last executing test programs: 1m34.141241491s ago: executing program 3 (id=464): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="01ceb5581c2a57e668532c24f715f382"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0c543bbd5da7afef61290d1151a0acad"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m34.080152964s ago: executing program 3 (id=466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m34.046587141s ago: executing program 3 (id=467): syz_open_dev$sg(0x0, 0x0, 0x8002) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "73389729e7f1251ca0cb952253025e8574567f566001fed4a4b1d924862427760e52c10eaefdbebbc2ae3d7bdf7a87d66fbcc3147a84d2b16e9fa5eb571bb2dd", 0x1e}, 0x48, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m33.970948295s ago: executing program 3 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 1m33.920919722s ago: executing program 3 (id=470): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000054c0)="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", 0x2000, &(0x7f0000000580)={&(0x7f0000000380)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x2d, 0x4, 0x4210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) 1m33.731115545s ago: executing program 3 (id=471): getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='lazy', 0x4) 1m33.65331324s ago: executing program 32 (id=471): getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='lazy', 0x4) 28.817702728s ago: executing program 4 (id=1515): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 28.729286414s ago: executing program 4 (id=1517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r0 = io_uring_setup(0x13b5, &(0x7f0000000140)={0x0, 0x911c, 0x40, 0x3, 0x2fa}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 28.659268765s ago: executing program 4 (id=1520): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 28.491065896s ago: executing program 4 (id=1522): mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) 28.376821202s ago: executing program 4 (id=1526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x10, 0x3, 0x16b}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2003, 0x4}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 28.137056559s ago: executing program 4 (id=1531): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x2000}) 12.835435739s ago: executing program 33 (id=1531): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x2000}) 1.781640604s ago: executing program 0 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x80000000}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) 1.776840551s ago: executing program 2 (id=1716): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.391255084s ago: executing program 0 (id=1710): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 1.390991022s ago: executing program 2 (id=1711): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x808) inotify_rm_watch(r0, r1) 948.571136ms ago: executing program 2 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) 838.784771ms ago: executing program 1 (id=1713): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f00000002c0)="984e4931", 0x4) 838.58952ms ago: executing program 0 (id=1714): bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 834.600656ms ago: executing program 2 (id=1717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) 717.481248ms ago: executing program 1 (id=1718): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) 712.620849ms ago: executing program 5 (id=1719): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000e07, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 610.81421ms ago: executing program 2 (id=1720): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x2bf, 0x0, &(0x7f0000000940)="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", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 563.265146ms ago: executing program 1 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000008095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r2) close(0x3) 547.991275ms ago: executing program 0 (id=1730): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x1, 0x14800821, 0x200, 0x8, 0x10, 0x401, 0x0, 0x0, 0x20, 0x80000001}}, 0x50) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) 408.648368ms ago: executing program 5 (id=1723): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25070000000500130081000000140008"], 0x38}}, 0x2) 336.06086ms ago: executing program 5 (id=1724): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 229.829989ms ago: executing program 5 (id=1725): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) 229.574873ms ago: executing program 1 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="11934e5a94abc0c7b4bf58a3579d15bd68a249de16a7c2193792b08240c45d1146be3e78a5b6982061d288c1f0f004d17b66adf819e732625d6af4d74c6a8bb10e25d895649f95c54c332ef5c42ef7ec28ae70f9fbcc9fed92f20a", 0x5b) 229.236666ms ago: executing program 0 (id=1727): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x10003, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 136.773012ms ago: executing program 2 (id=1728): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 136.658761ms ago: executing program 5 (id=1729): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, 0x0) 133.240968ms ago: executing program 1 (id=1737): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 71.318041ms ago: executing program 0 (id=1731): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000000), 0x2000000) write(r0, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x10', 0x21) 2.831805ms ago: executing program 5 (id=1732): bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 0s ago: executing program 1 (id=1741): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10001, 0x12) kernel console output (not intermixed with test programs): a failed: -4 [ 79.891378][ T6971] netlink: 'syz.3.466': attribute type 14 has an invalid length. [ 79.891441][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 79.910958][ T5820] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.912971][ T6971] netlink: 'syz.3.466': attribute type 14 has an invalid length. [ 79.912989][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 79.922938][ T5820] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.924480][ T5820] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.924517][ T5820] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.110796][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.222806][ T5820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.272481][ T5947] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 80.273666][ T5947] usb 6-1: config index 0 descriptor too short (expected 71, got 53) [ 80.273691][ T5947] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.273727][ T5947] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.279132][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.279157][ T5947] usb 6-1: Product: syz [ 80.279169][ T5947] usb 6-1: Manufacturer: syz [ 80.279181][ T5947] usb 6-1: SerialNumber: syz [ 80.316917][ T5820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.425173][ T5820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.458923][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.463307][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.466989][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.473601][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.475599][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.520456][ T6967] mos7720 6-1:1.0: required endpoints missing [ 80.522255][ T5820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.523260][ T5947] usb 6-1: USB disconnect, device number 7 [ 80.923838][ T5820] bond0 (unregistering): Released all slaves [ 80.974966][ T7022] syz_tun: entered allmulticast mode [ 80.979937][ T7020] syz_tun: left allmulticast mode [ 81.150441][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 81.150533][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 81.248630][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.479528][ T5820] hsr_slave_0: left promiscuous mode [ 81.482179][ T5820] hsr_slave_1: left promiscuous mode [ 81.781009][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.781129][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.781492][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.850839][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.874588][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.976502][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.979833][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.979954][ T6987] bridge_slave_0: entered allmulticast mode [ 81.981717][ T6987] bridge_slave_0: entered promiscuous mode [ 81.993207][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.993383][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.993590][ T6987] bridge_slave_1: entered allmulticast mode [ 82.004816][ T6987] bridge_slave_1: entered promiscuous mode [ 82.010841][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 82.011742][ T5854] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.012817][ T5854] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 82.012857][ T5854] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.012875][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.012895][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.012913][ T5854] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.012946][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.040495][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.043857][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.056372][ T6987] team0: Port device team_slave_0 added [ 82.057758][ T6987] team0: Port device team_slave_1 added [ 82.073813][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.073852][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.073903][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.115696][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.115741][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.115776][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.181787][ T6987] hsr_slave_0: entered promiscuous mode [ 82.182611][ T6987] hsr_slave_1: entered promiscuous mode [ 82.183138][ T6987] debugfs: 'hsr0' already exists in 'hsr' [ 82.183155][ T6987] Cannot create hsr debugfs directory [ 82.219787][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 82.312034][ T5755] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 82.382228][ T6987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.389914][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.391712][ T6987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.416479][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.417581][ T6987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.422376][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.423391][ T6987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.428488][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.501090][ T5755] Bluetooth: hci1: command tx timeout [ 82.514538][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.515858][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 82.527223][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.534592][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.534696][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.542805][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542881][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.577650][ T6987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.806714][ T7133] usbtmc 6-1:16.0: simple control status returned b3 [ 82.908123][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.008031][ T1680] usb 6-1: USB disconnect, device number 8 [ 83.134265][ T6987] veth0_vlan: entered promiscuous mode [ 83.142275][ T6987] veth1_vlan: entered promiscuous mode [ 83.165032][ T6987] veth0_macvtap: entered promiscuous mode [ 83.169443][ T6987] veth1_macvtap: entered promiscuous mode [ 83.184069][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.190615][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.242331][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242534][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242585][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242623][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.277798][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.277868][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.301770][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.301862][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.637090][ T7176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.952158][ T5744] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 84.102684][ T5744] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.103850][ T5744] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.103877][ T5744] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.103905][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.107962][ T7179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.117247][ T5744] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.185448][ T5602] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.323827][ T10] usb 6-1: USB disconnect, device number 9 [ 84.350971][ T5602] usb 7-1: Using ep0 maxpacket: 32 [ 84.358152][ T5602] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 84.366529][ T5602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.371308][ T5602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.371334][ T5602] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 84.371374][ T5602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.394426][ T5602] usb 7-1: config 0 descriptor?? [ 84.443901][ T7210] FAULT_INJECTION: forcing a failure. [ 84.443901][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 84.443971][ T7210] CPU: 2 UID: 0 PID: 7210 Comm: syz.0.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.443998][ T7210] Tainted: [L]=SOFTLOCKUP [ 84.444003][ T7210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.444010][ T7210] Call Trace: [ 84.444015][ T7210] [ 84.444019][ T7210] dump_stack_lvl+0x100/0x190 [ 84.444039][ T7210] should_fail_ex.cold+0x5/0xa [ 84.444055][ T7210] should_failslab+0xc2/0x120 [ 84.444072][ T7210] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 84.444087][ T7210] ? copy_process+0x6a2/0x8370 [ 84.444107][ T7210] copy_process+0x6a2/0x8370 [ 84.444126][ T7210] ? __pfx___futex_wait+0x10/0x10 [ 84.444144][ T7210] ? __pfx_try_to_wake_up+0x10/0x10 [ 84.444166][ T7210] ? futex_hash+0x311/0x400 [ 84.444198][ T7210] ? __pfx_copy_process+0x10/0x10 [ 84.444217][ T7210] ? futex_wake+0x4ea/0x5e0 [ 84.444235][ T7210] kernel_clone+0x176/0x9d0 [ 84.444253][ T7210] ? __pfx_kernel_clone+0x10/0x10 [ 84.444273][ T7210] ? ksys_write+0x190/0x250 [ 84.444288][ T7210] __do_compat_sys_ia32_clone+0xd4/0x120 [ 84.444306][ T7210] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 84.444328][ T7210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.444357][ T7210] __do_fast_syscall_32+0x13a/0x8b0 [ 84.444380][ T7210] do_fast_syscall_32+0x32/0x70 [ 84.444406][ T7210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.444420][ T7210] RIP: 0023:0xf7f98fec [ 84.444439][ T7210] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 84.444447][ T7210] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 84.444464][ T7210] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 84.444474][ T7210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.444484][ T7210] RBP: 00000000f54565ec R08: 0000000000000000 R09: 0000000000000000 [ 84.444494][ T7210] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.444505][ T7210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.444526][ T7210] [ 84.496020][ T7215] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.496078][ T7215] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 84.581848][ T5755] Bluetooth: hci1: command tx timeout [ 84.752631][ T7227] netlink: 'syz.4.548': attribute type 5 has an invalid length. [ 84.752686][ T7227] netlink: 'syz.4.548': attribute type 9 has an invalid length. [ 84.752906][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 84.835368][ T5602] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input6 [ 84.921079][ T5602] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input7 [ 84.989418][ T5602] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 85.242649][ T7246] netlink: 88 bytes leftover after parsing attributes in process `syz.1.557'. [ 85.291843][ T5744] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 85.462622][ T5744] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.471861][ T5744] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.475385][ T5744] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.475407][ T5744] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.475445][ T5744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.475461][ T5744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 85.475479][ T5744] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.475511][ T5744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.507593][ T5744] usb 9-1: config 0 descriptor?? [ 85.512637][ T7238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.644697][ T7262] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 85.726993][ T7270] kvm: kvm [7269]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 85.733105][ T5744] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.775918][ T7273] ip6gretap1: entered allmulticast mode [ 85.778586][ T7273] batman_adv: batadv0: Adding interface: ip6gretap1 [ 85.779133][ T7273] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.779940][ T7273] batman_adv: batadv0: Interface activated: ip6gretap1 [ 85.949628][ T5755] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 85.963837][ C0] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 85.976704][ T5602] usb 9-1: USB disconnect, device number 2 [ 85.995252][ T5602] usblp1: removed [ 86.055219][ T7294] netlink: 67 bytes leftover after parsing attributes in process `syz.1.576'. [ 86.055391][ T7294] IPv6: Can't replace route, no match found [ 86.108114][ T7299] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 86.111576][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 86.125052][ T7300] block nbd0: shutting down sockets [ 86.221475][ T7308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.582'. [ 86.564677][ T7326] netlink: 180 bytes leftover after parsing attributes in process `syz.4.588'. [ 86.566624][ T7324] IPv6: A: Disabled Multicast RS [ 86.670921][ T5755] Bluetooth: hci1: command tx timeout [ 86.789360][ T5854] usb 7-1: USB disconnect, device number 5 [ 86.805378][ T5833] kernel write not supported for file /input/event0 (pid: 5833 comm: kworker/1:4) [ 87.361495][ T7377] FAULT_INJECTION: forcing a failure. [ 87.361495][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 87.361588][ T7377] CPU: 2 UID: 0 PID: 7377 Comm: syz.1.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.361632][ T7377] Tainted: [L]=SOFTLOCKUP [ 87.361641][ T7377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.361652][ T7377] Call Trace: [ 87.361659][ T7377] [ 87.361666][ T7377] dump_stack_lvl+0x100/0x190 [ 87.361704][ T7377] should_fail_ex.cold+0x5/0xa [ 87.361731][ T7377] should_failslab+0xc2/0x120 [ 87.361759][ T7377] __kmalloc_noprof+0xfc/0x840 [ 87.361794][ T7377] ? udp_init_sock+0x24e/0x450 [ 87.361831][ T7377] udp_init_sock+0x24e/0x450 [ 87.361860][ T7377] ? __pfx_udp_init_sock+0x10/0x10 [ 87.361891][ T7377] inet_create+0x94c/0x1060 [ 87.361916][ T7377] ? inet_create+0x94/0x1060 [ 87.361945][ T7377] __sock_create+0x339/0x860 [ 87.361980][ T7377] __sys_socket+0x14d/0x260 [ 87.362007][ T7377] ? fput+0x7c/0x100 [ 87.362029][ T7377] ? __pfx___sys_socket+0x10/0x10 [ 87.362055][ T7377] ? ksys_write+0x1ac/0x250 [ 87.362074][ T7377] ? __pfx_ksys_write+0x10/0x10 [ 87.362099][ T7377] __ia32_sys_socket+0x72/0xb0 [ 87.362128][ T7377] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.362151][ T7377] __do_fast_syscall_32+0x13a/0x8b0 [ 87.362179][ T7377] do_fast_syscall_32+0x32/0x70 [ 87.362205][ T7377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.362229][ T7377] RIP: 0023:0xf7fc7fec [ 87.362251][ T7377] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 87.362260][ T7377] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 87.362279][ T7377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 87.362291][ T7377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.362304][ T7377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.362316][ T7377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.362329][ T7377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.362355][ T7377] [ 87.499421][ T7381] kvm: user requested TSC rate below hardware speed [ 87.680071][ T7402] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.681748][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 87.870887][ T5744] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 87.910052][ T7427] jffs2: notice: (7427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 87.984368][ T7433] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.985845][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 88.031319][ T5744] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.032269][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.032292][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.032308][ T5744] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.032338][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.034164][ T5744] usb 7-1: config 0 descriptor?? [ 88.164405][ T7455] jffs2: notice: (7455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 88.447418][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.447519][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449439][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449463][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449482][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449501][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449520][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449569][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.449588][ T5744] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 88.457657][ T5744] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.472207][ T5833] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.621608][ T5833] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 88.622658][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.622686][ T5833] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.622700][ T5833] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 88.622714][ T5833] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.624779][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.624800][ T5833] usb 6-1: Product: syz [ 88.624812][ T5833] usb 6-1: Manufacturer: syz [ 88.624824][ T5833] usb 6-1: SerialNumber: syz [ 88.629470][ T5833] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 88.629490][ T5833] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 88.629523][ T5833] usbserial_generic 6-1:1.0: generic converter detected [ 88.632471][ T5833] usb 6-1: generic converter now attached to ttyUSB0 [ 88.703612][ T5602] usb 7-1: USB disconnect, device number 6 [ 88.740858][ T5755] Bluetooth: hci1: command tx timeout [ 88.837619][ T6202] usb 6-1: USB disconnect, device number 10 [ 88.847575][ T6202] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 88.847976][ T6202] usbserial_generic 6-1:1.0: device disconnected [ 89.242206][ T7473] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.247206][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 89.295162][ T7477] ip6gretap1: entered allmulticast mode [ 89.295345][ T7479] input: syz0 as /devices/virtual/input/input8 [ 89.296710][ T7477] batman_adv: batadv0: Adding interface: ip6gretap1 [ 89.296722][ T7477] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.296744][ T7477] batman_adv: batadv0: Interface activated: ip6gretap1 [ 89.338526][ T7198] udevd[7198]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 89.400567][ T7486] jffs2: notice: (7486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 89.486677][ T7494] WARNING! power/level is deprecated; use power/control instead [ 89.679369][ T7507] ip6gretap1: entered allmulticast mode [ 89.685606][ T7507] batman_adv: batadv0: Adding interface: ip6gretap1 [ 89.685691][ T7507] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.685884][ T7507] batman_adv: batadv0: Interface activated: ip6gretap1 [ 89.752470][ T7511] FAULT_INJECTION: forcing a failure. [ 89.752470][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 89.752567][ T7511] CPU: 3 UID: 0 PID: 7511 Comm: syz.2.665 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.752605][ T7511] Tainted: [L]=SOFTLOCKUP [ 89.752613][ T7511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.752625][ T7511] Call Trace: [ 89.752631][ T7511] [ 89.752638][ T7511] dump_stack_lvl+0x100/0x190 [ 89.752688][ T7511] should_fail_ex.cold+0x5/0xa [ 89.752714][ T7511] should_failslab+0xc2/0x120 [ 89.752740][ T7511] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 89.752759][ T7511] ? __d_alloc+0x35/0xa50 [ 89.752782][ T7511] __d_alloc+0x35/0xa50 [ 89.752802][ T7511] d_alloc_pseudo+0x1c/0xc0 [ 89.752825][ T7511] alloc_file_pseudo+0x118/0x290 [ 89.752847][ T7511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 89.752868][ T7511] ? _raw_spin_unlock+0x28/0x50 [ 89.752886][ T7511] ? alloc_fd+0x471/0x7a0 [ 89.752906][ T7511] __anon_inode_getfile+0xe8/0x280 [ 89.752936][ T7511] __anon_inode_getfd+0x5c/0xe0 [ 89.752960][ T7511] map_create+0x19e1/0x30d0 [ 89.752992][ T7511] ? __pfx_map_create+0x10/0x10 [ 89.753016][ T7511] ? lock_acquire+0x1d1/0x380 [ 89.753037][ T7511] ? __might_fault+0xc5/0x140 [ 89.753062][ T7511] ? __might_fault+0xc5/0x140 [ 89.753092][ T7511] __sys_bpf+0x12a0/0x4a30 [ 89.753113][ T7511] ? __pfx___sys_bpf+0x10/0x10 [ 89.753127][ T7511] ? find_held_lock+0x2b/0x80 [ 89.753142][ T7511] ? futex_wake+0x4ea/0x5e0 [ 89.753174][ T7511] ? rcu_read_lock_any_held+0x6a/0x90 [ 89.753193][ T7511] ? find_held_lock+0x2b/0x80 [ 89.753208][ T7511] ? ksys_write+0x190/0x250 [ 89.753223][ T7511] ? ksys_write+0x190/0x250 [ 89.753249][ T7511] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 89.753268][ T7511] ? xfd_validate_state+0x129/0x190 [ 89.753297][ T7511] ? __ia32_sys_bpf+0xcc/0x170 [ 89.753312][ T7511] __ia32_sys_bpf+0xcc/0x170 [ 89.753328][ T7511] ? __do_fast_syscall_32+0xb3/0x8b0 [ 89.753351][ T7511] __do_fast_syscall_32+0x13a/0x8b0 [ 89.753384][ T7511] do_fast_syscall_32+0x32/0x70 [ 89.753410][ T7511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.753434][ T7511] RIP: 0023:0xf705efec [ 89.753455][ T7511] Code: Unable to access opcode bytes at 0xf705efc2. [ 89.753462][ T7511] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 89.753482][ T7511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 89.753494][ T7511] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.753506][ T7511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.753515][ T7511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.753556][ T7511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.753577][ T7511] [ 89.816080][ T7513] jffs2: notice: (7513) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 90.274276][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 90.274376][ T7534] netlink: 'syz.2.684': attribute type 20 has an invalid length. [ 90.274445][ T7534] netlink: 'syz.2.684': attribute type 21 has an invalid length. [ 90.295508][ T7537] ip6gretap1: entered allmulticast mode [ 90.298780][ T7537] batman_adv: batadv0: Adding interface: ip6gretap1 [ 90.301813][ T7537] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.301998][ T7537] batman_adv: batadv0: Interface activated: ip6gretap1 [ 92.230764][ T5833] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.380767][ T5833] usb 9-1: Using ep0 maxpacket: 16 [ 92.398691][ T5833] usb 9-1: unable to get BOS descriptor or descriptor too short [ 92.403017][ T5833] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 92.410169][ T5833] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 92.410291][ T5833] usb 9-1: can't read configurations, error -71 [ 92.987214][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.717'. [ 93.073870][ T7641] netlink: 'syz.2.720': attribute type 23 has an invalid length. [ 93.094242][ T7635] smpboot: CPU 1 is now offline [ 93.128329][ T7644] netlink: 'syz.2.721': attribute type 3 has an invalid length. [ 93.193148][ T7635] smpboot: CPU 3 is now offline [ 94.146516][ T45] kauditd_printk_skb: 443 callbacks suppressed [ 94.152132][ T45] audit: type=1807 audit(1788345700.676:455): action=measure func=FILE_CHECK res=1 [ 94.159946][ T7678] ima: policy update completed [ 94.163742][ T45] audit: type=1802 audit(1788345700.696:456): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.733" res=1 errno=0 [ 94.197870][ T45] audit: type=1800 audit(1788345700.726:457): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 94.307312][ T45] audit: type=1800 audit(1788345700.836:458): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 94.333141][ T45] audit: type=1800 audit(1788345700.866:459): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 94.389812][ T45] audit: type=1800 audit(1788345700.916:460): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 94.399514][ T45] audit: type=1800 audit(1788345700.926:461): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 94.463528][ T45] audit: type=1800 audit(1788345700.996:462): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 94.471659][ T45] audit: type=1800 audit(1788345701.006:463): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 94.511076][ T7688] jffs2: notice: (7688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 94.524714][ T45] audit: type=1800 audit(1788345701.056:464): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 94.819287][ T7701] jffs2: notice: (7701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 95.416627][ T7723] ima: policy update completed [ 96.937654][ T7756] could not open pipe file descriptor [ 97.436940][ T7780] syz_tun: entered allmulticast mode [ 97.437813][ T7779] syz_tun: left allmulticast mode [ 97.581479][ T7784] jffs2: notice: (7784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 97.640904][ T5602] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.800964][ T5602] usb 7-1: Using ep0 maxpacket: 8 [ 97.801967][ T5602] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.804069][ T5602] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 97.804108][ T5602] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.804127][ T5602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.804146][ T5602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.804166][ T5602] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.804198][ T5602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.939838][ T7791] CIFS: Attempting to mount //::1/share [ 97.949202][ T7791] CIFS: VFS: Error connecting to socket. Aborting operation. [ 97.949991][ T7791] CIFS: VFS: cifs_mount failed w/return code = -101 [ 97.958860][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 97.964595][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 98.584750][ T7818] usbtmc 7-1:16.0: simple usb_control_msg returned 0 [ 98.795498][ T1680] usb 7-1: USB disconnect, device number 7 [ 99.172327][ T45] kauditd_printk_skb: 69 callbacks suppressed [ 99.172405][ T45] audit: type=1800 audit(1788345705.706:534): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 99.204546][ T45] audit: type=1800 audit(1788345705.736:535): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 99.254208][ T45] audit: type=1800 audit(1788345705.786:536): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 99.299846][ T45] audit: type=1800 audit(1788345705.826:537): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 99.360310][ T45] audit: type=1800 audit(1788345705.886:538): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 99.402680][ T45] audit: type=1800 audit(1788345705.936:539): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 99.439692][ T45] audit: type=1800 audit(1788345705.966:540): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 99.475778][ T45] audit: type=1800 audit(1788345706.006:541): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 99.561727][ T45] audit: type=1800 audit(1788345706.086:542): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 99.566284][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.806'. [ 99.590770][ T5819] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.591914][ T5819] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.591936][ T5819] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.591954][ T5819] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.592087][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.806'. [ 99.633798][ T45] audit: type=1800 audit(1788345706.166:543): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 99.787353][ T7872] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.796153][ T7872] @0: renamed from bond_slave_1 [ 100.628896][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 100.856179][ T7917] FAULT_INJECTION: forcing a failure. [ 100.856179][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 100.856226][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.2.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.856255][ T7917] Tainted: [L]=SOFTLOCKUP [ 100.856260][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.856268][ T7917] Call Trace: [ 100.856273][ T7917] [ 100.856278][ T7917] dump_stack_lvl+0x100/0x190 [ 100.856298][ T7917] should_fail_ex.cold+0x5/0xa [ 100.856318][ T7917] should_failslab+0xc2/0x120 [ 100.856334][ T7917] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 100.856349][ T7917] ? find_held_lock+0x2b/0x80 [ 100.856362][ T7917] ? alloc_io_context+0x21/0x2f0 [ 100.856376][ T7917] alloc_io_context+0x21/0x2f0 [ 100.856387][ T7917] set_task_ioprio+0x49e/0x670 [ 100.856400][ T7917] __do_sys_ioprio_set+0x74c/0xb40 [ 100.856421][ T7917] __do_fast_syscall_32+0x13a/0x8b0 [ 100.856439][ T7917] do_fast_syscall_32+0x32/0x70 [ 100.856456][ T7917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.856471][ T7917] RIP: 0023:0xf705efec [ 100.856485][ T7917] Code: Unable to access opcode bytes at 0xf705efc2. [ 100.856492][ T7917] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000121 [ 100.856505][ T7917] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 100.856514][ T7917] RDX: 0000000000004004 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.856520][ T7917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.856527][ T7917] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.856533][ T7917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.856547][ T7917] [ 101.315427][ T7942] 9p: Unknown uid 00000000004294967295 [ 101.354890][ T7946] Invalid argument reading file caps for ./file0 [ 101.438748][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 101.544940][ T7954] i2c i2c-0: new_device: Missing parameters [ 101.598310][ T7960] netlink: 67 bytes leftover after parsing attributes in process `syz.2.849'. [ 101.598407][ T7960] IPv6: Can't replace route, no match found [ 101.788329][ T7969] netlink: 56 bytes leftover after parsing attributes in process `syz.1.854'. [ 101.972626][ T1355] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.142899][ T1355] usb 5-1: Using ep0 maxpacket: 8 [ 102.144948][ T1355] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.149062][ T1355] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.149115][ T1355] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.149176][ T1355] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.149214][ T1355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.165109][ T1355] usb 5-1: config 0 descriptor?? [ 102.380235][ T7997] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 102.604952][ T1355] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 102.609966][ T1355] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 102.615892][ T1355] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 102.625284][ T1355] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 102.625358][ T1355] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 102.626077][ T1355] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 102.802258][ T1355] usb 5-1: USB disconnect, device number 7 [ 102.994150][ T8031] binder: 8030:8031 unknown command 64 [ 102.994206][ T8031] binder: 8030:8031 ioctl c0306201 800004c0 returned -22 [ 103.095170][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 103.101007][ T8039] batman_adv: batadv0: Adding interface: macsec1 [ 103.103982][ T8039] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.113343][ T8039] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 103.437873][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 103.445760][ T8054] veth1: entered promiscuous mode [ 103.455341][ T8054] veth1: left promiscuous mode [ 103.477690][ T6200] kernel write not supported for file /ppp (pid: 6200 comm: kworker/2:7) [ 103.600245][ T8060] FAULT_INJECTION: forcing a failure. [ 103.600245][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 103.606372][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.4.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.606419][ T8060] Tainted: [L]=SOFTLOCKUP [ 103.606427][ T8060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.606438][ T8060] Call Trace: [ 103.606444][ T8060] [ 103.606453][ T8060] dump_stack_lvl+0x100/0x190 [ 103.606482][ T8060] should_fail_ex.cold+0x5/0xa [ 103.606506][ T8060] should_failslab+0xc2/0x120 [ 103.606531][ T8060] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 103.606551][ T8060] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 103.606582][ T8060] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 103.606606][ T8060] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 103.606635][ T8060] alloc_inode+0x68/0x250 [ 103.606662][ T8060] new_inode+0x22/0x1c0 [ 103.606687][ T8060] hugetlbfs_get_inode+0x39a/0x700 [ 103.606714][ T8060] ? do_raw_spin_lock+0x128/0x260 [ 103.606744][ T8060] hugetlb_file_setup+0x15b/0x5b0 [ 103.606772][ T8060] memfd_alloc_file+0xc2/0x610 [ 103.606795][ T8060] ? _raw_spin_unlock+0x28/0x50 [ 103.606815][ T8060] ? __pfx_memfd_alloc_file+0x10/0x10 [ 103.606844][ T8060] __do_sys_memfd_create+0x236/0x3d0 [ 103.606873][ T8060] __do_fast_syscall_32+0x13a/0x8b0 [ 103.606901][ T8060] do_fast_syscall_32+0x32/0x70 [ 103.606925][ T8060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.606947][ T8060] RIP: 0023:0xf7fd7fec [ 103.606967][ T8060] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 103.606975][ T8060] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000164 [ 103.606994][ T8060] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004 [ 103.607007][ T8060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.607019][ T8060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.607031][ T8060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.607042][ T8060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.607067][ T8060] [ 104.197089][ T45] kauditd_printk_skb: 482 callbacks suppressed [ 104.197153][ T45] audit: type=1800 audit(1788345710.726:1026): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 104.228478][ T45] audit: type=1800 audit(1788345710.756:1027): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 104.246445][ T45] audit: type=1800 audit(1788345710.776:1028): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 104.263636][ T8098] batadv_slave_1: entered promiscuous mode [ 104.266718][ T8096] batadv_slave_1: left promiscuous mode [ 104.296165][ T45] audit: type=1800 audit(1788345710.826:1029): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 104.318147][ T45] audit: type=1800 audit(1788345710.846:1030): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127059 res=0 errno=0 [ 104.387749][ T45] audit: type=1800 audit(1788345710.916:1031): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 104.403077][ T45] audit: type=1800 audit(1788345710.936:1032): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 104.423995][ T45] audit: type=1800 audit(1788345710.956:1033): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 104.471599][ T45] audit: type=1800 audit(1788345711.006:1034): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 104.539077][ T45] audit: type=1800 audit(1788345711.066:1035): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 104.600746][ T5602] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.763138][ T5602] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 104.775322][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.775379][ T5602] usb 5-1: Product: syz [ 104.775442][ T5602] usb 5-1: Manufacturer: syz [ 104.775477][ T5602] usb 5-1: SerialNumber: syz [ 105.041171][ T5602] rtl8150 5-1:1.0: couldn't reset the device [ 105.041396][ T5602] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 105.053865][ T5602] usb 5-1: USB disconnect, device number 8 [ 105.122038][ T8129] netlink: 'syz.2.928': attribute type 4 has an invalid length. [ 105.428205][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 105.552880][ T1680] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.574458][ T8147] overlayfs: upper fs does not support file handles, falling back to index=off. [ 105.706912][ T1680] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 105.709323][ T1680] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 105.709342][ T1680] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.709363][ T1680] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 105.711279][ T1680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.711293][ T1680] usb 7-1: Product: syz [ 105.711301][ T1680] usb 7-1: Manufacturer: syz [ 105.711309][ T1680] usb 7-1: SerialNumber: syz [ 105.786836][ T1680] mos7720 7-1:1.0: required endpoints missing [ 105.994326][ T8137] mos7720 7-1:1.0: required endpoints missing [ 106.004200][ T1680] usb 7-1: USB disconnect, device number 8 [ 106.949353][ T8186] veth0_vlan: left promiscuous mode [ 106.952549][ T8186] team0: Device veth0_vlan failed to register rx_handler [ 106.991842][ T8189] bond0: invalid NS target ff00:: specified for addition [ 106.991907][ T8189] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 107.056180][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 107.400779][ T5854] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 107.577070][ T5854] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 107.578195][ T5854] usb 9-1: config index 0 descriptor too short (expected 71, got 53) [ 107.578212][ T5854] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.578230][ T5854] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.579879][ T5854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.579892][ T5854] usb 9-1: Product: syz [ 107.579900][ T5854] usb 9-1: Manufacturer: syz [ 107.579907][ T5854] usb 9-1: SerialNumber: syz [ 107.586092][ T5854] mos7720 9-1:1.0: required endpoints missing [ 107.703874][ T8233] syzkaller1: entered promiscuous mode [ 107.708049][ T8233] syzkaller1: entered allmulticast mode [ 107.795011][ T8198] mos7720 9-1:1.0: required endpoints missing [ 107.804480][ T5854] usb 9-1: USB disconnect, device number 5 [ 107.833021][ T8237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.966755][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'. [ 108.085933][ T8247] input: syz0 as /devices/virtual/input/input9 [ 108.623721][ T44] kernel read not supported for file /233/schedstat (pid: 44 comm: kworker/2:1) [ 109.206773][ T45] kauditd_printk_skb: 132 callbacks suppressed [ 109.206849][ T45] audit: type=1800 audit(1788345715.736:1168): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 109.228135][ T45] audit: type=1800 audit(1788345715.756:1169): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 109.276325][ T45] audit: type=1800 audit(1788345715.806:1170): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128039 res=0 errno=0 [ 109.310390][ T45] audit: type=1800 audit(1788345715.836:1171): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 109.342101][ T45] audit: type=1800 audit(1788345715.876:1172): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 109.342961][ T8314] binder: 8313:8314 ioctl c0306201 80000480 returned -14 [ 109.359466][ T45] audit: type=1800 audit(1788345715.886:1173): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 109.411552][ T45] audit: type=1800 audit(1788345715.946:1174): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 109.466121][ T45] audit: type=1800 audit(1788345715.996:1175): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 109.547173][ T45] audit: type=1800 audit(1788345716.076:1176): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 109.579923][ T45] audit: type=1800 audit(1788345716.106:1177): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 109.864709][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 109.870430][ T8351] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1016'. [ 109.874792][ T8351] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1016'. [ 109.942257][ T8357] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.1019'. [ 110.105910][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 110.342632][ T5755] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.342901][ T6200] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 110.342920][ T6200] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 110.501081][ T1680] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 110.664067][ T1680] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.666588][ T1680] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.666620][ T1680] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.666641][ T1680] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.666679][ T1680] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.671309][ T1680] usb 9-1: config 0 descriptor?? [ 111.106227][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.106282][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111130][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111160][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111185][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111209][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111233][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111256][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.111280][ T1680] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 111.153695][ T1680] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 111.372845][ T1680] usb 9-1: USB disconnect, device number 6 [ 111.843382][ T6199] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.998604][ T6199] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 111.999708][ T6199] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.999732][ T6199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.006726][ T6199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.006753][ T6199] usb 7-1: Product: syz [ 112.006766][ T6199] usb 7-1: Manufacturer: syz [ 112.006780][ T6199] usb 7-1: SerialNumber: syz [ 112.237492][ T6199] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 112.420917][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.421074][ T6200] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 112.423929][ T6200] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 112.648547][ T6199] usb 7-1: USB disconnect, device number 9 [ 112.654428][ T6199] usblp0: removed [ 114.226767][ T45] kauditd_printk_skb: 48 callbacks suppressed [ 114.226829][ T45] audit: type=1800 audit(1788345720.746:1226): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 114.354447][ T45] audit: type=1800 audit(1788345720.886:1227): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 114.375050][ T45] audit: type=1800 audit(1788345720.906:1228): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 114.447718][ T45] audit: type=1800 audit(1788345720.976:1229): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 114.512778][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.512961][ T6200] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.512973][ T6200] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 114.540068][ T45] audit: type=1800 audit(1788345721.066:1230): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=86288 res=0 errno=0 [ 114.545686][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 114.545701][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 114.595642][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.607388][ T45] audit: type=1800 audit(1788345721.136:1231): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 114.617525][ T5820] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.617572][ T5820] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.617623][ T5820] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.671808][ T45] audit: type=1800 audit(1788345721.206:1232): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 114.693559][ T45] audit: type=1800 audit(1788345721.226:1233): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1058" name="enable" dev="sysfs" ino=2152 res=0 errno=0 [ 114.714041][ T8444] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1059'. [ 114.750374][ T45] audit: type=1800 audit(1788345721.276:1234): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 114.798881][ T45] audit: type=1800 audit(1788345721.326:1235): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 115.041450][ T6199] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 115.211707][ T6199] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.212567][ T6199] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.212583][ T6199] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.212595][ T6199] usb 9-1: config 0 interface 0 has no altsetting 0 [ 115.214333][ T6199] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.214346][ T6199] usb 9-1: Product: syz [ 115.214354][ T6199] usb 9-1: Manufacturer: syz [ 115.214361][ T6199] usb 9-1: SerialNumber: syz [ 115.224790][ T6199] usb 9-1: config 0 descriptor?? [ 115.249589][ T6199] usb 9-1: selecting invalid altsetting 0 [ 115.388639][ T8462] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 115.486644][ T6199] usb 9-1: USB disconnect, device number 7 [ 115.607951][ T8470] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 115.608006][ T8470] netlink: 'syz.0.1070': attribute type 2 has an invalid length. [ 115.756845][ T7006] udevd[7006]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.855778][ T8478] CIFS: Attempting to mount //127.0.0.1/share [ 116.581391][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.582247][ T6200] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 116.584130][ T6200] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 116.697136][ T8478] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.697249][ T8478] CIFS: VFS: cifs_mount failed w/return code = -4 [ 116.787445][ T8511] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 116.787522][ T8511] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1090'. [ 116.787570][ T8511] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 116.787584][ T8511] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.1090'. [ 117.267868][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1098'. [ 117.763669][ T8558] FAULT_INJECTION: forcing a failure. [ 117.763669][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 117.763758][ T8558] CPU: 2 UID: 0 PID: 8558 Comm: syz.2.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.763805][ T8558] Tainted: [L]=SOFTLOCKUP [ 117.763815][ T8558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.763828][ T8558] Call Trace: [ 117.763836][ T8558] [ 117.763845][ T8558] dump_stack_lvl+0x100/0x190 [ 117.763945][ T8558] should_fail_ex.cold+0x5/0xa [ 117.763972][ T8558] should_failslab+0xc2/0x120 [ 117.764022][ T8558] __kmalloc_cache_noprof+0x91/0x6d0 [ 117.764050][ T8558] ? fsnotify_alloc_group+0x8d/0x320 [ 117.764078][ T8558] fsnotify_alloc_group+0x8d/0x320 [ 117.764101][ T8558] do_inotify_init+0x4b/0x5e0 [ 117.764132][ T8558] __do_sys_inotify_init+0x10/0x20 [ 117.764151][ T8558] __do_fast_syscall_32+0x13a/0x8b0 [ 117.764208][ T8558] do_fast_syscall_32+0x32/0x70 [ 117.764234][ T8558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.764259][ T8558] RIP: 0023:0xf705efec [ 117.764282][ T8558] Code: Unable to access opcode bytes at 0xf705efc2. [ 117.764290][ T8558] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000123 [ 117.764310][ T8558] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 117.764324][ T8558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.764335][ T8558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.764347][ T8558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.764359][ T8558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.764385][ T8558] [ 118.773760][ T8607] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1129'. [ 118.818487][ T8569] ceph: No mds server is up or the cluster is laggy [ 119.002494][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 119.007166][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 119.245755][ T45] kauditd_printk_skb: 66 callbacks suppressed [ 119.245818][ T45] audit: type=1800 audit(1788345725.776:1302): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 119.267156][ T8629] 8021q: VLANs not supported on lo [ 119.328191][ T45] audit: type=1800 audit(1788345725.856:1303): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 119.382306][ T45] audit: type=1800 audit(1788345725.916:1304): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 119.402001][ T45] audit: type=1800 audit(1788345725.936:1305): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 119.451565][ T45] audit: type=1800 audit(1788345725.986:1306): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 119.486243][ T45] audit: type=1800 audit(1788345726.016:1307): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 119.496069][ T45] audit: type=1800 audit(1788345726.016:1308): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0 [ 119.607810][ T45] audit: type=1800 audit(1788345726.136:1309): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 119.638526][ T8645] FAULT_INJECTION: forcing a failure. [ 119.638526][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 119.638600][ T8645] CPU: 2 UID: 0 PID: 8645 Comm: syz.1.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.638629][ T8645] Tainted: [L]=SOFTLOCKUP [ 119.638635][ T8645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.638643][ T8645] Call Trace: [ 119.638647][ T8645] [ 119.638653][ T8645] dump_stack_lvl+0x100/0x190 [ 119.638673][ T8645] should_fail_ex.cold+0x5/0xa [ 119.638688][ T8645] should_failslab+0xc2/0x120 [ 119.638705][ T8645] kmem_cache_alloc_noprof+0x92/0x6a0 [ 119.638720][ T8645] ? mas_preallocate+0xc22/0xee0 [ 119.638740][ T8645] mas_preallocate+0xc22/0xee0 [ 119.638757][ T8645] ? __pfx_mas_preallocate+0x10/0x10 [ 119.638778][ T8645] ? anon_vma_name+0x5a/0x250 [ 119.638800][ T8645] __split_vma+0x2f8/0x1de0 [ 119.638827][ T8645] ? __pfx___split_vma+0x10/0x10 [ 119.638848][ T8645] ? mas_next_slot+0xc05/0x13a0 [ 119.638883][ T8645] vms_gather_munmap_vmas+0x3a5/0x1720 [ 119.638916][ T8645] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 119.638935][ T8645] ? lock_acquire+0x1d1/0x380 [ 119.638960][ T8645] ? futex_unqueue+0x29/0x2c0 [ 119.638979][ T8645] ? find_held_lock+0x2b/0x80 [ 119.638992][ T8645] ? futex_unqueue+0x133/0x2c0 [ 119.639010][ T8645] ? futex_unqueue+0x133/0x2c0 [ 119.639030][ T8645] ? futex_unqueue+0x13d/0x2c0 [ 119.639051][ T8645] do_vmi_align_munmap+0x287/0x5f0 [ 119.639072][ T8645] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 119.639090][ T8645] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.639107][ T8645] ? __lock_acquire+0x4c5/0x1ec0 [ 119.639133][ T8645] ? mas_walk+0x260/0x310 [ 119.639148][ T8645] do_vmi_munmap+0x1f8/0x3e0 [ 119.639168][ T8645] __vm_munmap+0x196/0x390 [ 119.639179][ T8645] ? __pfx___vm_munmap+0x10/0x10 [ 119.639199][ T8645] __ia32_sys_munmap+0x57/0x80 [ 119.639213][ T8645] __do_fast_syscall_32+0x13a/0x8b0 [ 119.639231][ T8645] do_fast_syscall_32+0x32/0x70 [ 119.639247][ T8645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.639261][ T8645] RIP: 0023:0xf7fc7fec [ 119.639276][ T8645] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 119.639281][ T8645] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000005b [ 119.639293][ T8645] RAX: ffffffffffffffda RBX: 00000000803fe000 RCX: 0000000000c00000 [ 119.639300][ T8645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.639307][ T8645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.639313][ T8645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.639320][ T8645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.639334][ T8645] [ 119.642754][ T45] audit: type=1800 audit(1788345726.166:1310): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 119.720744][ T45] audit: type=1800 audit(1788345726.246:1311): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 120.066910][ T8664] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 120.523940][ T8685] overlayfs: failed to clone upperpath [ 121.502656][ T8749] serio: Serial port ptm0 [ 122.188097][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 122.862195][ T8790] FAULT_INJECTION: forcing a failure. [ 122.862195][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 122.870176][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.4.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.870212][ T8790] Tainted: [L]=SOFTLOCKUP [ 122.870218][ T8790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.870226][ T8790] Call Trace: [ 122.870231][ T8790] [ 122.870237][ T8790] dump_stack_lvl+0x100/0x190 [ 122.870257][ T8790] should_fail_ex.cold+0x5/0xa [ 122.870274][ T8790] should_failslab+0xc2/0x120 [ 122.870290][ T8790] __kmalloc_noprof+0xfc/0x840 [ 122.870303][ T8790] ? tomoyo_encode2+0xfb/0x3c0 [ 122.870325][ T8790] tomoyo_encode2+0xfb/0x3c0 [ 122.870345][ T8790] tomoyo_encode+0x29/0x50 [ 122.870362][ T8790] tomoyo_realpath_from_path+0x18c/0x690 [ 122.870383][ T8790] tomoyo_mkdev_perm+0x231/0x570 [ 122.870397][ T8790] ? tomoyo_mkdev_perm+0x21d/0x570 [ 122.870413][ T8790] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 122.870428][ T8790] ? do_raw_spin_lock+0x128/0x260 [ 122.870449][ T8790] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.870482][ T8790] ? simple_lookup+0xfc/0x1d0 [ 122.870498][ T8790] tomoyo_path_mknod+0xe2/0x190 [ 122.870512][ T8790] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 122.870525][ T8790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.870544][ T8790] security_path_mknod+0x161/0x300 [ 122.870578][ T8790] filename_mknodat+0x241/0x7f0 [ 122.870594][ T8790] ? __pfx_filename_mknodat+0x10/0x10 [ 122.870608][ T8790] ? strncpy_from_user+0x19d/0x2d0 [ 122.870623][ T8790] ? do_getname+0x191/0x390 [ 122.870642][ T8790] __ia32_sys_mknodat+0xb4/0xf0 [ 122.870656][ T8790] __do_fast_syscall_32+0x13a/0x8b0 [ 122.870674][ T8790] do_fast_syscall_32+0x32/0x70 [ 122.870691][ T8790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.870705][ T8790] RIP: 0023:0xf7fd7fec [ 122.870719][ T8790] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 122.870724][ T8790] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 122.870738][ T8790] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 122.870746][ T8790] RDX: 0000000000006000 RSI: 0000000000000708 RDI: 0000000000000000 [ 122.870752][ T8790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.870759][ T8790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.870765][ T8790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.870779][ T8790] [ 122.982476][ T8794] FAULT_INJECTION: forcing a failure. [ 122.982476][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 122.982535][ T8794] CPU: 2 UID: 0 PID: 8794 Comm: syz.2.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.982563][ T8794] Tainted: [L]=SOFTLOCKUP [ 122.982570][ T8794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.982578][ T8794] Call Trace: [ 122.982582][ T8794] [ 122.982588][ T8794] dump_stack_lvl+0x100/0x190 [ 122.982608][ T8794] should_fail_ex.cold+0x5/0xa [ 122.982626][ T8794] should_failslab+0xc2/0x120 [ 122.982642][ T8794] __kmalloc_noprof+0xfc/0x840 [ 122.982656][ T8794] ? lsm_blob_alloc+0x68/0x90 [ 122.982670][ T8794] lsm_blob_alloc+0x68/0x90 [ 122.982681][ T8794] security_prepare_creds+0x2d/0x290 [ 122.982699][ T8794] prepare_creds+0x5d6/0x950 [ 122.982716][ T8794] join_session_keyring+0x17/0x350 [ 122.982732][ T8794] lookup_user_key+0xbf9/0x1300 [ 122.982748][ T8794] ? __pfx_lookup_user_key+0x10/0x10 [ 122.982764][ T8794] ? __might_fault+0xc5/0x140 [ 122.982782][ T8794] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 122.982799][ T8794] ? _copy_from_user+0x59/0xd0 [ 122.982812][ T8794] ? memdup_user+0x82/0xe0 [ 122.982831][ T8794] __do_sys_add_key+0x2a6/0x460 [ 122.982844][ T8794] ? __pfx___do_sys_add_key+0x10/0x10 [ 122.982861][ T8794] __do_fast_syscall_32+0x13a/0x8b0 [ 122.982879][ T8794] do_fast_syscall_32+0x32/0x70 [ 122.982895][ T8794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.982910][ T8794] RIP: 0023:0xf705efec [ 122.982925][ T8794] Code: Unable to access opcode bytes at 0xf705efc2. [ 122.982930][ T8794] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 122.982942][ T8794] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000080000180 [ 122.982950][ T8794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffd [ 122.982956][ T8794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.982963][ T8794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.982970][ T8794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.982984][ T8794] [ 122.985940][ T8790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.303628][ T45] kauditd_printk_skb: 73 callbacks suppressed [ 124.303692][ T45] audit: type=1800 audit(1788345730.836:1385): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 124.338973][ T45] audit: type=1800 audit(1788345730.866:1386): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 124.419129][ T45] audit: type=1800 audit(1788345730.946:1387): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 124.662577][ T45] audit: type=1800 audit(1788345731.196:1388): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34478 res=0 errno=0 [ 124.670261][ T45] audit: type=1800 audit(1788345731.196:1389): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34501 res=0 errno=0 [ 124.842319][ T45] audit: type=1800 audit(1788345731.376:1390): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 124.878810][ T8840] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 124.911954][ T6199] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 124.926361][ T45] audit: type=1800 audit(1788345731.456:1391): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 125.043149][ T45] audit: type=1800 audit(1788345731.576:1392): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 125.074039][ T6199] usb 6-1: Using ep0 maxpacket: 16 [ 125.077518][ T6199] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.079130][ T6199] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.079169][ T6199] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.079193][ T6199] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.079212][ T6199] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.080608][ T6199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.080628][ T6199] usb 6-1: SerialNumber: syz [ 125.089879][ T45] audit: type=1800 audit(1788345731.616:1393): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129145 res=0 errno=0 [ 125.091382][ T6199] hub 6-1:1.0: bad descriptor, ignoring hub [ 125.091397][ T6199] hub 6-1:1.0: probe with driver hub failed with error -5 [ 125.094155][ T6199] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 125.097621][ T6199] mos7720 6-1:1.0: required endpoints missing [ 125.100174][ T45] audit: type=1800 audit(1788345731.626:1394): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=129175 res=0 errno=0 [ 126.078909][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 126.079081][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 126.079431][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 126.155639][ T8885] 9p: Bad value for 'rfdno' [ 126.460918][ T8902] FAULT_INJECTION: forcing a failure. [ 126.460918][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 126.460978][ T8902] CPU: 0 UID: 0 PID: 8902 Comm: syz.4.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.461014][ T8902] Tainted: [L]=SOFTLOCKUP [ 126.461021][ T8902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.461031][ T8902] Call Trace: [ 126.461037][ T8902] [ 126.461045][ T8902] dump_stack_lvl+0x100/0x190 [ 126.461072][ T8902] should_fail_ex.cold+0x5/0xa [ 126.461093][ T8902] should_failslab+0xc2/0x120 [ 126.461115][ T8902] __kmalloc_noprof+0xfc/0x840 [ 126.461133][ T8902] ? rcu_is_watching+0x13/0xc0 [ 126.461149][ T8902] ? tomoyo_realpath_from_path+0xb6/0x690 [ 126.461178][ T8902] tomoyo_realpath_from_path+0xb6/0x690 [ 126.461208][ T8902] tomoyo_path2_perm+0x29f/0x700 [ 126.461228][ T8902] ? tomoyo_path2_perm+0x291/0x700 [ 126.461250][ T8902] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 126.461271][ T8902] ? __pfx_stack_trace_save+0x10/0x10 [ 126.461290][ T8902] ? stack_depot_save_flags+0x27/0x9f0 [ 126.461314][ T8902] ? kasan_save_stack+0x3f/0x50 [ 126.461330][ T8902] ? kasan_save_stack+0x30/0x50 [ 126.461345][ T8902] ? kasan_save_track+0x14/0x30 [ 126.461387][ T8902] ? kasan_save_free_info+0x3b/0x70 [ 126.461422][ T8902] ? hook_sb_pivotroot+0x1e2/0x320 [ 126.461447][ T8902] ? apparmor_capable+0x1d7/0x4d0 [ 126.461472][ T8902] security_sb_pivotroot+0xc4/0x210 [ 126.461494][ T8902] path_pivot_root+0x14f/0x1320 [ 126.461523][ T8902] ? kasan_quarantine_put+0x104/0x240 [ 126.461542][ T8902] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.461571][ T8902] ? __pfx_path_pivot_root+0x10/0x10 [ 126.461598][ T8902] ? putname+0xb1/0x110 [ 126.461619][ T8902] ? kmem_cache_free+0x127/0x6c0 [ 126.461658][ T8902] __ia32_sys_pivot_root+0x199/0x1c0 [ 126.461684][ T8902] ? __pfx___ia32_sys_pivot_root+0x10/0x10 [ 126.461717][ T8902] __do_fast_syscall_32+0x13a/0x8b0 [ 126.461745][ T8902] do_fast_syscall_32+0x32/0x70 [ 126.461770][ T8902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.461794][ T8902] RIP: 0023:0xf7fd7fec [ 126.461816][ T8902] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 126.461826][ T8902] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000d9 [ 126.461847][ T8902] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000180 [ 126.461860][ T8902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.461874][ T8902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.461886][ T8902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 126.461899][ T8902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.461923][ T8902] [ 126.461976][ T8902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.210943][ T5602] usb 9-1: new high-speed USB device number 8 using dummy_hcd qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 127.361425][ T5602] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 127.368612][ T5602] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.368673][ T5602] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.368706][ T5602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.482545][ T8922] netlink: 'syz.0.1263': attribute type 13 has an invalid length. [ 127.584092][ T6199] usb 6-1: USB disconnect, device number 11 [ 127.645058][ T6199] usb 9-1: USB disconnect, device number 8 [ 128.273459][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.404649][ T45] kauditd_printk_skb: 72 callbacks suppressed [ 129.404715][ T45] audit: type=1800 audit(1788345735.936:1467): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 129.631815][ T45] audit: type=1800 audit(1788345736.166:1468): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 130.064394][ T45] audit: type=1800 audit(1788345736.596:1469): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 130.131671][ T45] audit: type=1800 audit(1788345736.666:1470): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0 [ 130.267808][ T45] audit: type=1800 audit(1788345736.796:1471): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 130.411741][ T45] audit: type=1800 audit(1788345736.946:1472): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 130.547069][ T45] audit: type=1800 audit(1788345737.076:1473): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 130.662656][ T45] audit: type=1800 audit(1788345737.196:1474): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 130.716816][ T45] audit: type=1800 audit(1788345737.246:1475): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 130.723160][ T45] audit: type=1800 audit(1788345737.246:1476): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 130.923960][ T9023] ima: policy update failed [ 131.301357][ T9034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1307'. [ 131.545709][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.548100][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.383934][ T9055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.715086][ T9062] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1319'. [ 133.078958][ T9071] veth0_to_bond: Caught tx_queue_len zero misconfig [ 133.882311][ T5854] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 134.041376][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 134.041952][ T5854] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.042795][ T5854] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.042812][ T5854] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.042823][ T5854] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.042838][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.044071][ T5854] usb 7-1: config 0 descriptor?? [ 134.480593][ T45] kauditd_printk_skb: 46 callbacks suppressed [ 134.480732][ T45] audit: type=1800 audit(1788345741.006:1523): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130201 res=0 errno=0 [ 134.482393][ T5854] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 134.482417][ T5854] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 134.482435][ T5854] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 134.482452][ T5854] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 134.482470][ T5854] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 134.482980][ T5854] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 134.547927][ T45] audit: type=1800 audit(1788345741.076:1524): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 134.594027][ T45] audit: type=1800 audit(1788345741.126:1525): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 134.602982][ T45] audit: type=1800 audit(1788345741.126:1526): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130231 res=0 errno=0 [ 134.603033][ T45] audit: type=1800 audit(1788345741.126:1527): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130245 res=0 errno=0 [ 134.643726][ T45] audit: type=1800 audit(1788345741.176:1528): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=130235 res=0 errno=0 [ 134.660476][ T45] audit: type=1800 audit(1788345741.186:1529): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130222 res=0 errno=0 [ 134.667311][ T45] audit: type=1800 audit(1788345741.186:1530): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=130223 res=0 errno=0 [ 134.710125][ T6199] usb 7-1: USB disconnect, device number 10 [ 134.754143][ T45] audit: type=1800 audit(1788345741.286:1531): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 134.818615][ T45] audit: type=1800 audit(1788345741.346:1532): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 135.111385][ T9128] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 135.152130][ T9128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.184812][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'. [ 136.132708][ T9170] gretap0: entered promiscuous mode [ 136.182648][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.183371][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.222377][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.362590][ T9170] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 136.596176][ T9179] jffs2: notice: (9179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 136.628840][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 136.733887][ T9187] team_slave_1: Caught tx_queue_len zero misconfig [ 137.225285][ T9212] FAULT_INJECTION: forcing a failure. [ 137.225285][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 137.230038][ T9212] CPU: 0 UID: 0 PID: 9212 Comm: syz.1.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.230072][ T9212] Tainted: [L]=SOFTLOCKUP [ 137.230078][ T9212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.230086][ T9212] Call Trace: [ 137.230092][ T9212] [ 137.230098][ T9212] dump_stack_lvl+0x100/0x190 [ 137.230121][ T9212] should_fail_ex.cold+0x5/0xa [ 137.230138][ T9212] should_failslab+0xc2/0x120 [ 137.230156][ T9212] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.230172][ T9212] ? sk_prot_alloc+0x60/0x2a0 [ 137.230237][ T9212] sk_prot_alloc+0x60/0x2a0 [ 137.230258][ T9212] sk_alloc+0x36/0xe80 [ 137.230273][ T9212] smc_create+0x11a/0x290 [ 137.230291][ T9212] __sock_create+0x339/0x860 [ 137.230312][ T9212] __sys_socket+0x14d/0x260 [ 137.230330][ T9212] ? xfd_validate_state+0x129/0x190 [ 137.230348][ T9212] ? __pfx___sys_socket+0x10/0x10 [ 137.230374][ T9212] __ia32_sys_socket+0x72/0xb0 [ 137.230393][ T9212] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.230410][ T9212] __do_fast_syscall_32+0x13a/0x8b0 [ 137.230429][ T9212] do_fast_syscall_32+0x32/0x70 [ 137.230446][ T9212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.230462][ T9212] RIP: 0023:0xf7fc7fec [ 137.230478][ T9212] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 137.230483][ T9212] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 137.230496][ T9212] RAX: ffffffffffffffda RBX: 000000000000002b RCX: 0000000000000001 [ 137.230504][ T9212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.230511][ T9212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.230518][ T9212] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.230525][ T9212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.230540][ T9212] [ 137.581556][ T9218] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 137.685954][ T9223] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 137.722083][ T9226] FAULT_INJECTION: forcing a failure. [ 137.722083][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 137.722142][ T9226] CPU: 2 UID: 0 PID: 9226 Comm: syz.4.1382 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.722170][ T9226] Tainted: [L]=SOFTLOCKUP [ 137.722176][ T9226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.722183][ T9226] Call Trace: [ 137.722187][ T9226] [ 137.722192][ T9226] dump_stack_lvl+0x100/0x190 [ 137.722211][ T9226] should_fail_ex.cold+0x5/0xa [ 137.722226][ T9226] should_failslab+0xc2/0x120 [ 137.722241][ T9226] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.722255][ T9226] ? alloc_uid+0x13d/0x4c0 [ 137.722269][ T9226] alloc_uid+0x13d/0x4c0 [ 137.722281][ T9226] ? __pfx_alloc_uid+0x10/0x10 [ 137.722291][ T9226] ? bpf_lsm_cred_prepare+0x9/0x10 [ 137.722307][ T9226] ? security_prepare_creds+0xa8/0x290 [ 137.722333][ T9226] __sys_setresuid+0x4f2/0x1280 [ 137.722353][ T9226] __do_fast_syscall_32+0x13a/0x8b0 [ 137.722371][ T9226] do_fast_syscall_32+0x32/0x70 [ 137.722389][ T9226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.722417][ T9226] RIP: 0023:0xf7fd7fec [ 137.722433][ T9226] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 137.722439][ T9226] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a4 [ 137.722450][ T9226] RAX: ffffffffffffffda RBX: 000000000000ee00 RCX: 000000000000ee00 [ 137.722457][ T9226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.722463][ T9226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.722470][ T9226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.722476][ T9226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.722490][ T9226] [ 137.845529][ T9232] CIFS: Attempting to mount //127.0.0.1/share [ 138.470752][ T1355] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 138.621474][ T1355] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 138.626737][ T1355] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.632952][ T1355] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.636917][ T1355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.680236][ T9232] CIFS: VFS: Error connecting to socket. Aborting operation. [ 138.685933][ T9232] CIFS: VFS: cifs_mount failed w/return code = -4 [ 139.077048][ T1355] wacom 0003:056A:033B.0008: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 139.084465][ T1355] wacom 0003:056A:033B.0008: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 139.093989][ T1355] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/0003:056A:033B.0008/input/input11 [ 139.263311][ T1355] usb 7-1: USB disconnect, device number 11 [ 139.626944][ T45] kauditd_printk_skb: 90 callbacks suppressed [ 139.627019][ T45] audit: type=1800 audit(1788345746.156:1623): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 139.778642][ T45] audit: type=1800 audit(1788345746.306:1624): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 139.870614][ T45] audit: type=1800 audit(1788345746.396:1625): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 139.900624][ T45] audit: type=1800 audit(1788345746.426:1626): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 139.967287][ T9295] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 139.975122][ T45] audit: type=1800 audit(1788345746.506:1627): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 140.071762][ T9295] bond1: entered promiscuous mode [ 140.072251][ T9295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.118121][ T9301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.118572][ T9301] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 140.118591][ T9301] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 140.127914][ T9301] bond1: (slave vti0): making interface the new active one [ 140.127938][ T9301] vti0: entered promiscuous mode [ 140.140086][ T9301] bond1: (slave vti0): Enslaving as an active interface with an up link [ 140.161998][ T45] audit: type=1800 audit(1788345746.686:1628): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 140.203992][ T45] audit: type=1800 audit(1788345746.736:1629): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 140.217332][ T45] audit: type=1800 audit(1788345746.746:1630): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 140.240981][ T45] audit: type=1800 audit(1788345746.766:1631): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 140.290873][ T45] audit: type=1800 audit(1788345746.816:1632): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 141.079739][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 141.209908][ T9363] netlink: 'syz.2.1435': attribute type 13 has an invalid length. [ 141.397936][ T9374] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1438'. [ 141.454775][ T9378] FAULT_INJECTION: forcing a failure. [ 141.454775][ T9378] name failslab, interval 1, probability 0, space 0, times 0 [ 141.459258][ T9378] CPU: 2 UID: 0 PID: 9378 Comm: syz.1.1440 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.459288][ T9378] Tainted: [L]=SOFTLOCKUP [ 141.459294][ T9378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.459301][ T9378] Call Trace: [ 141.459306][ T9378] [ 141.459314][ T9378] dump_stack_lvl+0x100/0x190 [ 141.459334][ T9378] should_fail_ex.cold+0x5/0xa [ 141.459350][ T9378] should_failslab+0xc2/0x120 [ 141.459365][ T9378] __kvmalloc_node_noprof+0x113/0x9b0 [ 141.459381][ T9378] ? __do_sys_add_key+0x244/0x460 [ 141.459395][ T9378] __do_sys_add_key+0x244/0x460 [ 141.459407][ T9378] ? __pfx___do_sys_add_key+0x10/0x10 [ 141.459424][ T9378] __do_fast_syscall_32+0x13a/0x8b0 [ 141.459442][ T9378] do_fast_syscall_32+0x32/0x70 [ 141.459461][ T9378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.459476][ T9378] RIP: 0023:0xf7fc7fec [ 141.459489][ T9378] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 141.459494][ T9378] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 141.459506][ T9378] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 141.459513][ T9378] RDX: 0000000080000100 RSI: 0000000000000048 RDI: 0000000000000000 [ 141.459520][ T9378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.459527][ T9378] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.459533][ T9378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.459559][ T9378] [ 141.765691][ T9386] gre1: entered allmulticast mode [ 143.700429][ T9458] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 144.110373][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 144.113428][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 144.359007][ T9501] loop2: detected capacity change from 0 to 7 [ 144.381406][ T9501] Dev loop2: unable to read RDB block 7 [ 144.381460][ T9501] loop2: AHDI p1 p2 p3 [ 144.381516][ T9501] loop2: partition table partially beyond EOD, truncated [ 144.381681][ T9501] loop2: p1 start 1601398130 is beyond EOD, truncated [ 144.381729][ T9501] loop2: p2 start 1702059890 is beyond EOD, truncated [ 144.686115][ T45] kauditd_printk_skb: 72 callbacks suppressed [ 144.686182][ T45] audit: type=1800 audit(1788345751.216:1705): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 144.734983][ T45] audit: type=1800 audit(1788345751.266:1706): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 144.774723][ T45] audit: type=1800 audit(1788345751.306:1707): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 144.802431][ T45] audit: type=1800 audit(1788345751.336:1708): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 144.860897][ T45] audit: type=1800 audit(1788345751.386:1709): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 144.876158][ T45] audit: type=1800 audit(1788345751.406:1710): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132253 res=0 errno=0 [ 144.890027][ T45] audit: type=1800 audit(1788345751.416:1711): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=132257 res=0 errno=0 [ 144.916606][ T45] audit: type=1800 audit(1788345751.446:1712): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132336 res=0 errno=0 [ 144.925995][ T45] audit: type=1800 audit(1788345751.446:1713): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=132340 res=0 errno=0 [ 144.967374][ T45] audit: type=1800 audit(1788345751.496:1714): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 145.409585][ T9576] dummy0: entered promiscuous mode [ 145.413891][ T9576] gretap0: entered promiscuous mode [ 145.419418][ T9576] hsr1: entered allmulticast mode [ 145.419675][ T9576] dummy0: entered allmulticast mode [ 145.419717][ T9576] gretap0: entered allmulticast mode [ 145.577603][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 145.608509][ T9588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.133479][ T9622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.156563][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 146.305873][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 146.755326][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 146.758395][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 146.800828][ T5819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.800914][ T5819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.800969][ T5819] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.801017][ T5819] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.840278][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 146.918612][ T9655] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1547'. [ 146.989302][ T9658] serio: Serial port ptm0 [ 149.702618][ T45] kauditd_printk_skb: 43 callbacks suppressed [ 149.702670][ T45] audit: type=1800 audit(1788345756.236:1758): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 149.731138][ T45] audit: type=1800 audit(1788345756.266:1759): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 149.789301][ T45] audit: type=1800 audit(1788345756.316:1760): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 149.841847][ T45] audit: type=1800 audit(1788345756.376:1761): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 149.902198][ T45] audit: type=1800 audit(1788345756.426:1762): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 149.958439][ T45] audit: type=1800 audit(1788345756.486:1763): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 150.029073][ T45] audit: type=1800 audit(1788345756.556:1764): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 150.055316][ T45] audit: type=1800 audit(1788345756.586:1765): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133163 res=0 errno=0 [ 150.282256][ T45] audit: type=1800 audit(1788345756.816:1766): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 150.306334][ T45] audit: type=1800 audit(1788345756.836:1767): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 150.695177][ T9767] [U]  [ 150.695289][ T9767] [U] K{ [ 150.695406][ T9767] [U] T 1ŠFFˊ`GJǘGO/MC [ 150.699496][ T9767] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 150.701736][ T9767] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 150.702669][ T9767] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 150.706927][ T9767] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 150.707200][ T9767] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 150.707439][ T9767] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 150.707889][ T9767] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 150.710068][ T9767] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 150.710341][ T9767] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 150.710393][ T9767] [U] 22Ʃ۩X?0;3U [ 150.714390][ T9767] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 150.714640][ T9767] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 150.714820][ T9767] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 150.714947][ T9767] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 150.715266][ T9767] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 150.715300][ T9767] [U] EC [ 150.717228][ T9767] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 150.728261][ T9766] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 151.855905][ T9794] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 161.254284][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.255524][ T45] kauditd_printk_skb: 19 callbacks suppressed [ 161.255534][ T45] audit: type=1800 audit(1788345767.786:1787): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133438 res=0 errno=0 [ 161.256593][ T45] audit: type=1800 audit(1788345767.786:1788): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133449 res=0 errno=0 [ 161.259808][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.260522][ T5754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.263519][ T5754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.263860][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.278995][ T45] audit: type=1800 audit(1788345767.806:1789): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22187 res=0 errno=0 [ 161.296662][ T45] audit: type=1800 audit(1788345767.826:1790): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22216 res=0 errno=0 [ 161.300567][ T45] audit: type=1800 audit(1788345767.826:1791): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25889 res=0 errno=0 [ 161.311148][ T5755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.314801][ T45] audit: type=1800 audit(1788345767.846:1792): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26202 res=0 errno=0 [ 161.317253][ T45] audit: type=1800 audit(1788345767.846:1793): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26015 res=0 errno=0 [ 161.324743][ T5755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.331208][ T5755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.336206][ T45] audit: type=1800 audit(1788345767.866:1794): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=86269 res=0 errno=0 [ 161.336255][ T45] audit: type=1800 audit(1788345767.866:1795): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=86288 res=0 errno=0 [ 161.338740][ T45] audit: type=1800 audit(1788345767.866:1796): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=86239 res=0 errno=0 [ 161.355987][ T5755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.358602][ T5755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.812354][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.812456][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.812726][ T9801] bridge_slave_0: entered allmulticast mode [ 161.813538][ T9801] bridge_slave_0: entered promiscuous mode [ 161.815060][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.815131][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.815185][ T9801] bridge_slave_1: entered allmulticast mode [ 161.815921][ T9801] bridge_slave_1: entered promiscuous mode [ 161.834602][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.836364][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.852457][ T9801] team0: Port device team_slave_0 added [ 161.854057][ T9801] team0: Port device team_slave_1 added [ 161.907958][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.907998][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.908036][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.914378][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.914389][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.914403][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.930736][ T1355] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 162.010996][ T9801] hsr_slave_0: entered promiscuous mode [ 162.016133][ T9801] hsr_slave_1: entered promiscuous mode [ 162.016551][ T9801] debugfs: 'hsr0' already exists in 'hsr' [ 162.016565][ T9801] Cannot create hsr debugfs directory [ 162.080852][ T1355] usb 7-1: Using ep0 maxpacket: 8 [ 162.081935][ T1355] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.083789][ T1355] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.083823][ T1355] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.083854][ T1355] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 162.083887][ T1355] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 162.083920][ T1355] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 162.083951][ T1355] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.084003][ T1355] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.363253][ T1355] usb 7-1: GET_CAPABILITIES returned 0 [ 162.363360][ T1355] usbtmc 7-1:16.0: can't read capabilities [ 162.546508][ T9801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.558624][ T9801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.559356][ T9801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.563134][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563313][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563332][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563348][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563364][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563381][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563398][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563414][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563683][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563714][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563743][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563938][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563956][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563971][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563985][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.563999][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 162.564631][ T5602] usb 7-1: USB disconnect, device number 12 [ 162.567511][ T9801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.581854][ T9801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.606639][ T9801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.607854][ T9801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.639541][ T9801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.755509][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.771625][ T9801] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.780537][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.780706][ T9487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.789599][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.789697][ T9487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.381124][ T5755] Bluetooth: hci4: command tx timeout [ 163.468452][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.670724][ T5840] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 163.750562][ T9801] veth0_vlan: entered promiscuous mode [ 163.770109][ T9801] veth1_vlan: entered promiscuous mode [ 163.792827][ T9801] veth0_macvtap: entered promiscuous mode [ 163.795441][ T9801] veth1_macvtap: entered promiscuous mode [ 163.814036][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.819494][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.822840][ T5840] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 163.823741][ T5840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.823755][ T5840] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.823773][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.851921][ T5820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.851984][ T5820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.852003][ T5820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.852021][ T5820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.950437][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.950501][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.983488][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.983551][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.064278][ T5602] usb 7-1: USB disconnect, device number 13 [ 164.918552][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 165.073713][ T9940] pim6reg1: entered promiscuous mode [ 165.073768][ T9940] pim6reg1: entered allmulticast mode [ 165.431123][ T5854] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 165.471927][ T5755] Bluetooth: hci4: command tx timeout [ 165.601251][ T5854] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 165.605429][ T5854] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.605484][ T5854] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.615310][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.615350][ T5854] usb 10-1: Product: syz [ 165.615385][ T5854] usb 10-1: Manufacturer: syz [ 165.615407][ T5854] usb 10-1: SerialNumber: syz [ 165.866034][ T5854] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 166.276483][ T5854] usb 10-1: USB disconnect, device number 2 [ 166.289381][ T5854] usblp0: removed [ 166.834363][ T45] kauditd_printk_skb: 67 callbacks suppressed [ 166.834481][ T45] audit: type=1800 audit(1788345773.366:1864): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 166.994990][ T45] audit: type=1800 audit(1788345773.526:1865): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 167.540729][ T5755] Bluetooth: hci4: command tx timeout [ 167.818290][ T45] audit: type=1800 audit(1788345774.346:1866): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 167.940441][ T45] audit: type=1800 audit(1788345774.466:1867): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 168.048529][ T45] audit: type=1800 audit(1788345774.576:1868): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 168.256253][ T45] audit: type=1800 audit(1788345774.786:1869): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 168.367948][ T45] audit: type=1800 audit(1788345774.896:1870): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 168.709360][ T45] audit: type=1800 audit(1788345775.236:1871): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 168.770379][ T45] audit: type=1800 audit(1788345775.296:1872): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 168.967314][T10011] FAULT_INJECTION: forcing a failure. [ 168.967314][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 168.967358][T10011] CPU: 2 UID: 0 PID: 10011 Comm: syz.5.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.967385][T10011] Tainted: [L]=SOFTLOCKUP [ 168.967391][T10011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.967397][T10011] Call Trace: [ 168.967402][T10011] [ 168.967407][T10011] dump_stack_lvl+0x100/0x190 [ 168.967438][T10011] should_fail_ex.cold+0x5/0xa [ 168.967454][T10011] should_failslab+0xc2/0x120 [ 168.967473][T10011] __kmalloc_cache_noprof+0x91/0x6d0 [ 168.967490][T10011] ? fsnotify_alloc_group+0x8d/0x320 [ 168.967508][T10011] fsnotify_alloc_group+0x8d/0x320 [ 168.967525][T10011] do_inotify_init+0x4b/0x5e0 [ 168.967546][T10011] __do_sys_inotify_init+0x10/0x20 [ 168.967558][T10011] __do_fast_syscall_32+0x13a/0x8b0 [ 168.967579][T10011] do_fast_syscall_32+0x32/0x70 [ 168.967594][T10011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.967609][T10011] RIP: 0023:0xf704efec [ 168.967622][T10011] Code: Unable to access opcode bytes at 0xf704efc2. [ 168.967627][T10011] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000123 [ 168.967639][T10011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 168.967647][T10011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.967654][T10011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.967661][T10011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.967668][T10011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.967682][T10011] [ 169.077177][ T45] audit: type=1800 audit(1788345775.606:1873): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 169.620772][ T5755] Bluetooth: hci4: command tx timeout [ 170.239545][T10041] netlink: 'syz.1.1683': attribute type 4 has an invalid length. [ 170.310115][T10045] netlink: 'syz.5.1684': attribute type 1 has an invalid length. [ 170.442095][T10047] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 170.556433][T10052] netlink: 'syz.5.1687': attribute type 13 has an invalid length. [ 171.933579][ T45] kauditd_printk_skb: 27 callbacks suppressed [ 171.933681][ T45] audit: type=1800 audit(1788345778.466:1901): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 171.986836][ T45] audit: type=1800 audit(1788345778.516:1902): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 172.039548][ T45] audit: type=1800 audit(1788345778.566:1903): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 172.049746][ T45] audit: type=1800 audit(1788345778.576:1904): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140893 res=0 errno=0 [ 172.154258][ T45] audit: type=1800 audit(1788345778.686:1905): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 172.260433][ T45] audit: type=1800 audit(1788345778.786:1906): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 172.399553][ T45] audit: type=1800 audit(1788345778.926:1907): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 172.450181][ T45] audit: type=1800 audit(1788345778.976:1908): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 172.598340][ T45] audit: type=1800 audit(1788345779.126:1909): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 172.950114][ T45] audit: type=1800 audit(1788345779.476:1910): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 173.616394][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1723'. [ 174.056898][T10169] LUN: removable file: (no medium) [ 174.121750][T10169] [ 174.122560][T10169] ====================================================== [ 174.124806][T10169] WARNING: possible circular locking dependency detected [ 174.127041][T10169] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 174.129277][T10169] ------------------------------------------------------ [ 174.131722][T10169] syz.1.1741/10169 is trying to acquire lock: [ 174.133779][T10169] ffff888024c18460 (sb_writers#5){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 174.136668][T10169] [ 174.136668][T10169] but task is already holding lock: [ 174.139013][T10169] ffff888051576120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 174.141957][T10169] [ 174.141957][T10169] which lock already depends on the new lock. [ 174.141957][T10169] [ 174.145226][T10169] [ 174.145226][T10169] the existing dependency chain (in reverse order) is: [ 174.148038][T10169] [ 174.148038][T10169] -> #4 (&common->filesem){++++}-{4:4}: [ 174.150668][T10169] lock_acquire+0x1d1/0x380 [ 174.152289][T10169] down_read+0x99/0x4c0 [ 174.153821][T10169] fsg_show_file+0x20/0x180 [ 174.155429][T10169] configfs_read_iter+0x426/0x6f0 [ 174.157187][T10169] __kernel_read+0x397/0xad0 [ 174.158832][T10169] integrity_kernel_read+0x7e/0xb0 [ 174.160651][T10169] ima_calc_file_hash_tfm+0x25e/0x350 [ 174.162576][T10169] ima_calc_file_hash+0x1e3/0x380 [ 174.164340][T10169] ima_collect_measurement+0x94f/0xb30 [ 174.166276][T10169] process_measurement+0xdfe/0x2350 [ 174.168097][T10169] ima_file_check+0xcc/0x120 [ 174.170032][T10169] security_file_post_open+0xc4/0x210 [ 174.172475][T10169] path_openat+0x5cd/0x2440 [ 174.174514][T10169] do_file_open+0x20e/0x430 [ 174.176428][T10169] do_sys_openat2+0x10f/0x1e0 [ 174.178110][T10169] __ia32_compat_sys_openat+0x12d/0x210 [ 174.180094][T10169] __do_fast_syscall_32+0x13a/0x8b0 [ 174.182118][T10169] do_fast_syscall_32+0x32/0x70 [ 174.183883][T10169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.186077][T10169] [ 174.186077][T10169] -> #3 (&p->frag_sem){++++}-{4:4}: [ 174.188415][T10169] lock_acquire+0x1d1/0x380 [ 174.190137][T10169] down_read+0x99/0x4c0 [ 174.191665][T10169] configfs_read_iter+0x346/0x6f0 [ 174.193427][T10169] __kernel_read+0x397/0xad0 [ 174.195050][T10169] integrity_kernel_read+0x7e/0xb0 [ 174.196861][T10169] ima_calc_file_hash_tfm+0x25e/0x350 [ 174.198749][T10169] ima_calc_file_hash+0x1e3/0x380 [ 174.200511][T10169] ima_collect_measurement+0x94f/0xb30 [ 174.202483][T10169] process_measurement+0xdfe/0x2350 [ 174.204299][T10169] ima_file_check+0xcc/0x120 [ 174.205950][T10169] security_file_post_open+0xc4/0x210 [ 174.207975][T10169] path_openat+0x5cd/0x2440 [ 174.209726][T10169] do_file_open+0x20e/0x430 [ 174.211509][T10169] do_sys_openat2+0x10f/0x1e0 [ 174.213279][T10169] __ia32_compat_sys_openat+0x12d/0x210 [ 174.215202][T10169] __do_fast_syscall_32+0x13a/0x8b0 [ 174.217006][T10169] do_fast_syscall_32+0x32/0x70 [ 174.218740][T10169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.220900][T10169] [ 174.220900][T10169] -> #2 (&buffer->mutex#2){+.+.}-{4:4}: [ 174.223369][T10169] lock_acquire+0x1d1/0x380 [ 174.224981][T10169] __mutex_lock+0x1a4/0x1bd0 [ 174.226656][T10169] configfs_read_iter+0x79/0x6f0 [ 174.228527][T10169] __kernel_read+0x397/0xad0 [ 174.230195][T10169] integrity_kernel_read+0x7e/0xb0 [ 174.232129][T10169] ima_calc_file_hash_tfm+0x25e/0x350 [ 174.234160][T10169] ima_calc_file_hash+0x1e3/0x380 [ 174.235985][T10169] ima_collect_measurement+0x94f/0xb30 [ 174.237893][T10169] process_measurement+0xdfe/0x2350 [ 174.239728][T10169] ima_file_check+0xcc/0x120 [ 174.241376][T10169] security_file_post_open+0xc4/0x210 [ 174.243250][T10169] path_openat+0x5cd/0x2440 [ 174.244870][T10169] do_file_open+0x20e/0x430 [ 174.246610][T10169] do_sys_openat2+0x10f/0x1e0 [ 174.248361][T10169] __ia32_compat_sys_openat+0x12d/0x210 [ 174.250455][T10169] __do_fast_syscall_32+0x13a/0x8b0 [ 174.252381][T10169] do_fast_syscall_32+0x32/0x70 [ 174.254104][T10169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.256283][T10169] [ 174.256283][T10169] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 174.258982][T10169] lock_acquire+0x1d1/0x380 [ 174.260614][T10169] __mutex_lock+0x1a4/0x1bd0 [ 174.262261][T10169] process_measurement+0x5ab/0x2350 [ 174.264066][T10169] ima_file_check+0xcc/0x120 [ 174.265701][T10169] security_file_post_open+0xc4/0x210 [ 174.267593][T10169] path_openat+0x5cd/0x2440 [ 174.269284][T10169] do_file_open+0x20e/0x430 [ 174.271059][T10169] do_sys_openat2+0x10f/0x1e0 [ 174.272931][T10169] __x64_sys_openat+0x12d/0x210 [ 174.274670][T10169] do_syscall_64+0x121/0x770 [ 174.276300][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.278333][T10169] [ 174.278333][T10169] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 174.280687][T10169] check_prev_add+0xeb/0xe60 [ 174.282365][T10169] __lock_acquire+0x1492/0x1ec0 [ 174.284105][T10169] lock_acquire+0x1d1/0x380 [ 174.285729][T10169] mnt_want_write+0x6f/0x420 [ 174.287353][T10169] lookup_open+0x150/0x1990 [ 174.288981][T10169] path_openat+0xa2c/0x2440 [ 174.290593][T10169] do_file_open+0x20e/0x430 [ 174.292211][T10169] file_open_name+0x1c3/0x3e0 [ 174.293907][T10169] filp_open+0x2e/0x50 [ 174.295386][T10169] fsg_lun_open+0x6b/0x7b0 [ 174.297001][T10169] fsg_store_file+0x1e7/0x450 [ 174.298804][T10169] configfs_write_iter+0x302/0x4e0 [ 174.300860][T10169] vfs_write+0x6af/0x1050 [ 174.302615][T10169] ksys_write+0x12a/0x250 [ 174.304184][T10169] __do_fast_syscall_32+0x13a/0x8b0 [ 174.306007][T10169] do_fast_syscall_32+0x32/0x70 [ 174.307746][T10169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.309917][T10169] [ 174.309917][T10169] other info that might help us debug this: [ 174.309917][T10169] [ 174.313124][T10169] Chain exists of: [ 174.313124][T10169] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 174.313124][T10169] [ 174.317078][T10169] Possible unsafe locking scenario: [ 174.317078][T10169] [ 174.319451][T10169] CPU0 CPU1 [ 174.321292][T10169] ---- ---- [ 174.323148][T10169] lock(&common->filesem); [ 174.324717][T10169] lock(&p->frag_sem); [ 174.326895][T10169] lock(&common->filesem); [ 174.329150][T10169] rlock(sb_writers#5); [ 174.330530][T10169] [ 174.330530][T10169] *** DEADLOCK *** [ 174.330530][T10169] [ 174.333105][T10169] locks held by syz.1.1741/10169: 5, last CPU#0: [ 174.335260][T10169] #0: ffff88801450cd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 174.338533][T10169] #1: ffff8880221b2460 (sb_writers#24){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 174.341683][T10169] #2: ffff8880252a6e80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 174.344799][T10169] #3: ffff88806abf6070 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 174.347856][T10169] #4: ffff888051576120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 174.350925][T10169] [ 174.350925][T10169] stack backtrace: [ 174.352803][T10169] CPU: 0 UID: 0 PID: 10169 Comm: syz.1.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.356219][T10169] Tainted: [L]=SOFTLOCKUP [ 174.357616][T10169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.360811][T10169] Call Trace: [ 174.361925][T10169] [ 174.362865][T10169] dump_stack_lvl+0x100/0x190 [ 174.364392][T10169] print_circular_bug.cold+0x178/0x1be [ 174.366278][T10169] check_noncircular+0x146/0x160 [ 174.367998][T10169] check_prev_add+0xeb/0xe60 [ 174.369614][T10169] __lock_acquire+0x1492/0x1ec0 [ 174.371240][T10169] lock_acquire+0x1d1/0x380 [ 174.372696][T10169] ? lookup_open+0x150/0x1990 [ 174.374207][T10169] ? __pfx___might_resched+0x10/0x10 [ 174.375942][T10169] ? find_held_lock+0x2b/0x80 [ 174.377456][T10169] mnt_want_write+0x6f/0x420 [ 174.378928][T10169] ? lookup_open+0x150/0x1990 [ 174.380501][T10169] lookup_open+0x150/0x1990 [ 174.382167][T10169] path_openat+0xa2c/0x2440 [ 174.383743][T10169] ? __pfx_path_openat+0x10/0x10 [ 174.385377][T10169] ? clockevents_program_event+0x1ef/0x820 [ 174.387244][T10169] ? __kasan_slab_alloc+0x31/0x90 [ 174.388869][T10169] do_file_open+0x20e/0x430 [ 174.390334][T10169] ? __pfx_do_file_open+0x10/0x10 [ 174.391933][T10169] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 174.393779][T10169] file_open_name+0x1c3/0x3e0 [ 174.395293][T10169] ? __pfx_file_open_name+0x10/0x10 [ 174.396980][T10169] ? do_getname_kernel+0x5d/0x250 [ 174.398609][T10169] ? __asan_memcpy+0x3c/0x60 [ 174.400145][T10169] ? do_getname_kernel+0x1be/0x250 [ 174.401917][T10169] filp_open+0x2e/0x50 [ 174.403309][T10169] fsg_lun_open+0x6b/0x7b0 [ 174.404757][T10169] ? __pfx_down_read+0x10/0x10 [ 174.406332][T10169] fsg_store_file+0x1e7/0x450 [ 174.407836][T10169] configfs_write_iter+0x302/0x4e0 [ 174.409450][T10169] vfs_write+0x6af/0x1050 [ 174.410836][T10169] ? __pfx_configfs_write_iter+0x10/0x10 [ 174.412634][T10169] ? __pfx_vfs_write+0x10/0x10 [ 174.414210][T10169] ? find_held_lock+0x2b/0x80 [ 174.415781][T10169] ksys_write+0x12a/0x250 [ 174.417319][T10169] ? __pfx_ksys_write+0x10/0x10 [ 174.418945][T10169] __do_fast_syscall_32+0x13a/0x8b0 [ 174.420610][T10169] do_fast_syscall_32+0x32/0x70 [ 174.422211][T10169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.424213][T10169] RIP: 0023:0xf7fc7fec [ 174.425552][T10169] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 174.427704][T10169] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 174.430468][T10169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 174.433048][T10169] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.435559][T10169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.438096][T10169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.440603][T10169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.443135][T10169] [ 174.507176][T10169] mass_storage.0/lun.0: unable to open backing file: 0x0000000000010001 [ 175.070513][ T12] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 175.102227][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 175.109786][ T12] bond1 (unregistering): (slave vti0): Releasing backup interface [ 175.109973][ T12] vti0 (unregistering): left promiscuous mode [ 175.139072][ T12] bond0 (unregistering): Released all slaves [ 175.140335][ T12] bond1 (unregistering): Released all slaves [ 175.265714][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 175.464623][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 175.608969][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 175.616447][ T12] IPVS: stop unused estimator thread 0... [ 175.690012][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.731370][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.744431][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 175.755097][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.811655][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.878773][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.929662][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.985741][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.992779][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 176.043919][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.138361][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.145017][ T5450] 8021q: adding VLAN 0 to HW filter on device eth11 [ 176.204975][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.232927][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.266958][ T5450] 8021q: adding VLAN 0 to HW filter on device eth12 [ 176.291846][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.331219][ T12] bridge_slave_1: left allmulticast mode [ 176.331255][ T12] bridge_slave_1: left promiscuous mode [ 176.331368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.344977][ T12] bridge_slave_0: left allmulticast mode [ 176.345023][ T12] bridge_slave_0: left promiscuous mode [ 176.345108][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.360429][ T12] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 176.421979][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.426900][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.433967][ T12] bond0 (unregistering): Released all slaves [ 176.452711][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 176.492491][ T12] bond0 (unregistering): Released all slaves [ 176.493621][ T12] bond1 (unregistering): Released all slaves [ 176.495496][ T12] bond2 (unregistering): Released all slaves [ 176.509556][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 176.552121][ T12] bond0 (unregistering): Released all slaves [ 176.631298][ T12] tipc: Disabling bearer [ 176.631423][ T12] tipc: Left network mode [ 176.708588][ T5450] 8021q: adding VLAN 0 to HW filter on device eth13 [ 176.845594][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14 [ 176.944175][ T12] hsr_slave_0: left promiscuous mode [ 176.946330][ T12] hsr_slave_1: left promiscuous mode [ 176.949755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.952132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.954922][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.957223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.963211][ T12] hsr_slave_0: left promiscuous mode [ 176.965285][ T12] hsr_slave_1: left promiscuous mode [ 176.971119][ T12] hsr_slave_0: left promiscuous mode [ 176.973435][ T12] hsr_slave_1: left promiscuous mode [ 176.978211][ T12] veth1_macvtap: left promiscuous mode [ 176.979978][ T12] veth0_macvtap: left promiscuous mode [ 176.982860][ T12] veth1_vlan: left promiscuous mode [ 176.984649][ T12] veth0_vlan: left promiscuous mode [ 177.045738][ T12] team0 (unregistering): Port device team_slave_1 removed [ 177.058005][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.267587][ T5450] 8021q: adding VLAN 0 to HW filter on device eth15 [ 177.420550][ T5450] 8021q: adding VLAN 0 to HW filter on device eth16 [ 177.520754][ T5450] 8021q: adding VLAN 0 to HW filter on device eth17 [ 177.638820][ T5450] 8021q: adding VLAN 0 to HW filter on device eth19 [ 177.804262][ T5450] 8021q: adding VLAN 0 to HW filter on device eth18 [ 177.896581][ T5450] 8021q: adding VLAN 0 to HW filter on device eth20 [ 178.006071][ T5450] 8021q: adding VLAN 0 to HW filter on device eth21