657.259359][T26813] vlan0: entered promiscuous mode [ 6657.262448][T26813] macvlan0: entered promiscuous mode [ 6657.267286][T26813] macvlan1: entered promiscuous mode [ 6657.277708][T26813] ipvlan0: entered promiscuous mode [ 6657.281546][T26813] ipvlan1: entered promiscuous mode [ 6657.291288][T26813] macvtap0: entered promiscuous mode [ 6657.295423][T26813] macsec0: entered promiscuous mode [ 6657.299669][T26813] geneve0: entered promiscuous mode [ 6657.303304][T26813] geneve1: entered promiscuous mode [ 6657.309080][T26813] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 6657.313019][T26813] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 6657.317106][T26813] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 6657.320205][T26813] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 6657.323705][T26813] gre1: entered promiscuous mode [ 6658.196837][T26829] binder: 26828:26829 ioctl c018620c 20000040 returned -1 [ 6658.205003][T26829] binder: 26828:26829 ioctl c0306201 0 returned -14 [ 6665.843948][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13822'. [ 6667.408777][T26888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6667.412233][T26888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6667.583312][T26892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6667.585499][T26892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6667.704284][T26895] input: syz1 as /devices/virtual/input/input343 [ 6667.742916][T26897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6667.748728][T26897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6668.166677][T30285] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 6668.326582][T30285] usb 1-1: Using ep0 maxpacket: 16 [ 6668.377078][T30285] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 6668.409687][T30285] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 6668.412581][T30285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6668.414279][T30285] usb 1-1: Product: syz [ 6668.415237][T30285] usb 1-1: Manufacturer: syz [ 6668.417478][T30285] usb 1-1: SerialNumber: syz [ 6668.702640][T30285] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 6668.703998][T30285] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 6668.706732][T30285] usb 1-1: unit 1 not found! [ 6668.787363][T30285] usb 1-1: USB disconnect, device number 84 [ 6668.959372][T26898] udevd[26898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 6669.226983][T30285] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 6669.388031][T30285] usb 1-1: Using ep0 maxpacket: 16 [ 6669.426609][T30285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 6669.428454][T30285] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 6669.433953][T30285] usb 1-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 6669.439840][T30285] usb 1-1: config 0 interface 0 has no altsetting 0 [ 6669.443328][T30285] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 6669.449361][T30285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6669.464335][T30285] usb 1-1: config 0 descriptor?? [ 6669.513468][T30285] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 6674.787066][T26933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6674.791611][T26933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6675.264350][T26941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6675.270000][T26941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6675.457209][T26945] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received [ 6679.995045][T26963] xt_hashlimit: size too large, truncated to 1048576 [ 6681.251273][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6681.252798][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6683.484661][ T2685] usb 1-1: USB disconnect, device number 85 [ 6684.567409][T27001] input: syz1 as /devices/virtual/input/input345 [ 6686.216420][T27006] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13868'. [ 6687.420920][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13871'. [ 6687.707488][T26500] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 6687.877535][T26500] usb 1-1: Using ep0 maxpacket: 16 [ 6687.910276][T26500] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 6687.910605][T26500] usb 1-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config [ 6687.913313][T26500] usb 1-1: config 1 has no interface number 0 [ 6687.913558][T26500] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 6687.913651][T26500] usb 1-1: config 1 interface 105 has no altsetting 0 [ 6687.959446][T26500] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 6687.959770][T26500] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 6687.960036][T26500] usb 1-1: Product: syz [ 6687.960148][T26500] usb 1-1: Manufacturer: syz [ 6687.960206][T26500] usb 1-1: SerialNumber: syz [ 6688.229616][T26500] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 6688.259950][T26500] usb 1-1: USB disconnect, device number 86 [ 6693.944621][T27034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6693.959781][T27034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6696.967871][T27065] xt_hashlimit: size too large, truncated to 1048576 [ 6700.982384][T27086] binder: 27085:27086 ioctl c0306201 0 returned -14 [ 6700.994093][T27086] binder: 27085:27086 ioctl c0306201 200001c0 returned -14 [ 6705.231079][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 6705.231743][ T28] audit: type=1326 audit(2000002742.862:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.457810][ T28] audit: type=1326 audit(2000002744.082:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27093 comm="syz.0.13907" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa33771a8 code=0x7fc00000 [ 6706.711297][ T28] audit: type=1326 audit(2000002744.342:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.711947][ T28] audit: type=1326 audit(2000002744.342:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.712325][ T28] audit: type=1326 audit(2000002744.342:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.712990][ T28] audit: type=1326 audit(2000002744.342:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.713250][ T28] audit: type=1326 audit(2000002744.342:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.713931][ T28] audit: type=1326 audit(2000002744.342:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.714203][ T28] audit: type=1326 audit(2000002744.342:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.715316][ T28] audit: type=1326 audit(2000002744.342:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27097 comm="syz.1.13909" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7fc00000 [ 6706.793155][T27105] binder: 27104:27105 BC_ACQUIRE_DONE u0000000000000001 no match [ 6706.793674][T27105] binder: 27104:27105 Acquire 1 refcount change on invalid ref 1 ret -22 [ 6706.794156][T27105] binder: 27104:27105 got reply transaction with no transaction stack [ 6706.794406][T27105] binder: 27104:27105 transaction reply to 0:0 failed 67/29201/-71, code 0 size 88-24 line 3139 [ 6706.923825][T27108] xt_hashlimit: size too large, truncated to 1048576 [ 6713.007332][ T4207] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 6713.187587][ T4207] usb 1-1: Using ep0 maxpacket: 8 [ 6713.238025][ T4207] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 6713.240087][ T4207] usb 1-1: config 0 interface 0 has no altsetting 0 [ 6713.243656][ T4207] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 6713.255450][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6713.281925][ T4207] usb 1-1: config 0 descriptor?? [ 6713.761101][ T4207] hid-generic 0003:5543:0047.000D: unknown main item tag 0x2 [ 6713.762887][ T4207] hid-generic 0003:5543:0047.000D: unknown main item tag 0x0 [ 6713.764821][ T4207] hid-generic 0003:5543:0047.000D: unexpected long global item [ 6713.767563][ T4207] hid-generic 0003:5543:0047.000D: probe with driver hid-generic failed with error -22 [ 6713.972010][ T4207] usb 1-1: USB disconnect, device number 87 [ 6718.529598][T27157] binder: 27156 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 6718.530059][T27157] binder: 27156:27157 ioctl c018620c 20000000 returned -22 [ 6718.877191][T26500] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 6719.047101][T26500] usb 1-1: Using ep0 maxpacket: 16 [ 6719.063795][T26500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 6719.073934][T26500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 6719.074290][T26500] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 6719.100050][T26500] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 6719.100557][T26500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6719.100810][T26500] usb 1-1: Product: syz [ 6719.100885][T26500] usb 1-1: Manufacturer: syz [ 6719.100940][T26500] usb 1-1: SerialNumber: syz [ 6719.422414][T26500] usb 1-1: unit 14 not found! [ 6719.607884][T26500] usb 1-1: USB disconnect, device number 88 [ 6719.795078][T27160] udevd[27160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 6721.215273][T27186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13936'. [ 6721.437615][T27186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13936'. [ 6721.706795][T26500] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 6723.155605][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6723.157019][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6723.157096][T26500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 6723.157256][T26500] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 6723.157374][T26500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6723.179040][T26500] usb 1-1: config 0 descriptor?? [ 6723.646584][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647006][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647248][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647385][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647459][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647580][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647700][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647794][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647868][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.647979][T26500] hid-generic 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 6723.661241][T26500] hid-generic 0003:047F:FFFF.000E: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 6723.847480][T27189] usb 1-1: USB disconnect, device number 89 [ 6723.900350][T27194] fido_id[27194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:047F:FFFF.000E/report_descriptor': No such file or directory [ 6727.677253][T26500] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 6728.776756][T26500] usb 1-1: Using ep0 maxpacket: 32 [ 6728.804820][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6728.805175][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6728.808779][T26500] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 6728.808912][T26500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6728.822734][T26500] usb 1-1: config 0 descriptor?? [ 6730.021437][T26500] hid-generic 0003:1E7D:2D51.000F: unbalanced delimiter at end of report description [ 6730.022580][T26500] hid-generic 0003:1E7D:2D51.000F: probe with driver hid-generic failed with error -22 [ 6730.226997][T27943] usb 1-1: USB disconnect, device number 90 [ 6732.537243][T26500] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 6732.696332][T26500] usb 1-1: Using ep0 maxpacket: 16 [ 6732.708144][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 6732.708432][T26500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 6732.708563][T26500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 6732.708686][T26500] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 6732.708729][T26500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6732.725072][T26500] usb 1-1: config 0 descriptor?? [ 6733.199122][T26500] hid_parser_main: 5 callbacks suppressed [ 6733.199671][T26500] hid-generic 0003:045E:07DA.0010: unknown main item tag 0x0 [ 6733.241496][T26500] hid-generic 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 6733.391503][T26500] usb 1-1: USB disconnect, device number 91 [ 6733.612347][T27230] fido_id[27230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 6733.926973][T26500] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 6734.118645][T26500] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 6734.118952][T26500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 6734.148374][T26500] usb 1-1: config 0 descriptor?? [ 6734.879392][T27239] binder: 27238:27239 ioctl c0306201 200001c0 returned -14 [ 6735.484112][T26500] usb 1-1: Cannot set autoneg [ 6735.484761][T26500] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 6735.507338][T26500] usb 1-1: USB disconnect, device number 92 [ 6736.248863][T27260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13967'. [ 6750.666494][ T4569] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 6750.840459][ T4569] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 6750.842075][ T4569] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 6750.869957][ T4569] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 6750.871531][ T4569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 6750.873879][ T4569] usb 1-1: Product: syz [ 6750.875235][ T4569] usb 1-1: Manufacturer: syz [ 6750.876896][ T4569] usb 1-1: SerialNumber: syz [ 6750.904086][T27329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 6751.138148][ T4569] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 6751.341914][ C0] usblp0: nonzero write bulk status received: -71 [ 6751.359537][ T4569] usb 1-1: USB disconnect, device number 93 [ 6751.382518][ T4569] usblp0: removed [ 6757.388036][T27368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6757.390446][T27368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6773.949439][T27430] random: crng reseeded on system resumption [ 6779.422085][T27463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6779.427237][T27463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6779.544678][T27465] xt_hashlimit: size too large, truncated to 1048576 [ 6782.971837][T27474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14039'. [ 6782.973936][T27474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14039'. [ 6782.979079][T27474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14039'. [ 6782.984190][T27474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14039'. [ 6782.990557][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14039'. [ 6790.746650][T27522] xt_hashlimit: size too large, truncated to 1048576 [ 6791.579682][T27535] ip6erspan0: entered allmulticast mode [ 6793.982241][T27563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6793.983543][T27563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6794.110237][T27566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6794.115468][T27566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6798.948517][T27590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14082'. [ 6803.554655][T27635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6803.567341][T27635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6805.465136][T27662] input: syz1 as /devices/virtual/input/input347 [ 6808.504484][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14099'. [ 6812.779573][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14105'. [ 6813.286831][T27717] usb usb1: usbfs: process 27717 (syz.1.14109) did not claim interface 0 before use [ 6818.452869][T27807] netlink: 'syz.0.14146': attribute type 10 has an invalid length. [ 6818.626859][T27822] netlink: 'syz.0.14151': attribute type 1 has an invalid length. [ 6818.975632][T27822] bond1: (slave gretap1): making interface the new active one [ 6818.979660][T27822] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 6818.992399][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'. [ 6819.013583][T27822] bond1 (unregistering): (slave gretap1): Releasing active interface [ 6819.052024][T27822] bond1 (unregistering): Released all slaves [ 6821.158725][T26939] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6821.159106][T26939] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6821.159455][T26939] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6821.159596][T26939] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6821.879598][T27878] binder: 27877:27878 tried to acquire reference to desc 0, got 1 instead [ 6821.892290][T30285] binder: release 27877:27878 transaction 73 out, still active [ 6821.892520][T30285] binder: undelivered TRANSACTION_COMPLETE [ 6821.900135][T27860] binder: send failed reply for transaction 73, target dead [ 6822.054110][T27882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6822.055578][T27882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6823.296683][T27891] x_tables: duplicate underflow at hook 3 [ 6823.299591][T27891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14172'. [ 6829.639070][T27930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6829.640634][T27930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6830.972800][T27938] netlink: 'syz.1.14188': attribute type 10 has an invalid length. [ 6838.417211][T28003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14207'. [ 6838.417683][T28003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14207'. [ 6838.417987][T28003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14207'. [ 6838.418302][T28003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14207'. [ 6842.653928][T28035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6842.669029][T28035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6846.452141][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14230'. [ 6846.524929][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 6846.525503][ T28] audit: type=1326 audit(2000002884.152:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.540278][ T28] audit: type=1326 audit(2000002884.172:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.547048][ T28] audit: type=1326 audit(2000002884.182:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.547731][T28059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14230'. [ 6846.558003][ T28] audit: type=1326 audit(2000002884.182:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.561494][ T28] audit: type=1326 audit(2000002884.192:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.567847][ T28] audit: type=1326 audit(2000002884.202:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.573981][ T28] audit: type=1326 audit(2000002884.202:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6846.578316][ T28] audit: type=1326 audit(2000002884.202:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28060 comm="syz.1.14231" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe5771a8 code=0x7ffc0000 [ 6848.172743][T28086] random: crng reseeded on system resumption [ 6855.365684][T28114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6855.367514][T28114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6867.490998][T28134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14255'. [ 6870.605285][T28160] netlink: 'syz.1.14263': attribute type 3 has an invalid length. [ 6871.747196][T28164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6871.748762][T28164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6876.430551][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14271'. [ 6880.543505][T28207] binder: 28206:28207 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 16777216 [ 6880.544502][T28207] binder: 28206:28207 ioctl c0306201 20000640 returned -22 [ 6884.023911][T28223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6884.030106][T28223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6885.612625][T28234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6885.621132][T28234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6889.859423][T28256] syzkaller0: entered promiscuous mode [ 6889.861054][T28256] syzkaller0: entered allmulticast mode [ 6890.521453][T28261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6890.525149][T28261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6911.104102][ T2190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6911.170557][ T2190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6911.216855][ T2190] bond0 (unregistering): Released all slaves [ 6911.258215][ T2190] bond1 (unregistering): Released all slaves [ 6911.346548][ T2190] bond2 (unregistering): Released all slaves [ 6911.585206][ T2190] hsr_slave_0: left promiscuous mode [ 6911.592061][ T2190] hsr_slave_1: left promiscuous mode [ 6911.639620][ T2190] veth1_macvtap: left promiscuous mode [ 6911.640064][ T2190] veth0_macvtap: left promiscuous mode [ 6911.640525][ T2190] veth1_vlan: left promiscuous mode [ 6911.640682][ T2190] veth0_vlan: left promiscuous mode [ 6913.392935][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14331'. [ 6915.235059][T28388] input: syz0 as /devices/virtual/input/input348 [ 6929.998790][T28460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6930.000595][T28460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6936.371197][T28477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6936.391368][T28477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6937.659525][T28477] hsr_slave_0: entered promiscuous mode [ 6937.664307][T28477] hsr_slave_1: entered promiscuous mode [ 6937.673263][T28477] debugfs: 'hsr0' already exists in 'hsr' [ 6937.674951][T28477] Cannot create hsr debugfs directory [ 6938.440543][T28477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6938.470374][T28477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6938.491705][T28477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6938.514022][T28477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6939.455223][T28477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6944.675521][T28477] veth0_vlan: entered promiscuous mode [ 6944.711790][T28477] veth1_vlan: entered promiscuous mode [ 6944.858716][T28477] veth0_macvtap: entered promiscuous mode [ 6944.879651][T28477] veth1_macvtap: entered promiscuous mode [ 6945.004900][T25520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6945.005550][T25520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6945.028591][T25520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6945.029290][T25520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6949.523958][T28593] xt_hashlimit: size too large, truncated to 1048576 [ 6960.158403][T28623] netlink: 'syz.2.14393': attribute type 1 has an invalid length. [ 6961.847882][T28631] binder: 28630:28631 tried to acquire reference to desc 0, got 1 instead [ 6961.851333][T28631] binder: 28630:28631 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 6961.855385][T28631] binder: 28631 RLIMIT_NICE not set [ 6961.856854][T28631] binder: 28631 RLIMIT_NICE not set [ 6961.860569][T28631] binder: 28631 RLIMIT_NICE not set [ 6961.860863][T28631] binder_alloc: 28630: binder_alloc_buf, no vma [ 6961.861097][T28631] binder: cannot allocate buffer: vma cleared, target dead or dying [ 6961.862195][T28631] binder: 28630:28631 transaction reply to 28630:28631 failed 87/29189/-3, code 0 size 0-0 line 3393 [ 6961.862455][T28631] binder: send failed reply for transaction 86 to 28630:28631 [ 6961.879111][T27850] binder: undelivered TRANSACTION_COMPLETE [ 6961.879634][T27850] binder: undelivered TRANSACTION_ERROR: 29189 [ 6961.898239][T27850] binder: undelivered TRANSACTION_ERROR: 29190 [ 6972.293102][T28664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6972.294952][T28664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6976.126813][T28677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6976.129556][T28677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6978.839922][T28681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6978.841925][T28681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6979.559603][T28685] block nbd0: NBD_DISCONNECT [ 6979.561283][T28685] block nbd0: Send disconnect failed -32 [ 6979.944609][ T4568] bond1 (unregistering): (slave geneve2): Releasing active interface [ 6980.014500][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6980.057889][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6980.090048][ T4568] bond0 (unregistering): Released all slaves [ 6980.100952][ T4568] bond1 (unregistering): Released all slaves [ 6980.233606][ T4568] hsr_slave_0: left promiscuous mode [ 6980.241670][ T4568] hsr_slave_1: left promiscuous mode [ 6982.874462][T28703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6982.895509][T28703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6989.550981][T28724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6989.554786][T28724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6989.688972][T28726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6989.693411][T28726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6989.770123][T28728] binder: 28727:28728 ioctl c0306201 20000080 returned -14 [ 6989.780725][T28728] binder: 28727:28728 ioctl c0306201 200003c0 returned -14 [ 6992.158370][T28749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6992.162130][T28749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6992.823240][T28757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6992.824941][T28757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6992.993552][T28759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6992.995299][T28759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6993.140475][T28761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6993.143196][T28761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6997.541256][T28779] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 6997.541256][T28779] The task syz.1.14448 (28779) triggered the difference, watch for misbehavior. [ 7001.670244][T28808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7001.671865][T28808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7001.780153][T28810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7001.785315][T28810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7002.134912][T28816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7002.140337][T28816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7003.257241][T28830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7003.259122][T28830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7003.632607][T28837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7003.637583][T28837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7004.348915][T28846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7004.364487][T28846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7004.555095][T28850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7004.556955][T28850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7007.712763][T28866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7007.721230][T28866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7008.429389][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7008.431384][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7008.608462][T28876] binder: 28875:28876 tried to acquire reference to desc 0, got 1 instead [ 7008.609677][T28876] binder: 28875:28876 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7008.610935][T28876] binder: 28876 RLIMIT_NICE not set [ 7009.117296][T28876] binder: undelivered transaction 94, put_user failed [ 7009.117995][T28876] binder: 28875:28876 ioctl c0306201 20000280 returned -14 [ 7009.131097][T27862] binder: undelivered TRANSACTION_COMPLETE [ 7009.421515][T28883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7009.434798][T28883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7009.917654][T28893] netlink: 'syz.2.14490': attribute type 2 has an invalid length. [ 7010.052001][T28895] netlink: 'syz.2.14491': attribute type 10 has an invalid length. [ 7010.058870][T28895] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 7011.484405][T28920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14502'. [ 7011.498524][T28920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14502'. [ 7011.943631][T28930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14507'. [ 7012.972641][T28954] netlink: 'syz.2.14517': attribute type 10 has an invalid length. [ 7012.973113][T28954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14517'. [ 7012.987438][T28955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14518'. [ 7012.995428][T28954] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 7013.005321][T28955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14518'. [ 7013.172639][T28959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14520'. [ 7013.177502][T28959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14520'. [ 7013.495004][T28965] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14523'. [ 7013.500656][T28965] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14523'. [ 7016.720099][T28988] binder: 28987:28988 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7016.728051][T28988] binder: 28988 RLIMIT_NICE not set [ 7018.162902][T29006] netlink: 'syz.2.14541': attribute type 29 has an invalid length. [ 7018.168956][T29006] netlink: 'syz.2.14541': attribute type 29 has an invalid length. [ 7018.171826][T29006] netlink: 'syz.2.14541': attribute type 29 has an invalid length. [ 7021.500633][T29025] binder: 29024:29025 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7021.501852][T29025] binder: 29025 RLIMIT_NICE not set [ 7022.439450][T29027] syzkaller0: entered promiscuous mode [ 7022.440069][T29027] syzkaller0: entered allmulticast mode [ 7026.604071][T29082] ksmbd: Unknown IPC event: 4, ignore. [ 7027.265666][T29092] fuse: Bad value for 'group_id' [ 7027.269120][T29092] fuse: Bad value for 'group_id' [ 7027.369971][T29094] devpts: Invalid gid '0x00000000ffffffff' [ 7027.528964][T29096] syzkaller1: entered promiscuous mode [ 7027.529311][T29096] syzkaller1: entered allmulticast mode [ 7027.764742][T29098] binder: 29097:29098 ERROR: BC_REGISTER_LOOPER called without request [ 7027.765246][T29098] binder: 29098 RLIMIT_NICE not set [ 7028.225186][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.228012][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.230302][T29100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.242363][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.242790][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.243009][T29100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14582'. [ 7028.272327][T29101] binder: 29097:29101 got transaction to context manager from process owning it [ 7028.273881][T29101] binder: 29097:29101 transaction call to 29097:0 failed 98/29201/-22, code 0 size 0-0 line 3227 [ 7030.257594][T27847] binder: undelivered TRANSACTION_ERROR: 29201 [ 7030.385155][T29115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7030.389332][T29115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7030.480992][T29117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7030.484154][T29117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7030.905419][T29127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7030.909812][T29127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7030.914400][T29124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7030.918401][T29124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7031.362947][T29135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7031.367999][T29135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7032.972783][T29153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7032.975026][T29153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7033.205451][T29153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7033.209003][T29153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7034.509932][T29180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7034.510958][T29180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7034.697307][T29183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7034.699071][T29183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7034.725068][T29184] binder: 29182:29184 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7034.725437][T29184] binder: 29184 RLIMIT_NICE not set [ 7035.233411][T29188] binder: 29182:29188 got transaction to invalid handle, 1 [ 7035.233923][T29188] binder: 29182:29188 cannot find target node [ 7035.239637][T29188] binder: 29182:29188 transaction async to 0:0 failed 102/29201/-22, code 0 size 0-0 line 3236 [ 7037.190498][T27862] binder: undelivered TRANSACTION_ERROR: 29201 [ 7037.926983][T29203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7037.928709][T29203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7038.215194][T29206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7038.220602][T29206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7038.373730][T29208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7038.375329][T29208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7038.527194][T29210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7038.528832][T29210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7039.217066][T29213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7039.228361][T29213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7057.533685][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14653'. [ 7057.601224][T29278] netlink: 'syz.1.14653': attribute type 1 has an invalid length. [ 7063.518586][T29299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7063.519994][T29299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7065.516790][T29305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 7067.814810][ C0] vcan0: j1939_tp_rxtimer: 0x0000000094467a73: rx timeout, send abort [ 7068.315090][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e7a0e087: rx timeout, send abort [ 7068.317571][ C0] vcan0: j1939_tp_rxtimer: 0x0000000094467a73: abort rx timeout. Force session deactivation [ 7068.815616][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e7a0e087: abort rx timeout. Force session deactivation [ 7068.878292][T29326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7068.888739][T29326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7069.449597][T29334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14672'. [ 7071.621946][T29341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7072.250019][T29341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 7072.250447][T29341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 7072.299737][T29341] veth1_vlan: left promiscuous mode [ 7072.313839][T29341] veth0_vlan: left promiscuous mode [ 7072.324386][T29341] veth0_vlan: entered promiscuous mode [ 7072.358674][T29341] veth1_vlan: entered promiscuous mode [ 7072.521103][T29341] veth1_macvtap: left promiscuous mode [ 7072.565185][T29341] veth0_macvtap: left promiscuous mode [ 7072.603916][T29341] veth0_macvtap: entered promiscuous mode [ 7072.609381][T29341] veth1_macvtap: entered promiscuous mode [ 7072.673362][T25520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7073.317920][ T4568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7073.318388][ T4568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7073.318555][ T4568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7076.386817][T29359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7076.395628][T29359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7079.815590][T29376] syzkaller0: entered promiscuous mode [ 7079.822456][T29376] syzkaller0: entered allmulticast mode [ 7086.040719][T29406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7086.044636][T29406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7086.532172][T29419] netlink: 'syz.2.14704': attribute type 6 has an invalid length. [ 7086.722117][T29424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7086.725576][T29424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7086.758852][T29425] fuse: Bad value for 'fd' [ 7087.205248][T29433] binder: 29432:29433 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7087.210639][T29433] binder: 29433 RLIMIT_NICE not set [ 7087.710438][T29437] binder: 29432:29437 got transaction to invalid handle, 1 [ 7087.710847][T29437] binder: 29432:29437 cannot find target node [ 7087.711164][T29437] binder: 29432:29437 transaction async to 0:0 failed 106/29201/-22, code 0 size 0-0 line 3236 [ 7089.891338][T27860] binder: undelivered TRANSACTION_ERROR: 29201 [ 7090.220956][T29342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7090.381585][T29342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7090.439953][T29446] fuse: Bad value for 'fd' [ 7090.502167][T29342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7090.608352][T29342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7092.103088][T29342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7092.169656][T29342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7092.223419][T29342] bond0 (unregistering): Released all slaves [ 7097.664699][T29510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7097.671832][T29510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7097.701451][T29510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7097.704037][T29510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7097.873675][T29516] syzkaller0: entered promiscuous mode [ 7097.875322][T29516] syzkaller0: entered allmulticast mode [ 7101.688164][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14732'. [ 7103.777794][T29563] netlink: 'syz.1.14739': attribute type 10 has an invalid length. [ 7108.241723][T29610] binder: 29609:29610 ioctl 4018620d 0 returned -22 [ 7108.245617][T29610] binder: 29609:29610 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7108.246442][T29610] binder: 29610 RLIMIT_NICE not set [ 7111.243065][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14755'. [ 7111.450421][T29635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14757'. [ 7111.450745][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14757'. [ 7111.501063][ T4601] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 7111.502935][ T4601] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 7111.504396][ T4601] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 7111.507638][ T4601] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 7111.510998][T29635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14757'. [ 7111.512895][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14757'. [ 7111.573213][T29636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7111.581003][T29636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7116.781695][T29695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7116.784611][T29695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7117.010420][T29695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7117.013410][T29695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7128.714137][T29765] binder: 29764:29765 ioctl 4018620d 0 returned -22 [ 7128.717156][T29765] binder: 29764:29765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7128.717288][T29765] binder: 29765 RLIMIT_NICE not set [ 7133.569590][T29782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7133.573333][T29782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7133.957247][T29789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7133.969927][T29789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7133.998185][T29789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7133.999745][T29789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7138.962865][T29811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7138.992251][T29811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7150.465166][T29856] binder: 29855:29856 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 7150.475491][T29856] binder: 29855:29856 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7150.478352][T29856] binder: 29856 RLIMIT_NICE not set [ 7151.736750][T29859] binder: 29855:29859 got transaction to invalid handle, 1 [ 7151.737139][T29859] binder: 29855:29859 cannot find target node [ 7151.737574][T29859] binder: 29855:29859 transaction async to 0:0 failed 108/29201/-22, code 0 size 0-0 line 3236 [ 7152.955315][T27847] binder: undelivered TRANSACTION_ERROR: 29201 [ 7153.252388][T29862] binder: 29861:29862 ioctl 4018620d 0 returned -22 [ 7153.259454][T29862] binder: 29861:29862 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7153.280979][T29862] binder: 29862 RLIMIT_NICE not set [ 7157.551920][T29878] binder: 29877:29878 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 7157.580191][T29878] binder: 29877:29878 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7157.580831][T29878] binder: 29878 RLIMIT_NICE not set [ 7158.088926][T29879] binder: 29877:29879 got transaction to invalid handle, 1 [ 7158.089362][T29879] binder: 29877:29879 cannot find target node [ 7158.089852][T29879] binder: 29877:29879 transaction async to 0:0 failed 110/29201/-22, code 0 size 0-0 line 3236 [ 7160.047856][T27860] binder: undelivered TRANSACTION_ERROR: 29201 [ 7160.129063][T29885] binder: 29884:29885 ioctl 4018620d 0 returned -22 [ 7160.129962][T29885] binder: 29884:29885 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7160.130019][T29885] binder: 29885 RLIMIT_NICE not set [ 7162.051458][T29891] netlink: 'syz.2.14830': attribute type 18 has an invalid length. [ 7162.076935][T22323] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 7162.077027][T29891] netlink: 'syz.2.14830': attribute type 18 has an invalid length. [ 7162.077552][T22323] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 7162.077711][T22323] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 7162.077997][T22323] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 7162.383907][T29896] binder: 29895:29896 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 7162.398610][T29896] binder: 29895:29896 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7162.407141][T29896] binder: 29896 RLIMIT_NICE not set [ 7162.715647][T29898] fuse: Unknown parameter 'group_i00000000000000000000' [ 7162.822085][T29900] netlink: 'syz.1.14834': attribute type 10 has an invalid length. [ 7162.928964][T29902] binder: 29895:29902 got transaction to invalid handle, 1 [ 7162.934983][T29902] binder: 29895:29902 cannot find target node [ 7162.935289][T29902] binder: 29895:29902 transaction async to 0:0 failed 112/29201/-22, code 0 size 0-0 line 3236 [ 7164.873683][T27847] binder: undelivered TRANSACTION_ERROR: 29201 [ 7164.988421][T29917] binder: 29916:29917 ioctl 4018620d 0 returned -22 [ 7164.991044][T29917] binder: 29916:29917 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7164.991164][T29917] binder: 29917 RLIMIT_NICE not set [ 7167.609363][T29920] fuse: Unknown parameter 'group_id00000000000000000000' [ 7169.238611][T29915] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 7169.453066][T29930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14840'. [ 7169.500318][T29930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14840'. [ 7169.584012][T29932] binder: 29931:29932 ioctl 4018620d 0 returned -22 [ 7169.590460][T29932] binder: 29931:29932 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 7169.633566][T29932] binder: 29931:29932 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7169.633984][T29932] binder: 29932 RLIMIT_NICE not set [ 7169.664793][T29934] binder: 29933:29934 ioctl 4018620d 0 returned -22 [ 7169.669512][T29934] binder: 29933:29934 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7169.669760][T29934] binder: 29934 RLIMIT_NICE not set [ 7170.141595][T29935] binder: 29931:29935 got transaction to invalid handle, 1 [ 7170.142153][T29935] binder: 29931:29935 cannot find target node [ 7170.143811][T29935] binder: 29931:29935 transaction async to 0:0 failed 115/29201/-22, code 0 size 0-0 line 3236 [ 7172.078557][T27847] binder: undelivered TRANSACTION_ERROR: 29201 [ 7172.207939][T29938] fuse: Unknown parameter 'group_id00000000000000000000' [ 7172.814362][T29950] fuse: Unknown parameter 'group_id00000000000000000000' [ 7173.414098][T29962] fuse: Bad value for 'user_id' [ 7173.416580][T29962] fuse: Bad value for 'user_id' [ 7173.640818][T29966] lo: entered allmulticast mode [ 7176.565270][T29984] syz_tun: entered allmulticast mode [ 7176.588485][T29983] syz_tun: left allmulticast mode [ 7187.398731][T30038] netlink: 'syz.2.14877': attribute type 1 has an invalid length. [ 7187.631157][T30038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 7187.892860][T30038] vlan2: entered promiscuous mode [ 7187.898830][T30038] bond1: entered promiscuous mode [ 7187.903975][T30038] vlan2: entered allmulticast mode [ 7187.909340][T30038] bond1: entered allmulticast mode [ 7187.998193][T30038] bond1: (slave gretap1): making interface the new active one [ 7187.999794][T30038] gretap1: entered promiscuous mode [ 7188.004832][T30038] gretap1: entered allmulticast mode [ 7188.013574][T30038] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 7191.284599][T30052] fuse: Bad value for 'fd' [ 7192.091042][T30064] fuse: Bad value for 'fd' [ 7193.719402][T30078] binder: BINDER_SET_CONTEXT_MGR already set [ 7193.720321][T30078] binder: 30077:30078 ioctl 4018620d 200002c0 returned -16 [ 7193.728079][T30078] binder: 30077:30078 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7193.730229][T30078] binder: 30078 RLIMIT_NICE not set [ 7194.974112][T30081] fuse: Bad value for 'fd' [ 7198.351453][T30108] fuse: Bad value for 'fd' [ 7198.570721][T30112] binder: 30111:30112 ioctl c0306201 0 returned -14 [ 7198.588305][T30112] binder: 30111:30112 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7198.588743][T30112] binder: 30112 RLIMIT_NICE not set [ 7199.105297][T30113] binder: 30111:30113 got transaction to invalid handle, 1 [ 7199.106650][T30113] binder: 30111:30113 cannot find target node [ 7199.106971][T30113] binder: 30111:30113 transaction async to 0:0 failed 120/29201/-22, code 0 size 0-0 line 3236 [ 7201.064202][T27846] binder: undelivered TRANSACTION_ERROR: 29201 [ 7204.713748][T30135] binder: 30134:30135 ioctl c0306201 0 returned -14 [ 7204.737353][T30136] netlink: 'syz.1.14906': attribute type 13 has an invalid length. [ 7204.737834][T30136] netlink: 'syz.1.14906': attribute type 17 has an invalid length. [ 7204.749733][T30135] binder: 30134:30135 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7204.750176][T30135] binder: 30135 RLIMIT_NICE not set [ 7205.275493][T30138] binder: 30134:30138 got transaction to invalid handle, 1 [ 7205.290535][T30138] binder: 30134:30138 cannot find target node [ 7205.291796][T30138] binder: 30134:30138 transaction async to 0:0 failed 124/29201/-22, code 0 size 0-0 line 3236 [ 7205.909311][T30136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7206.189086][T30136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 7206.189538][T30136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 7206.218742][T30136] veth1_vlan: left promiscuous mode [ 7206.225251][T30136] veth0_vlan: left promiscuous mode [ 7206.230383][T30136] veth0_vlan: entered promiscuous mode [ 7206.240794][T30136] veth1_vlan: entered promiscuous mode [ 7206.262389][T30136] veth1_macvtap: left promiscuous mode [ 7206.270666][T30136] veth0_macvtap: left promiscuous mode [ 7206.274780][T30136] veth0_macvtap: entered promiscuous mode [ 7206.377420][T30136] veth1_macvtap: entered promiscuous mode [ 7207.188923][T27859] binder: undelivered TRANSACTION_ERROR: 29201 [ 7211.782527][T30157] binder: 30156:30157 ioctl c0306201 0 returned -14 [ 7211.801011][T30157] binder: 30156:30157 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7211.801193][T30157] binder: 30157 RLIMIT_NICE not set [ 7212.308583][T30159] binder: 30156:30159 got transaction to invalid handle, 1 [ 7212.311059][T30159] binder: 30156:30159 cannot find target node [ 7212.317066][T30159] binder: 30156:30159 transaction async to 0:0 failed 128/29201/-22, code 0 size 0-0 line 3236 [ 7214.251591][T27859] binder: undelivered TRANSACTION_ERROR: 29201 [ 7215.569329][T30181] binder: 30180:30181 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7215.571508][T30181] binder: 30181 RLIMIT_NICE not set [ 7216.077812][T30182] binder: 30180:30182 got transaction to invalid handle, 1 [ 7216.082041][T30182] binder: 30180:30182 cannot find target node [ 7216.088369][T30182] binder: 30180:30182 transaction async to 0:0 failed 132/29201/-22, code 0 size 0-0 line 3236 [ 7218.213827][T27859] binder: undelivered TRANSACTION_ERROR: 29201 [ 7222.480581][ T4601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 7222.482798][ T4601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7222.662522][ T4601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 7222.665020][ T4601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7222.860290][ T4601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 7222.860734][ T4601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7223.138930][ T4601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 7223.141305][ T4601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7227.133347][ T4601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7227.174728][ T4601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7227.213705][ T4601] bond0 (unregistering): Released all slaves [ 7227.507657][ T4601] hsr_slave_0: left promiscuous mode [ 7227.518407][ T4601] hsr_slave_1: left promiscuous mode [ 7227.564955][ T4601] veth1_macvtap: left promiscuous mode [ 7227.565371][ T4601] veth0_macvtap: left promiscuous mode [ 7227.572365][ T4601] veth1_vlan: left promiscuous mode [ 7227.572824][ T4601] veth0_vlan: left promiscuous mode [ 7227.624264][T30220] input: syz0 as /devices/virtual/input/input350 [ 7231.564101][T30202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7231.589491][T30202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7233.524388][T30202] hsr_slave_0: entered promiscuous mode [ 7233.540714][T30202] hsr_slave_1: entered promiscuous mode [ 7237.570192][T30202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 7237.639822][T30202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 7237.694818][T30202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 7237.732797][T30202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 7238.593990][T30302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7238.615086][T30302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7239.896854][T30202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7245.420574][T30347] binder: 30345:30347 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7245.422973][T30347] binder: 30347 RLIMIT_NICE not set [ 7245.929884][T30357] binder: 30345:30357 got transaction to invalid handle, 1 [ 7245.938394][T30357] binder: 30345:30357 cannot find target node [ 7245.940372][T30357] binder: 30345:30357 transaction async to 0:0 failed 136/29201/-22, code 0 size 0-0 line 3236 [ 7247.382252][T30202] veth0_vlan: entered promiscuous mode [ 7247.451905][T30202] veth1_vlan: entered promiscuous mode [ 7247.725223][T30202] veth0_macvtap: entered promiscuous mode [ 7247.767875][T30202] veth1_macvtap: entered promiscuous mode [ 7247.858355][T29867] binder: undelivered TRANSACTION_ERROR: 29201 [ 7248.204754][T22323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7248.205429][T22323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7248.213221][T22323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7248.219772][T22323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7250.732999][T30404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7250.738997][T30404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7251.232429][T30409] fuse: Unknown parameter '0x0000000000000005' [ 7251.334797][T30409] misc userio: Invalid payload size [ 7251.346915][T30409] misc userio: The device must be registered before sending interrupts [ 7251.351014][T30409] misc userio: Invalid payload size [ 7253.418581][T30417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7253.434567][T30417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7253.529736][T30417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7253.540878][T30417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7279.590235][T30491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14971'. [ 7287.042245][T30507] syzkaller0: entered promiscuous mode [ 7287.042690][T30507] syzkaller0: entered allmulticast mode [ 7292.823184][T30554] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14992'. [ 7295.398801][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14998'. [ 7295.788112][T30575] netlink: 4563 bytes leftover after parsing attributes in process `syz.2.15000'. [ 7296.289669][T30581] netlink: 'syz.2.15003': attribute type 15 has an invalid length. [ 7296.588314][T30585] netlink: 'syz.2.15005': attribute type 1 has an invalid length. [ 7296.590532][T30585] netlink: 'syz.2.15005': attribute type 3 has an invalid length. [ 7297.538851][T30600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15012'. [ 7297.548058][T30600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15012'. [ 7301.068422][T30624] syzkaller0: entered promiscuous mode [ 7301.068888][T30624] syzkaller0: entered allmulticast mode [ 7301.217618][T30625] syzkaller0: entered promiscuous mode [ 7301.218087][T30625] syzkaller0: entered allmulticast mode [ 7305.461991][T30668] syzkaller0: entered promiscuous mode [ 7305.463727][T30668] syzkaller0: entered allmulticast mode [ 7307.701938][T30710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15060'. [ 7308.299142][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15065'. [ 7308.462344][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15066'. [ 7308.462720][T30722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15066'. [ 7308.463038][T30722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15066'. [ 7309.367288][T30740] binder: 30738:30740 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7309.367730][T30740] binder: 30740 RLIMIT_NICE not set [ 7309.874609][T30748] binder: 30738:30748 got transaction to invalid handle, 1 [ 7309.874959][T30748] binder: 30738:30748 cannot find target node [ 7309.875354][T30748] binder: 30738:30748 transaction async to 0:0 failed 141/29201/-22, code 0 size 0-0 line 3236 [ 7309.904954][T30749] netlink: 'syz.2.15078': attribute type 3 has an invalid length. [ 7309.905434][T30749] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15078'. [ 7309.915330][T30749] netlink: 'syz.2.15078': attribute type 3 has an invalid length. [ 7309.916535][T30749] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15078'. [ 7311.838878][T27862] binder: undelivered TRANSACTION_ERROR: 29201 [ 7312.401434][T30779] netlink: 'syz.1.15091': attribute type 1 has an invalid length. [ 7312.403202][T30779] netlink: 'syz.1.15091': attribute type 2 has an invalid length. [ 7314.279651][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15094'. [ 7314.280025][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15094'. [ 7318.087483][T30805] netlink: 'syz.1.15101': attribute type 29 has an invalid length. [ 7318.090878][T30805] netlink: 'syz.1.15101': attribute type 29 has an invalid length. [ 7321.213920][T30830] fuse: Bad value for 'user_id' [ 7321.214240][T30830] fuse: Bad value for 'user_id' [ 7326.851604][T30856] netlink: 'syz.1.15116': attribute type 1 has an invalid length. [ 7327.117445][T30856] bond1: (slave geneve2): making interface the new active one [ 7327.123793][T30856] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 7327.128495][T25520] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 7327.128996][T25520] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 7327.129193][T25520] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 7327.129390][T25520] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 7330.402155][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15119'. [ 7333.370938][T30879] binder: 30878:30879 tried to acquire reference to desc 0, got 1 instead [ 7333.377129][T30879] binder: 30878:30879 got reply transaction with bad transaction stack, transaction 146 has target 30878:0 [ 7333.380878][T30879] binder: 30878:30879 transaction reply to 0:0 failed 147/29201/-71, code 0 size 0-0 line 3154 [ 7333.382851][T30879] binder: 30878:30879 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7333.383195][T30879] binder: 30879 RLIMIT_NICE not set [ 7333.383349][T30879] binder: 30879 RLIMIT_NICE not set [ 7333.388395][T30879] binder: 30879 RLIMIT_NICE not set [ 7333.388859][T30879] binder_alloc: 30878: binder_alloc_buf, no vma [ 7333.388914][T30879] binder: cannot allocate buffer: vma cleared, target dead or dying [ 7333.389063][T30879] binder: 30878:30879 transaction reply to 30878:30879 failed 148/29189/-3, code 0 size 0-0 line 3393 [ 7333.389405][T30879] binder: send failed reply for transaction 146 to 30878:30879 [ 7333.393313][T29867] binder: undelivered TRANSACTION_COMPLETE [ 7333.393471][T29867] binder: undelivered TRANSACTION_ERROR: 29201 [ 7333.393524][T29867] binder: undelivered TRANSACTION_ERROR: 29189 [ 7333.403482][T29867] binder: undelivered TRANSACTION_ERROR: 29190 [ 7339.468569][T30899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15130'. [ 7339.895107][T30906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7339.900194][T30906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7341.237832][T30919] fuse: Bad value for 'user_id' [ 7341.238209][T30919] fuse: Bad value for 'user_id' [ 7341.275523][T30919] ipip0: entered promiscuous mode [ 7341.278895][T30919] ipip0: entered allmulticast mode [ 7341.484819][T30919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15136'. [ 7357.595216][T30977] netlink: 'syz.2.15159': attribute type 3 has an invalid length. [ 7357.595569][T30977] netlink: 'syz.2.15159': attribute type 3 has an invalid length. [ 7357.596884][T30977] netlink: 112 bytes leftover after parsing attributes in process `syz.2.15159'. [ 7362.004695][T30996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7362.007797][T30996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7364.801933][T31004] binder: 31003:31004 tried to acquire reference to desc 0, got 1 instead [ 7364.803898][T31004] binder: 31003:31004 ioctl c0306201 0 returned -14 [ 7364.818856][T30285] binder: undelivered TRANSACTION_COMPLETE [ 7364.843118][T30285] binder: undelivered transaction 153, process died. [ 7366.098313][T31016] binder: 31015:31016 tried to acquire reference to desc 0, got 1 instead [ 7366.113725][T29867] binder: undelivered transaction 158, process died. [ 7366.114530][T29867] binder: undelivered TRANSACTION_COMPLETE [ 7370.450540][T31079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15182'. [ 7377.891487][T31122] binder: 31122 RLIMIT_NICE not set [ 7378.426689][T31123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7378.428324][T31123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7387.279040][T31164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7387.281260][T31164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7387.862319][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15216'. [ 7390.749341][T31190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7390.751063][T31190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7391.434184][T31199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7391.449378][T31199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7393.381646][T31228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7393.383115][T31228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7393.868388][T31233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7393.869666][T31233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7394.083615][T31237] input: syz0 as /devices/virtual/input/input352 [ 7404.181180][T31289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7404.182670][T31289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7409.362557][T31319] binder: 31318:31319 tried to acquire reference to desc 0, got 1 instead [ 7409.365576][T31319] binder: 31318:31319 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 7409.368807][T31319] binder: 31319 RLIMIT_NICE not set [ 7410.884301][T31322] fuse: Unknown parameter 'grou00000000000000000000' [ 7414.208235][T31335] fuse: Unknown parameter 'grou00000000000000000000' [ 7423.957385][T31347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15280'. [ 7428.188191][T31356] fuse: Unknown parameter 'grou00000000000000000000' [ 7445.382844][ T4601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7445.391558][ T4601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 7445.520091][ T4601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7445.522064][ T4601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 7445.645555][ T4601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7445.653622][ T4601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 7445.762110][ T4601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7445.762755][ T4601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 7446.948589][ T4601] bond1 (unregistering): (slave geneve2): Releasing active interface [ 7447.026963][ T4601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7447.087554][ T4601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7447.132658][ T4601] bond0 (unregistering): Released all slaves [ 7447.149929][ T4601] bond1 (unregistering): Released all slaves [ 7447.522666][ T4601] hsr_slave_0: left promiscuous mode [ 7447.532995][ T4601] hsr_slave_1: left promiscuous mode [ 7447.560441][ T4601] veth1_macvtap: left promiscuous mode [ 7447.563020][ T4601] veth0_macvtap: left promiscuous mode [ 7447.569618][ T4601] veth1_vlan: left promiscuous mode [ 7447.571845][ T4601] veth0_vlan: left promiscuous mode [ 7451.904108][T31457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15308'. [ 7452.043622][T31459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15309'. [ 7452.092355][T31459] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 7452.810584][T31471] syzkaller1: entered promiscuous mode [ 7452.813143][T31471] syzkaller1: entered allmulticast mode [ 7453.129042][T31419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7453.152688][T31419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7454.486454][T31419] hsr_slave_0: entered promiscuous mode [ 7454.490455][T31419] hsr_slave_1: entered promiscuous mode [ 7455.449654][T31419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 7455.480416][T31419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 7455.510797][T31419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 7455.582592][T31419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 7457.350007][T31419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7462.613405][T31419] veth0_vlan: entered promiscuous mode [ 7462.681568][T31419] veth1_vlan: entered promiscuous mode [ 7462.899811][T31419] veth0_macvtap: entered promiscuous mode [ 7462.953747][T31419] veth1_macvtap: entered promiscuous mode [ 7463.262631][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15338'. [ 7463.292798][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15338'. [ 7463.311303][T25520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7463.353108][T25520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7463.353555][T25520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7463.354097][T25520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7463.881112][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15341'. [ 7464.339677][T31625] syzkaller0: entered promiscuous mode [ 7464.340170][T31625] syzkaller0: entered allmulticast mode [ 7468.834356][T25520] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7468.838781][T25520] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7468.848911][T31390] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7468.849307][T31390] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7468.849637][T31390] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7468.849829][T31390] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7468.850184][T31390] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 7468.850508][T31390] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 7472.309743][T31688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15359'. [ 7472.710856][T31691] syzkaller0: entered promiscuous mode [ 7472.712971][T31691] syzkaller0: entered allmulticast mode [ 7474.803960][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b8fb61b4: rx timeout, send abort [ 7474.805268][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b8fb61b4: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 7476.204487][T31732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15378'. [ 7476.994580][T31751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 7479.207645][T31790] netlink: 'syz.2.15396': attribute type 13 has an invalid length. [ 7480.357274][T31799] syzkaller0: entered promiscuous mode [ 7480.359291][T31799] syzkaller0: entered allmulticast mode [ 7480.595433][T31803] syzkaller0: entered promiscuous mode [ 7480.598259][T31803] syzkaller0: entered allmulticast mode [ 7486.068969][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15416'. [ 7486.069454][T31876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15416'. [ 7486.175072][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15416'. [ 7486.175435][T31876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15416'. [ 7486.187070][T31390] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 7486.189559][T31390] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 7486.191136][T31390] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 7486.193031][T31390] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 7486.223554][T31879] fuse: Invalid rootmode [ 7487.380843][T31900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 7487.525027][T31902] syzkaller0: entered promiscuous mode [ 7487.537053][T31902] syzkaller0: entered allmulticast mode [ 7488.154413][T31912] netlink: 'syz.3.15433': attribute type 3 has an invalid length. [ 7488.968948][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15441'. [ 7488.972807][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15441'. [ 7489.483706][T31931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15442'. [ 7489.848549][T31937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15445'. [ 7491.209518][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15455'. [ 7494.094338][T31976] fuse: Bad value for 'rootmode' [ 7497.018460][T32003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15470'. [ 7497.018809][T32003] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15470'. [ 7497.918572][T32009] dvmrp1: entered allmulticast mode [ 7504.426844][T32011] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 7508.414721][T32036] syzkaller1: entered promiscuous mode [ 7508.415112][T32036] syzkaller1: entered allmulticast mode [ 7510.260136][T32055] syzkaller0: entered promiscuous mode [ 7510.261810][T32055] syzkaller0: entered allmulticast mode [ 7516.002775][T32074] macvlan2: entered promiscuous mode [ 7516.278249][T32081] fuse: Unknown parameter '0x0000000000000003' [ 7516.482307][T32083] syzkaller1: entered promiscuous mode [ 7516.482710][T32083] syzkaller1: entered allmulticast mode [ 7517.119916][T32095] fuse: Unknown parameter '0x0000000000000003' [ 7518.309095][T32109] fuse: Unknown parameter '0x0000000000000003' [ 7518.546160][T32111] syzkaller0: entered promiscuous mode [ 7518.548307][T32111] syzkaller0: entered allmulticast mode [ 7519.489595][T32121] syzkaller0: entered promiscuous mode [ 7519.490025][T32121] syzkaller0: entered allmulticast mode [ 7519.921029][T32123] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15510'. [ 7520.119122][T32125] fuse: Unknown parameter '0x0000000000000003' [ 7525.824936][T31390] slab kmalloc-32 start fff0000017b8bdc0 pointer offset 17365880163140632576 size 32 [ 7525.825598][T31390] list_del corruption. prev->next should be f7f000002d88de00, but was ffffc1ffc137bd00. (prev=f0f0000017b8bdc0) [ 7525.827506][T31390] ------------[ cut here ]------------ [ 7525.830693][T31390] kernel BUG at lib/list_debug.c:62! [ 7525.831514][T31390] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 7525.852146][T31390] Modules linked in: [ 7525.855754][T31390] CPU: 1 UID: 0 PID: 31390 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT [ 7525.856860][T31390] Tainted: [L]=SOFTLOCKUP [ 7525.857349][T31390] Hardware name: linux,dummy-virt (DT) [ 7525.857919][T31390] Workqueue: events_power_efficient neigh_periodic_work [ 7525.861090][T31390] pstate: 614020c9 (nZCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 7525.864119][T31390] pc : __list_del_entry_valid_or_report+0xd0/0x120 [ 7525.866907][T31390] lr : __list_del_entry_valid_or_report+0xd0/0x120 [ 7525.869331][T31390] sp : ffff80008be8bbf0 [ 7525.870986][T31390] x29: ffff80008be8bbf0 x28: 0000000000000000 x27: ffff800082d1d3e0 [ 7525.873851][T31390] x26: f6f000000eb5ee00 x25: dead000000000122 x24: 000000000000009d [ 7525.874368][T31390] x23: 0000000000000000 x22: ffffc1ffc137bd00 x21: f0f0000017b8bdc0 [ 7525.874766][T31390] x20: f4f0000040190400 x19: f7f000002d88de00 x18: 0000000000000010 [ 7525.875150][T31390] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800082d7db2e [ 7525.875674][T31390] x14: 00000000ffffffea x13: ffff80008be8b868 x12: ffff800082b6f288 [ 7525.876093][T31390] x11: ffff800082abf2e0 x10: ffff800082b6f2e0 x9 : 0000000000000001 [ 7525.876747][T31390] x8 : 0000000000000001 x7 : 000000000002ffe8 x6 : c0000000ffffdfff [ 7525.877455][T31390] x5 : fff000007d8e6508 x4 : 0000000000000000 x3 : 0000000000000000 [ 7525.877989][T31390] x2 : 0000000000000000 x1 : f5f00000035a3240 x0 : 000000000000006d [ 7525.878726][T31390] Call trace: [ 7525.879271][T31390] __list_del_entry_valid_or_report+0xd0/0x120 (P) [ 7525.879950][T31390] ref_tracker_free+0xa8/0x278 [ 7525.880516][T31390] neigh_destroy+0x110/0x2b4 [ 7525.882297][T31390] neigh_periodic_work+0x2dc/0x33c [ 7525.882561][T31390] process_one_work+0x180/0x2d0 [ 7525.882829][T31390] worker_thread+0x184/0x2fc [ 7525.883061][T31390] kthread+0x118/0x124 [ 7525.883305][T31390] ret_from_fork+0x10/0x20 [ 7525.884021][T31390] Code: aa1503e3 f000f6c0 910d6000 97e40c49 (d4210000) [ 7525.885019][T31390] ---[ end trace 0000000000000000 ]--- [ 7525.886137][T31390] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 7525.886928][T31390] SMP: stopping secondary CPUs [ 7525.888418][T31390] Kernel Offset: disabled [ 7525.888694][T31390] CPU features: 0x0000000,001a3305,fbe32780,957fff3f [ 7525.889392][T31390] Memory Limit: none [ 7525.890909][T31390] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:41:43 Registers: info registers vcpu 0 CPU#0 PC=ffff8000803736a8 X00=f0f0000003764100 X01=0000000000000000 X02=f5f000002e09e480 X03=0000000000000000 X04=0000000000000000 X05=ffff800082e7b6e0 X06=ffff800082e7b760 X07=ffff800082e7b980 X08=ffff800082e7b680 X09=0000000000000000 X10=000000000000005a X11=0000000000000001 X12=0000000002536565 X13=0000000000000369 X14=025365651bae3bf6 X15=00000000205c8000 X16=ffff800082e78000 X17=fff07ffffae63000 X18=0000000000000014 X19=ffff80008019c8e0 X20=ffff800082e7b730 X21=f5f000002e09e480 X22=0000000000000000 X23=bfcf80008019caf0 X24=0000000000000000 X25=000000000000000b X26=000000000000001d X27=f0f0000003764100 X28=f0f0000003764100 X29=ffff800082e7b6f0 X30=ffff800081c0dbfc SP=ffff800082e7b630 PSTATE=20402009 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c252e:756c6c252e7a7973 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f0f0ffffffff0000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:000000ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f0000f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0010ffff90147534 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008016d80c X00=0000000000000000 X01=f5f00000035a3240 X02=0000000000000000 X03=0000000000000000 X04=0000000000000000 X05=00000000000affa8 X06=c0000000ffffdfff X07=000000000002ffe8 X08=0000000000000001 X09=0000000000000001 X10=ffff800082b6f2e0 X11=ffff800082abf2e0 X12=ffff800082b6f288 X13=ffff80008be8b748 X14=00000000ffffffea X15=ffff80008be8b51d X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=ffff800082c43838 X20=0000000000000117 X21=ffff800082abf000 X22=0000000000000104 X23=000000000000113d X24=0000000000000000 X25=ffff800082a910b8 X26=f6f000000eb5ee00 X27=ffff800082d1d3e0 X28=f5f00000035a3240 X29=ffff80008be8b800 X30=ffff80008016d80c SP=ffff80008be8b7f0 PSTATE=624023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000006802000000:0000006802000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000068 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:0000000000000068 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffcd4cb470 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000