last executing test programs: 6.143204517s ago: executing program 2 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (fail_nth: 3) 6.036873205s ago: executing program 2 (id=2421): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000080)={0x20, 0x6, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2) 4.798606473s ago: executing program 1 (id=2429): r0 = userfaultfd(0x1) listen(0xffffffffffffffff, 0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040815}, 0x20000090) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x8, 0x0, 0x31237648, 0x6, 0x500000, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x8d, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143340, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd08, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468") write$tun(r6, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="06032e51d296"], 0xb, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum}) 3.697708735s ago: executing program 1 (id=2435): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2$watch_queue(&(0x7f0000000180), 0x80) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.887052555s ago: executing program 0 (id=2439): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00009d7377d204a4"], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="1655e937c6", 0x5, 0x4081, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e03003520"], 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\b', @ANYRES16=r2], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005000028014000100000000000000000000000000000000010600020050000000080003000200000008000400010000000800050000000000080006000000000006000e004e21000005000000000000001fd6744fba891d1aa164a4de52d621b38af0d1ba0c215117000838"], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf255c00000008000300", @ANYRES32, @ANYBLOB="0900a568b983c300"], 0x24}, 0x1, 0x0, 0x0, 0x2004c840}, 0x840) 2.378201332s ago: executing program 1 (id=2442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f0000002440)={0xa0, 0xffffffffffffffda, r5, {{0x0, 0x3, 0x3ff, 0x9, 0x3, 0x81, {0x1, 0x8, 0x2, 0x88f, 0xb551, 0x0, 0x81, 0xffff, 0xffffff80, 0x0, 0x7, 0x0, 0x0, 0x57, 0xffc00000}}, {0x0, 0xb}}}, 0xa0) 2.377805009s ago: executing program 2 (id=2443): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c830380034000100050319000800ff0002000102ffff040903000c00337c400a6f896d009bdb53010208000f8c"], 0x3d) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 2.206654197s ago: executing program 0 (id=2444): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0xf48, 0x4}}}}}}, 0x0) 2.192906661s ago: executing program 0 (id=2445): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) close(r0) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1801) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='sockfs\x00', 0x200020, &(0x7f0000000400)='/dev/sequencer2\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000080)="8cfb122c51442482efe52032399f13ff0dfabe01927692df", 0x0, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x401, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind(r1, &(0x7f0000000200)=@nfc={0x27, r8, 0x1, 0x4}, 0x80) 1.518101903s ago: executing program 2 (id=2446): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000}, 0x28) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x10480) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r3, &(0x7f0000000640)="e8b7", 0x2, 0x40c0, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 1.476919229s ago: executing program 1 (id=2447): syz_io_uring_setup(0xf08, &(0x7f0000000540)={0x0, 0x3295, 0x400, 0x20002, 0x1000051}, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, &(0x7f0000000600)='dir', 0x3) socket(0x2b, 0x1, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000140)=0x100000, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.41190509s ago: executing program 2 (id=2449): capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x3c) 1.360331591s ago: executing program 3 (id=2450): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) 1.298542858s ago: executing program 2 (id=2451): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000080)={0x20, 0x6, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2) 1.290582613s ago: executing program 3 (id=2452): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) 1.250277861s ago: executing program 0 (id=2453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x400, {[@window={0x3, 0x3, 0x4b}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x9, 0x1, 0x7]}]}}}}}}}}, 0x0) (fail_nth: 3) 1.166431491s ago: executing program 3 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="410000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01310100000000002c0012800e00010069703665727370616e0000001800028008001500b9c20a00040012000500160001000000"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r1, &(0x7f0000000000)='3', 0x4e) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0xffffffffffffff2d) ioctl$KDSKBENT(r1, 0x4b47, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x4, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf258800e40008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000a000600080211000001000021003300d0240a000802110000010802110000011d0e62df0d1921000c025200a70000000a00060008021100000100000a0006000802110000010000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r7, &(0x7f0000000000)='3', 0x4e) io_setup(0xffff, &(0x7f00000028c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000003880)=@newtaction={0x39dc, 0x30, 0x200, 0xfffffffe, 0x0, {}, [{0x1e8, 0x1, [@m_vlan={0x158, 0x11, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x3, 0x5, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3, 0x100, 0xfffffffe}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x4}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x3, 0x10000000, 0x1000, 0x95}, 0x3}}]}, {0xb3, 0x6, "f93e0ec69bfbf97054e3bf045b6b13739929ee3b64a8f3be97864fd5324ac4d968024d41dcb528b8553b69895e88ba6b61f7a75d59ea2999fa4b77f9ffd41eb2c201923fd0f0a99fc246fe06ffc54af19cb8723fbb1f71a8eff7d8649ffba97966bce517a58571858f6b786489373e579a6926a2768fd62dc920b4e0aa03a3ee352444eb2335b3810c46a64bae07c995d30a0091051be6491956b54fc829e104ff3bf8ca6183b6dbc99d00e0542838"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ctinfo={0x8c, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}]}, {0x40, 0x6, "0f4cd976bbc194157f0872e12a56308e0799eef02f02a63fd2a0ea1c06ebeee62a85c29c4d1c2fb29b02b8688a9b25085052d69e856a85d4db1355ac"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x14bc, 0x1, [@m_mirred={0x114, 0x15, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x6, 0x1, 0x809, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x0, 0x9, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7fffffff, 0xffffffffffffffff, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x4, 0x80000000, 0x9}, 0x3}}]}, {0x66, 0x6, "2ec7e12219d5ef1f0222f1b21d596c6a40b5bdff8af2bba1ca1c571a3e6d7e2bd246bc78b193fd5dfb07f08e76a06d88eaf5bb4936ff8adc2ed9d9f89f4ef42291e858604c90e15a054e5476369efa262b047bd62e4c7460807761120ecf611b83a6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x107c, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x0, 0x7, 0x9}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x800, 0x6}, 0x1}}]}, {0x1004, 0x6, "0b2d46bbe736307ff52f454282712a782f26f35f98237e87b29d2f5fe20da9c03e92e99671d1628d46b05c8c0e3612080fc8aa270d47c05f8dd7eac45e1e58de76630475728310afa3f0b736abf7628ceb5f43fd3ef83f7b2ac4e31184b1a94d0545b8a563f004253da46f6ffde9e01fb753fbba2517d2e4c2c055d29ed3cc099d3b00eda83b8618e3da17fd88059835aa341df74608f5169435b7ddf4872e3672b24acfeac3a7290eaba47bb93c0de239db5deb4cee585662a872af56bc0c53b6da691bbb7c630e25d3f7026c05540bb03d5b249d8ea5fc9f48ed5101ec98c52e761277a3b9ba19b58d6720adb451c3bf903f06eb55dc05e6da5fa0edb96cd02b602bf49826df2b192503d1f115dec71450da0fb2c0d303a08f5bf64cd2903aebf9cd225caae1fdc9c29fccf1dd6a8e8e4c0b2c75036341ea0e32dd0b522b31a5b3c4bd7e884daa53eac5dff9297d546558f26a6caee50cb580b5de62c43d8965c3db57f5c1aaa2a9f2a6062a59a1c84f28376bc3bc5c6e65f3626efaf0a582ead4aa16f99396feb6087dcd8432d02a05a42b8e6348a80f02d995613388907563840e169795fd18a87c8d17298468883cc107c00688bece5513277ba906b06e62b03d6ff91b5074d90925cfadd0cbbb4f63208eb4539025527b329f87958b8fdb0cd95d2c457e6e76665f153279b74147cf8c70cbabc47ced1de178e7652c1bd6c5efd143fa09d27d196ee9c7e2c2e169d7bcc9835c65642bf91cd6356dcad1a07ddac3e7f672e69283be9d275e968f76b5f30359f3aa91ac0e79e03c24c3e27a48496a99d958936e640666fa8d4f88dadd7bc82027d9f119b2cc88b040498982ab14d9a09c2ddb3bfbc237508c3c6db05823737b73485c3fd9518913d41adf5b39bea83c254aa21ec28070a50cf9b54a94fbb85eb9f224d6a1cddcecdc10468d091a9e1274f84bffba10415896147bd5a7814c0fd61028dd8b8d11c8d3d26ecef4676ab10aadfb73c48325648a2568c15e6b6386cc0013342edbc4a279d968f65050c8c93a6b74ff6978bba420ca35c4f8032066215b12a42e44539c60b029f4929e763473d5d32892989ab4f54765f734b03bc09b506c7befc8c4a6d33578bcd3f37746e66a8a3822fb89dc89787a0ffba178528cf2122f80d4bf8abf24c505892d97bc140d5f1e132e27948ee88373b94f35bf76df3e6dce05f41f675e7ae805d214ee0052f3171d84bd9d8e085ed95dbac79a74a0ce6b97f20e0ae0c728667e7a7f1e5d71111fdfa643677e62a92b676533aca06735b1509f8cc3d03d9e680f517940ab63450e9b81c6066a31759f8073864cf880aeccb49973059620793fb0ff760eb978ba1a8392b76b699c219605602a270e7812efd5337d150a0c0f3c6c7564f61dcab61bb1fc60f673a4de0c22dfb41172496e4d95caac4334962eb9d20f9ab5643a038f32466ed805e8edeafb52a5fef2422ae6500d42a06563aa1634a3aa57110f2975a1be7694718e85dbdc61a7cbd60bbc066ac1831e67195386e859cdbdd1fb69798e95073941016c9491faf9428190fb7dff8c168cc0a9bf48638b922fc9495c58dbb8ccd6e148c852a5cf567054647eed33f4b92a6760a8dbb421a2bd0c5b32522934196da06f3ede5a81d473c8ee1d2099bfe3682a60dcf175d1ff0d0533d599b8b69a191259187ce4d772a11a9d7df7da2431064ff3b421b35a14237ad4bcaa8febe9ff4103d0d162247aea5616b8936c0da68c8549f75b55ae9c4f72b197d46f46d98a0fbf57a43825d31ee841a058e88de93d07ba31e827c0f22909be49285ed6234257b06bd53b1f1e70c58c178f1d440f41aa74b6e2516603afabeeb5ef6a7572ccc6ce240882982a7657244457516561f06eda85d62ca42be2364a0b257f2566a4e89cdd4c8a08bfef19e3a097bde13267ea6bf5fe33082e6d1754b98d159a410cd426a1f3f99e4b2d7f35c44c219f5ea00c59059b451d153cdade9da0e8bcd043a3e270a47d2c742faf1f8ab227e9bed9916575c70cf13ee980270c314fc0537150aed49640aa9176ec44a0a39fadd601788d421e4ef8c672f30eb59a7b97c1c00faecd11dc7af489c3483f539d9ef5c9c76a694e4ce242d85b6735973aaf7424ee2e745fc1885b3db7a762e874fb09a9c8ad2867f6b2657f812e4f3cd9ae93536e7c59b25bae0ceba9b78afdc2d1dbb963d1ef1cd5b12dd8e980a69b21d4af78ddcc0bbc427b8e1128bedd8a23e78b7cd9d60a917de78e47410d3ff554b15cd5944de7a8b6e1b59d2ba498a0f02b689b3a1756b05c25be23291c73d2dd2bba384fd755f050d80621af423b099b573ba66f7e3dd596a3f55c3da8aa650b9734d02e9235e1fdece8eb4896e407626cda375cf76958fd4bea452a189818472e2300dafdf907c20533bf7a7ba40cbd654d141b10f63721d3da5bbf499c7b5b6b84b74a40dfe7eda4681ad771fbe88f35c22921b78a81337e3701e4f59b6988b60b96390548c3d020550ac67888cf561d179f84cb20ea31c09661708c401b9f0f151c03e0290c3e6853801cff2629610ab5e347229d0d0c70d186bf66611ae9abd11dbc33a352404f9b84eea11312a8c76135c2d527606bdecb00c2bf934cd1fc719a3c317a43b651057788e26628833dee6390c6350e68a80abe5b75cdf676136ec04ba6ed91d07b9684af40ac9016ec6d64ac06b9a7565487b20f6431a57e0e2401749487bf6ec11a4c808100fccb6c87a3abb468628528ce1f3653bc632dc910c3d43a43f461bc3a0329caaf55fa7a950d6bcffb2c0ff0724b143309baa7fe71213abc03f0d66c0159908495be1bba0b90114fdc250503e143f87412e4a55f78650c915b07aea7ade7206ea8c25247909dfcafcd55b50e0ad632d3a9d78faa8e684d59626194c23782a51130dfc875108da945ff780404db468fd19aa2c122cbc4921434798700fa95cfffbafeb9df7598872682ef348228f7ec24384dc21dec50633734e8e9c71c82a725a70848daa63948649870f51cd087a6d81f3fd717915ddfe97891bc7594b476e6728fc852cdd1913bc2c243fe537f0456dbce65c6654b31b8c3fb23e466b071ecef558d0a8afdd87f2505a6fc085b5ac07755ad27421cf0925c1e433bc6fac4cff4ad8f96644bdb2beba0191fe064209c9d8d81b5b2e5e5c1c04c051612228e4f3ca411e2a5e1a078929a93ccc93e023be9a056508b3a224630d912edef2adadd7c75507f97d55c75e9585398ecd8ffb887eff075486a9af5b68f5ae9ce8451d6e0673dddbfaa78449183346e1ef7cc428d8c4b4c2c5ace892ded1d6d1eb3b88aba29d7844cec7c1c9667f8bf02de8b6a6843b5c576ae9ed0e95210898dee7074f38f6bd9bd711b842165a97f288c0fe84047175df6a91a7270d6d9489ded86cc02804a8cfbd87f7df684028efc531bd8015c3b996f8905358d0212df82412017698496c6fb272058182fdaefe429700539c051fea4c72e53c2db56ac74913ec0e9fb929c8ad2e226a1c5c74ef9226f91c66bc1fe57aff1c8bdbb1bafa38fa4cd2cb37aee195fec9e6816a18cc82187c0f5bab236e41a752837005bae194ac00337b40ddef436ef8ba9b602e00d257e9741aa3e61436b10a0694b158d9c15a2af0e826a8683b33a9622c680cd34e2b75b918765affff9677b3467f035c8ae7b6200a84757dd3eaaabae32f0feb11728ca6e5f8950e9587dd724450ea5a6234d332dbb8a4662725d6b259e611a5fbfc21a4b823af9420bca7ee5b628e102ce9d40c809bc28eb9fee1aea75dbb48f2cbf206ec3a315508dedb4f77e85fc23cb53d5d7ba3cb032f6af8724c1853ad66e6559652ba182165f5e554102f6f7728b4f180d829bf738ec2bc7c3b7f826331b695d00c01223f96abc5bb75d3a5b037008e2218ebd8ed0e9eab38b00ba6f2fa7e6809b927adf394b18af9a8cfb073d3a0e771582c53d33bc999b2ddefd640a740b3758e5dc4ffae4c94ba9edf1c8dbd1f47244d140a2ac1e96fb41836af5f1bcb23f3d8f371c6b6874fae327dd92efc331f3ffa3690b909f72f916c834ba74caea650257f9d292ff85db84c020df288bf5a440bfdf202646ce673077defb7ea5dcd5221d30d2b0fd6814fb7f872f9eb196a281895ff9a4ba4f5b02192446d8ce102acc1356e983ba291c0707e3fa6747b6794a4648ef02cdaa841bf03d88daaf36bb188d7fb25ed0c799da354b132947e259e9d0055ef332e380bbeb811f838173905f25e091a0535f9c9d9d009514b9e76bdd4a4c0efc79e8b3e0b9ec36af1e48093f5c282d17d51e77b69de03cb050bf4f05325876075aa430de757be031ad3f483866816904620f5c77848a72f54834f432ea816622dd0b6a10713bebea4b62bade05cf98529de754b75c330e859689def3b77e517c5707dd1184b4a5b3768327aeb2d94d2506c8aafa71764d0434cd21191035ed09818a2e9186a12d05a722374f7e20228c36e737b246057a102055ea578ca3b486eb938adb7b4dbc11550c2729e7385ef30b3684c3f34fedf5533011d3146b33272d65d74ff8069412901225d9d396324880a4cec92a95e3ab28e26376a3d3e124bc3cec383b50aad3eb612edb24ca4769beb0c936e3cd83ee21c23b991b4dcc318f6d491179528fc1d3d9562f80609d9bea2de03165b5100202f420c47b0d5a24c75d43393cd8b7ab16a9257ba6b46fd666afe532d56cee6c80c54ccad35eb956302ad3146fabbd8d5fa535b4450e7ad1de38c2c74bcd3f5bf32e84499c93a0813d51725471cb62b56b1725706e96b79c9407a26a0c8cf1e0c2ed98a973f00d0abfa1f588f8d581c1106c2507f66030d2d2cc341b824f7dfefa1967089021cc41233128ba1d3bf636c260927a8fa90f1cfbe576b2b80d3c7f43490cca93f2c9fe65054c4df7adc3b7dfb83369cde6fd33ac08ea9870d82f1f073453e4b8f4bc7816e7d545a725138987fd0481a77684de8cd1386cc06aee5c698de2b73b1d6f02b91ab3e25a2aa552ff4c8f4fef04d0865aac7451f473b9d7774c239c776f636a456e49d06eee90bf38be0dad432e6c2beb603778844f01fe8e6f93f68105a8a1bae66ad1b4f5f070e0102472aa65ff0cb5ccc8701404bf7775ca838001530bf3b991187bb4827c5da4fd6ee171c9ab759fb5071035ae7cb275bb1c57c9e59d1140c5e518e6edbd9f1f0a25ff2addf56f1a1b197a136acac9f6049f10885d820ddd3cdda5576e3ac961b5f86cd828746a2877e885ed2bc08dc0a15449f8e0266624d8f7fb675ec1b3036af7bfa4e018cfc60fffbdc445b2f88501d2449ebbf07ebeda9a70399eded6423e84d204db80f3604d9a1b4b213634df725591245cfd6f7217adb3b97c7c446991b6caf09a117a383edda632481ff8831120a3ba222cfeec32fb6d5789854aea9c25f733a9b7e30f143873665299b8a19c35b08125522868d89872c82f22ed5fbc4bb7c0c86f6652831c4e9e37e312321ca940bf76968e79ffde41c2a4c69251ccfa03e09feff52199c27e31c5847f52c4c2eaeeccee72d3e3ee43e8ec59935c9a37c30c38bb03c126f8bb85d4593e646cd5f85de433269aed308825d1f82a6f2bb9e51f022e6145a004287396c92ef7e6ff940078a9b2bb9bcc5a5150e12ca4e612c3e0b07cba6dc6420388593e84a09b146ab0b1ebd771bc98f8934506c264ab08c8a4ce8ec34af2f61cc0b79dd8f0a94614f4d11da3248908b7574158f99572ece43b3479f855e9c965c1f6fcbf8e765c49bdb9997680848bd5"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x1b8, 0x19, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7a, 0x9289, 0x8, 0x2da, 0x2}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6055, 0xffffffffffffffff, 0x4, 0x6}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x0, 0x5, 0x76c0c465}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x10000000, 0x7fff, 0x9}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xc6, 0x3, 0x7, 0xa}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x49d8, 0x8, 0x7, 0x4, 0xf}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x8, 0x3, 0x3}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x0, 0x8, 0xafd}, 0x36}}]}, {0xac, 0x6, "5c3ac767db056c9b1c2b2719499bddd084067a26597310f42b6a835fb26c7d24a1b6d74aa44ea75181381b2cf9067a97e495887656f8c99ef6f5eb6be8d1a321e95377993aeff58c5a281f1782b5db4d7e2f6f4633ed50b63c4c1ec12c550693ee61615ff01f844a14638283e3770f63fd4a845dca63bff8237bcbbbf323135c7d5b887e2981e9db945488210c04510be4542878e58d7c1697e61af6e0e7686047c44473ffadad9c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x170, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0xffffffffffffffff, 0x24e, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x0, 0x9, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xfffffe00, 0x6, 0x7, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x7, 0x10, 0xf}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x10000000, 0x70000, 0x1}, 0x1}}]}, {0xa1, 0x6, "e9389cc55d0f8d4737fcac175a795d2203a3191365cd4f74a47b8b51789d126eec97331dfca23a03c7598bb977f111fa3b358b82c9d22841bf35c56495a920816a788a8c21188c3dc7b23c68790efd8f70fe53ef4adc2d24516ef5d06677c14b9a5ed56bc2787822e25f4b21a00435445612a9071b2849198dba9d79c15439bd42ae124ee6552e0041e5133027af017929a2e60ebddef01bec3c23afd4"}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}, {0x22c8, 0x1, [@m_pedit={0x178, 0x1a, 0x0, 0x0, {{0xa}, {0x98, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x94, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb5, 0x6, "69aea3fadbc1dde8570655256f0826d71fe3481c3839946af664ee019cf45af47de04e4579576227fe926cef67469a7c4a26dc02585b2ebe6f1cc2440d2c94cce5d59682e3196baf9055fe012b97fe494fd713572a4b7dfe2a1cfe3b9bca06f666bbfaef0fce45617d7978270376621fdba6c414e5ce48bf427a21fcfe36dc920c2e021db7755bff32e5cffd704b67c31f451229606f1d31fcbcc6c04c26078e49a97bd5963e6b7c25e1857e68295f956b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x158, 0x11, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x336, 0x5, 0x1, 0x71, 0x9}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2bd, 0x0, 0x7, 0x10, 0x4}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffff7, 0x8, 0xfffffffc, 0x7}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x518f, 0x101, 0x5, 0x9, 0x2}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x20000000, 0x5, 0x10000}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x6, 0x7, 0x80}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x5, 0x8, 0x656}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x5, 0xc, 0x6}, 0xe}}]}, {0x4c, 0x6, "cd009dce38408fdbf5d4c606d466dbff63bd69ac67e9486d444235b6629c5caf745e6ffefdbce5d13473298f647251333909b42ed239a73a52d686f25e1d18bcecaa14a8dd708adc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x10c, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa2, 0x200, 0x5, 0x5, 0xffffffff}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0xffffffffffffffff, 0xc26, 0x9}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x8, 0x1, 0xd, 0x8d}, 0x74}}]}, {0x89, 0x6, "4c64927fe2184a296822f0d615812d198c5035d38493d689b34508e0b7390cf346abdd38db5cb09ab3b48ec193ccf6f1b5e3628f17cabffc3fc571a412386611bcabe736909c949b988f484ae568437954b7fca67244ff87c6788af4a21f68d2f2b68e8730fd8a4716185fafc6a89290eee78a322bf6722cdf434e0231ccc4ed0fd904903d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1da8, 0x18, 0x0, 0x0, {{0xb}, {0x1d14, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0xd, 0x8c, 0x0, 0x7, 0xe, 0x5546, 0x7fffffff, 0x4, 0xfffffffa, 0x387d, 0xb22, 0x81, 0x9, 0x0, 0x4, 0x5, 0x200, 0x6, 0x0, 0x1, 0x14, 0x3, 0x8, 0x9, 0xb9, 0x860, 0x7, 0x9, 0x0, 0x5, 0x8, 0x4a, 0xe, 0x4, 0x4, 0x5, 0x8, 0x4, 0x2, 0xfffffff5, 0xbe2, 0xe0000000, 0xfffff000, 0xffff4cb6, 0x2, 0xf, 0x2, 0x0, 0xffff0000, 0x80, 0x4, 0x60000, 0x5, 0x6, 0x80000001, 0x2, 0x1, 0x6, 0x8661, 0x7, 0x401, 0x74698d79, 0x8, 0x1, 0xfffffff8, 0x0, 0x8ec1, 0xbf8, 0xd7, 0x0, 0xb, 0xe, 0xfffff801, 0xffff, 0x4, 0x4, 0x6, 0x3ff, 0xfffffffa, 0x10, 0x3b202904, 0x78, 0xf2, 0x5, 0x8, 0x7, 0xfffffff9, 0x400, 0x5, 0x2cd4, 0x3, 0x4, 0x2, 0xc, 0x9e5, 0x5, 0x7, 0x5, 0x200, 0x7ff, 0x5, 0x4, 0xd, 0x1a, 0x8000, 0x7fffffff, 0x5, 0x2, 0x0, 0x1ff, 0x0, 0x7, 0x0, 0xc, 0x8, 0x80, 0x3, 0x2, 0x8, 0x6, 0x6, 0xfffffd78, 0x58, 0x7, 0x8, 0x0, 0xe9, 0x8, 0x2, 0x10000, 0x6, 0x3032, 0x7, 0xe, 0x7, 0xfffffffd, 0xffffffff, 0x5b91, 0x7ab4, 0x4, 0x81bf, 0x1376, 0x6, 0x2, 0x1, 0x80, 0x10000, 0x0, 0x9, 0x3, 0x9, 0x200, 0x1, 0x3, 0x2c7, 0x5, 0x4, 0x2, 0x6, 0x4, 0x0, 0x10000, 0x25, 0x2, 0x7, 0xd0e4, 0xc, 0x8001, 0x7, 0x80000001, 0x1, 0x9, 0x5e0cd9e6, 0x6, 0x28, 0x7, 0x5, 0x0, 0x5, 0x0, 0x2, 0x5, 0xe0000, 0x6, 0x6, 0x3d7b, 0x5, 0x9, 0x6, 0x0, 0xfffffd83, 0x4, 0x80000000, 0xffff, 0x0, 0xfffffffe, 0xffffffff, 0x7fff, 0x3, 0xc, 0x0, 0x3, 0x5be67e21, 0x943, 0x19b8, 0x3, 0x400, 0x4, 0xb948, 0x636, 0x2, 0x7, 0x5, 0x7, 0xd39, 0xffff7fff, 0xdb, 0x80000001, 0x9, 0x7f, 0xf, 0xa283, 0x5, 0x4, 0x5, 0x5, 0x4d30, 0xffffffff, 0xf, 0xfffffffa, 0xc, 0x4, 0x8001, 0x3, 0x7f, 0x7f, 0x8, 0x2, 0x7, 0x9, 0x9, 0xfff, 0x2, 0x1, 0x9c7, 0x80000001, 0x2, 0x9, 0x2, 0x40, 0x2, 0x9, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc5be}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x1ff, 0x4, 0x5, 0x6, 0x592, 0x7f, 0x5, 0x7, 0x1, 0x4, 0x8, 0x8, 0x80000001, 0x9, 0x5, 0x5, 0x6, 0x9, 0x40, 0x400, 0x8001, 0x81, 0xa4c0, 0xb9, 0x984, 0x9, 0xb, 0xffffffff, 0xca8b, 0x2, 0x0, 0xb, 0x7, 0xffff, 0x6, 0x1, 0x400, 0x4, 0x101, 0x7, 0x27973fcc, 0xc0, 0x9, 0x2, 0x1, 0x7ff, 0x1, 0x1, 0x5, 0xe743, 0x380f, 0x4, 0x1000, 0x1, 0x6, 0x3, 0x2, 0xf, 0x2, 0xfffffffe, 0x10000, 0x800, 0x3, 0x9, 0x8, 0xffff, 0x148d, 0x6, 0x221, 0x2, 0x5ab5, 0x4, 0x7ff, 0x1, 0x7, 0x551, 0x0, 0x3, 0xe, 0x1, 0x2, 0x7, 0xffffffff, 0xb4, 0x6, 0x100, 0x6, 0x9, 0x8, 0x1000, 0x6, 0x3e, 0x47, 0x6, 0x2, 0x9, 0x642, 0x3ff, 0x7, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0x80, 0xa0f, 0x3, 0xdb, 0x0, 0x3ff, 0x52, 0x0, 0x4, 0x8, 0x3, 0x7, 0x7, 0x4, 0x10000, 0xffff0000, 0x7, 0x1000, 0x2, 0xfffffffd, 0x5, 0x1, 0x1, 0x5, 0x4, 0x9, 0xb94, 0x9, 0x5, 0x11f, 0x7ff, 0x24, 0x7cdc, 0x3ff, 0xfffffffb, 0x1, 0x4, 0x4, 0x8, 0x0, 0x9, 0x80, 0x5, 0x3e, 0x2, 0x40, 0x5, 0x1, 0x10, 0xfffffffa, 0x0, 0x401, 0x8, 0x2ed0, 0x3, 0x28000000, 0x9, 0xe10a, 0x3, 0xd, 0x401, 0xfffffff8, 0xffff, 0x2, 0x3, 0x1, 0x5, 0xff, 0x4, 0x7, 0x3, 0x7f, 0xff800000, 0xfff, 0x5, 0xffff, 0x380, 0x8001, 0x302, 0x6, 0x1, 0xf01, 0x9, 0xe3, 0x5, 0x0, 0x9, 0x401, 0x400, 0x7, 0x800, 0xfff, 0x0, 0x0, 0xb, 0xfffff7fa, 0x8, 0x8, 0xd3, 0x401, 0x9, 0x8, 0x4, 0x80000000, 0x8, 0x5, 0x0, 0x0, 0x6, 0x3, 0xd5, 0xd, 0x9, 0x81, 0x8, 0x8, 0x9, 0x3a5, 0x8, 0x6, 0x800, 0x4, 0x6, 0x7de30477, 0x9, 0x8, 0x4, 0x0, 0x9, 0x6, 0x1, 0x10, 0xfffff801, 0x10001, 0x7, 0x6, 0x1, 0x4, 0x6, 0x800, 0x6, 0x5, 0x0, 0x7f, 0x0, 0x6, 0x8001, 0x7, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x1, 0x9, 0x2, 0x9, 0x6, 0xf70, 0xd, 0x8, 0x5, 0x8001, 0x3, 0x4, 0x1, 0x3, 0x6, 0xffffffff, 0x8bb, 0x2, 0x1, 0x80, 0x5, 0x3, 0x6, 0x2, 0x0, 0x5, 0x10000, 0x1, 0x3, 0x3, 0x3, 0x0, 0xffff0001, 0x100, 0x3, 0x5, 0x6, 0x9a, 0xfff, 0xad2, 0xb, 0x0, 0x3, 0x7, 0x0, 0x6, 0x40000, 0x2, 0x9, 0xc, 0x5, 0x4, 0xe, 0x7, 0x80000001, 0x4, 0x6, 0x5, 0xe, 0x5, 0x6, 0x80000001, 0x7ff, 0xedf, 0x0, 0xbe5, 0x1, 0x3ff, 0x4, 0x6, 0x7, 0x5, 0xc22, 0x5, 0x6, 0xb34, 0x5, 0x5, 0x4c5ae6d2, 0x7, 0x3, 0x4, 0x6, 0x2, 0x20000000, 0x200, 0x2, 0x7f, 0x3, 0x1, 0x4, 0xffffff00, 0xfb7, 0x0, 0x9, 0x7, 0x8, 0xc19, 0xd, 0x1, 0x8b, 0xedda, 0x3, 0x4, 0x4, 0x4, 0x3, 0x411ec969, 0xffffafc4, 0x1, 0x9, 0x0, 0xffffffff, 0x10000, 0x3b4b, 0x6, 0xf2, 0x6, 0x39c, 0x0, 0x1, 0xaf5, 0x9, 0x5, 0x7, 0xfffffffe, 0x7fffffff, 0x740, 0xfffffffe, 0x705, 0x3, 0x57fa, 0x8, 0x7, 0xfffffffe, 0xf, 0xb6, 0x0, 0x7fff, 0x6, 0x7, 0x80000001, 0x0, 0x8, 0x3, 0x6, 0x5, 0x1ff, 0xdb0b, 0x7, 0x5, 0x9, 0x6a59, 0x40, 0x8, 0x2e, 0x1, 0x3, 0x0, 0x2, 0x9, 0x6, 0xc, 0x1, 0xc, 0x0, 0x7, 0x800, 0x800, 0x3ff, 0xd, 0x0, 0x58ba, 0x0, 0x400, 0x9, 0x200, 0x0, 0x7, 0x101, 0x6, 0x8, 0x81, 0x7, 0x775, 0xfffffff3, 0xa9c, 0x9, 0x8, 0x7, 0x4ef8, 0x3, 0x3, 0x5, 0x8, 0x4, 0x8d88, 0x80, 0x3, 0xff, 0x3, 0x9, 0x4, 0x10, 0x3, 0x2, 0xc98, 0x7, 0x7, 0x9ab3, 0xffffff24, 0x5d, 0x9, 0x1, 0xeb7b, 0x8b, 0x3, 0x4000, 0xbc, 0x5, 0x1471, 0x0, 0x29, 0x3, 0xfffffffc, 0x101, 0x3ff, 0x8, 0x7fff, 0xfffff3ea, 0xe7, 0x8, 0xca3, 0x8, 0x1, 0x1ff, 0x7f, 0x6, 0x7, 0x101, 0x7, 0x4, 0x0, 0x400, 0x2, 0x8000, 0xe, 0xa, 0x9dff, 0x5c91, 0x3, 0x0, 0x92, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0xfffffebb, 0x5486, 0x2, 0x9, 0xa, 0x1, 0x7, 0x4, 0x4, 0x2, 0x6, 0x5, 0xf6, 0x5, 0x5, 0xfffffffc, 0x6, 0x9, 0x6, 0x5, 0xa, 0x6000000, 0x400, 0x8000, 0x100, 0x3, 0x200, 0x7e, 0x0, 0x7ff, 0x5, 0xfffffe01, 0x4, 0xdf, 0x7, 0x80000000, 0x292, 0x1, 0x8, 0x7, 0x1, 0x4, 0x80000001, 0x7, 0x8, 0x7000, 0x10, 0x2, 0xffffffb2, 0x8, 0x3, 0x6, 0xf, 0x1, 0x7, 0x3, 0x9, 0x2, 0x937, 0x7, 0x713b, 0x1, 0x7ff, 0x5, 0xfffff259, 0xfff, 0x3, 0x63, 0xfffffffc, 0x8ce, 0x3, 0x2, 0xe, 0xd36, 0x800, 0x1, 0xd8, 0x4, 0x24b, 0x1, 0x3, 0x3, 0x9, 0x3, 0x7, 0x1, 0xffff, 0x1000, 0x8, 0x9, 0x3, 0xfff, 0xfffffff9, 0x80000000, 0x7, 0x8, 0x8, 0x2, 0x10001, 0xd, 0x2, 0x8, 0x5, 0xd17, 0x0, 0x0, 0x9, 0x6, 0x2, 0x40, 0x2, 0x401000, 0x400, 0x800, 0x530f, 0x64bf, 0x4, 0x5, 0xe59, 0x67, 0xe6f, 0x9, 0x8, 0x101, 0x3, 0x3, 0x80000001, 0x923a, 0x80, 0x8907, 0x2, 0x8, 0x4, 0x80, 0x5, 0x2, 0xffffffd4, 0x5, 0x1, 0x0, 0x70e, 0x947b, 0x9, 0x8, 0x4, 0xab, 0xa, 0x0, 0x6, 0x714d748e, 0xfffffeff, 0xff, 0x9, 0x8, 0x5, 0x5, 0x40, 0xc, 0x1000, 0x3, 0x7, 0x0, 0x3, 0x7fffffff, 0x1, 0x9, 0xfff, 0x4, 0x0, 0x6, 0xe2, 0x7, 0x6, 0xffffe931, 0xf3f8, 0x7, 0x8001, 0x2, 0x2, 0x1, 0x9, 0x80, 0x5, 0x1, 0x80000000, 0x3, 0xb, 0x7ff, 0xc712, 0x4, 0x5, 0x8000, 0x5, 0x40, 0x75, 0x5, 0x6, 0x4, 0x3, 0x80000001, 0xfffffbff, 0x9, 0x4, 0x0, 0x5ce, 0x9, 0x8, 0xfff, 0x7, 0xd, 0x3, 0x0, 0x91d3, 0x40, 0x400, 0x6, 0xa5fa, 0x8, 0xfffffffc, 0x0, 0x10001, 0x8, 0x8, 0xcca5, 0x5, 0x4, 0x9, 0x1ff, 0x100, 0x9, 0xfffffff8, 0x9, 0x6, 0x3ff, 0x3, 0xffff11bc, 0x2a2, 0x7f, 0x8, 0x7, 0x8, 0x2, 0x9000000, 0x7, 0x6, 0x5, 0x3, 0x0, 0x5a, 0xc04, 0x10, 0x1, 0xe, 0x3, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x40, 0x6, 0x701, 0x2, 0x1, 0xfffffc00, 0xffffffff, 0x9, 0x85f8, 0x6, 0x0, 0xc, 0xc, 0xffffffff, 0x3, 0x5, 0x9, 0x4219, 0xffffffff, 0x0, 0x7f, 0xd667, 0xff, 0x3b, 0x10, 0x5, 0x7, 0x40, 0x9, 0x4f, 0x6, 0x8, 0x7, 0x9a85, 0x2, 0x7, 0x6, 0x2, 0x7882, 0xcf, 0x7ff, 0x4, 0x8, 0x1000, 0x5, 0x80000000, 0xf, 0x10001, 0x2, 0x10, 0x3, 0x800, 0x7, 0xa57, 0x0, 0x6, 0x8, 0x8, 0x3, 0x7fff, 0xa, 0x6, 0x2, 0x3, 0xff, 0x5, 0x4, 0x85, 0x5, 0x2, 0x48d9, 0xfffff001, 0xfeff, 0xffff8000, 0x1, 0x2, 0x5, 0xf6e8, 0x6, 0x0, 0x0, 0x0, 0x5, 0x81, 0x9, 0x8, 0x3, 0x0, 0x57a, 0x5, 0xbb, 0x6, 0x1, 0x8, 0x5, 0x4, 0x80, 0x7, 0xd, 0x4, 0x3383, 0x9, 0xff, 0xff, 0x9, 0x10000, 0xfff, 0x8001, 0x1, 0x81, 0xffffffff, 0x2, 0x1000, 0x2, 0x81, 0xff, 0x4, 0x1, 0x2800, 0x5, 0x6e33, 0x5, 0x7, 0x7, 0x81, 0x5, 0x31e2, 0xfff, 0x0, 0x8, 0x0, 0x62a7, 0xe, 0x1425, 0xfffffffb, 0x7, 0x200, 0x6, 0xa909, 0x2, 0x8, 0x5, 0xbca, 0x7, 0xffffffff, 0x0, 0x7, 0x291, 0x40000000, 0x800, 0x7, 0x0, 0xaf, 0x5, 0xbe, 0x9, 0x3ff, 0x6, 0x24, 0x7ff, 0x4, 0xef, 0x8, 0x6, 0x0, 0xfffffe00, 0x9, 0x9, 0xd, 0x3ff, 0x5, 0x401, 0x3d, 0x0, 0x2, 0x8, 0xf, 0xfffffffe, 0x9, 0x10001, 0x3ff, 0x80000000, 0x2, 0x7, 0x80000000, 0x5, 0x2, 0x4, 0x5, 0x5, 0x703, 0x1, 0xcf1, 0x4, 0x101, 0x5, 0x2, 0x5, 0x8, 0x6, 0x10000, 0x2, 0x0, 0x7, 0x6, 0xcb, 0x5, 0x2, 0x2, 0xe4e, 0xb, 0x5, 0x8, 0x1, 0x1, 0x0, 0x8, 0x8, 0xfffffff7, 0x7, 0x4, 0x4, 0x7, 0xffffffff, 0xffffff1f, 0x1, 0x0, 0x4, 0x17b, 0x8, 0x8, 0x0, 0x2d, 0x2, 0x3, 0x2, 0x8, 0x8, 0xc7ae, 0x9, 0x4af5, 0x7, 0x75c, 0x6, 0xfff, 0x10000, 0x5, 0x8, 0x8, 0xe06, 0xfffff800, 0x1, 0x7fffffff, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x0, 0xfff, 0x8, 0x8, {0x4, 0x1, 0x8, 0x1000, 0x3, 0x8d6}, {0x0, 0x2, 0x142, 0x9, 0x5, 0x3}, 0x5, 0xf, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xa00, 0x4, 0xfffffffb, {0x81, 0x2, 0xc5f, 0x40, 0x8, 0x4}, {0x1, 0x6, 0x8, 0x3, 0x400, 0x2}, 0xf2, 0x1, 0xf}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2e, 0x4, 0x6a6, 0xdb9, 0x5, 0x401, 0x4, 0xe1, 0x4, 0x6287ba16, 0x7, 0xfffffffc, 0x100000, 0x7, 0x0, 0x9, 0x1, 0x0, 0x2, 0xfe27, 0x5, 0x0, 0xb, 0xffffffff, 0x9, 0x8, 0x97c, 0x0, 0x0, 0x2, 0x9, 0x1, 0x5, 0x3, 0x61, 0x0, 0x78c, 0x0, 0x59d0, 0x200, 0xffffffff, 0xd4, 0x7ff, 0x8, 0x9b75, 0xfffffffa, 0xd, 0x1ff, 0xbf, 0x240, 0x349b, 0x1, 0x31a26b5b, 0x2, 0x21, 0x8, 0x2, 0x7146, 0x1, 0x0, 0xfff, 0x0, 0xa7, 0x64, 0x5, 0x52, 0xe66, 0x2, 0x7a, 0xff, 0xa68, 0x1, 0x2, 0x3, 0x3, 0x9, 0x4000000, 0x80000000, 0x5, 0xde7, 0x6, 0x9, 0x40, 0x3, 0x3, 0xffff8001, 0x3, 0x3, 0x8, 0x80, 0xfffffff9, 0x0, 0x0, 0x8, 0x0, 0xfff, 0x6, 0x6, 0x2, 0x10000, 0x0, 0xfe, 0x6, 0x6, 0x4, 0x100, 0xff, 0x9b3, 0x3ff, 0x0, 0x9, 0xf, 0x0, 0x9, 0x80000001, 0x7, 0x4, 0xffffffff, 0x8, 0x2, 0x3, 0x2, 0x0, 0x1, 0x1ff, 0x7fa6, 0xc, 0x6, 0xf, 0x9, 0x0, 0x8, 0x7b, 0x4, 0x83, 0x9, 0xfffffffb, 0x7ff, 0x6, 0xe, 0x1ff, 0x5, 0x5, 0x2, 0x7fffffff, 0x5, 0x405a, 0x10, 0x6, 0xff, 0xff, 0x0, 0xfffffff8, 0x30ef, 0x2, 0x81, 0x2, 0xfffffff8, 0x400, 0xfff, 0x1, 0x5, 0xc47, 0x40, 0x4, 0x5e, 0xffffff80, 0x5, 0x101, 0x3, 0x5, 0x3, 0x7f, 0x3, 0x3c5, 0x6, 0x10, 0x39c, 0x4, 0x3, 0x0, 0x31, 0x9, 0x0, 0x0, 0x800, 0x1, 0x39, 0xb, 0x7e, 0x81, 0x9, 0x7, 0x9, 0xa3, 0xf, 0x5, 0x8, 0x100, 0x4, 0x6, 0x4, 0x101, 0x4, 0x6, 0x0, 0x5, 0x200, 0x5, 0x7f, 0x2, 0x9, 0x87, 0x3, 0x8000, 0xfffffffb, 0xfa, 0x9, 0x799a1f75, 0x4, 0x9, 0xb, 0x5, 0x2, 0x6, 0xc, 0x7ecc, 0x10, 0x5, 0x8, 0x101, 0x1, 0xcbd, 0xee1f, 0xfffffff9, 0x0, 0x3, 0x6, 0x5, 0x6, 0x2, 0x85, 0x4, 0x8, 0x0, 0xfa27, 0x1, 0xa, 0x9, 0xe, 0xfffffba7, 0x9, 0x9, 0x5, 0x7fffffff, 0x80000001]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x3b, 0x8, 0x6, 0x8, 0x3, 0xd9, 0x29, 0x21, 0x8, 0x7, 0x9, 0xfffffe01, 0x5, 0x800, 0x8219f239, 0x5616, 0x0, 0x8, 0x7, 0xfffffffd, 0x7, 0x1, 0x6, 0xeac, 0x7, 0x7, 0x3, 0x5, 0x8, 0x3, 0x6, 0xdb3, 0x80000001, 0xffffffff, 0x80000000, 0x9, 0xe5, 0x42f5b7a7, 0x6, 0x80000001, 0x429, 0xe0, 0x8, 0xfffffffe, 0x80000001, 0xd424, 0xfa, 0x8, 0x0, 0x1, 0xad, 0x101, 0xffffffff, 0x2, 0x2, 0x1, 0x3, 0x6d, 0x9, 0x6, 0x9e539444, 0x3ff, 0x0, 0x7, 0x49b, 0x9, 0xffffffd3, 0x6e, 0x6, 0x10, 0xa, 0x5, 0x199ce870, 0x0, 0x3347, 0xda, 0x7, 0x8, 0x0, 0xffffb89e, 0x7, 0x1, 0x4, 0xc427, 0x8, 0x3, 0xfffffffc, 0x1c57, 0x6, 0x1, 0xdac, 0xc9a8, 0x1bd3, 0x5, 0xbb, 0x4, 0xc, 0x55, 0x72b6, 0x8, 0x4, 0x4, 0x1ff, 0xffffffff, 0x1, 0x8, 0x8, 0xffff, 0xd2, 0x7, 0xb37, 0x5, 0x3, 0x5, 0x2, 0xf312, 0x8, 0xffffffff, 0x6000000, 0x7, 0x1, 0x5, 0x6, 0x8000, 0x2, 0x3, 0x6, 0x135b, 0x1, 0x7, 0x2e, 0x9, 0x1, 0x8, 0x5, 0x3, 0x2, 0x8, 0xffff, 0x9, 0x1, 0x3, 0x6, 0x4, 0x800000, 0x0, 0x9, 0x4, 0xfffffbff, 0x1000, 0x9, 0x2, 0x1, 0x2, 0x10, 0x0, 0x7ff, 0x8, 0x8, 0x6, 0x1, 0x2, 0x6, 0x56, 0x8, 0x4, 0x4, 0x2, 0x4, 0x3, 0xba, 0x1, 0x8, 0x3, 0x9, 0x8, 0x8, 0x47aa974b, 0x7, 0x25ba, 0xfffff000, 0x0, 0x2b91, 0x2, 0x0, 0x1, 0x7, 0x2, 0x8000, 0x8000, 0x7, 0x0, 0xfff, 0x1000, 0x1, 0x8, 0x0, 0x7fff, 0x0, 0x3, 0xaee, 0x88d, 0x9, 0x8, 0x8, 0x1, 0x8, 0x9, 0x164, 0x9, 0x78, 0x2, 0x1, 0x6, 0x6, 0x321, 0x6, 0x1ff, 0x1, 0x6, 0x1, 0x0, 0x0, 0x1, 0x3, 0x3, 0x77f, 0x100, 0x5, 0x7, 0x0, 0x6, 0x7b79, 0x1, 0x1ff, 0x8001, 0xc, 0x1000, 0x6d9d, 0x7, 0x2, 0x5, 0x8000, 0xc, 0x3, 0x81, 0x7, 0x80000001, 0xb76, 0x5, 0x2, 0x37d, 0x1000, 0x7fffffff, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x1, 0x7, 0x6, {0x1, 0x0, 0x9, 0x80, 0x8, 0x7}, {0x6, 0x1, 0xe197, 0x2, 0x5, 0x4}, 0xffffff7f, 0x8, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}]]}, {0x69, 0x6, "844769e585fe4966c7fc34f13cdf1abbf996d0b339de49b0234f03ab5be1ea667b81774ccf1db36f010e41eb7313cdf740ebb945bf975746db2effb39d054f5a03a3196d9cef270842c9725fe036d93692a80e2b380113a5fa5b0ff8c8b1b1f840078bb0ba"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x140, 0x5, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x22313}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0xe2, 0x6, "f1cf3ae2337fa8ff01ead7486566100556fd1fe3b9a4dc75b2539305da6297e770fdc64b486b618804be84e604c2ee0cde7237c8dc66a329af786e888e51b7fe8d4ca101eb1c018c2f082d0628a1bdc154f041a99d42f3e97bb7a7bb9e605bf1c859649b06fb62b814a6a2475e024a31ad5e8cff54ec50bf85e1a34670df2e7b1348ef88c97d82a40ddfabacc37c9d6dda76414cc79e6e40648709450022baa0d91767d3e11e87974242b6c49b1fd46cf4b4961625560fd3a9f5a3ac73fab7fbacbc3d217bc4ac6df441f554fcdbe26ee49c3c19ede5ba40b333c4df4acb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x5c, 0x1, [@m_ife={0x58, 0xe, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x28, 0x6, "ae56ea2d5292183973208977b45ab0619876d9e070eef11f15b55925530e63b281890d20"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x39dc}}, 0x0) mount(&(0x7f0000000280)=@filename='./file3\x00', &(0x7f0000000300)='./file3\x00', &(0x7f00000000c0)='pstore\x00', 0xc001, &(0x7f0000000380)='acl') 1.166047823s ago: executing program 0 (id=2455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f0000002440)={0xa0, 0xffffffffffffffda, r4, {{0x0, 0x3, 0x3ff, 0x9, 0x3, 0x81, {0x1, 0x8, 0x2, 0x88f, 0xb551, 0x0, 0x81, 0xffff, 0xffffff80, 0x0, 0x7, 0x0, 0x0, 0x57, 0xffc00000}}, {0x0, 0xb}}}, 0xa0) 1.042815961s ago: executing program 3 (id=2456): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) (fail_nth: 3) 980.82859ms ago: executing program 3 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001980)={r0, 0x58, &(0x7f0000000600)}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x240080c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1b, @pix={0x100002, 0x0, 0x30314247, 0x0, 0x0, 0xffffffff, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000379534380240000800c00054000000000000000080c0004400000000000000003040002800400018014000000100001000000000000000000"], 0xe8}}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 123.825481ms ago: executing program 1 (id=2458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000}, 0x28) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x10480) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r3, &(0x7f0000000640)="e8b7", 0x2, 0x40c0, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 64.016275ms ago: executing program 3 (id=2459): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xf0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x4004) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000303a4000000000000000000000000000000000fe8000000000000000000000000000aa010390780000000060000000001c04400000000000000000000000000000000000000000000000000000000000000004"], 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="000129bd7000ffdbdf250600000008000700ac1414aa090001007379000000080002000500000014000600fe800000c3e9e2440e0000000000000000000000aa08000700e000000236000100006cb4a8332cd8cc4ce3e01f1ca537867a81f50599506f26073db2346183944ec8030df9e44a81eec7acb068b9925d14a63b000008000700ac1414bb080001e236b03e78b1e884"], 0x94}, 0x1, 0x0, 0x0, 0x8}, 0x0) 28.736229ms ago: executing program 0 (id=2460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x207f000) 0s ago: executing program 1 (id=2461): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f76, 0x0, 0x2, 0x5000}, 0x30, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) landlock_create_ruleset(&(0x7f0000000000)={0x9, 0x1, 0x1, 0x0, 0xd, 0x6}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) kernel console output (not intermixed with test programs): ][T13320] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 501.075571][T13320] RSP: 002b:00000000f544534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 501.075594][T13320] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54453f4 [ 501.075609][T13320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.075621][T13320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.075633][T13320] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 501.075646][T13320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.075674][T13320] [ 501.197840][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.197923][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.712668][T13333] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 501.712694][T13333] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.714016][T13333] vhci_hcd vhci_hcd.0: Device attached [ 501.758252][T13339] FAULT_INJECTION: forcing a failure. [ 501.758252][T13339] name failslab, interval 1, probability 0, space 0, times 0 [ 501.758294][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.2.2207 Not tainted syzkaller #0 PREEMPT(full) [ 501.758320][T13339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 501.758334][T13339] Call Trace: [ 501.758343][T13339] [ 501.758353][T13339] dump_stack_lvl+0x100/0x190 [ 501.758388][T13339] should_fail_ex.cold+0x5/0xa [ 501.758418][T13339] should_failslab+0xc2/0x120 [ 501.758451][T13339] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 501.758482][T13339] ? __d_alloc+0x35/0xa50 [ 501.758517][T13339] __d_alloc+0x35/0xa50 [ 501.758551][T13339] d_alloc_pseudo+0x1c/0xc0 [ 501.758577][T13339] alloc_file_pseudo+0x118/0x290 [ 501.758641][T13339] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 501.758679][T13339] ? _raw_spin_unlock+0x28/0x50 [ 501.758705][T13339] ? alloc_fd+0x471/0x7a0 [ 501.758743][T13339] __anon_inode_getfile+0xe8/0x280 [ 501.758772][T13339] __anon_inode_getfd+0x5c/0xe0 [ 501.758795][T13339] map_create+0x19e1/0x30d0 [ 501.758827][T13339] ? __pfx_map_create+0x10/0x10 [ 501.758850][T13339] ? lock_acquire+0x1d1/0x380 [ 501.758880][T13339] ? __might_fault+0xc5/0x140 [ 501.758903][T13339] ? __might_fault+0xc5/0x140 [ 501.758933][T13339] __sys_bpf+0x12a0/0x4a30 [ 501.758962][T13339] ? __pfx___sys_bpf+0x10/0x10 [ 501.758984][T13339] ? find_held_lock+0x2b/0x80 [ 501.759010][T13339] ? futex_wake+0x4ea/0x5e0 [ 501.759060][T13339] ? up_write+0x2dc/0x5b0 [ 501.759103][T13339] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 501.759134][T13339] ? xfd_validate_state+0x129/0x190 [ 501.759173][T13339] ? __ia32_sys_bpf+0xcc/0x170 [ 501.759200][T13339] __ia32_sys_bpf+0xcc/0x170 [ 501.759227][T13339] ? __do_fast_syscall_32+0xb3/0x8b0 [ 501.759257][T13339] __do_fast_syscall_32+0x13a/0x8b0 [ 501.759290][T13339] do_fast_syscall_32+0x32/0x70 [ 501.759321][T13339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.759346][T13339] RIP: 0023:0xf7f86fec [ 501.759370][T13339] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 501.759381][T13339] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 501.759405][T13339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 501.759421][T13339] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.759433][T13339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.759446][T13339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 501.759457][T13339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.759483][T13339] [ 501.894838][T13345] batman_adv: batadv0: Adding interface: syzkaller0 [ 501.894856][T13345] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.894885][T13345] batman_adv: batadv0: Interface activated: syzkaller0 [ 501.897058][T13343] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 501.906460][ T8125] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 501.916830][T13343] batman_adv: batadv0: Removing interface: syzkaller0 [ 501.972004][ T2341] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 502.021405][ T8125] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 502.132674][ T2341] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 502.134270][ T2341] usb 5-1: config 0 has no interfaces? [ 502.134301][ T2341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.191193][ T2341] usb 5-1: config 0 descriptor?? [ 502.480706][T13334] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 502.497917][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2206'. [ 502.510299][ T13] vhci_hcd vhci_hcd.0: stop threads [ 502.510443][ T13] vhci_hcd vhci_hcd.0: release socket [ 502.510616][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 502.668494][ T10] usb 5-1: USB disconnect, device number 127 [ 502.701680][T13355] 9p: Bad value for 'version' [ 503.042989][T13361] FAULT_INJECTION: forcing a failure. [ 503.042989][T13361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.043018][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.1.2215 Not tainted syzkaller #0 PREEMPT(full) [ 503.043039][T13361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.043050][T13361] Call Trace: [ 503.043057][T13361] [ 503.043064][T13361] dump_stack_lvl+0x100/0x190 [ 503.043093][T13361] should_fail_ex.cold+0x5/0xa [ 503.043125][T13361] _copy_from_user+0x2e/0xd0 [ 503.043153][T13361] video_usercopy+0x9e0/0x14c0 [ 503.043273][T13361] ? __pfx___video_do_ioctl+0x10/0x10 [ 503.043295][T13361] ? __pfx_video_usercopy+0x10/0x10 [ 503.043324][T13361] ? __fget_files+0x215/0x3d0 [ 503.043346][T13361] ? hook_file_ioctl_common+0x140/0x440 [ 503.043372][T13361] v4l2_ioctl+0x1bd/0x250 [ 503.043397][T13361] v4l2_compat_ioctl32+0x20f/0x2d0 [ 503.043435][T13361] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 503.043455][T13361] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 503.043480][T13361] __do_fast_syscall_32+0x13a/0x8b0 [ 503.043505][T13361] ? lockdep_hardirqs_on+0x7d/0x110 [ 503.043530][T13361] do_fast_syscall_32+0x32/0x70 [ 503.043554][T13361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.043579][T13361] RIP: 0023:0xf7f52fec [ 503.043601][T13361] Code: Unable to access opcode bytes at 0xf7f52fc2. [ 503.043609][T13361] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 503.043627][T13361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c058560f [ 503.043639][T13361] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.043650][T13361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.043662][T13361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 503.043673][T13361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.043696][T13361] [ 503.166464][T13363] FAULT_INJECTION: forcing a failure. [ 503.166464][T13363] name failslab, interval 1, probability 0, space 0, times 0 [ 503.166500][T13363] CPU: 1 UID: 0 PID: 13363 Comm: syz.1.2216 Not tainted syzkaller #0 PREEMPT(full) [ 503.166525][T13363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 503.166539][T13363] Call Trace: [ 503.166546][T13363] [ 503.166557][T13363] dump_stack_lvl+0x100/0x190 [ 503.166618][T13363] should_fail_ex.cold+0x5/0xa [ 503.166648][T13363] should_failslab+0xc2/0x120 [ 503.166680][T13363] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 503.166715][T13363] ? __alloc_skb+0x140/0x710 [ 503.166739][T13363] __alloc_skb+0x140/0x710 [ 503.166760][T13363] ? __alloc_skb+0x5b7/0x710 [ 503.166776][T13363] ? __pfx___alloc_skb+0x10/0x10 [ 503.166791][T13363] ? genl_rcv_msg+0x4be/0x800 [ 503.166817][T13363] netlink_ack+0x117/0xb80 [ 503.166851][T13363] netlink_rcv_skb+0x333/0x420 [ 503.166878][T13363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.166917][T13363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.166959][T13363] ? netlink_deliver_tap+0x1ae/0xcc0 [ 503.166993][T13363] genl_rcv+0x28/0x40 [ 503.167011][T13363] netlink_unicast+0x585/0x850 [ 503.167047][T13363] ? __pfx_netlink_unicast+0x10/0x10 [ 503.167085][T13363] netlink_sendmsg+0x8b0/0xda0 [ 503.167120][T13363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.167153][T13363] ? apparmor_socket_sendmsg+0x165/0x280 [ 503.167192][T13363] __sys_sendto+0x48b/0x4e0 [ 503.167221][T13363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.167252][T13363] ? __pfx___sys_sendto+0x10/0x10 [ 503.167292][T13363] ? lock_acquire+0x1d1/0x380 [ 503.167340][T13363] __ia32_compat_sys_socketcall+0x59a/0x770 [ 503.167372][T13363] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 503.167420][T13363] do_int80_emulation+0x166/0x650 [ 503.167451][T13363] asm_int80_emulation+0x1a/0x20 [ 503.167472][T13363] RIP: 0023:0xf71575ab [ 503.167490][T13363] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 503.167512][T13363] RSP: 002b:00000000f541534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 503.167537][T13363] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54153f4 [ 503.167550][T13363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.167562][T13363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.167574][T13363] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 503.167588][T13363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.167618][T13363] [ 503.261363][ T5856] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 503.402218][ T5856] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 503.403546][ T5856] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.405700][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 503.405721][ T5856] usb 8-1: Product: syz [ 503.405733][ T5856] usb 8-1: Manufacturer: syz [ 503.405745][ T5856] usb 8-1: SerialNumber: syz [ 503.619160][ T5856] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 503.640181][T13373] 9p: Bad value for 'version' [ 503.752043][ T7850] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 503.767353][T13379] block2mtd: error: cannot open device /" [ 503.937393][T13382] batman_adv: batadv0: Adding interface: syzkaller0 [ 503.937406][T13382] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.937425][T13382] batman_adv: batadv0: Interface activated: syzkaller0 [ 503.964188][T13381] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 503.983551][T13381] batman_adv: batadv0: Removing interface: syzkaller0 [ 504.008328][ C3] usblp0: nonzero write bulk status received: -71 [ 504.008608][ T2341] usb 8-1: USB disconnect, device number 5 [ 504.020877][ T2341] usblp0: removed [ 505.147410][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 507.103159][ T8125] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 507.605363][T13410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.622550][T13410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.625246][T13410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.627500][T13410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.628925][T13410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.732091][T13415] block2mtd: error: cannot open device /" [ 507.734488][T13417] batman_adv: batadv0: Adding interface: syzkaller0 [ 507.734505][T13417] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.734530][T13417] batman_adv: batadv0: Interface activated: syzkaller0 [ 507.736692][T13414] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 507.766879][T13414] batman_adv: batadv0: Removing interface: syzkaller0 [ 507.859899][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.953581][T13403] lo speed is unknown, defaulting to 1000 [ 508.084234][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.185806][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.242889][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.243033][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.243206][T13403] bridge_slave_0: entered allmulticast mode [ 508.244489][T13403] bridge_slave_0: entered promiscuous mode [ 508.248232][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.248328][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.248682][T13403] bridge_slave_1: entered allmulticast mode [ 508.250266][T13403] bridge_slave_1: entered promiscuous mode [ 508.313564][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.346505][T13403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.348983][T13403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.380107][T13403] team0: Port device team_slave_0 added [ 508.383137][T13403] team0: Port device team_slave_1 added [ 508.400168][T13403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.400180][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.400194][T13403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.401128][T13403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.401144][T13403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.401159][T13403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.455591][T13403] hsr_slave_0: entered promiscuous mode [ 508.456079][T13403] hsr_slave_1: entered promiscuous mode [ 508.456412][T13403] debugfs: 'hsr0' already exists in 'hsr' [ 508.456425][T13403] Cannot create hsr debugfs directory [ 508.588029][ T13] bridge_slave_1: left allmulticast mode [ 508.588061][ T13] bridge_slave_1: left promiscuous mode [ 508.590804][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.600472][ T13] bridge_slave_0: left allmulticast mode [ 508.600488][ T13] bridge_slave_0: left promiscuous mode [ 508.600599][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.937484][ T13] bond1 (unregistering): Released all slaves [ 508.966634][T13449] 9p: Bad value for 'version' [ 509.772147][ T5759] Bluetooth: hci4: command tx timeout [ 511.187593][T13468] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 511.194128][T12151] rtrs_client L2024: : CM error (CM event: address error, err: -ENODEV) [ 511.194213][T13468] rtrs_client L2644: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 511.292163][T13470] batman_adv: batadv0: Adding interface: syzkaller0 [ 511.292182][T13470] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.292216][T13470] batman_adv: batadv0: Interface activated: syzkaller0 [ 511.324735][T13469] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 511.356784][T13469] batman_adv: batadv0: Removing interface: syzkaller0 [ 511.409017][T13473] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2241'. [ 511.452156][T13473] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2241'. [ 511.640455][ T13] hsr_slave_0: left promiscuous mode [ 511.641798][ T13] hsr_slave_1: left promiscuous mode [ 511.642526][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.642579][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.646017][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.646033][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.659688][ T13] veth1_macvtap: left promiscuous mode [ 511.659808][ T13] veth0_macvtap: left promiscuous mode [ 511.660053][ T13] veth1_vlan: left promiscuous mode [ 511.660135][ T13] veth0_vlan: left promiscuous mode [ 511.851561][ T5759] Bluetooth: hci4: command tx timeout [ 511.882869][ T13] team0 (unregistering): Port device team_slave_1 removed [ 511.910977][ T13] team0 (unregistering): Port device team_slave_0 removed [ 512.057653][T13403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.060819][T13403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.067877][T13403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.070237][T13403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.082207][T13403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.085981][T13403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.087176][T13403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.097328][T13403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.186253][T13403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.198763][T13403] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.227168][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.227290][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.248246][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.248330][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.371611][T13498] 9p: Bad value for 'version' [ 512.458715][T13501] FAULT_INJECTION: forcing a failure. [ 512.458715][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 512.458756][T13501] CPU: 3 UID: 0 PID: 13501 Comm: syz.0.2246 Not tainted syzkaller #0 PREEMPT(full) [ 512.458780][T13501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.458792][T13501] Call Trace: [ 512.458799][T13501] [ 512.458808][T13501] dump_stack_lvl+0x100/0x190 [ 512.458839][T13501] should_fail_ex.cold+0x5/0xa [ 512.458868][T13501] should_failslab+0xc2/0x120 [ 512.458899][T13501] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 512.458925][T13501] ? find_held_lock+0x2b/0x80 [ 512.458950][T13501] ? sock_alloc_inode+0x26/0x2c0 [ 512.458977][T13501] ? __pfx_sock_alloc_inode+0x10/0x10 [ 512.459002][T13501] sock_alloc_inode+0x26/0x2c0 [ 512.459025][T13501] ? __pfx_sock_alloc_inode+0x10/0x10 [ 512.459047][T13501] alloc_inode+0x68/0x250 [ 512.459068][T13501] sock_alloc+0x44/0x280 [ 512.459089][T13501] ? security_socket_create+0x7f/0x250 [ 512.459121][T13501] __sock_create+0xc2/0x860 [ 512.459151][T13501] __sys_socket+0x14d/0x260 [ 512.459177][T13501] ? xfd_validate_state+0x129/0x190 [ 512.459207][T13501] ? __pfx___sys_socket+0x10/0x10 [ 512.459240][T13501] __ia32_sys_socket+0x72/0xb0 [ 512.459266][T13501] ? lockdep_hardirqs_on+0x7d/0x110 [ 512.459291][T13501] __do_fast_syscall_32+0x13a/0x8b0 [ 512.459322][T13501] do_fast_syscall_32+0x32/0x70 [ 512.459348][T13501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.459373][T13501] RIP: 0023:0xf709efec [ 512.459390][T13501] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 512.459408][T13501] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 512.459429][T13501] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000003 [ 512.459441][T13501] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.459453][T13501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.459465][T13501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.459477][T13501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.459502][T13501] [ 512.459513][T13501] socket: no more sockets [ 513.357833][T13514] FAULT_INJECTION: forcing a failure. [ 513.357833][T13514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.357942][T13514] CPU: 2 UID: 0 PID: 13514 Comm: syz.2.2249 Not tainted syzkaller #0 PREEMPT(full) [ 513.357977][T13514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 513.357987][T13514] Call Trace: [ 513.357994][T13514] [ 513.358000][T13514] dump_stack_lvl+0x100/0x190 [ 513.358041][T13514] should_fail_ex.cold+0x5/0xa [ 513.358079][T13514] _copy_to_user+0x32/0xd0 [ 513.358104][T13514] simple_read_from_buffer+0xcb/0x170 [ 513.358137][T13514] proc_fail_nth_read+0x1af/0x230 [ 513.358159][T13514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.358181][T13514] ? rw_verify_area+0xce/0x6d0 [ 513.358198][T13514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.358217][T13514] vfs_read+0x1e4/0xb40 [ 513.358237][T13514] ? lock_acquire+0x1d1/0x380 [ 513.358260][T13514] ? __fget_files+0x34/0x3d0 [ 513.358287][T13514] ? __pfx_vfs_read+0x10/0x10 [ 513.358304][T13514] ? find_held_lock+0x2b/0x80 [ 513.358323][T13514] ? __fget_files+0x215/0x3d0 [ 513.358346][T13514] ? __fget_files+0x21f/0x3d0 [ 513.358373][T13514] ksys_read+0x12a/0x250 [ 513.358392][T13514] ? __pfx_ksys_read+0x10/0x10 [ 513.358418][T13514] do_int80_emulation+0x166/0x650 [ 513.358444][T13514] asm_int80_emulation+0x1a/0x20 [ 513.358460][T13514] RIP: 0023:0xf71875ab [ 513.358474][T13514] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 513.358490][T13514] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 513.358507][T13514] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0 [ 513.358517][T13514] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 513.358528][T13514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.358564][T13514] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 513.358574][T13514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.358597][T13514] [ 513.807645][T13519] batman_adv: batadv0: Adding interface: syzkaller0 [ 513.807730][T13519] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.807980][T13519] batman_adv: batadv0: Interface activated: syzkaller0 [ 513.925786][ T5759] Bluetooth: hci4: command tx timeout [ 513.926036][T13515] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 513.978627][T13515] batman_adv: batadv0: Removing interface: syzkaller0 [ 514.288748][T13403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.315744][T13535] FAULT_INJECTION: forcing a failure. [ 514.315744][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 514.315776][T13535] CPU: 1 UID: 0 PID: 13535 Comm: syz.3.2255 Not tainted syzkaller #0 PREEMPT(full) [ 514.315797][T13535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.315809][T13535] Call Trace: [ 514.315816][T13535] [ 514.315824][T13535] dump_stack_lvl+0x100/0x190 [ 514.315853][T13535] should_fail_ex.cold+0x5/0xa [ 514.315876][T13535] should_failslab+0xc2/0x120 [ 514.315903][T13535] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 514.315926][T13535] ? find_held_lock+0x2b/0x80 [ 514.315948][T13535] ? sock_alloc_inode+0x26/0x2c0 [ 514.315975][T13535] ? __pfx_sock_alloc_inode+0x10/0x10 [ 514.316001][T13535] sock_alloc_inode+0x26/0x2c0 [ 514.316050][T13535] ? __pfx_sock_alloc_inode+0x10/0x10 [ 514.316074][T13535] alloc_inode+0x68/0x250 [ 514.316094][T13535] sock_alloc+0x44/0x280 [ 514.316113][T13535] ? security_socket_create+0x7f/0x250 [ 514.316142][T13535] __sock_create+0xc2/0x860 [ 514.316170][T13535] __sys_socket+0x14d/0x260 [ 514.316190][T13535] ? xfd_validate_state+0x129/0x190 [ 514.316217][T13535] ? __pfx___sys_socket+0x10/0x10 [ 514.316248][T13535] __ia32_sys_socket+0x72/0xb0 [ 514.316271][T13535] ? lockdep_hardirqs_on+0x7d/0x110 [ 514.316295][T13535] __do_fast_syscall_32+0x13a/0x8b0 [ 514.316325][T13535] do_fast_syscall_32+0x32/0x70 [ 514.316349][T13535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.316373][T13535] RIP: 0023:0xf7f95fec [ 514.316388][T13535] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 514.316407][T13535] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 514.316426][T13535] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000003 [ 514.316439][T13535] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.316450][T13535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.316461][T13535] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.316479][T13535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.316503][T13535] [ 514.316628][T13535] socket: no more sockets [ 514.340568][T13403] veth0_vlan: entered promiscuous mode [ 514.356873][T13403] veth1_vlan: entered promiscuous mode [ 514.395594][T13403] veth0_macvtap: entered promiscuous mode [ 514.400829][T13403] veth1_macvtap: entered promiscuous mode [ 514.417078][T13403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.435184][T13403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.459510][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 514.532875][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.532918][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.532946][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.532975][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.587004][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.587027][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.622790][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.622805][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.685781][T13543] FAULT_INJECTION: forcing a failure. [ 514.685781][T13543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.685804][T13543] CPU: 2 UID: 0 PID: 13543 Comm: syz.1.2226 Not tainted syzkaller #0 PREEMPT(full) [ 514.685819][T13543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.685827][T13543] Call Trace: [ 514.685833][T13543] [ 514.685839][T13543] dump_stack_lvl+0x100/0x190 [ 514.685860][T13543] should_fail_ex.cold+0x5/0xa [ 514.685876][T13543] _copy_from_user+0x2e/0xd0 [ 514.685894][T13543] __ia32_compat_sys_socketcall+0x187/0x770 [ 514.685912][T13543] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 514.685938][T13543] do_int80_emulation+0x166/0x650 [ 514.685958][T13543] asm_int80_emulation+0x1a/0x20 [ 514.685971][T13543] RIP: 0023:0xf71375ab [ 514.685981][T13543] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 514.685994][T13543] RSP: 002b:00000000f53f535c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 514.686007][T13543] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53f540c [ 514.686014][T13543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.686021][T13543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.686029][T13543] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 514.686040][T13543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.686056][T13543] [ 515.112182][ T7850] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 515.230872][T13556] block2mtd: error: cannot open device /" [ 515.283884][ T7850] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 515.285038][ T7850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 515.285061][ T7850] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 515.285081][ T7850] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.299959][ T7850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 515.299984][ T7850] usb 6-1: Product: syz [ 515.299998][ T7850] usb 6-1: Manufacturer: syz [ 515.300012][ T7850] usb 6-1: SerialNumber: syz [ 515.450412][T13559] 9p: Bad value for 'version' [ 515.594333][ T7850] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 515.655931][ T7850] usb 6-1: USB disconnect, device number 107 [ 515.663734][ T7850] usblp0: removed [ 516.005616][ T5759] Bluetooth: hci4: command tx timeout [ 516.466415][T13542] Console: switching to colour dummy device 80x25 [ 517.594592][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 517.670943][T13548] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 517.705852][T13548] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 517.706128][T13548] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 517.706609][T13548] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 517.708250][T13548] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 517.769510][T13548] pci 0000:00:01.0: Adding to iommu group 1 [ 517.780319][T13548] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 517.780341][T13548] pci 0000:00:01.0: vgaarb: bridge control possible [ 517.780355][T13548] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 517.800621][T13548] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 517.815908][T13548] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 517.829209][T13548] pci 0000:00:1d.0: Adding to iommu group 7 [ 517.849909][T13548] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 517.850067][T13548] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 517.850259][T13548] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 517.869002][T13548] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 517.889995][T13548] [drm] Found bochs VGA, ID 0xb0c5. [ 517.890016][T13548] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 517.899614][T13548] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 518.044726][T13548] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 122516 usecs [ 518.198577][T13575] block2mtd: error: cannot open device /" [ 518.252792][T13579] FAULT_INJECTION: forcing a failure. [ 518.252792][T13579] name failslab, interval 1, probability 0, space 0, times 0 [ 518.252886][T13579] CPU: 3 UID: 0 PID: 13579 Comm: syz.1.2266 Not tainted syzkaller #0 PREEMPT(full) [ 518.252913][T13579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 518.252927][T13579] Call Trace: [ 518.252997][T13579] [ 518.253008][T13579] dump_stack_lvl+0x100/0x190 [ 518.253136][T13579] should_fail_ex.cold+0x5/0xa [ 518.253204][T13579] should_failslab+0xc2/0x120 [ 518.253285][T13579] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 518.253321][T13579] ? __alloc_skb+0x140/0x710 [ 518.253374][T13579] __alloc_skb+0x140/0x710 [ 518.253393][T13579] ? __alloc_skb+0x5b7/0x710 [ 518.253413][T13579] ? __pfx___alloc_skb+0x10/0x10 [ 518.253431][T13579] ? genl_rcv_msg+0x4be/0x800 [ 518.253483][T13579] netlink_ack+0x117/0xb80 [ 518.253523][T13579] netlink_rcv_skb+0x333/0x420 [ 518.253553][T13579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.253577][T13579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.253618][T13579] ? netlink_deliver_tap+0x1ae/0xcc0 [ 518.253652][T13579] genl_rcv+0x28/0x40 [ 518.253670][T13579] netlink_unicast+0x585/0x850 [ 518.253705][T13579] ? __pfx_netlink_unicast+0x10/0x10 [ 518.253743][T13579] netlink_sendmsg+0x8b0/0xda0 [ 518.253778][T13579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.253811][T13579] ? apparmor_socket_sendmsg+0x165/0x280 [ 518.253892][T13579] __sys_sendto+0x48b/0x4e0 [ 518.253923][T13579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.253955][T13579] ? __pfx___sys_sendto+0x10/0x10 [ 518.253996][T13579] ? lock_acquire+0x1d1/0x380 [ 518.254336][T13579] __ia32_compat_sys_socketcall+0x59a/0x770 [ 518.254372][T13579] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 518.254420][T13579] do_int80_emulation+0x166/0x650 [ 518.254594][T13579] asm_int80_emulation+0x1a/0x20 [ 518.254617][T13579] RIP: 0023:0xf71375ab [ 518.254635][T13579] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 518.254658][T13579] RSP: 002b:00000000f53f534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 518.254730][T13579] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53f53f4 [ 518.254744][T13579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.254759][T13579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.254773][T13579] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 518.254787][T13579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.254840][T13579] [ 518.388125][T13548] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 518.420560][T13548] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 518.420850][T13548] uhci_hcd 0000:00:1d.0: detected 2 ports [ 518.512414][T13548] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 518.519134][T13548] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 518.522769][T13548] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 518.522795][T13548] usb usb1: Product: UHCI Host Controller [ 518.522810][T13548] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 518.522825][T13548] usb usb1: SerialNumber: 0000:00:1d.0 [ 518.565393][T13548] hub 1-0:1.0: USB hub found [ 518.570440][T13548] hub 1-0:1.0: 2 ports detected [ 518.596990][T12358] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 518.984573][T12358] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 518.986596][T12358] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.003993][T12358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 519.004017][T12358] usb 7-1: Product: syz [ 519.004029][T12358] usb 7-1: Manufacturer: syz [ 519.004041][T12358] usb 7-1: SerialNumber: syz [ 519.008642][T13595] block2mtd: error: cannot open device /" [ 519.115934][T13597] 9p: Bad value for 'version' [ 519.272853][T12358] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 519.712741][ C0] usblp0: nonzero write bulk status received: -71 [ 519.713022][ T8125] usb 7-1: USB disconnect, device number 111 [ 519.725881][T13577] usblp0: removed [ 520.054546][ T43] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 520.081832][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 520.232061][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 520.238623][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 520.239544][ T43] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 520.242771][ T43] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 520.243128][ T43] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 520.243936][ T43] usb 6-1: config 14 has no interface number 0 [ 520.243997][ T43] usb 6-1: config 14 has no interface number 1 [ 520.244810][ T43] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 520.245146][ T43] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 520.245461][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 520.246575][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 520.247237][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 520.247862][ T43] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.248977][ T43] usb 6-1: config 14 interface 57 has no altsetting 0 [ 520.249029][ T43] usb 6-1: config 14 interface 228 has no altsetting 0 [ 520.257053][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.257102][ T43] usb 6-1: Product: syz [ 520.257276][ T43] usb 6-1: Manufacturer: syz [ 520.257454][ T43] usb 6-1: SerialNumber: syz [ 520.353718][ T8125] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 520.560272][ T8125] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 520.571280][ T8125] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.605172][ T8125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 520.605917][ T8125] usb 5-1: Product: syz [ 520.606716][ T8125] usb 5-1: Manufacturer: syz [ 520.607412][ T8125] usb 5-1: SerialNumber: syz [ 520.769258][ T43] legousbtower 6-1:14.57: interrupt endpoints not found [ 521.003834][ T8125] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 521.176217][ T43] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 521.248661][ T43] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 521.250936][ C2] usblp0: nonzero write bulk status received: -71 [ 521.252216][T12358] usb 5-1: USB disconnect, device number 2 [ 521.262191][T12358] usblp0: removed [ 521.340433][T13629] block2mtd: error: cannot open device /" [ 521.903390][T13634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 521.903422][T13634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 521.904726][T13634] vhci_hcd vhci_hcd.0: Device attached [ 522.081502][T13004] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 522.141354][T13004] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 522.141431][T12358] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 522.302063][T12358] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 522.302617][T12358] usb 8-1: config 0 has no interfaces? [ 522.302645][T12358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.305205][T12358] usb 8-1: config 0 descriptor?? [ 522.508422][T13635] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 522.511327][T13471] vhci_hcd vhci_hcd.3: stop threads [ 522.511345][T13471] vhci_hcd vhci_hcd.3: release socket [ 522.511429][T13471] vhci_hcd vhci_hcd.3: disconnect device [ 522.523904][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 522.567285][ T6146] usb 8-1: USB disconnect, device number 6 [ 522.827781][ T43] usb 6-1: USB disconnect, device number 108 [ 522.833712][ T43] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 522.866319][T13642] 9p: Bad value for 'version' [ 523.032497][ T5759] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 523.032552][ T5759] Bluetooth: hci4: Injecting HCI hardware error event [ 523.056341][T13410] Bluetooth: hci4: hardware error 0x00 [ 523.060118][T13646] 9p: Bad value for 'version' [ 524.551540][ T7850] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 524.554153][T13661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 524.554185][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.556678][T13661] vhci_hcd vhci_hcd.0: Device attached [ 524.703813][ T7850] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 524.705984][ T7850] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.709990][ T7850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 524.710014][ T7850] usb 8-1: Product: syz [ 524.710030][ T7850] usb 8-1: Manufacturer: syz [ 524.710134][ T7850] usb 8-1: SerialNumber: syz [ 524.741335][ T43] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 524.801366][ T43] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 524.821394][ T2341] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 524.923781][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 524.973584][ T2341] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 524.975128][ T2341] usb 5-1: config 0 has no interfaces? [ 524.975166][ T2341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.982285][ T2341] usb 5-1: config 0 descriptor?? [ 525.216501][T13662] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 525.217117][T13471] vhci_hcd vhci_hcd.0: stop threads [ 525.217130][T13471] vhci_hcd vhci_hcd.0: release socket [ 525.217159][T13471] vhci_hcd vhci_hcd.0: disconnect device [ 525.217759][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 525.304611][ T62] usb 5-1: USB disconnect, device number 3 [ 525.477905][ T7850] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 525.822857][ T7850] usb 8-1: USB disconnect, device number 7 [ 525.828652][ T7850] usblp0: removed [ 525.831363][T13410] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 525.916502][T13672] block2mtd: error: cannot open device /" [ 525.923271][T13674] 9p: Bad value for 'version' [ 526.371994][ T7850] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 526.544383][ T7850] usb 8-1: Using ep0 maxpacket: 32 [ 526.583164][ T7850] usb 8-1: unable to get BOS descriptor or descriptor too short [ 526.583207][ T7850] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 526.618577][ T7850] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 526.618603][ T7850] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 526.618619][ T7850] usb 8-1: config 14 has no interface number 0 [ 526.618632][ T7850] usb 8-1: config 14 has no interface number 1 [ 526.618677][ T7850] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 526.618696][ T7850] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 526.618715][ T7850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 526.618735][ T7850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 526.618755][ T7850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 526.618778][ T7850] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.618798][ T7850] usb 8-1: config 14 interface 57 has no altsetting 0 [ 526.618814][ T7850] usb 8-1: config 14 interface 228 has no altsetting 0 [ 526.694366][ T7850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.694393][ T7850] usb 8-1: Product: syz [ 526.694406][ T7850] usb 8-1: Manufacturer: syz [ 526.694417][ T7850] usb 8-1: SerialNumber: syz [ 527.000643][T13685] batman_adv: batadv0: Adding interface: syzkaller0 [ 527.000661][T13685] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.000684][T13685] batman_adv: batadv0: Interface activated: syzkaller0 [ 527.055892][T13684] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 527.130064][T13684] batman_adv: batadv0: Removing interface: syzkaller0 [ 527.149670][T13690] FAULT_INJECTION: forcing a failure. [ 527.149670][T13690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.149701][T13690] CPU: 0 UID: 0 PID: 13690 Comm: syz.2.2298 Not tainted syzkaller #0 PREEMPT(full) [ 527.149722][T13690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.149734][T13690] Call Trace: [ 527.149741][T13690] [ 527.149749][T13690] dump_stack_lvl+0x100/0x190 [ 527.149779][T13690] should_fail_ex.cold+0x5/0xa [ 527.149804][T13690] _copy_from_user+0x2e/0xd0 [ 527.149867][T13690] userfaultfd_register+0x18c/0xe40 [ 527.149938][T13690] ? __pfx_userfaultfd_register+0x10/0x10 [ 527.149964][T13690] ? kasan_quarantine_put+0x104/0x240 [ 527.150001][T13690] ? tomoyo_path_number_perm+0x188/0x580 [ 527.150024][T13690] userfaultfd_ioctl+0x2e6e/0x61d0 [ 527.150048][T13690] ? get_pid_task+0x106/0x250 [ 527.150081][T13690] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 527.150108][T13690] ? do_vfs_ioctl+0x226/0x13e0 [ 527.150129][T13690] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.150155][T13690] ? __fget_files+0x34/0x3d0 [ 527.150198][T13690] ? find_held_lock+0x2b/0x80 [ 527.150220][T13690] ? __fget_files+0x215/0x3d0 [ 527.150240][T13690] ? hook_file_ioctl_common+0x140/0x440 [ 527.150264][T13690] ? __fget_files+0x21f/0x3d0 [ 527.150286][T13690] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 527.150305][T13690] ? compat_ptr_ioctl+0x6e/0xa0 [ 527.150323][T13690] compat_ptr_ioctl+0x6e/0xa0 [ 527.150341][T13690] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 527.150359][T13690] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 527.150378][T13690] __do_fast_syscall_32+0x13a/0x8b0 [ 527.150401][T13690] ? lockdep_hardirqs_on+0x7d/0x110 [ 527.150424][T13690] do_fast_syscall_32+0x32/0x70 [ 527.150447][T13690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.150493][T13690] RIP: 0023:0xf7f86fec [ 527.150515][T13690] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 527.150523][T13690] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 527.150541][T13690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa00 [ 527.150553][T13690] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.150564][T13690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.150575][T13690] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.150586][T13690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.150608][T13690] [ 527.165388][ T7850] legousbtower 8-1:14.57: interrupt endpoints not found [ 527.197541][T13693] FAULT_INJECTION: forcing a failure. [ 527.197541][T13693] name failslab, interval 1, probability 0, space 0, times 0 [ 527.197577][T13693] CPU: 1 UID: 0 PID: 13693 Comm: syz.2.2300 Not tainted syzkaller #0 PREEMPT(full) [ 527.197598][T13693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.197609][T13693] Call Trace: [ 527.197616][T13693] [ 527.197624][T13693] dump_stack_lvl+0x100/0x190 [ 527.197655][T13693] should_fail_ex.cold+0x5/0xa [ 527.197680][T13693] should_failslab+0xc2/0x120 [ 527.197705][T13693] __kmalloc_cache_noprof+0x91/0x6d0 [ 527.197725][T13693] ? __pfx___mutex_lock+0x10/0x10 [ 527.197795][T13693] ? ceph_get_tree+0x188/0x1fd0 [ 527.197829][T13693] ceph_get_tree+0x188/0x1fd0 [ 527.197855][T13693] ? bpf_lsm_capable+0x9/0x10 [ 527.197879][T13693] ? security_capable+0x80/0x260 [ 527.197909][T13693] vfs_get_tree+0x92/0x320 [ 527.197928][T13693] vfs_cmd_create+0xd7/0x2a0 [ 527.197969][T13693] __do_sys_fsconfig+0x55a/0xcb0 [ 527.198008][T13693] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 527.198027][T13693] ? xfd_validate_state+0x129/0x190 [ 527.198070][T13693] __do_fast_syscall_32+0x13a/0x8b0 [ 527.198099][T13693] do_fast_syscall_32+0x32/0x70 [ 527.198122][T13693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.198145][T13693] RIP: 0023:0xf7f86fec [ 527.198166][T13693] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 527.198175][T13693] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 527.198194][T13693] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 527.198207][T13693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.198218][T13693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.198228][T13693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.198239][T13693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.198264][T13693] [ 527.205313][T13693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2300'. [ 527.264162][T13004] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 527.362934][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 527.438214][T13703] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 527.438244][T13703] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 527.439963][T13703] vhci_hcd vhci_hcd.0: Device attached [ 527.565933][ T7850] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 527.611431][T12358] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 527.681484][T12358] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 527.681644][ T62] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 527.707933][T13711] block2mtd: error: cannot open device /" [ 527.832809][ T62] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 527.833332][ T62] usb 7-1: config 0 has no interfaces? [ 527.833361][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.836387][ T62] usb 7-1: config 0 descriptor?? [ 527.850248][ T7850] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 528.042497][T13706] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 528.042925][T13471] vhci_hcd vhci_hcd.2: stop threads [ 528.042944][T13471] vhci_hcd vhci_hcd.2: release socket [ 528.043085][T13471] vhci_hcd vhci_hcd.2: disconnect device [ 528.044416][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 528.146217][ T62] usb 7-1: USB disconnect, device number 112 [ 528.543626][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'. [ 529.344240][ T62] usb 8-1: USB disconnect, device number 8 [ 529.349750][ T62] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 529.981430][ T43] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 530.314833][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 530.315593][T13744] block2mtd: error: cannot open device /" [ 530.621476][ T5856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 531.291425][ T5856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 531.301833][ T5856] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.319347][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 531.319370][ T5856] usb 5-1: Product: syz [ 531.319379][ T5856] usb 5-1: Manufacturer: syz [ 531.319390][ T5856] usb 5-1: SerialNumber: syz [ 531.452006][ T7850] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 531.604396][ T7850] usb 7-1: Using ep0 maxpacket: 32 [ 531.606953][ T7850] usb 7-1: unable to get BOS descriptor or descriptor too short [ 531.606994][ T7850] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 531.607894][ T7850] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 531.607915][ T7850] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 531.607932][ T7850] usb 7-1: config 14 has no interface number 0 [ 531.607946][ T7850] usb 7-1: config 14 has no interface number 1 [ 531.607997][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 531.608019][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 531.608043][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 531.608065][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 531.608089][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 531.608115][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.608138][ T7850] usb 7-1: config 14 interface 57 has no altsetting 0 [ 531.608154][ T7850] usb 7-1: config 14 interface 228 has no altsetting 0 [ 531.610270][ T7850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.610290][ T7850] usb 7-1: Product: syz [ 531.610303][ T7850] usb 7-1: Manufacturer: syz [ 531.610317][ T7850] usb 7-1: SerialNumber: syz [ 531.677984][T13760] FAULT_INJECTION: forcing a failure. [ 531.677984][T13760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.678015][T13760] CPU: 3 UID: 0 PID: 13760 Comm: syz.1.2319 Not tainted syzkaller #0 PREEMPT(full) [ 531.678053][T13760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.678064][T13760] Call Trace: [ 531.678073][T13760] [ 531.678081][T13760] dump_stack_lvl+0x100/0x190 [ 531.678114][T13760] should_fail_ex.cold+0x5/0xa [ 531.678139][T13760] _copy_from_user+0x2e/0xd0 [ 531.678170][T13760] kvm_vm_ioctl+0xce3/0x4170 [ 531.678239][T13760] ? tomoyo_path_number_perm+0x46d/0x580 [ 531.678260][T13760] ? stack_trace_save+0x8e/0xc0 [ 531.678308][T13760] ? __pfx_stack_trace_save+0x10/0x10 [ 531.678360][T13760] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 531.678380][T13760] ? __lock_acquire+0x5c0/0x1f40 [ 531.678410][T13760] ? tomoyo_path_number_perm+0x46d/0x580 [ 531.678432][T13760] ? kasan_save_stack+0x3f/0x50 [ 531.678480][T13760] ? kasan_save_stack+0x30/0x50 [ 531.678502][T13760] ? kasan_save_track+0x14/0x30 [ 531.678526][T13760] ? kasan_save_free_info+0x3b/0x70 [ 531.678544][T13760] ? __kasan_slab_free+0x5f/0x80 [ 531.678569][T13760] ? kfree+0x22b/0x6d0 [ 531.678588][T13760] ? tomoyo_path_number_perm+0x46d/0x580 [ 531.678606][T13760] ? security_file_ioctl_compat+0xd3/0x230 [ 531.678628][T13760] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 531.678650][T13760] ? __do_fast_syscall_32+0x13a/0x8b0 [ 531.678674][T13760] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 531.678725][T13760] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 531.678776][T13760] ? kasan_quarantine_put+0x104/0x240 [ 531.678802][T13760] ? lockdep_hardirqs_on+0x7d/0x110 [ 531.678827][T13760] ? find_held_lock+0x2b/0x80 [ 531.678848][T13760] ? tomoyo_path_number_perm+0x28f/0x580 [ 531.678869][T13760] ? tomoyo_path_number_perm+0x28f/0x580 [ 531.678894][T13760] ? tomoyo_path_number_perm+0x188/0x580 [ 531.678915][T13760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.678938][T13760] ? get_pid_task+0x106/0x250 [ 531.678965][T13760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.679014][T13760] ? do_vfs_ioctl+0x226/0x13e0 [ 531.679037][T13760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 531.679060][T13760] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 531.679081][T13760] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 531.679100][T13760] ? __fget_files+0x34/0x3d0 [ 531.679125][T13760] ? find_held_lock+0x2b/0x80 [ 531.679145][T13760] ? __fget_files+0x215/0x3d0 [ 531.679168][T13760] ? hook_file_ioctl_common+0x140/0x440 [ 531.679200][T13760] ? __fget_files+0x21f/0x3d0 [ 531.679229][T13760] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 531.679250][T13760] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 531.679275][T13760] __do_fast_syscall_32+0x13a/0x8b0 [ 531.679300][T13760] ? lockdep_hardirqs_on+0x7d/0x110 [ 531.679323][T13760] do_fast_syscall_32+0x32/0x70 [ 531.679347][T13760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.679370][T13760] RIP: 0023:0xf7f36fec [ 531.679392][T13760] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 531.679400][T13760] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 531.679420][T13760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008ae6a [ 531.679431][T13760] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.679442][T13760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.679454][T13760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 531.679464][T13760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.679488][T13760] [ 531.720556][ T5856] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 531.981300][ C2] usblp0: nonzero write bulk status received: -71 [ 531.982701][ T43] usb 5-1: USB disconnect, device number 4 [ 531.998638][ T43] usblp0: removed [ 532.027806][ T7850] legousbtower 7-1:14.57: interrupt endpoints not found [ 532.083923][T13766] FAULT_INJECTION: forcing a failure. [ 532.083923][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.084013][T13766] CPU: 3 UID: 0 PID: 13766 Comm: syz.1.2321 Not tainted syzkaller #0 PREEMPT(full) [ 532.084035][T13766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.084046][T13766] Call Trace: [ 532.084053][T13766] [ 532.084061][T13766] dump_stack_lvl+0x100/0x190 [ 532.084090][T13766] should_fail_ex.cold+0x5/0xa [ 532.084112][T13766] _copy_from_user+0x2e/0xd0 [ 532.084155][T13766] video_usercopy+0x9e0/0x14c0 [ 532.084243][T13766] ? __pfx___video_do_ioctl+0x10/0x10 [ 532.084264][T13766] ? __pfx_video_usercopy+0x10/0x10 [ 532.084292][T13766] ? __fget_files+0x215/0x3d0 [ 532.084314][T13766] ? hook_file_ioctl_common+0x140/0x440 [ 532.084341][T13766] v4l2_ioctl+0x1bd/0x250 [ 532.084363][T13766] v4l2_compat_ioctl32+0x20f/0x2d0 [ 532.084396][T13766] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 532.084411][T13766] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 532.084431][T13766] __do_fast_syscall_32+0x13a/0x8b0 [ 532.084451][T13766] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.084471][T13766] do_fast_syscall_32+0x32/0x70 [ 532.084490][T13766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.084509][T13766] RIP: 0023:0xf7f36fec [ 532.084528][T13766] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 532.084535][T13766] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 532.084550][T13766] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5639 [ 532.084560][T13766] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.084569][T13766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.084577][T13766] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.084586][T13766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.084605][T13766] [ 532.432723][ T7850] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 532.434672][ T7850] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 532.616976][T13778] block2mtd: error: cannot open device /" [ 532.748661][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 532.801423][T12358] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 533.153651][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'. [ 533.239126][ T7850] usb 7-1: USB disconnect, device number 113 [ 533.342016][ T7850] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 533.552072][T13790] syz.3.2330 (13790): drop_caches: 2 [ 533.692171][T13794] FAULT_INJECTION: forcing a failure. [ 533.692171][T13794] name failslab, interval 1, probability 0, space 0, times 0 [ 533.692205][T13794] CPU: 0 UID: 0 PID: 13794 Comm: syz.3.2332 Not tainted syzkaller #0 PREEMPT(full) [ 533.692226][T13794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.692237][T13794] Call Trace: [ 533.692244][T13794] [ 533.692252][T13794] dump_stack_lvl+0x100/0x190 [ 533.692286][T13794] should_fail_ex.cold+0x5/0xa [ 533.692313][T13794] should_failslab+0xc2/0x120 [ 533.692336][T13794] __kmalloc_cache_noprof+0x91/0x6d0 [ 533.692351][T13794] ? fcloop_create_local_port+0xd1/0x5d0 [ 533.692428][T13794] fcloop_create_local_port+0xd1/0x5d0 [ 533.692457][T13794] ? __pfx_fcloop_create_local_port+0x10/0x10 [ 533.692490][T13794] ? find_held_lock+0x2b/0x80 [ 533.692511][T13794] ? sysfs_file_kobj+0xe4/0x290 [ 533.692561][T13794] ? sysfs_file_kobj+0xe4/0x290 [ 533.692584][T13794] ? __pfx_fcloop_create_local_port+0x10/0x10 [ 533.692609][T13794] dev_attr_store+0x58/0x80 [ 533.692680][T13794] ? __pfx_dev_attr_store+0x10/0x10 [ 533.692693][T13794] sysfs_kf_write+0xf2/0x150 [ 533.692709][T13794] kernfs_fop_write_iter+0x3e0/0x5f0 [ 533.692721][T13794] ? __pfx_sysfs_kf_write+0x10/0x10 [ 533.692737][T13794] vfs_write+0x6af/0x1050 [ 533.692752][T13794] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 533.692767][T13794] ? __pfx_vfs_write+0x10/0x10 [ 533.692780][T13794] ? find_held_lock+0x2b/0x80 [ 533.692804][T13794] ksys_write+0x12a/0x250 [ 533.692818][T13794] ? __pfx_ksys_write+0x10/0x10 [ 533.692832][T13794] ? ksys_write+0x1ac/0x250 [ 533.692846][T13794] ? __pfx_ksys_write+0x10/0x10 [ 533.692864][T13794] __do_fast_syscall_32+0x13a/0x8b0 [ 533.692881][T13794] ? lockdep_hardirqs_on+0x7d/0x110 [ 533.692897][T13794] do_fast_syscall_32+0x32/0x70 [ 533.692914][T13794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.692930][T13794] RIP: 0023:0xf7f95fec [ 533.692945][T13794] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 533.692951][T13794] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 533.692967][T13794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 533.692978][T13794] RDX: 000000000000005b RSI: 0000000000000000 RDI: 0000000000000000 [ 533.692988][T13794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.692997][T13794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.693012][T13794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.693037][T13794] [ 533.782498][T13798] FAULT_INJECTION: forcing a failure. [ 533.782498][T13798] name failslab, interval 1, probability 0, space 0, times 0 [ 533.782527][T13798] CPU: 1 UID: 0 PID: 13798 Comm: syz.1.2333 Not tainted syzkaller #0 PREEMPT(full) [ 533.782548][T13798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.782558][T13798] Call Trace: [ 533.782570][T13798] [ 533.782577][T13798] dump_stack_lvl+0x100/0x190 [ 533.782606][T13798] should_fail_ex.cold+0x5/0xa [ 533.782628][T13798] should_failslab+0xc2/0x120 [ 533.782655][T13798] __kmalloc_cache_noprof+0x91/0x6d0 [ 533.782676][T13798] ? ceph_create_client+0x68/0x370 [ 533.782721][T13798] ceph_create_client+0x68/0x370 [ 533.782751][T13798] ceph_get_tree+0x1a4/0x1fd0 [ 533.782778][T13798] ? bpf_lsm_capable+0x9/0x10 [ 533.782796][T13798] ? security_capable+0x80/0x260 [ 533.782824][T13798] vfs_get_tree+0x92/0x320 [ 533.782843][T13798] vfs_cmd_create+0xd7/0x2a0 [ 533.782863][T13798] __do_sys_fsconfig+0x55a/0xcb0 [ 533.782887][T13798] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 533.782907][T13798] ? xfd_validate_state+0x129/0x190 [ 533.782948][T13798] __do_fast_syscall_32+0x13a/0x8b0 [ 533.782977][T13798] do_fast_syscall_32+0x32/0x70 [ 533.783001][T13798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.783023][T13798] RIP: 0023:0xf7f36fec [ 533.783045][T13798] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 533.783054][T13798] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 533.783073][T13798] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 533.783087][T13798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.783099][T13798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.783109][T13798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.783121][T13798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.783146][T13798] [ 533.788737][T13798] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2333'. [ 533.866786][T13806] FAULT_INJECTION: forcing a failure. [ 533.866786][T13806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.866813][T13806] CPU: 0 UID: 0 PID: 13806 Comm: syz.2.2335 Not tainted syzkaller #0 PREEMPT(full) [ 533.866833][T13806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.866844][T13806] Call Trace: [ 533.866851][T13806] [ 533.866859][T13806] dump_stack_lvl+0x100/0x190 [ 533.866888][T13806] should_fail_ex.cold+0x5/0xa [ 533.866913][T13806] _copy_to_user+0x32/0xd0 [ 533.866941][T13806] simple_read_from_buffer+0xcb/0x170 [ 533.866966][T13806] proc_fail_nth_read+0x1af/0x230 [ 533.866998][T13806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.867022][T13806] ? rw_verify_area+0xce/0x6d0 [ 533.867042][T13806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.867065][T13806] vfs_read+0x1e4/0xb40 [ 533.867086][T13806] ? lock_acquire+0x1d1/0x380 [ 533.867112][T13806] ? __fget_files+0x34/0x3d0 [ 533.867135][T13806] ? __pfx_vfs_read+0x10/0x10 [ 533.867154][T13806] ? find_held_lock+0x2b/0x80 [ 533.867180][T13806] ? __fget_files+0x215/0x3d0 [ 533.867208][T13806] ? __fget_files+0x21f/0x3d0 [ 533.867237][T13806] ksys_read+0x12a/0x250 [ 533.867259][T13806] ? __pfx_ksys_read+0x10/0x10 [ 533.867287][T13806] do_int80_emulation+0x166/0x650 [ 533.867315][T13806] asm_int80_emulation+0x1a/0x20 [ 533.867334][T13806] RIP: 0023:0xf71875ab [ 533.867349][T13806] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 533.867367][T13806] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 533.867386][T13806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54465d0 [ 533.867397][T13806] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 533.867408][T13806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.867419][T13806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.867429][T13806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.867452][T13806] [ 534.255554][T13819] block2mtd: error: cannot open device /" [ 534.571700][ T43] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 534.731311][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 534.732317][ T43] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 534.733510][ T43] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 534.733531][ T43] usb 6-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 534.735918][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.735937][ T43] usb 6-1: Product: syz [ 534.735949][ T43] usb 6-1: Manufacturer: syz [ 534.735960][ T43] usb 6-1: SerialNumber: syz [ 535.008619][T13825] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 535.008649][T13825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 535.008769][T13825] vhci_hcd vhci_hcd.0: Device attached [ 535.352393][ T1615] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 535.405522][T13827] vhci_hcd: connection closed [ 535.408972][ T5799] vhci_hcd vhci_hcd.1: stop threads [ 535.409003][ T5799] vhci_hcd vhci_hcd.1: release socket [ 535.409052][ T5799] vhci_hcd vhci_hcd.1: disconnect device [ 535.410979][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 535.414465][ T1615] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 535.414524][ T1615] usb 39-1: enqueue for inactive port 0 [ 535.443919][ T8125] usb 6-1: USB disconnect, device number 109 [ 535.481981][ T1615] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 535.494094][ T44] audit: type=1400 audit(1791091499.337:283): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=13832 comm="syz.2.2342" [ 535.513134][ T44] audit: type=1804 audit(1791091499.357:284): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2342" name="/newroot/563/bus/bus" dev="overlay" ino=3121 res=1 errno=0 [ 535.657037][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.658759][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.659648][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.660696][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.661548][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.987601][T13841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2344'. [ 536.077414][T13840] lo speed is unknown, defaulting to 1000 [ 536.103936][T13858] FAULT_INJECTION: forcing a failure. [ 536.103936][T13858] name failslab, interval 1, probability 0, space 0, times 0 [ 536.103970][T13858] CPU: 2 UID: 0 PID: 13858 Comm: syz.1.2347 Not tainted syzkaller #0 PREEMPT(full) [ 536.103996][T13858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.104009][T13858] Call Trace: [ 536.104017][T13858] [ 536.104027][T13858] dump_stack_lvl+0x100/0x190 [ 536.104061][T13858] should_fail_ex.cold+0x5/0xa [ 536.104093][T13858] should_failslab+0xc2/0x120 [ 536.104127][T13858] __kmalloc_cache_noprof+0x91/0x6d0 [ 536.104150][T13858] ? __pfx___mutex_lock+0x10/0x10 [ 536.104177][T13858] ? ceph_get_tree+0x188/0x1fd0 [ 536.104213][T13858] ceph_get_tree+0x188/0x1fd0 [ 536.104244][T13858] ? bpf_lsm_capable+0x9/0x10 [ 536.104265][T13858] ? security_capable+0x80/0x260 [ 536.104301][T13858] vfs_get_tree+0x92/0x320 [ 536.104323][T13858] vfs_cmd_create+0xd7/0x2a0 [ 536.104347][T13858] __do_sys_fsconfig+0x55a/0xcb0 [ 536.104372][T13858] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 536.104393][T13858] ? fput+0x7c/0x100 [ 536.104434][T13858] __do_fast_syscall_32+0x13a/0x8b0 [ 536.104467][T13858] do_fast_syscall_32+0x32/0x70 [ 536.104494][T13858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.104527][T13858] RIP: 0023:0xf7f36fec [ 536.104550][T13858] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 536.104561][T13858] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 536.104581][T13858] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 536.104597][T13858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.104610][T13858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.104625][T13858] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.104638][T13858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.104669][T13858] [ 536.108210][T13858] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2347'. [ 536.268761][T13471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.424329][T13471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.506846][T13873] netlink: 'syz.1.2350': attribute type 2 has an invalid length. [ 536.506872][T13873] netlink: 'syz.1.2350': attribute type 2 has an invalid length. [ 536.643199][T13471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.670322][T13840] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.670418][T13840] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.670583][T13840] bridge_slave_0: entered allmulticast mode [ 536.676328][T13840] bridge_slave_0: entered promiscuous mode [ 536.679542][T13840] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.682080][T13840] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.682203][T13840] bridge_slave_1: entered allmulticast mode [ 536.685353][T13840] bridge_slave_1: entered promiscuous mode [ 536.686255][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 536.779927][T13471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.213694][T13840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.267136][T13840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.403096][T13892] FAULT_INJECTION: forcing a failure. [ 537.403096][T13892] name fail_futex, interval 1, probability 0, space 0, times 0 [ 537.403139][T13892] CPU: 2 UID: 0 PID: 13892 Comm: syz.1.2353 Not tainted syzkaller #0 PREEMPT(full) [ 537.403170][T13892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.403185][T13892] Call Trace: [ 537.403194][T13892] [ 537.403205][T13892] dump_stack_lvl+0x100/0x190 [ 537.403247][T13892] should_fail_ex.cold+0x5/0xa [ 537.403281][T13892] get_futex_key+0x1d0/0x14f0 [ 537.403322][T13892] ? __pfx_get_futex_key+0x10/0x10 [ 537.403360][T13892] futex_wake+0xf4/0x5e0 [ 537.403396][T13892] ? __pfx_futex_wake+0x10/0x10 [ 537.403424][T13892] ? kasan_quarantine_put+0x104/0x240 [ 537.403463][T13892] ? putname+0xb1/0x110 [ 537.403495][T13892] ? kmem_cache_free+0x127/0x6c0 [ 537.403533][T13892] do_futex+0x2b2/0x440 [ 537.403564][T13892] ? __pfx_do_futex+0x10/0x10 [ 537.403590][T13892] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.403640][T13892] __ia32_sys_futex_time32+0x2f4/0x470 [ 537.403675][T13892] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 537.403703][T13892] ? ksys_write+0x1ac/0x250 [ 537.403745][T13892] __do_fast_syscall_32+0x13a/0x8b0 [ 537.403785][T13892] do_fast_syscall_32+0x32/0x70 [ 537.403819][T13892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.403852][T13892] RIP: 0023:0xf7f36fec [ 537.403882][T13892] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 537.403895][T13892] RSP: 002b:00000000f53f65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 537.403923][T13892] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 537.403943][T13892] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 537.403961][T13892] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 537.403978][T13892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 537.403996][T13892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.404031][T13892] [ 537.570081][T13840] team0: Port device team_slave_0 added [ 537.608525][T13840] team0: Port device team_slave_1 added [ 537.729259][T13840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.729279][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.729303][T13840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.746095][T13840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.746114][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.746138][T13840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.767575][ T5759] Bluetooth: hci1: command tx timeout [ 537.855794][T13907] FAULT_INJECTION: forcing a failure. [ 537.855794][T13907] name failslab, interval 1, probability 0, space 0, times 0 [ 537.855828][T13907] CPU: 2 UID: 0 PID: 13907 Comm: syz.2.2357 Not tainted syzkaller #0 PREEMPT(full) [ 537.855852][T13907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.855864][T13907] Call Trace: [ 537.855872][T13907] [ 537.855881][T13907] dump_stack_lvl+0x100/0x190 [ 537.855934][T13907] should_fail_ex.cold+0x5/0xa [ 537.855963][T13907] should_failslab+0xc2/0x120 [ 537.855996][T13907] __kmalloc_cache_noprof+0x91/0x6d0 [ 537.856018][T13907] ? __pfx___mutex_lock+0x10/0x10 [ 537.856045][T13907] ? ceph_get_tree+0x188/0x1fd0 [ 537.856086][T13907] ceph_get_tree+0x188/0x1fd0 [ 537.856114][T13907] ? bpf_lsm_capable+0x9/0x10 [ 537.856135][T13907] ? security_capable+0x80/0x260 [ 537.856170][T13907] vfs_get_tree+0x92/0x320 [ 537.856191][T13907] vfs_cmd_create+0xd7/0x2a0 [ 537.856214][T13907] __do_sys_fsconfig+0x55a/0xcb0 [ 537.856237][T13907] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 537.856257][T13907] ? xfd_validate_state+0x129/0x190 [ 537.856300][T13907] __do_fast_syscall_32+0x13a/0x8b0 [ 537.856331][T13907] do_fast_syscall_32+0x32/0x70 [ 537.856359][T13907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.856384][T13907] RIP: 0023:0xf7f86fec [ 537.856406][T13907] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 537.856416][T13907] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 537.856436][T13907] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 537.856450][T13907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.856463][T13907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.856475][T13907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 537.856487][T13907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.856515][T13907] [ 537.860070][T13907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2357'. [ 537.863724][T13471] bridge_slave_1: left allmulticast mode [ 537.863749][T13471] bridge_slave_1: left promiscuous mode [ 537.863938][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.929883][T13910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 537.929910][T13910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 537.929976][T13910] vhci_hcd vhci_hcd.0: Device attached [ 538.112402][ T1615] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 538.172788][ T5754] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 538.172942][ T1615] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 538.289376][T13471] bridge_slave_0: left allmulticast mode [ 538.289403][T13471] bridge_slave_0: left promiscuous mode [ 538.289654][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.324124][ T5754] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 538.324752][ T5754] usb 6-1: config 0 has no interfaces? [ 538.324781][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.327191][ T5754] usb 6-1: config 0 descriptor?? [ 538.534213][T13913] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 538.540683][ T12] vhci_hcd vhci_hcd.1: stop threads [ 538.540743][ T12] vhci_hcd vhci_hcd.1: release socket [ 538.543729][T13910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2358'. [ 538.543800][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 538.905445][T13471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.908233][T13471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.909901][T13471] bond0 (unregistering): Released all slaves [ 538.915461][T13471] bond1 (unregistering): Released all slaves [ 538.928788][T13471] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 538.930667][T13471] bond2 (unregistering): Released all slaves [ 538.965253][T13840] hsr_slave_0: entered promiscuous mode [ 538.966018][T13840] hsr_slave_1: entered promiscuous mode [ 539.031749][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 539.044230][ T30] usb 6-1: USB disconnect, device number 110 [ 539.106638][T13471] tipc: Left network mode [ 539.337220][T13943] block2mtd: error: cannot open device /" [ 539.353023][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 539.485145][T13471] hsr_slave_0: left promiscuous mode [ 539.486719][T13471] hsr_slave_1: left promiscuous mode [ 539.487451][T13471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.487470][T13471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.489597][T13471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.489615][T13471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.506675][T13471] veth1_macvtap: left promiscuous mode [ 539.506733][T13471] veth0_macvtap: left promiscuous mode [ 539.506920][T13471] veth1_vlan: left promiscuous mode [ 539.506976][T13471] veth0_vlan: left promiscuous mode [ 539.739778][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 539.831337][ T5759] Bluetooth: hci1: command tx timeout [ 539.864995][T13471] team0 (unregistering): Port device team_slave_1 removed [ 539.886523][T13471] team0 (unregistering): Port device team_slave_0 removed [ 540.053461][ T5754] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 540.202742][ T5754] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 540.203905][ T5754] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.209789][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 540.209813][ T5754] usb 7-1: Product: syz [ 540.209826][ T5754] usb 7-1: Manufacturer: syz [ 540.209839][ T5754] usb 7-1: SerialNumber: syz [ 540.541147][ T5754] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 540.698716][T13840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 540.884134][ C0] usblp0: nonzero write bulk status received: -71 [ 540.886108][ T30] usb 7-1: USB disconnect, device number 114 [ 540.919937][T13956] usblp0: removed [ 541.923279][ T5759] Bluetooth: hci1: command tx timeout [ 542.227668][T13840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.228423][T13840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 542.262825][T13840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.275272][T13840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.298821][T13840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.309408][T13840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.320272][T13840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.429509][T13840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.445882][T13995] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 542.445907][T13995] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 542.448907][T13840] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.464296][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.464381][ T4612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.466275][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.466351][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.894929][T14020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 542.894958][T14020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 542.896287][T14020] vhci_hcd vhci_hcd.0: Device attached [ 542.971928][T13840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.054499][T13840] veth0_vlan: entered promiscuous mode [ 543.071816][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 543.080178][T13840] veth1_vlan: entered promiscuous mode [ 543.141382][T12358] usb 7-1: new low-speed USB device number 115 using dummy_hcd [ 543.141566][ T30] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 543.145344][T13840] veth0_macvtap: entered promiscuous mode [ 543.154322][T13840] veth1_macvtap: entered promiscuous mode [ 543.186971][T13840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.200100][T13840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.274122][ T1615] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 543.279373][T12151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.279388][T12151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.294029][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.294530][T12358] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 543.294576][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.294616][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.294646][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.295275][T12358] usb 7-1: config 0 has no interfaces? [ 543.295305][T12358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.297516][T12358] usb 7-1: config 0 descriptor?? [ 543.362683][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.362867][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.491517][T14035] block2mtd: error: cannot open device /" [ 543.507446][T14021] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 543.507810][ T13] vhci_hcd vhci_hcd.2: stop threads [ 543.507829][ T13] vhci_hcd vhci_hcd.2: release socket [ 543.507932][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 543.509323][T14020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2370'. [ 543.623661][ T62] usb 7-1: USB disconnect, device number 115 [ 543.821356][T12358] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 543.981337][T12358] usb 8-1: Using ep0 maxpacket: 32 [ 543.983542][T12358] usb 8-1: unable to get BOS descriptor or descriptor too short [ 543.983694][T12358] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 543.984625][T12358] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 543.984648][T12358] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 543.984665][T12358] usb 8-1: config 14 has no interface number 0 [ 543.984677][T12358] usb 8-1: config 14 has no interface number 1 [ 543.984723][T12358] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 543.984741][T12358] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 543.984762][T12358] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 543.984784][T12358] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 543.984806][T12358] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 543.984828][T12358] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.984849][T12358] usb 8-1: config 14 interface 57 has no altsetting 0 [ 543.984865][T12358] usb 8-1: config 14 interface 228 has no altsetting 0 [ 543.987050][T12358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.987071][T12358] usb 8-1: Product: syz [ 543.987086][T12358] usb 8-1: Manufacturer: syz [ 543.987098][T12358] usb 8-1: SerialNumber: syz [ 544.002367][ T5759] Bluetooth: hci1: command tx timeout [ 544.441876][T12358] legousbtower 8-1:14.57: interrupt endpoints not found [ 545.034695][T14043] netlink: 'syz.0.2377': attribute type 34 has an invalid length. [ 545.156323][T14062] FAULT_INJECTION: forcing a failure. [ 545.156323][T14062] name failslab, interval 1, probability 0, space 0, times 0 [ 545.156359][T14062] CPU: 3 UID: 0 PID: 14062 Comm: syz.2.2382 Not tainted syzkaller #0 PREEMPT(full) [ 545.156384][T14062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 545.156396][T14062] Call Trace: [ 545.156402][T14062] [ 545.156409][T14062] dump_stack_lvl+0x100/0x190 [ 545.156485][T14062] should_fail_ex.cold+0x5/0xa [ 545.156512][T14062] should_failslab+0xc2/0x120 [ 545.156543][T14062] __kmalloc_cache_noprof+0x91/0x6d0 [ 545.156566][T14062] ? tunnel_key_init+0x3d5/0x1a70 [ 545.156619][T14062] tunnel_key_init+0x3d5/0x1a70 [ 545.156656][T14062] ? __pfx_tunnel_key_init+0x10/0x10 [ 545.156700][T14062] ? tcf_action_init_1+0x2d8/0x6c0 [ 545.156720][T14062] ? __asan_memcpy+0x3c/0x60 [ 545.156746][T14062] ? tcf_action_init_1+0x466/0x6c0 [ 545.156764][T14062] tcf_action_init_1+0x466/0x6c0 [ 545.156787][T14062] ? __pfx_tcf_action_init_1+0x10/0x10 [ 545.156806][T14062] ? tc_action_load_ops+0x1f5/0x3e0 [ 545.156841][T14062] ? __nla_parse+0x40/0x60 [ 545.156918][T14062] tcf_action_init+0x43f/0xa60 [ 545.156949][T14062] ? __pfx_tcf_action_init+0x10/0x10 [ 545.156991][T14062] ? __kernel_text_address+0xd/0x30 [ 545.157016][T14062] ? unwind_get_return_address+0x59/0xa0 [ 545.157049][T14062] ? arch_stack_walk+0xa6/0xf0 [ 545.157091][T14062] ? __lock_acquire+0x5c0/0x1f40 [ 545.157120][T14062] ? consume_skb+0xd1/0x110 [ 545.157147][T14062] ? nlmon_xmit+0xa5/0xe0 [ 545.157203][T14062] tcf_action_add+0xed/0x5c0 [ 545.157228][T14062] ? __pfx_tcf_action_add+0x10/0x10 [ 545.157249][T14062] ? find_held_lock+0x2b/0x80 [ 545.157271][T14062] ? clockevents_program_event+0x1bf/0x820 [ 545.157358][T14062] ? __nla_parse+0x40/0x60 [ 545.157391][T14062] tc_ctl_action+0x2e3/0x470 [ 545.157416][T14062] ? __pfx_tc_ctl_action+0x10/0x10 [ 545.157447][T14062] ? __pfx_tc_ctl_action+0x10/0x10 [ 545.157469][T14062] rtnetlink_rcv_msg+0x3c9/0xe90 [ 545.157495][T14062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.157525][T14062] ? ref_tracker_free+0x37e/0x6c0 [ 545.157551][T14062] netlink_rcv_skb+0x159/0x420 [ 545.157581][T14062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.157614][T14062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.157654][T14062] ? netlink_deliver_tap+0x1ae/0xcc0 [ 545.157687][T14062] netlink_unicast+0x585/0x850 [ 545.157720][T14062] ? __pfx_netlink_unicast+0x10/0x10 [ 545.157781][T14062] netlink_sendmsg+0x8b0/0xda0 [ 545.157815][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.157848][T14062] ? apparmor_socket_sendmsg+0x165/0x280 [ 545.157885][T14062] ____sys_sendmsg+0xa4d/0xbe0 [ 545.157957][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.157989][T14062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.158026][T14062] ___sys_sendmsg+0x190/0x1e0 [ 545.158055][T14062] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.158082][T14062] ? futex_wait+0x11e/0x370 [ 545.158117][T14062] ? find_held_lock+0x2b/0x80 [ 545.158157][T14062] __sys_sendmsg+0x160/0x210 [ 545.158179][T14062] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.158215][T14062] __do_fast_syscall_32+0x13a/0x8b0 [ 545.158247][T14062] do_fast_syscall_32+0x32/0x70 [ 545.158275][T14062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.158301][T14062] RIP: 0023:0xf7f86fec [ 545.158324][T14062] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 545.158334][T14062] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 545.158355][T14062] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000300 [ 545.158369][T14062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.158381][T14062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.158425][T14062] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 545.158438][T14062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.158466][T14062] [ 545.290655][T12358] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 545.626275][T12358] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 545.727034][T14064] block2mtd: error: cannot open device /" [ 545.921100][T12358] usb 8-1: USB disconnect, device number 9 [ 546.600468][T12358] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 546.933669][T14084] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 546.933695][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 546.934343][T14084] vhci_hcd vhci_hcd.0: Device attached [ 547.054911][T14090] FAULT_INJECTION: forcing a failure. [ 547.054911][T14090] name failslab, interval 1, probability 0, space 0, times 0 [ 547.054942][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.0.2388 Not tainted syzkaller #0 PREEMPT(full) [ 547.054962][T14090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 547.054973][T14090] Call Trace: [ 547.054980][T14090] [ 547.054988][T14090] dump_stack_lvl+0x100/0x190 [ 547.055018][T14090] should_fail_ex.cold+0x5/0xa [ 547.055038][T14090] should_failslab+0xc2/0x120 [ 547.055076][T14090] __kmalloc_noprof+0xfc/0x840 [ 547.055099][T14090] ? rcu_is_watching+0x13/0xc0 [ 547.055119][T14090] ? tomoyo_realpath_from_path+0xb6/0x690 [ 547.055140][T14090] tomoyo_realpath_from_path+0xb6/0x690 [ 547.055163][T14090] tomoyo_path_number_perm+0x23c/0x580 [ 547.055174][T14090] ? tomoyo_path_number_perm+0x22e/0x580 [ 547.055187][T14090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.055200][T14090] ? get_pid_task+0x106/0x250 [ 547.055216][T14090] ? __lock_acquire+0x5c0/0x1f40 [ 547.055240][T14090] ? __fget_files+0x34/0x3d0 [ 547.055254][T14090] ? find_held_lock+0x2b/0x80 [ 547.055267][T14090] ? __fget_files+0x215/0x3d0 [ 547.055280][T14090] ? hook_file_ioctl_common+0x140/0x440 [ 547.055292][T14090] ? __fget_files+0x215/0x3d0 [ 547.055309][T14090] ? __fget_files+0x21f/0x3d0 [ 547.055325][T14090] security_file_ioctl_compat+0xd3/0x230 [ 547.055339][T14090] __ia32_compat_sys_ioctl+0xc2/0x360 [ 547.055354][T14090] __do_fast_syscall_32+0x13a/0x8b0 [ 547.055371][T14090] ? lockdep_hardirqs_on+0x7d/0x110 [ 547.055386][T14090] do_fast_syscall_32+0x32/0x70 [ 547.055437][T14090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.055451][T14090] RIP: 0023:0xf709efec [ 547.055465][T14090] Code: Unable to access opcode bytes at 0xf709efc2. [ 547.055471][T14090] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 547.055482][T14090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 547.055489][T14090] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.055496][T14090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.055503][T14090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 547.055509][T14090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.055524][T14090] [ 547.055556][T14090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.112803][ T1615] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 547.172127][ T7850] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 547.173498][ T1615] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 547.209105][T14097] FAULT_INJECTION: forcing a failure. [ 547.209105][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 547.209134][T14097] CPU: 2 UID: 0 PID: 14097 Comm: syz.2.2391 Not tainted syzkaller #0 PREEMPT(full) [ 547.209154][T14097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 547.209165][T14097] Call Trace: [ 547.209172][T14097] [ 547.209180][T14097] dump_stack_lvl+0x100/0x190 [ 547.209207][T14097] should_fail_ex.cold+0x5/0xa [ 547.209231][T14097] should_failslab+0xc2/0x120 [ 547.209256][T14097] __kmalloc_cache_noprof+0x91/0x6d0 [ 547.209274][T14097] ? loopback_open+0x9f6/0x13d0 [ 547.209348][T14097] loopback_open+0x9f6/0x13d0 [ 547.209380][T14097] snd_pcm_open_substream+0xa76/0x1850 [ 547.209411][T14097] ? __kasan_kmalloc+0x20/0xb0 [ 547.209434][T14097] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 547.209455][T14097] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 547.209472][T14097] ? snd_pcm_oss_open+0x5c5/0x1380 [ 547.209493][T14097] snd_pcm_oss_open+0x715/0x1380 [ 547.209519][T14097] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 547.209540][T14097] ? __pfx_default_wake_function+0x10/0x10 [ 547.209570][T14097] ? __lock_acquire+0x5c0/0x1f40 [ 547.209601][T14097] ? do_raw_spin_lock+0x128/0x260 [ 547.209625][T14097] ? soundcore_open+0x231/0x5a0 [ 547.209649][T14097] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 547.209669][T14097] soundcore_open+0x2e3/0x5a0 [ 547.209687][T14097] ? __pfx_soundcore_open+0x10/0x10 [ 547.209703][T14097] chrdev_open+0x234/0x6a0 [ 547.209723][T14097] ? __pfx_apparmor_file_open+0x10/0x10 [ 547.209742][T14097] ? __pfx_chrdev_open+0x10/0x10 [ 547.209765][T14097] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 547.209830][T14097] do_dentry_open+0x6ab/0x14d0 [ 547.209852][T14097] ? __pfx_chrdev_open+0x10/0x10 [ 547.209878][T14097] vfs_open+0x82/0x3f0 [ 547.209906][T14097] path_openat+0x19fa/0x2440 [ 547.209931][T14097] ? __pfx_path_openat+0x10/0x10 [ 547.209958][T14097] do_file_open+0x20e/0x430 [ 547.209980][T14097] ? __pfx_do_file_open+0x10/0x10 [ 547.210016][T14097] ? _raw_spin_unlock+0x28/0x50 [ 547.210033][T14097] ? alloc_fd+0x471/0x7a0 [ 547.210059][T14097] do_sys_openat2+0x10f/0x1e0 [ 547.210084][T14097] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.210115][T14097] __ia32_compat_sys_openat+0x12d/0x210 [ 547.210133][T14097] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 547.210148][T14097] ? ksys_write+0x1ac/0x250 [ 547.210179][T14097] __do_fast_syscall_32+0x13a/0x8b0 [ 547.210206][T14097] do_fast_syscall_32+0x32/0x70 [ 547.210229][T14097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.210249][T14097] RIP: 0023:0xf7f86fec [ 547.210268][T14097] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 547.210276][T14097] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 547.210293][T14097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 547.210305][T14097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.210315][T14097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.210326][T14097] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 547.210337][T14097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.210358][T14097] [ 547.323704][ T7850] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 547.325639][ T7850] usb 8-1: config 0 has no interfaces? [ 547.325671][ T7850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.331908][ T7850] usb 8-1: config 0 descriptor?? [ 547.336207][T14103] block2mtd: error: cannot open device /" [ 547.538125][T14085] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 547.538915][ T13] vhci_hcd vhci_hcd.3: stop threads [ 547.538933][ T13] vhci_hcd vhci_hcd.3: release socket [ 547.539016][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 547.540030][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2387'. [ 547.612337][ T7850] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 547.641336][ T5860] usb 8-1: USB disconnect, device number 10 [ 547.762085][ T7850] usb 7-1: Using ep0 maxpacket: 32 [ 547.764360][ T7850] usb 7-1: unable to get BOS descriptor or descriptor too short [ 547.764404][ T7850] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 547.765470][ T7850] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 547.765493][ T7850] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 547.765510][ T7850] usb 7-1: config 14 has no interface number 0 [ 547.765524][ T7850] usb 7-1: config 14 has no interface number 1 [ 547.765582][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 547.765603][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 547.765668][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 547.765691][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 547.765714][ T7850] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 547.765739][ T7850] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.765762][ T7850] usb 7-1: config 14 interface 57 has no altsetting 0 [ 547.765778][ T7850] usb 7-1: config 14 interface 228 has no altsetting 0 [ 547.769427][ T7850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.769449][ T7850] usb 7-1: Product: syz [ 547.769460][ T7850] usb 7-1: Manufacturer: syz [ 547.769472][ T7850] usb 7-1: SerialNumber: syz [ 547.888200][T14108] 9pnet_fd: Insufficient options for proto=fd [ 548.222419][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 548.230096][T14120] FAULT_INJECTION: forcing a failure. [ 548.230096][T14120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.230119][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.0.2401 Not tainted syzkaller #0 PREEMPT(full) [ 548.230133][T14120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.230140][T14120] Call Trace: [ 548.230144][T14120] [ 548.230149][T14120] dump_stack_lvl+0x100/0x190 [ 548.230168][T14120] should_fail_ex.cold+0x5/0xa [ 548.230184][T14120] _copy_from_user+0x2e/0xd0 [ 548.230201][T14120] video_usercopy+0x9e0/0x14c0 [ 548.230216][T14120] ? __pfx___video_do_ioctl+0x10/0x10 [ 548.230231][T14120] ? __pfx_video_usercopy+0x10/0x10 [ 548.230254][T14120] ? __fget_files+0x215/0x3d0 [ 548.230273][T14120] ? hook_file_ioctl_common+0x140/0x440 [ 548.230299][T14120] v4l2_ioctl+0x1bd/0x250 [ 548.230322][T14120] v4l2_compat_ioctl32+0x20f/0x2d0 [ 548.230340][T14120] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 548.230355][T14120] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 548.230427][T14120] __do_fast_syscall_32+0x13a/0x8b0 [ 548.230454][T14120] ? lockdep_hardirqs_on+0x7d/0x110 [ 548.230480][T14120] do_fast_syscall_32+0x32/0x70 [ 548.230504][T14120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.230531][T14120] RIP: 0023:0xf709efec [ 548.230551][T14120] Code: Unable to access opcode bytes at 0xf709efc2. [ 548.230560][T14120] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 548.230578][T14120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008561c [ 548.230590][T14120] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.230600][T14120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.230610][T14120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 548.230621][T14120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.230644][T14120] [ 548.930485][ T7850] legousbtower 7-1:14.57: interrupt endpoints not found [ 548.942461][ T7850] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 548.944294][ T7850] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 549.020068][T14136] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 549.020083][T14136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2406'. [ 549.021628][T14136] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 549.211764][T14139] syz_tun: entered allmulticast mode [ 549.282924][T14138] syz_tun: left allmulticast mode [ 549.348848][T14143] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 549.733074][ T62] usb 7-1: USB disconnect, device number 116 [ 549.831758][ T62] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 550.307640][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 550.716180][T14160] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 551.662523][ T43] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 551.752215][ T5754] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 551.932035][ T5754] usb 8-1: Using ep0 maxpacket: 32 [ 551.957008][ T5754] usb 8-1: unable to get BOS descriptor or descriptor too short [ 551.958975][ T5754] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 551.981560][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 552.014776][ T5754] usb 8-1: string descriptor 0 read error: -22 [ 552.015381][ T5754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.093684][ T5754] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 552.093722][ T5754] dw2102: su3000_power_ctrl: 1, initialized 0 [ 552.122009][ T5754] dvb-usb: bulk message failed: -22 (2/0) [ 552.165121][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 552.165167][ T43] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 552.293612][ T43] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 552.293640][ T43] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 552.293656][ T43] usb 7-1: config 14 has no interface number 0 [ 552.293670][ T43] usb 7-1: config 14 has no interface number 1 [ 552.293718][ T43] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 552.293737][ T43] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 552.293758][ T43] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 552.293779][ T43] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 552.293800][ T43] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 552.293827][ T43] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.293847][ T43] usb 7-1: config 14 interface 57 has no altsetting 0 [ 552.293861][ T43] usb 7-1: config 14 interface 228 has no altsetting 0 [ 552.306374][ T1615] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 552.433687][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.440804][ T5754] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 552.441045][ T5754] usb 8-1: media controller created [ 552.493434][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493455][ T5754] dw2102: i2c transfer failed. [ 552.493500][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493511][ T5754] dw2102: i2c transfer failed. [ 552.493521][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493531][ T5754] dw2102: i2c transfer failed. [ 552.493541][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493564][ T5754] dw2102: i2c transfer failed. [ 552.493574][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493584][ T5754] dw2102: i2c transfer failed. [ 552.493593][ T5754] dvb-usb: bulk message failed: -22 (6/0) [ 552.493603][ T5754] dw2102: i2c transfer failed. [ 552.493610][ T5754] dvb-usb: MAC address: 02:02:02:02:02:02 [ 552.504475][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.504501][ T43] usb 7-1: Product: syz [ 552.504512][ T43] usb 7-1: Manufacturer: syz [ 552.504523][ T43] usb 7-1: SerialNumber: syz [ 552.524846][T14188] FAULT_INJECTION: forcing a failure. [ 552.524846][T14188] name failslab, interval 1, probability 0, space 0, times 0 [ 552.524866][T14188] CPU: 1 UID: 0 PID: 14188 Comm: syz.1.2425 Not tainted syzkaller #0 PREEMPT(full) [ 552.524879][T14188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 552.524886][T14188] Call Trace: [ 552.524890][T14188] [ 552.524895][T14188] dump_stack_lvl+0x100/0x190 [ 552.524914][T14188] should_fail_ex.cold+0x5/0xa [ 552.524930][T14188] should_failslab+0xc2/0x120 [ 552.524948][T14188] __kmalloc_noprof+0xfc/0x840 [ 552.524965][T14188] ? get_pid_task+0x106/0x250 [ 552.524982][T14188] ? video_usercopy+0x145/0x14c0 [ 552.525004][T14188] video_usercopy+0x145/0x14c0 [ 552.525023][T14188] ? __pfx___video_do_ioctl+0x10/0x10 [ 552.525036][T14188] ? do_vfs_ioctl+0x226/0x13e0 [ 552.525050][T14188] ? __pfx_video_usercopy+0x10/0x10 [ 552.525067][T14188] ? __fget_files+0x215/0x3d0 [ 552.525081][T14188] ? hook_file_ioctl_common+0x140/0x440 [ 552.525097][T14188] v4l2_ioctl+0x1bd/0x250 [ 552.525119][T14188] v4l2_compat_ioctl32+0x20f/0x2d0 [ 552.525138][T14188] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 552.525151][T14188] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 552.525165][T14188] __do_fast_syscall_32+0x13a/0x8b0 [ 552.525195][T14188] ? lockdep_hardirqs_on+0x7d/0x110 [ 552.525212][T14188] do_fast_syscall_32+0x32/0x70 [ 552.525227][T14188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.525241][T14188] RIP: 0023:0xf7f36fec [ 552.525255][T14188] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 552.525260][T14188] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 552.525271][T14188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 552.525278][T14188] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.525285][T14188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.525292][T14188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 552.525298][T14188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.525312][T14188] [ 552.537252][T14182] dw2102: i2c wr: len=66 is too big! [ 552.537252][T14182] [ 552.676859][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.715822][ T5754] dvb-usb: bulk message failed: -22 (3/0) [ 552.715840][ T5754] dw2102: command 0x0e transfer failed. [ 552.715847][ T5754] dvb-usb: bulk message failed: -22 (3/0) [ 552.715857][ T5754] dw2102: command 0x0e transfer failed. [ 553.027042][ T5754] dvb-usb: bulk message failed: -22 (3/0) [ 553.027820][ T5754] dw2102: command 0x0e transfer failed. [ 553.027832][ T5754] dvb-usb: bulk message failed: -22 (3/0) [ 553.027844][ T5754] dw2102: command 0x0e transfer failed. [ 553.027852][ T5754] dvb-usb: bulk message failed: -22 (1/0) [ 553.027864][ T5754] dw2102: command 0x51 transfer failed. [ 553.197130][ T5754] DVB: Unable to find symbol ds3000_attach() [ 553.197147][ T5754] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 553.382242][ T5754] rc_core: IR keymap rc-su3000 not found [ 553.382262][ T5754] Registered IR keymap rc-empty [ 553.384496][ T5754] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 553.386050][ T5754] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input9 [ 553.420911][ T5754] dvb-usb: schedule remote query interval to 150 msecs. [ 553.420932][ T5754] dw2102: su3000_power_ctrl: 0, initialized 1 [ 553.420943][ T5754] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 553.436664][ T5754] usb 8-1: USB disconnect, device number 11 [ 553.445132][ T43] legousbtower 7-1:14.57: interrupt endpoints not found [ 553.488354][ T5754] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 553.650183][ T43] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 553.651757][ T43] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 553.783436][ T5754] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 553.932686][ T5754] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 553.933706][ T5754] usb 8-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.935776][ T5754] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 553.935798][ T5754] usb 8-1: Manufacturer: syz [ 553.935810][ T5754] usb 8-1: SerialNumber: syz [ 554.001343][ T43] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 554.146745][T14213] FAULT_INJECTION: forcing a failure. [ 554.146745][T14213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.146777][T14213] CPU: 3 UID: 0 PID: 14213 Comm: syz.3.2433 Not tainted syzkaller #0 PREEMPT(full) [ 554.146800][T14213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.146812][T14213] Call Trace: [ 554.146819][T14213] [ 554.146827][T14213] dump_stack_lvl+0x100/0x190 [ 554.146876][T14213] should_fail_ex.cold+0x5/0xa [ 554.146902][T14213] _copy_from_user+0x2e/0xd0 [ 554.146930][T14213] get_compat_msghdr+0xb3/0x480 [ 554.146962][T14213] ? __pfx_get_compat_msghdr+0x10/0x10 [ 554.146990][T14213] ? _kstrtoull+0x144/0x200 [ 554.147010][T14213] ? __pfx__kstrtoull+0x10/0x10 [ 554.147033][T14213] ___sys_sendmsg+0x1b6/0x1e0 [ 554.147059][T14213] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.147085][T14213] ? __lock_acquire+0x5c0/0x1f40 [ 554.147123][T14213] ? __fget_files+0x34/0x3d0 [ 554.147165][T14213] __sys_sendmmsg+0x309/0x440 [ 554.147189][T14213] ? __pfx___sys_sendmmsg+0x10/0x10 [ 554.147209][T14213] ? rcu_is_watching+0x13/0xc0 [ 554.147252][T14213] ? fput+0x7c/0x100 [ 554.147281][T14213] ? exit_to_user_mode_loop+0x166/0x700 [ 554.147305][T14213] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 554.147330][T14213] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.147355][T14213] __do_fast_syscall_32+0x13a/0x8b0 [ 554.147382][T14213] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.147407][T14213] do_fast_syscall_32+0x32/0x70 [ 554.147432][T14213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.147461][T14213] RIP: 0023:0xf70aefec [ 554.147484][T14213] Code: Unable to access opcode bytes at 0xf70aefc2. [ 554.147494][T14213] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 554.147514][T14213] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 554.147526][T14213] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 554.147538][T14213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.147551][T14213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 554.147563][T14213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.147589][T14213] [ 554.152229][ T43] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 554.153549][ T43] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.155264][ T5754] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 554.156545][ T43] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 554.156566][ T43] usb 6-1: Manufacturer: syz [ 554.156580][ T43] usb 6-1: SerialNumber: syz [ 554.163339][ T5754] usb 8-1: USB disconnect, device number 12 [ 554.381895][ T43] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 554.389205][ T43] usb 6-1: USB disconnect, device number 111 [ 554.477132][ T5860] usb 7-1: USB disconnect, device number 117 [ 554.487868][ T5860] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 554.575217][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 554.780924][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 556.096882][T14254] capability: warning: `syz.2.2449' uses 32-bit capabilities (legacy support in use) [ 556.312796][T14265] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2454'. [ 556.324532][T14265] FAULT_INJECTION: forcing a failure. [ 556.324532][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 556.324564][T14265] CPU: 2 UID: 0 PID: 14265 Comm: syz.3.2454 Not tainted syzkaller #0 PREEMPT(full) [ 556.324585][T14265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.324596][T14265] Call Trace: [ 556.324602][T14265] [ 556.324610][T14265] dump_stack_lvl+0x100/0x190 [ 556.324640][T14265] should_fail_ex.cold+0x5/0xa [ 556.324664][T14265] should_failslab+0xc2/0x120 [ 556.324693][T14265] __kmalloc_noprof+0xfc/0x840 [ 556.324719][T14265] ? lsm_blob_alloc+0x68/0x90 [ 556.324748][T14265] lsm_blob_alloc+0x68/0x90 [ 556.324772][T14265] security_sk_alloc+0x2d/0x290 [ 556.324804][T14265] sk_prot_alloc+0x1d1/0x2a0 [ 556.324857][T14265] sk_alloc+0x36/0xe80 [ 556.324887][T14265] tipc_sk_create+0xfc/0x2400 [ 556.324933][T14265] ? lock_acquire+0x1d1/0x380 [ 556.324961][T14265] ? __sock_create+0x163/0x860 [ 556.324984][T14265] ? __sock_create+0x2f3/0x860 [ 556.325005][T14265] ? __sock_create+0x2f3/0x860 [ 556.325036][T14265] __sock_create+0x339/0x860 [ 556.325064][T14265] __sys_socket+0x14d/0x260 [ 556.325087][T14265] ? xfd_validate_state+0x129/0x190 [ 556.325115][T14265] ? __pfx___sys_socket+0x10/0x10 [ 556.325144][T14265] __ia32_sys_socket+0x72/0xb0 [ 556.325167][T14265] ? lockdep_hardirqs_on+0x7d/0x110 [ 556.325191][T14265] __do_fast_syscall_32+0x13a/0x8b0 [ 556.325218][T14265] do_fast_syscall_32+0x32/0x70 [ 556.325243][T14265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.325266][T14265] RIP: 0023:0xf70aefec [ 556.325288][T14265] Code: Unable to access opcode bytes at 0xf70aefc2. [ 556.325298][T14265] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 556.325316][T14265] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 556.325327][T14265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.325340][T14265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.325352][T14265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 556.325364][T14265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.325388][T14265] [ 556.339816][T14265] FAULT_INJECTION: forcing a failure. [ 556.339816][T14265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.339848][T14265] CPU: 2 UID: 0 PID: 14265 Comm: syz.3.2454 Not tainted syzkaller #0 PREEMPT(full) [ 556.339871][T14265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.339883][T14265] Call Trace: [ 556.339892][T14265] [ 556.339899][T14265] dump_stack_lvl+0x100/0x190 [ 556.339931][T14265] should_fail_ex.cold+0x5/0xa [ 556.339953][T14265] ? prepare_alloc_pages+0x16d/0x5b0 [ 556.339984][T14265] should_fail_alloc_page+0xeb/0x140 [ 556.340013][T14265] prepare_alloc_pages+0x1f0/0x5b0 [ 556.340044][T14265] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 556.340071][T14265] ? __asan_memset+0x23/0x50 [ 556.340093][T14265] ? folios_put_refs+0x58a/0xaa0 [ 556.340143][T14265] ? __lock_acquire+0x5c0/0x1f40 [ 556.340173][T14265] ? __css_rstat_updated+0x1ce/0x590 [ 556.340202][T14265] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.340232][T14265] ? rcu_is_watching+0x13/0xc0 [ 556.340252][T14265] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 556.340277][T14265] ? find_held_lock+0x2b/0x80 [ 556.340306][T14265] ? __lock_acquire+0x5c0/0x1f40 [ 556.340332][T14265] ? rcu_is_watching+0x13/0xc0 [ 556.340350][T14265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 556.340379][T14265] ? policy_nodemask+0xed/0x4f0 [ 556.340409][T14265] alloc_pages_mpol+0x201/0x550 [ 556.340446][T14265] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 556.340475][T14265] ? filemap_get_entry+0x22d/0x450 [ 556.340503][T14265] ? filemap_get_entry+0x22d/0x450 [ 556.340534][T14265] folio_alloc_noprof+0x22/0x250 [ 556.340555][T14265] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 556.340583][T14265] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 556.340608][T14265] ? rcu_is_watching+0x13/0xc0 [ 556.340629][T14265] ? trace_kmalloc+0xeb/0x110 [ 556.340658][T14265] __filemap_get_folio_mpol+0x653/0x1280 [ 556.340693][T14265] ioctx_alloc+0x7e1/0x21a0 [ 556.340758][T14265] ? __pfx_ioctx_alloc+0x10/0x10 [ 556.340787][T14265] ? __might_fault+0x111/0x140 [ 556.340809][T14265] __ia32_compat_sys_io_setup+0xc8/0x220 [ 556.340839][T14265] __do_fast_syscall_32+0x13a/0x8b0 [ 556.340863][T14265] ? lockdep_hardirqs_on+0x7d/0x110 [ 556.340887][T14265] do_fast_syscall_32+0x32/0x70 [ 556.340912][T14265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.340935][T14265] RIP: 0023:0xf70aefec [ 556.340956][T14265] Code: Unable to access opcode bytes at 0xf70aefc2. [ 556.340966][T14265] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 556.340986][T14265] RAX: ffffffffffffffda RBX: 000000000000ffff RCX: 00000000800028c0 [ 556.340998][T14265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.341009][T14265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.341018][T14265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 556.341029][T14265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.341053][T14265] [ 556.412990][ T5860] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 556.481042][T14269] FAULT_INJECTION: forcing a failure. [ 556.481042][T14269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.481072][T14269] CPU: 2 UID: 0 PID: 14269 Comm: syz.3.2456 Not tainted syzkaller #0 PREEMPT(full) [ 556.481092][T14269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 556.481103][T14269] Call Trace: [ 556.481110][T14269] [ 556.481117][T14269] dump_stack_lvl+0x100/0x190 [ 556.481147][T14269] should_fail_ex.cold+0x5/0xa [ 556.481171][T14269] _copy_to_user+0x32/0xd0 [ 556.481220][T14269] simple_read_from_buffer+0xcb/0x170 [ 556.481249][T14269] proc_fail_nth_read+0x1af/0x230 [ 556.481274][T14269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.481298][T14269] ? rw_verify_area+0xce/0x6d0 [ 556.481319][T14269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.481342][T14269] vfs_read+0x1e4/0xb40 [ 556.481365][T14269] ? lock_acquire+0x1d1/0x380 [ 556.481393][T14269] ? __fget_files+0x34/0x3d0 [ 556.481418][T14269] ? __pfx_vfs_read+0x10/0x10 [ 556.481446][T14269] ? find_held_lock+0x2b/0x80 [ 556.481470][T14269] ? __fget_files+0x215/0x3d0 [ 556.481500][T14269] ? __fget_files+0x21f/0x3d0 [ 556.481531][T14269] ksys_read+0x12a/0x250 [ 556.481553][T14269] ? __pfx_ksys_read+0x10/0x10 [ 556.481583][T14269] do_int80_emulation+0x166/0x650 [ 556.481613][T14269] asm_int80_emulation+0x1a/0x20 [ 556.481631][T14269] RIP: 0023:0xf71e75ab [ 556.481647][T14269] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 556.481666][T14269] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 556.481685][T14269] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 556.481698][T14269] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 556.481709][T14269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.481721][T14269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 556.481733][T14269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.481758][T14269] [ 556.572119][ T5860] usb 7-1: Using ep0 maxpacket: 32 [ 556.632993][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 556.661977][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 556.662020][ T5860] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 556.663206][ T5860] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 556.663228][ T5860] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 556.663245][ T5860] usb 7-1: config 14 has no interface number 0 [ 556.663258][ T5860] usb 7-1: config 14 has no interface number 1 [ 556.663304][ T5860] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 556.663324][ T5860] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 556.663345][ T5860] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 556.663367][ T5860] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 556.663390][ T5860] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 556.663412][ T5860] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.663434][ T5860] usb 7-1: config 14 interface 57 has no altsetting 0 [ 556.663450][ T5860] usb 7-1: config 14 interface 228 has no altsetting 0 [ 556.665378][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.665400][ T5860] usb 7-1: Product: syz [ 556.665413][ T5860] usb 7-1: Manufacturer: syz [ 556.665427][ T5860] usb 7-1: SerialNumber: syz [ 557.095944][ T5860] legousbtower 7-1:14.57: interrupt endpoints not found [ 557.502525][ T5860] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 557.506087][ T5860] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 557.566475][T14283] [ 557.567487][T14283] ====================================================== [ 557.570415][T14283] WARNING: possible circular locking dependency detected [ 557.573371][T14283] syzkaller #0 Not tainted [ 557.575628][T14283] ------------------------------------------------------ [ 557.578725][T14283] syz.1.2461/14283 is trying to acquire lock: [ 557.581583][T14283] ffff88804de500b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 557.585838][T14283] [ 557.585838][T14283] but task is already holding lock: [ 557.588959][T14283] ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 557.592678][T14283] [ 557.592678][T14283] which lock already depends on the new lock. [ 557.592678][T14283] [ 557.597566][T14283] [ 557.597566][T14283] the existing dependency chain (in reverse order) is: [ 557.601506][T14283] [ 557.601506][T14283] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 557.604520][T14283] lock_acquire+0x1d1/0x380 [ 557.607056][T14283] __mutex_lock+0x1a4/0x1bd0 [ 557.609643][T14283] rfcomm_security_cfm+0x3f/0x4b0 [ 557.612027][T14283] hci_auth_complete_evt+0x811/0x1180 [ 557.614234][T14283] hci_event_packet+0x8e9/0xcd0 [ 557.616357][T14283] hci_rx_work+0x451/0xfc0 [ 557.618239][T14283] process_one_work+0xac7/0x1b10 [ 557.620356][T14283] worker_thread+0x5ef/0xe50 [ 557.622287][T14283] kthread+0x373/0x450 [ 557.624227][T14283] ret_from_fork+0x730/0xd60 [ 557.626714][T14283] ret_from_fork_asm+0x1a/0x30 [ 557.629171][T14283] [ 557.629171][T14283] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 557.632460][T14283] lock_acquire+0x1d1/0x380 [ 557.634467][T14283] __mutex_lock+0x1a4/0x1bd0 [ 557.636488][T14283] hci_remote_features_evt+0x485/0x9b0 [ 557.638827][T14283] hci_event_packet+0x8e9/0xcd0 [ 557.640988][T14283] hci_rx_work+0x451/0xfc0 [ 557.642928][T14283] process_one_work+0xac7/0x1b10 [ 557.644957][T14283] worker_thread+0x5ef/0xe50 [ 557.647064][T14283] kthread+0x373/0x450 [ 557.649025][T14283] ret_from_fork+0x730/0xd60 [ 557.651120][T14283] ret_from_fork_asm+0x1a/0x30 [ 557.653589][T14283] [ 557.653589][T14283] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 557.656699][T14283] check_prev_add+0xeb/0xe60 [ 557.659149][T14283] __lock_acquire+0x1528/0x1f40 [ 557.661557][T14283] lock_acquire+0x1d1/0x380 [ 557.663684][T14283] __mutex_lock+0x1a4/0x1bd0 [ 557.665873][T14283] l2cap_chan_connect+0xac/0x2110 [ 557.668254][T14283] l2cap_sock_connect+0x37a/0x770 [ 557.670604][T14283] kernel_connect+0x107/0x160 [ 557.672610][T14283] rfcomm_dlc_open+0x838/0xac0 [ 557.674631][T14283] rfcomm_sock_connect+0x42c/0x690 [ 557.677394][T14283] __sys_connect_file+0x146/0x1a0 [ 557.680170][T14283] __sys_connect+0x141/0x170 [ 557.682595][T14283] __ia32_sys_connect+0x71/0xb0 [ 557.685040][T14283] __do_fast_syscall_32+0x13a/0x8b0 [ 557.687453][T14283] do_fast_syscall_32+0x32/0x70 [ 557.689621][T14283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.692420][T14283] [ 557.692420][T14283] other info that might help us debug this: [ 557.692420][T14283] [ 557.696152][T14283] Chain exists of: [ 557.696152][T14283] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 557.696152][T14283] [ 557.700951][T14283] Possible unsafe locking scenario: [ 557.700951][T14283] [ 557.703597][T14283] CPU0 CPU1 [ 557.705799][T14283] ---- ---- [ 557.708316][T14283] lock(rfcomm_mutex); [ 557.710321][T14283] lock(hci_cb_list_lock); [ 557.713367][T14283] lock(rfcomm_mutex); [ 557.716313][T14283] lock(&hdev->lock); [ 557.718127][T14283] [ 557.718127][T14283] *** DEADLOCK *** [ 557.718127][T14283] [ 557.721588][T14283] locks held by syz.1.2461/14283: 1, last CPU#0: [ 557.724418][T14283] #0: ffffffff90f86f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 557.728430][T14283] [ 557.728430][T14283] stack backtrace: [ 557.730950][T14283] CPU: 0 UID: 0 PID: 14283 Comm: syz.1.2461 Not tainted syzkaller #0 PREEMPT(full) [ 557.735071][T14283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.739291][T14283] Call Trace: [ 557.740705][T14283] [ 557.741853][T14283] dump_stack_lvl+0x100/0x190 [ 557.743759][T14283] print_circular_bug.cold+0x178/0x1be [ 557.745921][T14283] check_noncircular+0x146/0x160 [ 557.748040][T14283] check_prev_add+0xeb/0xe60 [ 557.750175][T14283] __lock_acquire+0x1528/0x1f40 [ 557.752314][T14283] lock_acquire+0x1d1/0x380 [ 557.754101][T14283] ? l2cap_chan_connect+0xac/0x2110 [ 557.756429][T14283] ? __pfx___might_resched+0x10/0x10 [ 557.758799][T14283] __mutex_lock+0x1a4/0x1bd0 [ 557.760874][T14283] ? l2cap_chan_connect+0xac/0x2110 [ 557.762927][T14283] ? l2cap_chan_connect+0xac/0x2110 [ 557.764862][T14283] ? hci_get_route+0x368/0x520 [ 557.766799][T14283] ? hci_get_route+0x368/0x520 [ 557.768876][T14283] ? __pfx___mutex_lock+0x10/0x10 [ 557.771071][T14283] ? _raw_read_unlock+0x28/0x50 [ 557.773277][T14283] ? hci_get_route+0x368/0x520 [ 557.775339][T14283] ? __pfx_hci_get_route+0x10/0x10 [ 557.777471][T14283] ? reacquire_held_locks+0xdd/0x1f0 [ 557.779845][T14283] ? release_sock+0x21/0x280 [ 557.781919][T14283] ? l2cap_chan_connect+0xac/0x2110 [ 557.784199][T14283] l2cap_chan_connect+0xac/0x2110 [ 557.786358][T14283] ? __local_bh_enable_ip+0xa5/0x120 [ 557.788744][T14283] l2cap_sock_connect+0x37a/0x770 [ 557.790932][T14283] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 557.793295][T14283] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 557.795829][T14283] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 557.798386][T14283] kernel_connect+0x107/0x160 [ 557.800418][T14283] ? __pfx_kernel_connect+0x10/0x10 [ 557.802721][T14283] ? timer_init_key+0x150/0x310 [ 557.804942][T14283] rfcomm_dlc_open+0x838/0xac0 [ 557.807182][T14283] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 557.809570][T14283] ? rfcomm_sock_connect+0x3e8/0x690 [ 557.811847][T14283] ? find_held_lock+0x2b/0x80 [ 557.813648][T14283] ? rfcomm_sock_connect+0x3e8/0x690 [ 557.815904][T14283] ? __local_bh_enable_ip+0xa5/0x120 [ 557.818145][T14283] rfcomm_sock_connect+0x42c/0x690 [ 557.820330][T14283] __sys_connect_file+0x146/0x1a0 [ 557.822515][T14283] __sys_connect+0x141/0x170 [ 557.824502][T14283] ? __pfx___sys_connect+0x10/0x10 [ 557.826790][T14283] __ia32_sys_connect+0x71/0xb0 [ 557.829039][T14283] ? lockdep_hardirqs_on+0x7d/0x110 [ 557.831230][T14283] __do_fast_syscall_32+0x13a/0x8b0 [ 557.833456][T14283] ? lockdep_hardirqs_on+0x7d/0x110 [ 557.835680][T14283] do_fast_syscall_32+0x32/0x70 [ 557.837700][T14283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.840382][T14283] RIP: 0023:0xf7f36fec [ 557.842135][T14283] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 557.844927][T14283] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 557.848591][T14283] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 557.852085][T14283] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 557.855481][T14283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.858788][T14283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 557.862114][T14283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.865475][T14283] [ 557.875385][T13410] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 557.877495][T14286] block2mtd: error: cannot open device /" [ 557.913551][T14282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.913599][T14282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 557.916029][T14282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 558.265511][ T5860] usb 7-1: USB disconnect, device number 118 [ 558.269918][ T5860] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 559.991884][ T5759] Bluetooth: hci1: command 0x0405 tx timeout [ 562.072143][ T5759] Bluetooth: hci1: command 0x0405 tx timeout [ 562.632558][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.632603][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.151291][ T5759] Bluetooth: hci1: command 0x0405 tx timeout