last executing test programs: 3m12.05160283s ago: executing program 1 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x3c, 0x0, 0x399, {0x28000, 0xf, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xfffffffffffffff3, 0x1, 0x6, 0x101, 0x8000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m11.908611718s ago: executing program 1 (id=382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 3m11.412955492s ago: executing program 1 (id=391): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 3m11.283218234s ago: executing program 1 (id=394): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x953\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\x98?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3m10.342102434s ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 3m10.189901076s ago: executing program 1 (id=404): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2m55.110914677s ago: executing program 32 (id=404): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2m26.591893172s ago: executing program 0 (id=894): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x953\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\x98?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m25.569205587s ago: executing program 0 (id=911): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) read(r8, 0x0, 0x0) 2m25.478245897s ago: executing program 0 (id=904): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000300)=0x100001, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x5e24, @private=0x8}}, 0x0, 0x0, 0xa, 0x3, 0x8a, 0x100007f}, 0x98) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) 2m25.476389846s ago: executing program 0 (id=906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) setresuid(r1, 0x0, r3) 2m25.354607631s ago: executing program 0 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) 2m25.308894845s ago: executing program 0 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1b, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x800, 0x7f}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x86, 0x3}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0xf, "39cdb44d8a27a9d284e56203ad"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0) 2m10.244174089s ago: executing program 33 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1b, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x800, 0x7f}, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x86, 0x3}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0xf, "39cdb44d8a27a9d284e56203ad"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0) 56.547441033s ago: executing program 3 (id=2107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 56.292821658s ago: executing program 3 (id=2113): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) close(0x3) 55.932363686s ago: executing program 3 (id=2116): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.493530796s ago: executing program 3 (id=2121): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuseblk(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 55.133144306s ago: executing program 3 (id=2126): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x10003, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 54.743392826s ago: executing program 3 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0x6004}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1c, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0xa3, 0x0, @remote, 0x0, 0x0, 0x8, 0x6}}}}}}}, 0x56) 54.614160422s ago: executing program 34 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0x6004}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1c, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0xa3, 0x0, @remote, 0x0, 0x0, 0x8, 0x6}}}}}}}, 0x56) 3.761050191s ago: executing program 2 (id=2743): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}) 3.576193744s ago: executing program 2 (id=2748): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x200, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.820199757s ago: executing program 2 (id=2757): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x10094180, 0x0, 0x32, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) 2.454047498s ago: executing program 5 (id=2760): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 1.120638855s ago: executing program 4 (id=2762): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.11833862s ago: executing program 5 (id=2770): syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0xb, 0x8, 0x7de5}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 1.116965997s ago: executing program 2 (id=2771): tgkill(0x0, 0x0, 0x36) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000236000/0x7000)=nil, 0x7000, 0x15) 1.027735297s ago: executing program 5 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 925.825347ms ago: executing program 5 (id=2764): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 852.924216ms ago: executing program 5 (id=2765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 850.874277ms ago: executing program 6 (id=2766): mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x2, 0x0) 760.233963ms ago: executing program 5 (id=2767): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x1200}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 698.461531ms ago: executing program 6 (id=2768): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) 556.546946ms ago: executing program 2 (id=2769): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x2, 0x909, 0x85a8, 0x9}, 0x11, [0x31b, 0x2, 0x6, 0x5, 0x6, 0x9d, 0x5, 0x100, 0x7fff, 0x7, 0xc, 0xe4c5, 0x3, 0x8, 0x0, 0x8, 0x8, 0x7, 0x1, 0x300000, 0x3ff, 0x5c3a, 0x3, 0x3, 0x3, 0x2a7d, 0x68300000, 0x7, 0x6, 0x9, 0x7, 0x9, 0x4, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x9, 0xffffffff, 0x3, 0x1, 0x9, 0x2, 0xc3, 0x3ff, 0x6, 0x7ff, 0x7f, 0x1, 0xfc, 0x6, 0x0, 0x9, 0x8001, 0xffff, 0x8000, 0x101, 0x4, 0xfffffe00, 0x9, 0x2, 0x6, 0x3f], [0xc12, 0x50d, 0x6, 0xb09, 0x3, 0x3, 0x5, 0x3, 0x9, 0x200, 0xa0, 0x1, 0x5, 0x3, 0x9156, 0xad, 0x2d53ba06, 0x1, 0xffffe6f3, 0x0, 0x8, 0xff, 0x8, 0x6, 0x2, 0x7, 0x7, 0x3411, 0x8001, 0xf5e, 0x4998, 0x3, 0x40000000, 0xff, 0x8, 0x3, 0x7ff, 0x100, 0x8001, 0x9, 0xfffffffa, 0x3, 0x7, 0x6, 0x9, 0xfff, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0x3ff, 0x9, 0x3, 0x2, 0xa, 0x1, 0x8000, 0x76c, 0x4, 0x2, 0x81, 0x7, 0x1], [0x8, 0x6, 0x6, 0x1, 0x6, 0x264, 0x46a4, 0x4, 0x10001, 0x401, 0x0, 0x1, 0x7, 0x0, 0x8, 0xd, 0x91cd, 0x9, 0x1ff, 0xffff3cc8, 0x9, 0x0, 0x3, 0x3, 0x7, 0x7, 0x80000000, 0x8, 0x19, 0x6, 0x9, 0x5, 0x82c, 0x6, 0x0, 0x1, 0x2, 0x3, 0x8, 0x0, 0x7, 0x0, 0x7fff, 0x1000, 0xfffffffd, 0x9, 0x401, 0x6, 0x0, 0x7, 0x0, 0x68, 0x8, 0x80000001, 0x9, 0x0, 0x9, 0x5, 0xfffffff4, 0x5, 0x0, 0x0, 0x6, 0x4], [0x1, 0x5d, 0xb, 0xff, 0xc, 0x0, 0x7fffffff, 0x0, 0x7ff, 0x4, 0x0, 0xf0, 0x2, 0xa48, 0xffffffff, 0x2, 0x10001, 0x10001, 0x0, 0x7, 0x4, 0x5, 0x6, 0x0, 0x3, 0xffffff80, 0xf, 0x5, 0x0, 0x8001, 0x85f, 0x10000, 0x100, 0x401, 0x7, 0xffffffff, 0x8, 0x5, 0xfffff3de, 0x13a, 0x6, 0x7, 0xffff, 0x6, 0xa8822ebd, 0x2, 0x3, 0x101, 0x85, 0x2800000, 0x200, 0xbc6e, 0xe36, 0x4, 0x2, 0xfff, 0x10000, 0x1, 0x0, 0x0, 0x8, 0x3, 0x9, 0x4]}, 0x45c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 523.295468ms ago: executing program 2 (id=2772): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') 433.21201ms ago: executing program 4 (id=2773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f9ffffff000000007f"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r0 = userfaultfd(0x80801) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 321.312603ms ago: executing program 4 (id=2774): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1000000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 320.873269ms ago: executing program 6 (id=2775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 263.055307ms ago: executing program 6 (id=2776): rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 151.422704ms ago: executing program 4 (id=2777): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x9f6, 0x7, 0x0, 0x1, 0x74e, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 138.637223ms ago: executing program 4 (id=2778): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)="2326eb3bc485ff633bcd9debcc0e6904c4d49561c4054d1b2d20548f155c7a88bbe137c77bf5b4f8e51fa3c71008165cd4c9", 0x32}, {&(0x7f0000000580)="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", 0xfee}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x43855) 64.694368ms ago: executing program 6 (id=2779): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) accept4(r0, 0x0, 0x0, 0x0) 409.903µs ago: executing program 6 (id=2780): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 4 (id=2781): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10001, 0x12) kernel console output (not intermixed with test programs): ex_key+0x10/0x10 [ 221.904783][T11835] ? __f_setown+0xb0/0x390 [ 221.904799][T11835] ? rcu_is_watching+0x13/0xc0 [ 221.904813][T11835] futex_wake+0xf4/0x5e0 [ 221.904827][T11835] ? __pfx_futex_wake+0x10/0x10 [ 221.904840][T11835] ? do_fcntl+0x811/0x1670 [ 221.904856][T11835] ? __pfx_do_fcntl+0x10/0x10 [ 221.904870][T11835] ? __fget_files+0x215/0x3d0 [ 221.904884][T11835] do_futex+0x2b2/0x440 [ 221.904896][T11835] ? __pfx_do_futex+0x10/0x10 [ 221.904906][T11835] ? fput+0x7c/0x100 [ 221.904919][T11835] ? do_compat_fcntl64+0x232/0x720 [ 221.904936][T11835] __ia32_sys_futex_time32+0x2f4/0x470 [ 221.904950][T11835] ? xfd_validate_state+0x129/0x190 [ 221.904967][T11835] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 221.904985][T11835] __do_fast_syscall_32+0x13a/0x8b0 [ 221.905003][T11835] do_fast_syscall_32+0x32/0x70 [ 221.905019][T11835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.905033][T11835] RIP: 0023:0xf702efec [ 221.905046][T11835] Code: Unable to access opcode bytes at 0xf702efc2. [ 221.905051][T11835] RSP: 002b:00000000f541d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 221.905064][T11835] RAX: ffffffffffffffda RBX: 00000000f7424f8c RCX: 0000000000000081 [ 221.905071][T11835] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 221.905080][T11835] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 221.905087][T11835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 221.905094][T11835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.905108][T11835] [ 221.906393][T11837] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2255'. [ 222.040882][T11841] trusted_key: syz.4.2257 sent an empty control message without MSG_MORE. [ 222.104884][ T9] libceph: connect (1)[c::]:6789 error -101 [ 222.104994][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 222.194484][T11843] ceph: No mds server is up or the cluster is laggy [ 222.318952][T11857] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 222.336465][ T5836] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 222.362697][T11857] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 222.486525][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 222.488744][ T5836] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 222.493885][ T5836] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 222.493935][ T5836] usb 9-1: config 0 has no interface number 0 [ 222.493996][ T5836] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.494036][ T5836] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 222.510143][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 222.510182][ T5836] usb 9-1: Product: syz [ 222.510226][ T5836] usb 9-1: SerialNumber: syz [ 222.518804][ T5836] usb 9-1: config 0 descriptor?? [ 222.534366][ T5836] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 222.538562][ T5836] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input42 [ 222.567294][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 222.943310][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 222.994922][T11874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input43 [ 223.345933][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.348951][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.349177][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.352113][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.355170][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.363165][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.364332][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.364562][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.364777][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.364991][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 223.386209][ T9] usb 9-1: USB disconnect, device number 11 [ 223.386288][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 223.397718][ T9] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 223.668720][T11892] loop5: detected capacity change from 0 to 7 [ 223.673907][T11892] Dev loop5: unable to read RDB block 7 [ 223.674001][T11892] loop5: AHDI p1 p3 p4 [ 223.674038][T11892] loop5: partition table partially beyond EOD, truncated [ 223.674248][T11892] loop5: p1 size 100663296 extends beyond EOD, truncated [ 223.682978][T11894] netlink: 'syz.6.2268': attribute type 4 has an invalid length. [ 223.704159][T11894] netlink: 'syz.6.2268': attribute type 4 has an invalid length. [ 223.726945][T11892] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 223.825251][T11895] Dev loop5: unable to read RDB block 7 [ 223.825310][T11895] loop5: AHDI p1 p3 p4 [ 223.825491][T11895] loop5: partition table partially beyond EOD, truncated [ 223.836209][T11895] loop5: p1 size 100663296 extends beyond EOD, truncated [ 223.838384][T11895] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 224.179784][ T8835] udevd[8835]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 224.180768][T11449] udevd[11449]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 224.263849][ T43] kauditd_printk_skb: 112 callbacks suppressed [ 224.263918][ T43] audit: type=1800 audit(1788433760.413:3855): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 224.295234][ T43] audit: type=1800 audit(1788433760.443:3856): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 224.335776][ T43] audit: type=1800 audit(1788433760.483:3857): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 224.413747][ T43] audit: type=1800 audit(1788433760.563:3858): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 224.462370][ T43] audit: type=1800 audit(1788433760.613:3859): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 224.485186][ T43] audit: type=1800 audit(1788433760.633:3860): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 224.610942][ T43] audit: type=1800 audit(1788433760.763:3861): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 224.665571][ T43] audit: type=1800 audit(1788433760.813:3862): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 224.707409][ T43] audit: type=1800 audit(1788433760.863:3863): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 224.728587][ T43] audit: type=1800 audit(1788433760.883:3864): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 224.741429][T11931] input: syz1 as /devices/virtual/input/input44 [ 224.880200][T11938] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.2287'. [ 225.180286][T11961] FAULT_INJECTION: forcing a failure. [ 225.180286][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 225.180374][T11961] CPU: 0 UID: 0 PID: 11961 Comm: syz.2.2298 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.180411][T11961] Tainted: [L]=SOFTLOCKUP [ 225.180419][T11961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.180430][T11961] Call Trace: [ 225.180438][T11961] [ 225.180445][T11961] dump_stack_lvl+0x100/0x190 [ 225.180472][T11961] should_fail_ex.cold+0x5/0xa [ 225.180496][T11961] should_failslab+0xc2/0x120 [ 225.180521][T11961] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.180548][T11961] ? __might_fault+0xc5/0x140 [ 225.180571][T11961] ? landlock_create_ruleset+0x8f/0x3a0 [ 225.180598][T11961] landlock_create_ruleset+0x8f/0x3a0 [ 225.180623][T11961] __do_sys_landlock_create_ruleset+0x2b0/0x770 [ 225.180648][T11961] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 225.180670][T11961] ? xfd_validate_state+0x129/0x190 [ 225.180704][T11961] __do_fast_syscall_32+0x13a/0x8b0 [ 225.180725][T11961] do_fast_syscall_32+0x32/0x70 [ 225.180744][T11961] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.180762][T11961] RIP: 0023:0xf7f75fec [ 225.180779][T11961] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 225.180788][T11961] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001bc [ 225.180804][T11961] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000010 [ 225.180815][T11961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.180824][T11961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.180833][T11961] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.180841][T11961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.180859][T11961] [ 225.683663][T11991] FAULT_INJECTION: forcing a failure. [ 225.683663][T11991] name failslab, interval 1, probability 0, space 0, times 0 [ 225.683712][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.2.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.683743][T11991] Tainted: [L]=SOFTLOCKUP [ 225.683749][T11991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.683756][T11991] Call Trace: [ 225.683761][T11991] [ 225.683767][T11991] dump_stack_lvl+0x100/0x190 [ 225.683786][T11991] should_fail_ex.cold+0x5/0xa [ 225.683805][T11991] should_failslab+0xc2/0x120 [ 225.683821][T11991] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.683841][T11991] ? kobject_uevent_env+0x263/0x18b0 [ 225.683857][T11991] kobject_uevent_env+0x263/0x18b0 [ 225.683872][T11991] ? rcu_is_watching+0x13/0xc0 [ 225.683886][T11991] gadget_bind_driver+0x773/0xbf0 [ 225.683901][T11991] ? urbs_show+0x3d1/0x440 [ 225.683919][T11991] ? __pfx_gadget_bind_driver+0x10/0x10 [ 225.683932][T11991] really_probe+0x241/0xa60 [ 225.683948][T11991] __driver_probe_device+0x210/0x460 [ 225.683963][T11991] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.683980][T11991] driver_probe_device+0x4a/0x140 [ 225.683994][T11991] __driver_attach+0x21f/0x5b0 [ 225.684009][T11991] ? __pfx___driver_attach+0x10/0x10 [ 225.684022][T11991] bus_for_each_dev+0x13e/0x1d0 [ 225.684046][T11991] ? __pfx_bus_for_each_dev+0x10/0x10 [ 225.684065][T11991] ? bus_add_driver+0x2b5/0x5b0 [ 225.684082][T11991] bus_add_driver+0x305/0x5b0 [ 225.684096][T11991] driver_register+0x1e2/0x360 [ 225.684111][T11991] ? rcu_is_watching+0x13/0xc0 [ 225.684124][T11991] usb_gadget_register_driver_owner+0x132/0x210 [ 225.684140][T11991] raw_ioctl+0x1a85/0x2b80 [ 225.684157][T11991] ? __pfx_raw_ioctl+0x10/0x10 [ 225.684171][T11991] ? __pfx_raw_ioctl+0x10/0x10 [ 225.684183][T11991] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 225.684206][T11991] __do_fast_syscall_32+0x13a/0x8b0 [ 225.684224][T11991] do_fast_syscall_32+0x32/0x70 [ 225.684240][T11991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.684255][T11991] RIP: 0023:0xf7f75fec [ 225.684269][T11991] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 225.684274][T11991] RSP: 002b:00000000f5434424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 225.684286][T11991] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 225.684293][T11991] RDX: 0000000000000000 RSI: 00000000f7407ff4 RDI: 00000000f54354c0 [ 225.684300][T11991] RBP: 00000000f7407ff4 R08: 0000000000000000 R09: 0000000000000000 [ 225.684307][T11991] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 225.684314][T11991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.684328][T11991] [ 225.703100][T11986] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 225.870572][T11998] syzkaller1: entered promiscuous mode [ 225.872450][T11998] syzkaller1: entered allmulticast mode [ 225.925949][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 225.929980][T12000] syzkaller1: entered promiscuous mode [ 225.930056][T12000] syzkaller1: entered allmulticast mode [ 226.065908][ T9] usb 7-1: device descriptor read/64, error -71 [ 226.295942][ T5853] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 226.306674][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 226.436341][ T9] usb 7-1: device descriptor read/64, error -71 [ 226.448765][ T5853] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 226.450183][ T5853] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 226.450199][ T5853] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.450212][ T5853] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.450230][ T5853] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.457559][T12013] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 226.459186][ T5853] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 226.479939][T12040] netlink: 'syz.4.2324': attribute type 12 has an invalid length. [ 226.484984][ T5853] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 226.548412][ T9] usb usb7-port1: attempt power cycle [ 226.620665][T12044] netlink: 'syz.4.2325': attribute type 4 has an invalid length. [ 226.620732][T12044] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2325'. [ 226.640603][T12044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.689827][ T5853] usb 11-1: USB disconnect, device number 4 [ 226.698483][ T5853] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 226.702799][ T5853] cyberjack 11-1:1.0: device disconnected [ 226.712757][T12046] mmap: syz.4.2326 (12046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.886098][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 226.906974][ T9] usb 7-1: device descriptor read/8, error -71 [ 227.146017][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 227.166975][ T9] usb 7-1: device descriptor read/8, error -71 syzkaller syzkaller login: [ 227.276380][ T9] usb usb7-port1: unable to enumerate USB device [ 227.292066][T12063] FAULT_INJECTION: forcing a failure. [ 227.292066][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 227.292148][T12063] CPU: 2 UID: 0 PID: 12063 Comm: syz.6.2333 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.292190][T12063] Tainted: [L]=SOFTLOCKUP [ 227.292199][T12063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.292212][T12063] Call Trace: [ 227.292220][T12063] [ 227.292229][T12063] dump_stack_lvl+0x100/0x190 [ 227.292261][T12063] should_fail_ex.cold+0x5/0xa [ 227.292289][T12063] should_failslab+0xc2/0x120 [ 227.292315][T12063] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.292345][T12063] ? dev_ethtool+0x1b1/0x6bb0 [ 227.292375][T12063] dev_ethtool+0x1b1/0x6bb0 [ 227.292404][T12063] ? tomoyo_path_number_perm+0x46d/0x580 [ 227.292432][T12063] ? stack_trace_save+0x8e/0xc0 [ 227.292459][T12063] ? __pfx_stack_trace_save+0x10/0x10 [ 227.292489][T12063] ? __pfx_dev_ethtool+0x10/0x10 [ 227.292514][T12063] ? tomoyo_path_number_perm+0x46d/0x580 [ 227.292540][T12063] ? kasan_save_stack+0x3f/0x50 [ 227.292567][T12063] ? kasan_save_stack+0x30/0x50 [ 227.292588][T12063] ? kasan_save_track+0x14/0x30 [ 227.292608][T12063] ? kasan_save_free_info+0x3b/0x70 [ 227.292638][T12063] ? __kasan_slab_free+0x5f/0x80 [ 227.292663][T12063] ? kfree+0x22b/0x6d0 [ 227.292693][T12063] ? tomoyo_path_number_perm+0x46d/0x580 [ 227.292721][T12063] ? security_file_ioctl_compat+0xd3/0x230 [ 227.292746][T12063] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 227.292776][T12063] ? __do_fast_syscall_32+0x13a/0x8b0 [ 227.292803][T12063] ? do_fast_syscall_32+0x32/0x70 [ 227.292828][T12063] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.292899][T12063] ? kasan_quarantine_put+0x104/0x240 [ 227.292922][T12063] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.292955][T12063] ? __lock_acquire+0x4c5/0x1ec0 [ 227.292985][T12063] ? tomoyo_path_number_perm+0x188/0x580 [ 227.293013][T12063] ? lock_acquire+0x1d1/0x380 [ 227.293036][T12063] ? dev_load+0x2a/0x240 [ 227.293056][T12063] ? find_held_lock+0x2b/0x80 [ 227.293074][T12063] ? dev_load+0x8e/0x240 [ 227.293094][T12063] ? dev_load+0x8e/0x240 [ 227.293120][T12063] dev_ioctl+0x63b/0x1070 [ 227.293144][T12063] compat_sock_ioctl+0x4f9/0x760 [ 227.293177][T12063] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 227.293208][T12063] ? hook_file_ioctl_common+0x140/0x440 [ 227.293240][T12063] ? __fget_files+0x21f/0x3d0 [ 227.293265][T12063] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 227.293297][T12063] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 227.293331][T12063] __do_fast_syscall_32+0x13a/0x8b0 [ 227.293362][T12063] do_fast_syscall_32+0x32/0x70 [ 227.293390][T12063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.293413][T12063] RIP: 0023:0xf709efec [ 227.293437][T12063] Code: Unable to access opcode bytes at 0xf709efc2. [ 227.293447][T12063] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 227.293467][T12063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 227.293481][T12063] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.293493][T12063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.293508][T12063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.293521][T12063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.293547][T12063] [ 227.331596][T12061] bridge0: port 3(team0) entered disabled state [ 227.331770][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.331935][T12064] netlink: 'syz.5.2332': attribute type 10 has an invalid length. [ 227.332038][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.402579][T12065] siw: device registration error -23 [ 227.481203][T12061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.494047][T12061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.686855][T10697] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.687035][T10697] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.687095][T10697] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.687111][T10697] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.687130][T10697] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.687149][T10697] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.687168][T10697] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.687182][T10697] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.687794][T12064] dummy0: left promiscuous mode [ 227.687873][T12064] dummy0: left allmulticast mode [ 227.690112][ T5982] syz1: Port: 1 Link DOWN [ 227.718571][T12064] team0: Port device dummy0 removed [ 227.875046][T12078] bridge0: port 3(syz_tun) entered blocking state [ 227.881202][T12078] bridge0: port 3(syz_tun) entered disabled state [ 227.883703][T12078] syz_tun: entered allmulticast mode [ 227.887118][T12078] syz_tun: entered promiscuous mode [ 227.891708][T12078] bridge0: port 3(syz_tun) entered blocking state [ 227.891840][T12078] bridge0: port 3(syz_tun) entered forwarding state [ 227.900352][T12078] bridge0: port 4(batadv0) entered blocking state [ 227.902755][T12078] bridge0: port 4(batadv0) entered disabled state [ 227.905533][T12078] batadv0: entered allmulticast mode [ 227.907576][T12078] batadv0: entered promiscuous mode [ 227.909133][T12078] bridge0: port 4(batadv0) entered blocking state [ 227.909185][T12078] bridge0: port 4(batadv0) entered forwarding state [ 227.982226][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 227.989025][T12084] FAULT_INJECTION: forcing a failure. [ 227.989025][T12084] name failslab, interval 1, probability 0, space 0, times 0 [ 227.989110][T12084] CPU: 2 UID: 0 PID: 12084 Comm: syz.6.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.989138][T12084] Tainted: [L]=SOFTLOCKUP [ 227.989146][T12084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.989158][T12084] Call Trace: [ 227.989164][T12084] [ 227.989172][T12084] dump_stack_lvl+0x100/0x190 [ 227.989203][T12084] should_fail_ex.cold+0x5/0xa [ 227.989227][T12084] should_failslab+0xc2/0x120 [ 227.989252][T12084] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.989277][T12084] ? do_raw_spin_lock+0x128/0x260 [ 227.989302][T12084] ? alloc_fdtable+0xbd/0x2d0 [ 227.989323][T12084] alloc_fdtable+0xbd/0x2d0 [ 227.989340][T12084] dup_fd+0x995/0xd10 [ 227.989363][T12084] ksys_unshare+0x7c7/0xa70 [ 227.989380][T12084] ? __pfx_ksys_unshare+0x10/0x10 [ 227.989396][T12084] ? ksys_write+0x1ac/0x250 [ 227.989419][T12084] __ia32_sys_unshare+0x30/0x40 [ 227.989435][T12084] __do_fast_syscall_32+0x13a/0x8b0 [ 227.989461][T12084] do_fast_syscall_32+0x32/0x70 [ 227.989487][T12084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.989511][T12084] RIP: 0023:0xf709efec [ 227.989528][T12084] Code: Unable to access opcode bytes at 0xf709efc2. [ 227.989536][T12084] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 227.989554][T12084] RAX: ffffffffffffffda RBX: 0000000024040400 RCX: 0000000000000000 [ 227.989567][T12084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.989579][T12084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.989591][T12084] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.989602][T12084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.989626][T12084] [ 228.017772][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 228.018438][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 228.046027][ T2345] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 228.063266][T12087] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.206314][ T5822] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 228.206383][ T5822] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 228.207678][ T2345] usb 10-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 228.209090][ T2345] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.209131][ T2345] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.213232][ T2345] usb 10-1: config 0 descriptor?? [ 228.677218][ T2345] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5005.000F/input/input45 [ 228.808448][ T2345] input: HID 0458:5005 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0458:5005.000F/input/input46 [ 228.881385][ T2345] kye 0003:0458:5005.000F: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.5-1/input0 [ 228.933673][ T2345] usb 10-1: USB disconnect, device number 11 [ 229.275128][ T43] kauditd_printk_skb: 138 callbacks suppressed [ 229.275218][ T43] audit: type=1800 audit(1788433765.423:4003): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 229.349226][ T43] audit: type=1800 audit(1788433765.503:4004): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 229.362374][ T43] audit: type=1800 audit(1788433765.513:4005): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184192 res=0 errno=0 [ 229.363333][ T43] audit: type=1800 audit(1788433765.513:4006): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=184207 res=0 errno=0 [ 229.363841][ T43] audit: type=1800 audit(1788433765.513:4007): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=184210 res=0 errno=0 [ 229.364349][ T43] audit: type=1800 audit(1788433765.513:4008): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=184209 res=0 errno=0 [ 229.364843][ T43] audit: type=1800 audit(1788433765.513:4009): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=184208 res=0 errno=0 [ 229.364962][T12141] input: syz0 as /devices/virtual/input/input47 [ 229.366094][ T43] audit: type=1800 audit(1788433765.513:4010): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=184199 res=0 errno=0 [ 229.368051][ T43] audit: type=1800 audit(1788433765.513:4011): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=184202 res=0 errno=0 [ 229.369408][ T43] audit: type=1800 audit(1788433765.513:4012): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=184195 res=0 errno=0 [ 229.593750][T12154] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2371'. [ 229.757594][T12165] gtp0: entered allmulticast mode [ 230.382162][ T5630] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 230.552475][ T5630] usb 7-1: Using ep0 maxpacket: 8 [ 230.553903][ T5630] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 230.555823][ T5630] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 230.555848][ T5630] usb 7-1: config 0 has no interface number 0 [ 230.555881][ T5630] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.555903][ T5630] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.555925][ T5630] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 230.555949][ T5630] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 230.555971][ T5630] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.558124][ T5630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.558149][ T5630] usb 7-1: Product: syz [ 230.558164][ T5630] usb 7-1: Manufacturer: syz [ 230.558179][ T5630] usb 7-1: SerialNumber: syz [ 230.565367][ T5630] usb 7-1: config 0 descriptor?? [ 230.787990][T12176] ceph: No mds server is up or the cluster is laggy [ 230.791283][T12172] ceph: No mds server is up or the cluster is laggy [ 230.796885][ T5630] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 231.032051][ T5630] usb 7-1: USB disconnect, device number 21 [ 232.166750][ T5982] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 232.266438][T12259] FAULT_INJECTION: forcing a failure. [ 232.266438][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 232.284525][T12259] CPU: 2 UID: 0 PID: 12259 Comm: syz.5.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.284575][T12259] Tainted: [L]=SOFTLOCKUP [ 232.284585][T12259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.284597][T12259] Call Trace: [ 232.284606][T12259] [ 232.284615][T12259] dump_stack_lvl+0x100/0x190 [ 232.284648][T12259] should_fail_ex.cold+0x5/0xa [ 232.284676][T12259] should_failslab+0xc2/0x120 [ 232.284704][T12259] __kmalloc_cache_noprof+0x91/0x6d0 [ 232.284735][T12259] ? sctp_association_new+0xbb/0x2990 [ 232.284762][T12259] sctp_association_new+0xbb/0x2990 [ 232.284785][T12259] ? sctp_v4_scope+0x183/0x1a0 [ 232.284815][T12259] sctp_connect_new_asoc+0x1a8/0x770 [ 232.284840][T12259] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.284866][T12259] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.284901][T12259] __sctp_connect+0x3e7/0xc70 [ 232.284929][T12259] ? __pfx___sctp_connect+0x10/0x10 [ 232.284961][T12259] __sctp_setsockopt_connectx+0x100/0x190 [ 232.284987][T12259] sctp_setsockopt+0x46a9/0xb370 [ 232.285015][T12259] ? __pfx_sctp_setsockopt+0x10/0x10 [ 232.285040][T12259] ? aa_sock_opt_perm+0x114/0x1e0 [ 232.285060][T12259] ? sock_common_setsockopt+0x2e/0xf0 [ 232.285087][T12259] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.285117][T12259] do_sock_setsockopt+0xf3/0x1d0 [ 232.285150][T12259] __sys_setsockopt+0x119/0x190 [ 232.285178][T12259] __ia32_sys_setsockopt+0xbc/0x160 [ 232.285200][T12259] ? __do_fast_syscall_32+0xb3/0x8b0 [ 232.285228][T12259] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.285253][T12259] __do_fast_syscall_32+0x13a/0x8b0 [ 232.285284][T12259] do_fast_syscall_32+0x32/0x70 [ 232.285330][T12259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.285358][T12259] RIP: 0023:0xf702efec [ 232.285381][T12259] Code: Unable to access opcode bytes at 0xf702efc2. [ 232.285391][T12259] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 232.285411][T12259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 232.285424][T12259] RDX: 000000000000006e RSI: 00000000800008c0 RDI: 000000000000001c [ 232.285444][T12259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.285456][T12259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 232.285468][T12259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.285496][T12259] [ 232.344988][ T5982] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 232.346008][ T5982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.346043][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.347738][ T5982] usb 9-1: config 0 descriptor?? [ 232.792647][ T5982] hid_parser_main: 22 callbacks suppressed [ 232.792763][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792815][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792836][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792854][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792873][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792892][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.792911][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.798206][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.798233][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.798253][ T5982] savu 0003:1E7D:2D5A.0010: unknown main item tag 0x0 [ 232.824068][ T5982] savu 0003:1E7D:2D5A.0010: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 233.102861][ T10] usb 9-1: USB disconnect, device number 12 [ 233.226178][T12292] netfs: Duplicate cookie detected [ 233.226221][T12292] netfs: O-cookie c=00000014 [fl=4000 na=0 nA=0 s=-] [ 233.226253][T12292] netfs: O-cookie V=00000010 [9p,syz,] [ 233.226262][T12292] netfs: O-key=[8] 'a955640400000000' [ 233.226270][T12292] netfs: N-cookie c=00000015 [fl=0 na=0 nA=0 s=-] [ 233.226278][T12292] netfs: N-cookie V=00000010 [9p,syz,] [ 233.226285][T12292] netfs: N-key=[8] 'a955640400000000' [ 233.797309][T12316] FAULT_INJECTION: forcing a failure. [ 233.797309][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 233.797406][T12316] CPU: 3 UID: 0 PID: 12316 Comm: syz.6.2420 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.797442][T12316] Tainted: [L]=SOFTLOCKUP [ 233.797451][T12316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.797466][T12316] Call Trace: [ 233.797475][T12316] [ 233.797486][T12316] dump_stack_lvl+0x100/0x190 [ 233.797522][T12316] should_fail_ex.cold+0x5/0xa [ 233.797555][T12316] should_failslab+0xc2/0x120 [ 233.797586][T12316] __kmalloc_noprof+0xfc/0x840 [ 233.797613][T12316] ? sk_prot_alloc+0x10b/0x2a0 [ 233.797652][T12316] sk_prot_alloc+0x10b/0x2a0 [ 233.797688][T12316] sk_alloc+0x36/0xe80 [ 233.797716][T12316] mctp_pf_create+0xe8/0x360 [ 233.797754][T12316] __sock_create+0x339/0x860 [ 233.797798][T12316] __sys_socketpair+0x1e4/0x5b0 [ 233.797837][T12316] ? __pfx___sys_socketpair+0x10/0x10 [ 233.797887][T12316] __ia32_sys_socketpair+0x95/0x100 [ 233.797946][T12316] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.797977][T12316] __do_fast_syscall_32+0x13a/0x8b0 [ 233.798014][T12316] do_fast_syscall_32+0x32/0x70 [ 233.798047][T12316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.798080][T12316] RIP: 0023:0xf709efec [ 233.798111][T12316] Code: Unable to access opcode bytes at 0xf709efc2. [ 233.798127][T12316] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 233.798151][T12316] RAX: ffffffffffffffda RBX: 000000000000002d RCX: 0000000000000002 [ 233.798168][T12316] RDX: 0000000000000000 RSI: 0000000080000040 RDI: 0000000000000000 [ 233.798184][T12316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.798199][T12316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 233.798215][T12316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.798249][T12316] [ 233.987973][T12324] input: syz1 as /devices/virtual/input/input48 [ 234.113245][ T5982] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 234.158520][T12336] syzkaller1: entered promiscuous mode [ 234.158586][T12336] syzkaller1: entered allmulticast mode [ 234.285136][ T5982] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 234.286038][ T5982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.286063][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.287902][ T5982] usb 7-1: config 0 descriptor?? [ 234.741287][ T43] kauditd_printk_skb: 129 callbacks suppressed [ 234.741426][ T43] audit: type=1800 audit(1788433770.558:4142): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185368 res=0 errno=0 [ 234.744104][ T5982] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5005.0011/input/input49 [ 234.758215][ T43] audit: type=1800 audit(1788433770.586:4143): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185390 res=0 errno=0 [ 234.764046][ T43] audit: type=1800 audit(1788433770.586:4144): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=185406 res=0 errno=0 [ 234.768019][ T43] audit: type=1800 audit(1788433770.595:4145): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=185409 res=0 errno=0 [ 234.773693][ T43] audit: type=1800 audit(1788433770.595:4146): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=185408 res=0 errno=0 [ 234.775234][ T43] audit: type=1800 audit(1788433770.595:4147): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=185407 res=0 errno=0 [ 234.779587][ T43] audit: type=1800 audit(1788433770.604:4148): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=185398 res=0 errno=0 [ 234.781260][ T43] audit: type=1800 audit(1788433770.604:4149): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=185401 res=0 errno=0 [ 234.793552][ T43] audit: type=1800 audit(1788433770.614:4150): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=185372 res=0 errno=0 [ 234.796541][ T43] audit: type=1800 audit(1788433770.614:4151): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=185351 res=0 errno=0 [ 234.852097][ T5982] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5005.0011/input/input50 [ 234.951006][ T5982] kye 0003:0458:5005.0011: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 234.977383][ T5630] usb 7-1: USB disconnect, device number 22 [ 235.041589][T12344] fido_id[12344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 236.130660][T12378] xt_hashlimit: overflow, rate too high: 0 [ 236.429587][T12403] syzkaller1: entered promiscuous mode [ 236.429652][T12403] syzkaller1: entered allmulticast mode [ 236.432063][T12403] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 236.518424][ T5630] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 236.680529][ T5630] usb 10-1: Using ep0 maxpacket: 8 [ 236.682303][ T5630] usb 10-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 236.683148][ T5630] usb 10-1: config 0 has no interfaces? [ 236.685364][ T5630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.685385][ T5630] usb 10-1: Product: syz [ 236.685398][ T5630] usb 10-1: Manufacturer: syz [ 236.685410][ T5630] usb 10-1: SerialNumber: syz [ 236.691055][ T5630] usb 10-1: config 0 descriptor?? [ 236.914481][ T5630] usb 10-1: USB disconnect, device number 12 [ 238.325407][ T5755] Bluetooth: hci0: command 0x1003 tx timeout [ 238.327490][ T5759] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.559857][ T25] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 238.730799][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 238.733331][ T25] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.743228][ T25] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 238.747306][ T25] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.747332][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.747353][ T25] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.747371][ T25] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.747405][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.998268][ T25] usb 10-1: usb_control_msg returned -32 [ 239.000833][ T25] usbtmc 10-1:16.0: can't read capabilities [ 239.353208][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.374240][T12446] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.444589][T12446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.650252][T10697] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650360][T10697] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.650733][T10697] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650750][T10697] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.650768][T10697] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650782][T10697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.650799][T10697] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650813][T10697] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.755187][T12451] usbtmc 10-1:16.0: usb_clear_halt returned -32 [ 239.946765][T12450] syz.4.2468 (12450): drop_caches: 2 [ 239.972083][ T5982] usb 10-1: USB disconnect, device number 13 [ 240.055792][T12459] FAULT_INJECTION: forcing a failure. [ 240.055792][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 240.055874][T12459] CPU: 3 UID: 0 PID: 12459 Comm: syz.2.2474 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.055917][T12459] Tainted: [L]=SOFTLOCKUP [ 240.055925][T12459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.055937][T12459] Call Trace: [ 240.055946][T12459] [ 240.055954][T12459] dump_stack_lvl+0x100/0x190 [ 240.055991][T12459] should_fail_ex.cold+0x5/0xa [ 240.056016][T12459] should_failslab+0xc2/0x120 [ 240.056040][T12459] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.056061][T12459] ? alloc_vfsmnt+0x23/0x710 [ 240.056091][T12459] alloc_vfsmnt+0x23/0x710 [ 240.056117][T12459] clone_mnt+0x4b/0x930 [ 240.056141][T12459] copy_tree+0x329/0xbf0 [ 240.056166][T12459] copy_mnt_ns+0x3fa/0x1180 [ 240.056195][T12459] ? __pfx_copy_mnt_ns+0x10/0x10 [ 240.056222][T12459] ? create_new_namespaces+0x30/0xac0 [ 240.056272][T12459] create_new_namespaces+0xd3/0xac0 [ 240.056298][T12459] ? bpf_lsm_capable+0x9/0x10 [ 240.056323][T12459] ? security_capable+0x80/0x260 [ 240.056346][T12459] unshare_nsproxy_namespaces+0xf2/0x220 [ 240.056373][T12459] ksys_unshare+0x4a2/0xa70 [ 240.056391][T12459] ? __pfx_ksys_unshare+0x10/0x10 [ 240.056416][T12459] __ia32_sys_unshare+0x30/0x40 [ 240.056432][T12459] __do_fast_syscall_32+0x13a/0x8b0 [ 240.056459][T12459] do_fast_syscall_32+0x32/0x70 [ 240.056480][T12459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.056503][T12459] RIP: 0023:0xf7f75fec [ 240.056521][T12459] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 240.056531][T12459] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 240.056549][T12459] RAX: ffffffffffffffda RBX: 0000000022020400 RCX: 0000000000000000 [ 240.056561][T12459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.056573][T12459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.056583][T12459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 240.056593][T12459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.056619][T12459] [ 240.091638][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 240.091653][ T43] audit: type=1800 audit(1788433775.571:4229): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 240.195487][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 240.367743][ T9] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.368795][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.368813][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.368824][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.368843][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.370104][ T9] usb 11-1: config 0 descriptor?? [ 240.371718][ T43] audit: type=1800 audit(1788433775.833:4230): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185998 res=0 errno=0 [ 240.372781][ T43] audit: type=1800 audit(1788433775.833:4231): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=186027 res=0 errno=0 [ 240.373122][ T43] audit: type=1800 audit(1788433775.833:4232): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=186005 res=0 errno=0 [ 240.375100][ T43] audit: type=1800 audit(1788433775.833:4233): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=186006 res=0 errno=0 [ 240.375913][ T43] audit: type=1800 audit(1788433775.833:4234): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=186007 res=0 errno=0 [ 240.380014][ T43] audit: type=1800 audit(1788433775.843:4235): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186047 res=0 errno=0 [ 240.540885][ T43] audit: type=1800 audit(1788433775.983:4236): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 240.557623][ T43] audit: type=1800 audit(1788433776.002:4237): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 240.815795][ T43] audit: type=1800 audit(1788433776.254:4238): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186065 res=0 errno=0 [ 240.819694][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 243.073731][ T9] usb 11-1: USB disconnect, device number 5 [ 243.389122][T12498] FAULT_INJECTION: forcing a failure. [ 243.389122][T12498] name failslab, interval 1, probability 0, space 0, times 0 [ 243.389183][T12498] CPU: 0 UID: 0 PID: 12498 Comm: syz.4.2489 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.389214][T12498] Tainted: [L]=SOFTLOCKUP [ 243.389220][T12498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.389228][T12498] Call Trace: [ 243.389233][T12498] [ 243.389239][T12498] dump_stack_lvl+0x100/0x190 [ 243.389260][T12498] should_fail_ex.cold+0x5/0xa [ 243.389278][T12498] should_failslab+0xc2/0x120 [ 243.389297][T12498] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 243.389314][T12498] ? copy_process+0x6a2/0x8370 [ 243.389353][T12498] copy_process+0x6a2/0x8370 [ 243.389385][T12498] ? __pfx___futex_wait+0x10/0x10 [ 243.389407][T12498] ? __pfx_try_to_wake_up+0x10/0x10 [ 243.389433][T12498] ? futex_hash+0x311/0x400 [ 243.389468][T12498] ? __pfx_copy_process+0x10/0x10 [ 243.389498][T12498] ? futex_wake+0x4ea/0x5e0 [ 243.389530][T12498] kernel_clone+0x176/0x9d0 [ 243.389562][T12498] ? __pfx_kernel_clone+0x10/0x10 [ 243.389596][T12498] ? ksys_write+0x190/0x250 [ 243.389623][T12498] __do_compat_sys_ia32_clone+0xd4/0x120 [ 243.389653][T12498] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 243.389680][T12498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.389728][T12498] __do_fast_syscall_32+0x13a/0x8b0 [ 243.389758][T12498] do_fast_syscall_32+0x32/0x70 [ 243.389785][T12498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.389807][T12498] RIP: 0023:0xf7f53fec [ 243.389830][T12498] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 243.389839][T12498] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 243.389860][T12498] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 243.389873][T12498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.389884][T12498] RBP: 00000000f54165ec R08: 0000000000000000 R09: 0000000000000000 [ 243.389896][T12498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.389909][T12498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.389937][T12498] [ 243.519827][T12502] FAULT_INJECTION: forcing a failure. [ 243.519827][T12502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.531217][T12502] CPU: 3 UID: 0 PID: 12502 Comm: syz.4.2491 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.531274][T12502] Tainted: [L]=SOFTLOCKUP [ 243.531284][T12502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.531298][T12502] Call Trace: [ 243.531307][T12502] [ 243.531319][T12502] dump_stack_lvl+0x100/0x190 [ 243.531357][T12502] should_fail_ex.cold+0x5/0xa [ 243.531382][T12502] ? prepare_alloc_pages+0x16d/0x5b0 [ 243.531415][T12502] should_fail_alloc_page+0xeb/0x140 [ 243.531446][T12502] prepare_alloc_pages+0x1f0/0x5b0 [ 243.531474][T12502] ? bpf_ksym_find+0x124/0x1c0 [ 243.531503][T12502] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 243.531541][T12502] ? lock_acquire+0x1d1/0x380 [ 243.531570][T12502] ? __pfx___css_rstat_updated+0x10/0x10 [ 243.531626][T12502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.531666][T12502] ? update_cfs_rq_load_avg+0x51/0x550 [ 243.531700][T12502] ? __dequeue_entity+0xe3b/0x1de0 [ 243.531745][T12502] ? __lock_acquire+0x4c5/0x1ec0 [ 243.531772][T12502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.531803][T12502] ? policy_nodemask+0xed/0x4f0 [ 243.531835][T12502] alloc_pages_mpol+0x201/0x550 [ 243.531865][T12502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.531894][T12502] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 243.531932][T12502] alloc_pages_noprof+0x1a/0x160 [ 243.531965][T12502] pte_alloc_one+0x1c/0x3d0 [ 243.531993][T12502] __pte_alloc+0x6d/0x380 [ 243.532018][T12502] ? __pfx___pte_alloc+0x10/0x10 [ 243.532041][T12502] ? rcu_read_unlock+0x2d/0xb0 [ 243.532080][T12502] do_anonymous_page+0x1307/0x2050 [ 243.532117][T12502] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 243.532149][T12502] ? __pfx_do_anonymous_page+0x10/0x10 [ 243.532178][T12502] ? pgd_none+0x9f/0xe0 [ 243.532205][T12502] ? __pfx_pgd_none+0x10/0x10 [ 243.532240][T12502] __handle_mm_fault+0x1ff3/0x2f60 [ 243.532277][T12502] ? __pfx___handle_mm_fault+0x10/0x10 [ 243.532307][T12502] ? __pfx_folio_mark_accessed+0x10/0x10 [ 243.532341][T12502] ? find_held_lock+0x2b/0x80 [ 243.532362][T12502] ? find_held_lock+0x2b/0x80 [ 243.532382][T12502] ? follow_page_pte+0x479/0x1050 [ 243.532425][T12502] handle_mm_fault+0x363/0xa20 [ 243.532461][T12502] __get_user_pages+0x8ae/0x2c30 [ 243.532493][T12502] ? kasan_save_stack+0x30/0x50 [ 243.532521][T12502] ? __pfx___get_user_pages+0x10/0x10 [ 243.532545][T12502] ? __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 243.532568][T12502] ? do_fast_syscall_32+0x32/0x70 [ 243.532608][T12502] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.532646][T12502] __gup_longterm_locked+0x87d/0x16f0 [ 243.532674][T12502] ? __lock_acquire+0x4c5/0x1ec0 [ 243.532711][T12502] ? __pfx___gup_longterm_locked+0x10/0x10 [ 243.532741][T12502] ? lock_acquire+0x1d1/0x380 [ 243.532768][T12502] ? process_vm_rw_core.constprop.0+0x3e6/0x950 [ 243.532800][T12502] pin_user_pages_remote+0xed/0x140 [ 243.532828][T12502] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 243.532868][T12502] process_vm_rw_core.constprop.0+0x412/0x950 [ 243.532895][T12502] ? lockdep_hardirqs_on+0x7d/0x110 [ 243.532931][T12502] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 243.532978][T12502] ? iovec_from_user+0xda/0x140 [ 243.533009][T12502] process_vm_rw+0x226/0x2d0 [ 243.533036][T12502] ? __pfx_process_vm_rw+0x10/0x10 [ 243.533066][T12502] ? find_held_lock+0x2b/0x80 [ 243.533088][T12502] ? ksys_write+0x190/0x250 [ 243.533139][T12502] ? xfd_validate_state+0x129/0x190 [ 243.533183][T12502] __ia32_sys_process_vm_readv+0xdf/0x1b0 [ 243.533207][T12502] ? __do_fast_syscall_32+0xb3/0x8b0 [ 243.533235][T12502] ? lockdep_hardirqs_on+0x7d/0x110 [ 243.533262][T12502] __do_fast_syscall_32+0x13a/0x8b0 [ 243.533295][T12502] do_fast_syscall_32+0x32/0x70 [ 243.533325][T12502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.533352][T12502] RIP: 0023:0xf7f53fec [ 243.533419][T12502] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 243.533432][T12502] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000015b [ 243.533456][T12502] RAX: ffffffffffffffda RBX: 0000000000000505 RCX: 0000000080008400 [ 243.533471][T12502] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 243.533487][T12502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.533501][T12502] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.533515][T12502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.533550][T12502] [ 244.348408][T12536] FAULT_INJECTION: forcing a failure. [ 244.348408][T12536] name failslab, interval 1, probability 0, space 0, times 0 [ 244.348505][T12536] CPU: 2 UID: 0 PID: 12536 Comm: syz.5.2506 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.348533][T12536] Tainted: [L]=SOFTLOCKUP [ 244.348541][T12536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.348553][T12536] Call Trace: [ 244.348561][T12536] [ 244.348570][T12536] dump_stack_lvl+0x100/0x190 [ 244.348618][T12536] should_fail_ex.cold+0x5/0xa [ 244.348645][T12536] should_failslab+0xc2/0x120 [ 244.348670][T12536] kmem_cache_alloc_noprof+0x92/0x6a0 [ 244.348696][T12536] ? sk_prot_alloc+0x60/0x2a0 [ 244.348730][T12536] sk_prot_alloc+0x60/0x2a0 [ 244.348760][T12536] sk_alloc+0x36/0xe80 [ 244.348783][T12536] rxrpc_create+0x116/0x8d0 [ 244.348813][T12536] __sock_create+0x339/0x860 [ 244.348850][T12536] __sys_socket+0x14d/0x260 [ 244.348879][T12536] ? xfd_validate_state+0x129/0x190 [ 244.348909][T12536] ? __pfx___sys_socket+0x10/0x10 [ 244.348947][T12536] __ia32_sys_socket+0x72/0xb0 [ 244.348975][T12536] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.349001][T12536] __do_fast_syscall_32+0x13a/0x8b0 [ 244.349032][T12536] do_fast_syscall_32+0x32/0x70 [ 244.349060][T12536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.349087][T12536] RIP: 0023:0xf702efec [ 244.349109][T12536] Code: Unable to access opcode bytes at 0xf702efc2. [ 244.349118][T12536] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 244.349140][T12536] RAX: ffffffffffffffda RBX: 0000000000000021 RCX: 0000000000000002 [ 244.349154][T12536] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.349167][T12536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.349180][T12536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.349192][T12536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.349219][T12536] [ 244.538842][T12549] netlink: 'syz.6.2508': attribute type 34 has an invalid length. [ 244.708670][T12558] FAULT_INJECTION: forcing a failure. [ 244.708670][T12558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.723563][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.2.2514 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.723598][T12558] Tainted: [L]=SOFTLOCKUP [ 244.723604][T12558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.723612][T12558] Call Trace: [ 244.723617][T12558] [ 244.723623][T12558] dump_stack_lvl+0x100/0x190 [ 244.723644][T12558] should_fail_ex.cold+0x5/0xa [ 244.723657][T12558] ? prepare_alloc_pages+0x16d/0x5b0 [ 244.723674][T12558] should_fail_alloc_page+0xeb/0x140 [ 244.723692][T12558] prepare_alloc_pages+0x1f0/0x5b0 [ 244.723709][T12558] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 244.723732][T12558] ? rcu_is_watching+0x13/0xc0 [ 244.723746][T12558] ? __lock_acquire+0x4c5/0x1ec0 [ 244.723763][T12558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.723783][T12558] ? __css_rstat_updated+0x1ce/0x590 [ 244.723801][T12558] ? lock_acquire+0x1d1/0x380 [ 244.723816][T12558] ? do_raw_spin_lock+0x128/0x260 [ 244.723834][T12558] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 244.723851][T12558] ? find_held_lock+0x2b/0x80 [ 244.723867][T12558] ? __lock_acquire+0x4c5/0x1ec0 [ 244.723883][T12558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.723900][T12558] ? policy_nodemask+0xed/0x4f0 [ 244.723916][T12558] alloc_pages_mpol+0x201/0x550 [ 244.723932][T12558] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 244.723952][T12558] folio_alloc_mpol_noprof+0x36/0x260 [ 244.723970][T12558] shmem_alloc_folio+0x135/0x160 [ 244.723987][T12558] shmem_alloc_and_add_folio+0x371/0xd40 [ 244.724007][T12558] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 244.724025][T12558] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 244.724051][T12558] shmem_get_folio_gfp+0x75b/0x1980 [ 244.724073][T12558] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 244.724093][T12558] ? filemap_map_pages+0x114a/0x2100 [ 244.724114][T12558] shmem_fault+0x1fb/0xa30 [ 244.724133][T12558] ? __pfx_shmem_fault+0x10/0x10 [ 244.724153][T12558] ? __pfx_filemap_map_pages+0x10/0x10 [ 244.724172][T12558] ? find_held_lock+0x2b/0x80 [ 244.724186][T12558] ? __pfx_filemap_map_pages+0x10/0x10 [ 244.724201][T12558] __do_fault+0x10b/0x440 [ 244.724216][T12558] do_fault+0xb3f/0x1830 [ 244.724231][T12558] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 244.724249][T12558] ? __pfx_do_fault+0x10/0x10 [ 244.724262][T12558] ? rcu_read_unlock+0x2d/0xb0 [ 244.724279][T12558] ? rcu_read_unlock+0x2d/0xb0 [ 244.724295][T12558] ? __pte_offset_map+0x179/0x310 [ 244.724310][T12558] __handle_mm_fault+0x150b/0x2f60 [ 244.724330][T12558] ? __pfx___handle_mm_fault+0x10/0x10 [ 244.724347][T12558] ? pte_offset_map_lock+0x174/0x320 [ 244.724360][T12558] ? find_held_lock+0x2b/0x80 [ 244.724371][T12558] ? find_held_lock+0x2b/0x80 [ 244.724383][T12558] ? follow_page_pte+0x536/0x1050 [ 244.724404][T12558] handle_mm_fault+0x363/0xa20 [ 244.724424][T12558] __get_user_pages+0x8ae/0x2c30 [ 244.724441][T12558] ? __pfx_mt_find+0x10/0x10 [ 244.724458][T12558] ? __pfx___get_user_pages+0x10/0x10 [ 244.724477][T12558] populate_vma_page_range+0x267/0x3f0 [ 244.724492][T12558] ? __pfx_populate_vma_page_range+0x10/0x10 [ 244.724506][T12558] ? __pfx_find_vma_intersection+0x10/0x10 [ 244.724524][T12558] __mm_populate+0x107/0x3a0 [ 244.724539][T12558] ? __pfx___mm_populate+0x10/0x10 [ 244.724554][T12558] ? up_write+0x2dc/0x5b0 [ 244.724573][T12558] vm_mmap_pgoff+0x441/0x470 [ 244.724589][T12558] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 244.724602][T12558] ? __pfx_do_futex+0x10/0x10 [ 244.724619][T12558] ksys_mmap_pgoff+0xe4/0x610 [ 244.724635][T12558] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 244.724652][T12558] __do_fast_syscall_32+0x13a/0x8b0 [ 244.724670][T12558] do_fast_syscall_32+0x32/0x70 [ 244.724686][T12558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.724701][T12558] RIP: 0023:0xf7f75fec [ 244.724716][T12558] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 244.724721][T12558] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 244.724733][T12558] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 244.724741][T12558] RDX: 0000000006ebbeef RSI: 0000000000008031 RDI: 00000000ffffffff [ 244.724749][T12558] RBP: 00000000ffffc000 R08: 0000000000000000 R09: 0000000000000000 [ 244.724755][T12558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.724762][T12558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.724777][T12558] [ 245.492033][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 245.492130][ T43] audit: type=1800 audit(1788433780.622:4294): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 245.555291][ T43] audit: type=1800 audit(1788433780.679:4295): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187333 res=0 errno=0 [ 245.627828][ T43] audit: type=1800 audit(1788433780.744:4296): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 245.744949][ T43] audit: type=1800 audit(1788433780.856:4297): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 245.793248][ T43] audit: type=1800 audit(1788433780.903:4298): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 245.825232][ T43] audit: type=1800 audit(1788433780.931:4299): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 245.901634][ T43] audit: type=1800 audit(1788433781.006:4300): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 245.929537][ T43] audit: type=1800 audit(1788433781.034:4301): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 245.955330][ T43] audit: type=1800 audit(1788433781.053:4302): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 245.997431][T12603] FAULT_INJECTION: forcing a failure. [ 245.997431][T12603] name fail_futex, interval 1, probability 0, space 0, times 0 [ 245.997555][T12603] CPU: 2 UID: 0 PID: 12603 Comm: syz.4.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.997603][T12603] Tainted: [L]=SOFTLOCKUP [ 245.997615][T12603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.997627][T12603] Call Trace: [ 245.997635][T12603] [ 245.997645][T12603] dump_stack_lvl+0x100/0x190 [ 245.997681][T12603] should_fail_ex.cold+0x5/0xa [ 245.997709][T12603] get_futex_key+0x1d0/0x14f0 [ 245.997748][T12603] ? __pfx_get_futex_key+0x10/0x10 [ 245.997778][T12603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.997811][T12603] ? __fsnotify_parent+0x2b4/0xd00 [ 245.997864][T12603] futex_wake+0xf4/0x5e0 [ 245.997893][T12603] ? __pfx_futex_wake+0x10/0x10 [ 245.997926][T12603] ? vfs_write+0x914/0x1050 [ 245.997946][T12603] ? vfs_write+0x15d/0x1050 [ 245.997971][T12603] do_futex+0x2b2/0x440 [ 245.997995][T12603] ? __pfx_do_futex+0x10/0x10 [ 245.998030][T12603] __ia32_sys_futex_time32+0x2f4/0x470 [ 245.998060][T12603] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 245.998084][T12603] ? fput+0x7c/0x100 [ 245.998110][T12603] ? ksys_write+0x1ac/0x250 [ 245.998132][T12603] ? __pfx_ksys_write+0x10/0x10 [ 245.998177][T12603] __do_fast_syscall_32+0x13a/0x8b0 [ 245.998269][T12603] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.998303][T12603] do_fast_syscall_32+0x32/0x70 [ 245.998432][T12603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.998461][T12603] RIP: 0023:0xf7f53fec [ 245.998484][T12603] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 245.998491][T12603] RSP: 002b:00000000f54165cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 245.998504][T12603] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 245.998513][T12603] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 245.998521][T12603] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 245.998529][T12603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.998537][T12603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.998555][T12603] [ 246.004129][ T43] audit: type=1800 audit(1788433781.099:4303): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 246.310110][T12620] xt_l2tp: invalid flags combination: 0 [ 246.488105][T12630] syzkaller1: entered promiscuous mode [ 246.488263][T12630] syzkaller1: entered allmulticast mode [ 246.909593][T12638] netlink: 'syz.6.2542': attribute type 3 has an invalid length. [ 246.909630][T12638] netlink: 'syz.6.2542': attribute type 3 has an invalid length. [ 247.310963][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 247.483082][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 247.487755][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.487791][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 247.487844][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.505586][ T10] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 247.509334][ T10] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 247.914246][T12646] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 247.916493][T12646] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 247.918999][T12646] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 248.007761][T12646] SPCP8x5 ttyUSB0: Set UART format 0x1709 failed (error = -32) [ 248.118235][ T2345] usb 7-1: USB disconnect, device number 23 [ 248.123739][ T2345] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 248.126524][ T2345] spcp8x5 7-1:1.0: device disconnected [ 249.628384][T12691] syzkaller1: entered promiscuous mode [ 249.628457][T12691] syzkaller1: entered allmulticast mode [ 250.073817][T12710] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2571'. [ 250.094272][T12710] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2571'. [ 250.431925][T12735] FAULT_INJECTION: forcing a failure. [ 250.431925][T12735] name failslab, interval 1, probability 0, space 0, times 0 [ 250.432004][T12735] CPU: 2 UID: 0 PID: 12735 Comm: syz.4.2582 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.432032][T12735] Tainted: [L]=SOFTLOCKUP [ 250.432039][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.432046][T12735] Call Trace: [ 250.432051][T12735] [ 250.432057][T12735] dump_stack_lvl+0x100/0x190 [ 250.432079][T12735] should_fail_ex.cold+0x5/0xa [ 250.432095][T12735] should_failslab+0xc2/0x120 [ 250.432116][T12735] __kmalloc_noprof+0xfc/0x840 [ 250.432141][T12735] ? rcu_is_watching+0x13/0xc0 [ 250.432156][T12735] ? tomoyo_realpath_from_path+0xb6/0x690 [ 250.432183][T12735] tomoyo_realpath_from_path+0xb6/0x690 [ 250.432207][T12735] tomoyo_path_perm+0x276/0x460 [ 250.432224][T12735] ? tomoyo_path_perm+0x262/0x460 [ 250.432241][T12735] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 250.432262][T12735] ? __lock_acquire+0x4c5/0x1ec0 [ 250.432295][T12735] ? __fget_files+0x21f/0x3d0 [ 250.432313][T12735] security_inode_getattr+0x116/0x280 [ 250.432331][T12735] vfs_fstat+0x4b/0xe0 [ 250.432346][T12735] __do_compat_sys_newfstat+0x8b/0x100 [ 250.432363][T12735] ? __pfx___do_compat_sys_newfstat+0x10/0x10 [ 250.432392][T12735] __do_fast_syscall_32+0x13a/0x8b0 [ 250.432411][T12735] do_fast_syscall_32+0x32/0x70 [ 250.432427][T12735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.432443][T12735] RIP: 0023:0xf7f53fec [ 250.432459][T12735] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 250.432465][T12735] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000006c [ 250.432477][T12735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 250.432485][T12735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.432492][T12735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.432498][T12735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 250.432505][T12735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.432521][T12735] [ 250.434844][T12735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.458915][T12733] FAULT_INJECTION: forcing a failure. [ 250.458915][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 250.458941][T12733] CPU: 2 UID: 0 PID: 12733 Comm: syz.5.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.458961][T12733] Tainted: [L]=SOFTLOCKUP [ 250.458967][T12733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.458975][T12733] Call Trace: [ 250.458981][T12733] [ 250.458986][T12733] dump_stack_lvl+0x100/0x190 [ 250.459008][T12733] should_fail_ex.cold+0x5/0xa [ 250.459027][T12733] should_failslab+0xc2/0x120 [ 250.459047][T12733] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 250.459063][T12733] ? __d_alloc+0x35/0xa50 [ 250.459082][T12733] __d_alloc+0x35/0xa50 [ 250.459096][T12733] ? do_raw_spin_lock+0x128/0x260 [ 250.459119][T12733] d_alloc+0x4a/0x1e0 [ 250.459137][T12733] d_alloc_name+0x83/0xb0 [ 250.459153][T12733] ? __pfx_d_alloc_name+0x10/0x10 [ 250.459168][T12733] ? fast_dput+0x168/0x6f0 [ 250.459186][T12733] ? dput.part.0+0x4f/0x240 [ 250.459205][T12733] proc_setup_thread_self+0x3f/0x1e0 [ 250.459221][T12733] proc_fill_super+0x5d4/0x870 [ 250.459239][T12733] ? __pfx_proc_fill_super+0x10/0x10 [ 250.459256][T12733] get_tree_nodev+0xdd/0x190 [ 250.459270][T12733] vfs_get_tree+0x92/0x320 [ 250.459288][T12733] path_mount+0x7d0/0x24c0 [ 250.459307][T12733] ? __pfx_path_mount+0x10/0x10 [ 250.459323][T12733] ? lockdep_hardirqs_on+0x7d/0x110 [ 250.459365][T12733] ? putname+0xb1/0x110 [ 250.459381][T12733] ? kmem_cache_free+0x127/0x6c0 [ 250.459409][T12733] ? __ia32_sys_mount+0x292/0x310 [ 250.459428][T12733] __ia32_sys_mount+0x292/0x310 [ 250.459446][T12733] ? __pfx___ia32_sys_mount+0x10/0x10 [ 250.459469][T12733] __do_fast_syscall_32+0x13a/0x8b0 [ 250.459491][T12733] do_fast_syscall_32+0x32/0x70 [ 250.459510][T12733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.459527][T12733] RIP: 0023:0xf702efec [ 250.459543][T12733] Code: Unable to access opcode bytes at 0xf702efc2. [ 250.459549][T12733] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 250.459562][T12733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 250.459571][T12733] RDX: 0000000080000240 RSI: 0000000000004000 RDI: 0000000000000000 [ 250.459579][T12733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.459586][T12733] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 250.459594][T12733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.459611][T12733] [ 250.459652][T12733] proc_fill_super: can't allocate /proc/thread-self [ 250.599959][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2583'. [ 250.599977][T12740] netlink: 'syz.2.2583': attribute type 3 has an invalid length. [ 250.599984][T12740] netlink: 'syz.2.2583': attribute type 2 has an invalid length. [ 250.599991][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 250.783078][T12754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.787128][T12754] kvm: kvm [12752]: vcpu0, guest rIP: 0x1 Unhandled WRMSR(0x4000006f) = 0x6 [ 250.852982][T12762] pim6reg1: entered promiscuous mode [ 250.853033][T12762] pim6reg1: entered allmulticast mode [ 250.869069][ T43] kauditd_printk_skb: 87 callbacks suppressed [ 250.869148][ T43] audit: type=1800 audit(1788433785.655:4391): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 250.907913][ T43] audit: type=1800 audit(1788433785.692:4392): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 250.966422][ T43] audit: type=1800 audit(1788433785.739:4393): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 250.979762][ T43] audit: type=1800 audit(1788433785.748:4394): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 250.997130][T12771] bridge2: entered promiscuous mode [ 250.997186][T12771] bridge2: entered allmulticast mode [ 251.023247][ T43] audit: type=1800 audit(1788433785.795:4395): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 251.054225][ T43] audit: type=1800 audit(1788433785.823:4396): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 251.066946][ T43] audit: type=1800 audit(1788433785.833:4397): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 251.074051][ T43] audit: type=1800 audit(1788433785.842:4398): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 251.087009][ T43] audit: type=1800 audit(1788433785.851:4399): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 251.156843][ T43] audit: type=1800 audit(1788433785.926:4400): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 251.383695][T12801] netlink: 'syz.6.2611': attribute type 12 has an invalid length. [ 251.445905][T12808] syzkaller1: entered promiscuous mode [ 251.450351][T12808] syzkaller1: entered allmulticast mode [ 251.458755][T12810] FAULT_INJECTION: forcing a failure. [ 251.458755][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.459090][T12810] CPU: 3 UID: 0 PID: 12810 Comm: syz.4.2616 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.459126][T12810] Tainted: [L]=SOFTLOCKUP [ 251.459135][T12810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.459146][T12810] Call Trace: [ 251.459154][T12810] [ 251.459162][T12810] dump_stack_lvl+0x100/0x190 [ 251.459193][T12810] should_fail_ex.cold+0x5/0xa [ 251.459214][T12810] _copy_from_user+0x2e/0xd0 [ 251.459236][T12810] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 251.459274][T12810] bpf_vlog_finalize+0x2bf/0x360 [ 251.459300][T12810] bpf_log_attr_finalize+0x86/0x1a0 [ 251.459330][T12810] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 251.459366][T12810] btf_new_fd+0x3903/0x5bc0 [ 251.459392][T12810] ? __lock_acquire+0x4c5/0x1ec0 [ 251.459429][T12810] ? __pfx_btf_new_fd+0x10/0x10 [ 251.459458][T12810] ? lock_acquire+0x1d1/0x380 [ 251.459479][T12810] ? rcu_is_watching+0x13/0xc0 [ 251.459500][T12810] ? apparmor_capable+0x1d7/0x4d0 [ 251.459525][T12810] ? security_capable+0x80/0x260 [ 251.459545][T12810] ? ns_capable+0xd2/0xf0 [ 251.459568][T12810] __sys_bpf+0x13ef/0x4a30 [ 251.459593][T12810] ? __pfx___sys_bpf+0x10/0x10 [ 251.459610][T12810] ? find_held_lock+0x2b/0x80 [ 251.459628][T12810] ? futex_wake+0x4ea/0x5e0 [ 251.459660][T12810] ? rcu_read_lock_any_held+0x6a/0x90 [ 251.459681][T12810] ? find_held_lock+0x2b/0x80 [ 251.459699][T12810] ? ksys_write+0x190/0x250 [ 251.459716][T12810] ? ksys_write+0x190/0x250 [ 251.459741][T12810] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 251.459764][T12810] ? xfd_validate_state+0x129/0x190 [ 251.459795][T12810] ? __ia32_sys_bpf+0xcc/0x170 [ 251.459809][T12810] __ia32_sys_bpf+0xcc/0x170 [ 251.459827][T12810] ? __do_fast_syscall_32+0xb3/0x8b0 [ 251.459854][T12810] __do_fast_syscall_32+0x13a/0x8b0 [ 251.459882][T12810] do_fast_syscall_32+0x32/0x70 [ 251.459901][T12810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.459916][T12810] RIP: 0023:0xf7f53fec [ 251.459935][T12810] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 251.459944][T12810] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 251.459963][T12810] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000d80 [ 251.459975][T12810] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.459986][T12810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.459997][T12810] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.460004][T12810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.460019][T12810] [ 251.987366][ T35] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 251.998824][T12836] FAULT_INJECTION: forcing a failure. [ 251.998824][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 251.998897][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.5.2629 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.998948][T12836] Tainted: [L]=SOFTLOCKUP [ 251.998959][T12836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.998973][T12836] Call Trace: [ 251.998982][T12836] [ 251.998991][T12836] dump_stack_lvl+0x100/0x190 [ 251.999030][T12836] should_fail_ex.cold+0x5/0xa [ 251.999061][T12836] should_failslab+0xc2/0x120 [ 251.999093][T12836] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 251.999122][T12836] ? __d_alloc+0x35/0xa50 [ 251.999156][T12836] __d_alloc+0x35/0xa50 [ 251.999186][T12836] path_from_stashed+0x431/0x760 [ 251.999223][T12836] pidfs_alloc_file+0xf8/0x290 [ 251.999313][T12836] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 251.999357][T12836] pidfd_prepare+0x107/0x1b0 [ 251.999397][T12836] __ia32_sys_pidfd_open+0x105/0x1a0 [ 251.999435][T12836] ? __pfx___ia32_sys_pidfd_open+0x10/0x10 [ 251.999475][T12836] __do_fast_syscall_32+0x13a/0x8b0 [ 251.999514][T12836] do_fast_syscall_32+0x32/0x70 [ 251.999547][T12836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.999576][T12836] RIP: 0023:0xf702efec [ 251.999640][T12836] Code: Unable to access opcode bytes at 0xf702efc2. [ 251.999652][T12836] RSP: 002b:00000000f541d4dc EFLAGS: 00000296 ORIG_RAX: 00000000000001b2 [ 251.999678][T12836] RAX: ffffffffffffffda RBX: 000000000000038f RCX: 0000000000000000 [ 251.999695][T12836] RDX: 000000009d4a0c00 RSI: 00000000f541d5b0 RDI: 00000000f7051736 [ 251.999711][T12836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.999726][T12836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.999741][T12836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.999772][T12836] [ 252.078179][T12843] binder: 12842:12843 ioctl c0306201 80000480 returned -14 [ 252.160995][ T35] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.162117][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.162196][ T35] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.162235][ T35] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.162313][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.168882][ T35] usb 9-1: config 0 descriptor?? [ 252.463986][T12859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3345044383 (214082840512 ns) > initial count (60632714432 ns). Using initial count to start timer. [ 252.465021][T12859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 252.632068][ T35] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 253.686993][ T854] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 253.849594][ T854] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 253.850972][ T854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 253.851000][ T854] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.851021][ T854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.851051][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.857547][T12884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 253.862068][ T854] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 253.869606][ T854] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 254.088561][ T35] usb 7-1: USB disconnect, device number 24 [ 254.100525][ T35] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 254.107555][ T35] cyberjack 7-1:1.0: device disconnected [ 254.174680][T12923] random: crng reseeded on system resumption [ 254.182135][T12923] FAULT_INJECTION: forcing a failure. [ 254.182135][T12923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.182205][T12923] CPU: 2 UID: 0 PID: 12923 Comm: syz.5.2659 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.182238][T12923] Tainted: [L]=SOFTLOCKUP [ 254.182245][T12923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.182253][T12923] Call Trace: [ 254.182260][T12923] [ 254.182266][T12923] dump_stack_lvl+0x100/0x190 [ 254.182315][T12923] should_fail_ex.cold+0x5/0xa [ 254.182330][T12923] ? prepare_alloc_pages+0x16d/0x5b0 [ 254.182349][T12923] should_fail_alloc_page+0xeb/0x140 [ 254.182368][T12923] prepare_alloc_pages+0x1f0/0x5b0 [ 254.182404][T12923] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 254.182431][T12923] ? mark_held_locks+0x40/0x70 [ 254.182455][T12923] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.182477][T12923] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.182503][T12923] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.182534][T12923] ? stack_depot_save_flags+0x49a/0x9f0 [ 254.182566][T12923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.182595][T12923] ? kasan_save_stack+0x3f/0x50 [ 254.182617][T12923] ? kasan_save_track+0x14/0x30 [ 254.182637][T12923] ? __kasan_kmalloc+0xaa/0xb0 [ 254.182656][T12923] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 254.182681][T12923] ? memory_bm_create+0x12c/0xcf0 [ 254.182697][T12923] ? create_basic_memory_bitmaps+0xbd/0x350 [ 254.182718][T12923] ? snapshot_open+0x23b/0x2b0 [ 254.182738][T12923] ? misc_open+0x26d/0x450 [ 254.182756][T12923] ? chrdev_open+0x234/0x6a0 [ 254.182776][T12923] ? do_dentry_open+0x6ab/0x14d0 [ 254.182796][T12923] ? vfs_open+0x82/0x3f0 [ 254.182816][T12923] ? path_openat+0x19fa/0x2440 [ 254.182835][T12923] ? do_file_open+0x20e/0x430 [ 254.182855][T12923] ? do_sys_openat2+0x10f/0x1e0 [ 254.182878][T12923] ? __ia32_compat_sys_openat+0x12d/0x210 [ 254.182903][T12923] ? __do_fast_syscall_32+0x13a/0x8b0 [ 254.182926][T12923] ? do_fast_syscall_32+0x32/0x70 [ 254.182951][T12923] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.182989][T12923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.183017][T12923] ? policy_nodemask+0xed/0x4f0 [ 254.183043][T12923] alloc_pages_mpol+0x201/0x550 [ 254.183069][T12923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 254.183095][T12923] ? kasan_save_track+0x14/0x30 [ 254.183115][T12923] ? __kasan_kmalloc+0xaa/0xb0 [ 254.183141][T12923] alloc_pages_noprof+0x1a/0x160 [ 254.183169][T12923] get_zeroed_page_noprof+0x18/0xb0 [ 254.183191][T12923] get_image_page+0x18/0x1a0 [ 254.183210][T12923] memory_bm_create+0x66a/0xcf0 [ 254.183241][T12923] create_basic_memory_bitmaps+0xbd/0x350 [ 254.183266][T12923] snapshot_open+0x23b/0x2b0 [ 254.183288][T12923] ? __pfx_snapshot_open+0x10/0x10 [ 254.183312][T12923] misc_open+0x26d/0x450 [ 254.183332][T12923] ? __pfx_misc_open+0x10/0x10 [ 254.183352][T12923] chrdev_open+0x234/0x6a0 [ 254.183373][T12923] ? __pfx_chrdev_open+0x10/0x10 [ 254.183396][T12923] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 254.183426][T12923] do_dentry_open+0x6ab/0x14d0 [ 254.183444][T12923] ? __pfx_chrdev_open+0x10/0x10 [ 254.183471][T12923] vfs_open+0x82/0x3f0 [ 254.183499][T12923] path_openat+0x19fa/0x2440 [ 254.183533][T12923] ? __pfx_path_openat+0x10/0x10 [ 254.183565][T12923] do_file_open+0x20e/0x430 [ 254.183589][T12923] ? __pfx_do_file_open+0x10/0x10 [ 254.183631][T12923] ? _raw_spin_unlock+0x28/0x50 [ 254.183653][T12923] ? alloc_fd+0x471/0x7a0 [ 254.183683][T12923] do_sys_openat2+0x10f/0x1e0 [ 254.183708][T12923] ? __pfx_do_sys_openat2+0x10/0x10 [ 254.183733][T12923] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.183767][T12923] __ia32_compat_sys_openat+0x12d/0x210 [ 254.183796][T12923] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 254.183831][T12923] __do_fast_syscall_32+0x13a/0x8b0 [ 254.183861][T12923] do_fast_syscall_32+0x32/0x70 [ 254.183886][T12923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.183910][T12923] RIP: 0023:0xf702efec [ 254.183934][T12923] Code: Unable to access opcode bytes at 0xf702efc2. [ 254.183943][T12923] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 254.183964][T12923] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 254.183979][T12923] RDX: 0000000000042801 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.183992][T12923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.184005][T12923] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 254.184016][T12923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.184042][T12923] [ 254.631911][T12932] aoe: unknown AoE command type 0x30 [ 254.770927][ T854] usb 9-1: USB disconnect, device number 13 [ 255.724947][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 256.267497][ T43] kauditd_printk_skb: 126 callbacks suppressed [ 256.267600][ T43] audit: type=1800 audit(1788433790.706:4527): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 256.283910][ T43] audit: type=1800 audit(1788433790.715:4528): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 256.298883][ T43] audit: type=1800 audit(1788433790.734:4529): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 256.334815][ T43] audit: type=1800 audit(1788433790.762:4530): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 256.344857][ T43] audit: type=1800 audit(1788433790.772:4531): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189651 res=0 errno=0 [ 256.354128][ T43] audit: type=1800 audit(1788433790.781:4532): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189666 res=0 errno=0 [ 256.398078][ T43] audit: type=1800 audit(1788433790.818:4533): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15664 res=0 errno=0 [ 256.416391][ T43] audit: type=1800 audit(1788433790.846:4534): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 256.436269][T13034] loop4: detected capacity change from 0 to 2640 [ 256.448168][T13034] buffer_io_error: 138 callbacks suppressed [ 256.448195][ T43] audit: type=1800 audit(1788433790.874:4535): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 256.456987][T13034] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 256.459965][T13034] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 256.462849][T13034] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 256.462865][T13034] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 256.462878][T13034] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 256.462891][T13034] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 256.462904][T13034] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 256.462916][T13034] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 256.462930][T13034] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 256.462943][T13034] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 256.517258][ T43] audit: type=1800 audit(1788433790.931:4536): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 256.578708][T13043] FAULT_INJECTION: forcing a failure. [ 256.578708][T13043] name failslab, interval 1, probability 0, space 0, times 0 [ 256.578768][T13043] CPU: 2 UID: 0 PID: 13043 Comm: syz.4.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.578797][T13043] Tainted: [L]=SOFTLOCKUP [ 256.578803][T13043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.578810][T13043] Call Trace: [ 256.578815][T13043] [ 256.578820][T13043] dump_stack_lvl+0x100/0x190 [ 256.578841][T13043] should_fail_ex.cold+0x5/0xa [ 256.578857][T13043] should_failslab+0xc2/0x120 [ 256.578874][T13043] kmem_cache_alloc_noprof+0x92/0x6a0 [ 256.578887][T13043] ? d_instantiate+0x8a/0xb0 [ 256.578903][T13043] ? alloc_empty_file+0x5b/0x1c0 [ 256.578927][T13043] alloc_empty_file+0x5b/0x1c0 [ 256.578944][T13043] alloc_file_pseudo+0x183/0x290 [ 256.578962][T13043] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 256.578980][T13043] ? _raw_spin_unlock+0x28/0x50 [ 256.578995][T13043] ? alloc_fd+0x471/0x7a0 [ 256.579010][T13043] __anon_inode_getfile+0xe8/0x280 [ 256.579031][T13043] do_epoll_create+0x3ac/0x540 [ 256.579047][T13043] __ia32_sys_epoll_create1+0x30/0x40 [ 256.579063][T13043] __do_fast_syscall_32+0x13a/0x8b0 [ 256.579081][T13043] do_fast_syscall_32+0x32/0x70 [ 256.579099][T13043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.579115][T13043] RIP: 0023:0xf7f53fec [ 256.579130][T13043] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 256.579135][T13043] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000149 [ 256.579148][T13043] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 256.579156][T13043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.579163][T13043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.579170][T13043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.579177][T13043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.579192][T13043] [ 256.668687][T13044] nbd2: detected capacity change from 0 to 1 [ 256.673026][ T8835] ldm_validate_partition_table(): Disk read failed. [ 256.673110][ T8835] Dev nbd2: unable to read RDB block 0 [ 256.673182][ T8835] nbd2: unable to read partition table [ 256.673369][ T8835] nbd2: partition table beyond EOD, truncated [ 256.698722][T13050] FAULT_INJECTION: forcing a failure. [ 256.698722][T13050] name failslab, interval 1, probability 0, space 0, times 0 [ 256.698818][T13050] CPU: 3 UID: 0 PID: 13050 Comm: syz.4.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.698860][T13050] Tainted: [L]=SOFTLOCKUP [ 256.698869][T13050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.698882][T13050] Call Trace: [ 256.698890][T13050] [ 256.698897][T13050] dump_stack_lvl+0x100/0x190 [ 256.698928][T13050] should_fail_ex.cold+0x5/0xa [ 256.698957][T13050] should_failslab+0xc2/0x120 [ 256.698985][T13050] __kmalloc_cache_noprof+0x91/0x6d0 [ 256.699018][T13050] ? sctp_association_new+0xbb/0x2990 [ 256.699046][T13050] sctp_association_new+0xbb/0x2990 [ 256.699070][T13050] ? sctp_v4_scope+0x183/0x1a0 [ 256.699098][T13050] sctp_connect_new_asoc+0x1a8/0x770 [ 256.699123][T13050] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 256.699149][T13050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.699183][T13050] __sctp_connect+0x3e7/0xc70 [ 256.699211][T13050] ? __pfx___sctp_connect+0x10/0x10 [ 256.699244][T13050] __sctp_setsockopt_connectx+0x100/0x190 [ 256.699270][T13050] sctp_setsockopt+0x46a9/0xb370 [ 256.699298][T13050] ? __pfx_sctp_setsockopt+0x10/0x10 [ 256.699324][T13050] ? aa_sock_opt_perm+0x114/0x1e0 [ 256.699346][T13050] ? sock_common_setsockopt+0x2e/0xf0 [ 256.699375][T13050] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.699414][T13050] do_sock_setsockopt+0xf3/0x1d0 [ 256.699446][T13050] __sys_setsockopt+0x119/0x190 [ 256.699478][T13050] __ia32_sys_setsockopt+0xbc/0x160 [ 256.699502][T13050] ? __do_fast_syscall_32+0xb3/0x8b0 [ 256.699535][T13050] ? lockdep_hardirqs_on+0x7d/0x110 [ 256.699566][T13050] __do_fast_syscall_32+0x13a/0x8b0 [ 256.699599][T13050] do_fast_syscall_32+0x32/0x70 [ 256.699627][T13050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.699654][T13050] RIP: 0023:0xf7f53fec [ 256.699675][T13050] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 256.699684][T13050] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 256.699706][T13050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 256.699720][T13050] RDX: 000000000000006e RSI: 00000000800008c0 RDI: 000000000000001c [ 256.699733][T13050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.699746][T13050] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.699759][T13050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.699786][T13050] [ 256.729069][T13046] block nbd2: shutting down sockets [ 256.915290][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.057447][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.057513][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.155831][T13072] FAULT_INJECTION: forcing a failure. [ 257.155831][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 257.155932][T13072] CPU: 3 UID: 0 PID: 13072 Comm: syz.2.2708 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.155976][T13072] Tainted: [L]=SOFTLOCKUP [ 257.155986][T13072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.155997][T13072] Call Trace: [ 257.156004][T13072] [ 257.156011][T13072] dump_stack_lvl+0x100/0x190 [ 257.156033][T13072] should_fail_ex.cold+0x5/0xa [ 257.156051][T13072] should_failslab+0xc2/0x120 [ 257.156066][T13072] __kmalloc_noprof+0xfc/0x840 [ 257.156081][T13072] ? sk_prot_alloc+0x10b/0x2a0 [ 257.156101][T13072] sk_prot_alloc+0x10b/0x2a0 [ 257.156119][T13072] sk_alloc+0x36/0xe80 [ 257.156132][T13072] mctp_pf_create+0xe8/0x360 [ 257.156151][T13072] __sock_create+0x339/0x860 [ 257.156171][T13072] __sys_socketpair+0x1e4/0x5b0 [ 257.156190][T13072] ? __pfx___sys_socketpair+0x10/0x10 [ 257.156213][T13072] __ia32_sys_socketpair+0x95/0x100 [ 257.156231][T13072] ? lockdep_hardirqs_on+0x7d/0x110 [ 257.156247][T13072] __do_fast_syscall_32+0x13a/0x8b0 [ 257.156266][T13072] do_fast_syscall_32+0x32/0x70 [ 257.156282][T13072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.156297][T13072] RIP: 0023:0xf7f75fec [ 257.156311][T13072] Code: Unable to access opcode bytes at 0xf7f75fc2. [ 257.156317][T13072] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 257.156329][T13072] RAX: ffffffffffffffda RBX: 000000000000002d RCX: 0000000000000002 [ 257.156337][T13072] RDX: 0000000000000000 RSI: 0000000080000040 RDI: 0000000000000000 [ 257.156343][T13072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.156351][T13072] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.156358][T13072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.156372][T13072] [ 257.356249][ T10] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 257.537488][ T10] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 257.544316][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.546234][ T10] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 257.546293][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.556714][ T10] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 257.597914][ T10] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 258.163878][T13086] input: syz1 as /devices/virtual/input/input51 [ 258.327078][T13084] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110) [ 258.333282][T13084] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 258.545804][T13062] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 258.550897][ T2345] usb 11-1: USB disconnect, device number 6 [ 258.562011][ T2345] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 258.562335][ T2345] spcp8x5 11-1:1.0: device disconnected [ 260.107466][T13136] all: renamed from bridge_slave_0 (while UP) [ 260.244179][T13141] nbd5: detected capacity change from 0 to 8 [ 260.283708][T13143] FAULT_INJECTION: forcing a failure. [ 260.283708][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 260.283790][T13143] CPU: 3 UID: 0 PID: 13143 Comm: syz.6.2737 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.283815][T13143] Tainted: [L]=SOFTLOCKUP [ 260.283822][T13143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.283833][T13143] Call Trace: [ 260.283839][T13143] [ 260.283846][T13143] dump_stack_lvl+0x100/0x190 [ 260.283874][T13143] should_fail_ex.cold+0x5/0xa [ 260.283896][T13143] should_failslab+0xc2/0x120 [ 260.283918][T13143] __kmalloc_cache_noprof+0x91/0x6d0 [ 260.283945][T13143] ? alloc_ucounts+0x13d/0x5c0 [ 260.283963][T13143] alloc_ucounts+0x13d/0x5c0 [ 260.283975][T13143] ? __pfx_alloc_ucounts+0x10/0x10 [ 260.283991][T13143] set_cred_ucounts+0xcd/0x200 [ 260.284007][T13143] __sys_setresuid+0x666/0x1280 [ 260.284033][T13143] __do_fast_syscall_32+0x13a/0x8b0 [ 260.284051][T13143] do_fast_syscall_32+0x32/0x70 [ 260.284068][T13143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.284083][T13143] RIP: 0023:0xf709efec [ 260.284098][T13143] Code: Unable to access opcode bytes at 0xf709efc2. [ 260.284104][T13143] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a4 [ 260.284117][T13143] RAX: ffffffffffffffda RBX: 000000000000ee00 RCX: 000000000000ee00 [ 260.284124][T13143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.284132][T13143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.284139][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.284146][T13143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.284160][T13143] [ 260.290549][T13144] block nbd5: shutting down sockets [ 260.303062][ C3] blk_print_req_error: 135 callbacks suppressed [ 260.303081][ C3] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.309435][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.309706][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.309775][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.310760][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312055][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312195][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312251][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312272][ T8835] ldm_validate_partition_table(): Disk read failed. [ 260.312311][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312480][ T1306] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.312942][ T8835] Dev nbd5: unable to read RDB block 0 [ 260.313085][ T8835] nbd5: unable to read partition table [ 260.313197][ T8835] nbd5: partition table beyond EOD, truncated [ 260.361729][ T8835] ldm_validate_partition_table(): Disk read failed. [ 260.361927][ T8835] Dev nbd5: unable to read RDB block 0 [ 260.362063][ T8835] nbd5: unable to read partition table [ 260.362157][ T8835] nbd5: partition table beyond EOD, truncated [ 260.839601][T13163] xt_hashlimit: overflow, rate too high: 0 [ 261.277392][ T35] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 261.450818][ T35] usb 9-1: Using ep0 maxpacket: 8 [ 261.451832][ T35] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.452765][ T35] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.452780][ T35] usb 9-1: config 0 has no interface number 0 [ 261.452799][ T35] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.452820][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.454097][ T35] usb 9-1: config 0 descriptor?? [ 261.489955][ T35] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 261.716969][T12030] usb 9-1: USB disconnect, device number 14 [ 261.731369][ T43] kauditd_printk_skb: 150 callbacks suppressed [ 261.731455][ T43] audit: type=1800 audit(1788433795.813:4687): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 261.798228][ T43] audit: type=1800 audit(1788433795.869:4688): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 261.943853][ T43] audit: type=1800 audit(1788433796.010:4689): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 262.057960][ T854] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 262.220072][ T854] usb 11-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 262.221618][ T854] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.221655][ T854] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.225931][ T43] audit: type=1800 audit(1788433796.272:4690): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191487 res=0 errno=0 [ 262.229217][ T854] usb 11-1: config 0 descriptor?? [ 262.229872][ T43] audit: type=1800 audit(1788433796.272:4691): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=191516 res=0 errno=0 [ 262.230397][ T43] audit: type=1800 audit(1788433796.281:4692): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=191494 res=0 errno=0 [ 262.230832][ T43] audit: type=1800 audit(1788433796.281:4693): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=191495 res=0 errno=0 [ 262.234729][ T43] audit: type=1800 audit(1788433796.281:4694): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=191496 res=0 errno=0 [ 262.245587][ T43] audit: type=1800 audit(1788433796.290:4695): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191545 res=0 errno=0 [ 262.323717][ T43] audit: type=1800 audit(1788433796.365:4696): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 262.711547][ T854] input: HID 0458:5005 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5005.0014/input/input52 [ 262.729469][ T854] input: HID 0458:5005 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5005.0014/input/input53 [ 262.829611][ T854] kye 0003:0458:5005.0014: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.6-1/input0 [ 262.909586][ T35] usb 11-1: USB disconnect, device number 7 [ 262.928241][T13204] fido_id[13204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 263.860546][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x5c31 instead [ 263.860589][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xc892 instead [ 263.860625][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x37fe instead [ 263.860648][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x9268 instead [ 263.860673][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xad30 instead [ 263.860696][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5900 instead [ 263.860720][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9182 instead [ 263.860743][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x6d83 instead [ 263.860767][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x724b instead [ 263.860793][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x3a8a instead [ 263.860816][T13225] jffs2: Further such events for this erase block will not be printed [ 263.861074][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x7ede instead [ 263.861098][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x186e instead [ 263.861121][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xd969 instead [ 263.861144][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x36aa instead [ 263.861168][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x5333 instead [ 263.861191][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x3096 instead [ 263.861215][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5653 instead [ 263.861238][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xc1ae instead [ 263.861260][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x9c00 instead [ 263.861287][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xfff8 instead [ 263.861309][T13225] jffs2: Further such events for this erase block will not be printed [ 263.861579][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x0bfa instead [ 263.861603][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x9401 instead [ 263.861625][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x4475 instead [ 263.861648][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xca17 instead [ 263.861670][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x5ad0 instead [ 263.861692][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xc362 instead [ 263.861715][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x86af instead [ 263.861739][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x2fd6 instead [ 263.861762][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x9f1c instead [ 263.861785][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xee26 instead [ 263.861807][T13225] jffs2: Further such events for this erase block will not be printed [ 263.862059][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xdb15 instead [ 263.862084][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xd9d8 instead [ 263.862114][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x73ab instead [ 263.862141][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xe8b4 instead [ 263.862170][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x1df7 instead [ 263.862197][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x2c52 instead [ 263.862220][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1944 instead [ 263.862259][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x4b23 instead [ 263.862373][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xb1c9 instead [ 263.862411][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x30cc instead [ 263.862435][T13225] jffs2: Further such events for this erase block will not be printed [ 263.918006][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xea41 instead [ 263.918035][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xf02f instead [ 263.918056][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x8f3d instead [ 263.918072][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xcee0 instead [ 263.918092][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x56d1 instead [ 263.918110][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x2cd0 instead [ 263.918128][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3b24 instead [ 263.918144][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x0d5c instead [ 263.918163][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x53ce instead [ 263.918179][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x56c0 instead [ 263.918196][T13225] jffs2: Further such events for this erase block will not be printed [ 263.918799][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4ff3 instead [ 263.918875][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xc527 instead [ 263.918893][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xfe83 instead [ 263.918914][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xd6eb instead [ 263.918930][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x8bea instead [ 263.918957][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x5ff6 instead [ 263.918977][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9d79 instead [ 263.918994][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x1112 instead [ 263.919014][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xaaa4 instead [ 263.919033][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xa914 instead [ 263.919052][T13225] jffs2: Further such events for this erase block will not be printed [ 263.919487][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xe675 instead [ 263.919509][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x459e instead [ 263.919525][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xcdbb instead [ 263.919540][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x9d82 instead [ 263.919556][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x28e8 instead [ 263.919578][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xe2a5 instead [ 263.919596][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xec5e instead [ 263.919617][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x4865 instead [ 263.919634][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x412c instead [ 263.919653][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x5048 instead [ 263.919671][T13225] jffs2: Further such events for this erase block will not be printed [ 263.920169][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x33d6 instead [ 263.920189][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xfebb instead [ 263.920209][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x1589 instead [ 263.920230][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xc8e7 instead [ 263.920249][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x793a instead [ 263.920268][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xf95c instead [ 263.920286][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2ff2 instead [ 263.920304][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x1790 instead [ 263.920320][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xe883 instead [ 263.920335][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x14a7 instead [ 263.920348][T13225] jffs2: Further such events for this erase block will not be printed [ 263.920379][T12030] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 263.920703][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x03fa instead [ 263.920722][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xefe9 instead [ 263.920736][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xedba instead [ 263.920751][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x41d7 instead [ 263.920766][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xffa3 instead [ 263.920783][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe1f5 instead [ 263.920798][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4805 instead [ 263.920814][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x3929 instead [ 263.920828][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x3af7 instead [ 263.920843][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xb9f5 instead [ 263.920856][T13225] jffs2: Further such events for this erase block will not be printed [ 263.921217][T13225] jffs2: Old JFFS2 bitmask found at 0x00008abc [ 263.921229][T13225] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 263.921366][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x68df instead [ 263.921382][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x266a instead [ 263.921399][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x80e4 instead [ 263.921414][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x0626 instead [ 263.921430][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x553d instead [ 263.921444][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xfc48 instead [ 263.921459][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xb214 instead [ 263.921473][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x5293 instead [ 263.921488][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x6e70 instead [ 263.921502][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xd7ff instead [ 263.921517][T13225] jffs2: Further such events for this erase block will not be printed [ 263.921901][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x132b instead [ 263.921919][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x6a9b instead [ 263.921940][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x2524 instead [ 263.921955][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x5749 instead [ 263.921970][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x5faf instead [ 263.921984][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x9524 instead [ 263.922000][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x32f1 instead [ 263.922015][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x3f59 instead [ 263.922078][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x48f4 instead [ 263.922096][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x7c35 instead [ 263.922110][T13225] jffs2: Further such events for this erase block will not be printed [ 263.922529][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x00dc instead [ 263.922546][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x52d9 instead [ 263.922563][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x7c57 instead [ 263.922576][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xa8c6 instead [ 263.922592][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x164c instead [ 263.922606][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x84cb instead [ 263.922622][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xb923 instead [ 263.922634][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6dc7 instead [ 263.922650][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x586b instead [ 263.922664][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xe9b8 instead [ 263.922678][T13225] jffs2: Further such events for this erase block will not be printed [ 263.923034][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x8e13 instead [ 263.923052][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x1b31 instead [ 263.923066][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf794 instead [ 263.923082][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xae69 instead [ 263.923145][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xd628 instead [ 263.923160][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xb523 instead [ 263.923175][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x13f2 instead [ 263.923189][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x944f instead [ 263.923206][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x336f instead [ 263.923220][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x5eba instead [ 263.923235][T13225] jffs2: Further such events for this erase block will not be printed [ 263.923588][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xeeb1 instead [ 263.923605][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x876c instead [ 263.923619][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x6ce5 instead [ 263.923634][T13225] jffs2: jffs2_scan_eraseblock( ** replaying previous printk message ** [ 263.923634][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x2c83 instead [ 263.923649][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xb43a instead [ 263.923664][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xaa55 instead [ 263.923678][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8918 instead [ 263.923693][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xc5ef instead [ 263.923709][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x9324 instead [ 263.923723][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x253e instead [ 263.923995][T13225] jffs2: Further such events for this erase block will not be printed [ 263.924386][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x9821 instead [ 263.924404][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x120d instead [ 263.924417][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x5c2e instead [ 263.924432][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x1898 instead [ 263.924446][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xa926 instead [ 263.924461][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x0c8a instead [ 263.924475][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x2db8 instead [ 263.924491][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x40bf instead [ 263.924505][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xec49 instead [ 263.924521][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xec18 instead [ 263.924534][T13225] jffs2: Further such events for this erase block will not be printed [ 263.924944][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xd9be instead [ 263.924966][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x6e80 instead [ 263.924983][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x3cdc instead [ 263.924997][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8c6a instead [ 263.925013][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4ac2 instead [ 263.925026][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x5156 instead [ 263.925042][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x48f3 instead [ 263.925055][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xf862 instead [ 263.925070][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x100a instead [ 263.925084][T13225] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x322b instead [ 263.925164][T13225] jffs2: Further such events for this erase block will not be printed [ 263.925441][T13225] jffs2: Old JFFS2 bitmask found at 0x0000fb2c [ 263.925453][T13225] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 263.925585][T13225] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 263.925593][T13225] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32 [ 264.140338][T12030] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 264.147657][T12030] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.147675][T12030] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.147687][T12030] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.173119][T12030] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 264.173141][T12030] usb 10-1: Product: syz [ 264.173151][T12030] usb 10-1: Manufacturer: syz [ 264.173161][T12030] usb 10-1: SerialNumber: syz [ 264.380159][T13250] LUN: removable file: (no medium) [ 264.385846][T13250] [ 264.526181][T13250] ====================================================== [ 264.528516][T13250] WARNING: possible circular locking dependency detected [ 264.530648][T13250] syzkaller #0 Tainted: G L [ 264.533521][T13250] ------------------------------------------------------ [ 264.536494][T13250] syz.4.2781/13250 is trying to acquire lock: [ 264.538369][T13250] ffff888012e44460 (sb_writers#5){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 264.540976][T13250] [ 264.540976][T13250] but task is already holding lock: [ 264.543322][T13250] ffff88804de07120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 264.546244][T13250] [ 264.546244][T13250] which lock already depends on the new lock. [ 264.546244][T13250] [ 264.549384][T13250] [ 264.549384][T13250] the existing dependency chain (in reverse order) is: [ 264.552153][T13250] [ 264.552153][T13250] -> #3 (&common->filesem){++++}-{4:4}: [ 264.554611][T13250] lock_acquire+0x1d1/0x380 [ 264.556195][T13250] down_read+0x99/0x4c0 [ 264.557630][T13250] fsg_show_file+0x20/0x180 [ 264.559203][T13250] configfs_read_iter+0x426/0x6f0 [ 264.560853][T13250] __kernel_read+0x397/0xad0 [ 264.562449][T13250] integrity_kernel_read+0x7e/0xb0 [ 264.564420][T13250] ima_calc_file_hash_tfm+0x25e/0x350 [ 264.566426][T13250] ima_calc_file_hash+0x1e3/0x380 [ 264.568233][T13250] ima_collect_measurement+0x94f/0xb30 [ 264.570136][T13250] process_measurement+0xdfe/0x2350 [ 264.571913][T13250] ima_file_check+0xcc/0x120 [ 264.573483][T13250] security_file_post_open+0xc4/0x210 [ 264.575292][T13250] path_openat+0x5cd/0x2440 [ 264.576841][T13250] do_file_open+0x20e/0x430 [ 264.578402][T13250] do_sys_openat2+0x10f/0x1e0 [ 264.580275][T13250] __ia32_compat_sys_openat+0x12d/0x210 [ 264.582502][T13250] __do_fast_syscall_32+0x13a/0x8b0 [ 264.584265][T13250] do_fast_syscall_32+0x32/0x70 [ 264.585942][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.588126][T13250] [ 264.588126][T13250] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 264.590387][T13250] lock_acquire+0x1d1/0x380 [ 264.591958][T13250] down_read+0x99/0x4c0 [ 264.593395][T13250] __configfs_open_file+0xe8/0x9c0 [ 264.595095][T13250] do_dentry_open+0x6ab/0x14d0 [ 264.596671][T13250] vfs_open+0x82/0x3f0 [ 264.598205][T13250] dentry_open+0x71/0xd0 [ 264.599982][T13250] ima_calc_file_hash+0xe1/0x380 [ 264.602024][T13250] ima_collect_measurement+0x94f/0xb30 [ 264.603971][T13250] process_measurement+0xdfe/0x2350 [ 264.605676][T13250] ima_file_check+0xcc/0x120 [ 264.607213][T13250] security_file_post_open+0xc4/0x210 [ 264.608978][T13250] path_openat+0x5cd/0x2440 [ 264.610546][T13250] do_file_open+0x20e/0x430 [ 264.612116][T13250] do_sys_openat2+0x10f/0x1e0 [ 264.613702][T13250] __ia32_compat_sys_openat+0x12d/0x210 [ 264.615528][T13250] __do_fast_syscall_32+0x13a/0x8b0 [ 264.617250][T13250] do_fast_syscall_32+0x32/0x70 [ 264.618951][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.621211][T13250] [ 264.621211][T13250] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 264.623920][T13250] lock_acquire+0x1d1/0x380 [ 264.625534][T13250] __mutex_lock+0x1a4/0x1bd0 [ 264.627112][T13250] process_measurement+0x5ab/0x2350 [ 264.628865][T13250] ima_file_check+0xcc/0x120 [ 264.630603][T13250] security_file_post_open+0xc4/0x210 [ 264.632444][T13250] path_openat+0x5cd/0x2440 [ 264.633961][T13250] do_file_open+0x20e/0x430 [ 264.635496][T13250] do_sys_openat2+0x10f/0x1e0 [ 264.637087][T13250] __x64_sys_openat+0x12d/0x210 [ 264.638842][T13250] do_syscall_64+0x121/0x770 [ 264.640460][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.642577][T13250] [ 264.642577][T13250] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 264.645199][T13250] check_prev_add+0xeb/0xe60 [ 264.646998][T13250] __lock_acquire+0x1492/0x1ec0 [ 264.648782][T13250] lock_acquire+0x1d1/0x380 [ 264.650492][T13250] mnt_want_write+0x6f/0x420 [ 264.652059][T13250] lookup_open+0x150/0x1990 [ 264.653655][T13250] path_openat+0xa2c/0x2440 [ 264.655151][T13250] do_file_open+0x20e/0x430 [ 264.656646][T13250] file_open_name+0x1c3/0x3e0 [ 264.658220][T13250] filp_open+0x2e/0x50 [ 264.659733][T13250] fsg_lun_open+0x6b/0x7b0 [ 264.661237][T13250] fsg_store_file+0x1e7/0x450 [ 264.662855][T13250] configfs_write_iter+0x302/0x4e0 [ 264.664737][T13250] vfs_write+0x6af/0x1050 [ 264.666386][T13250] ksys_write+0x12a/0x250 [ 264.668145][T13250] __do_fast_syscall_32+0x13a/0x8b0 [ 264.670198][T13250] do_fast_syscall_32+0x32/0x70 [ 264.671957][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.674023][T13250] [ 264.674023][T13250] other info that might help us debug this: [ 264.674023][T13250] [ 264.677020][T13250] Chain exists of: [ 264.677020][T13250] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 264.677020][T13250] [ 264.681080][T13250] Possible unsafe locking scenario: [ 264.681080][T13250] [ 264.683705][T13250] CPU0 CPU1 [ 264.685470][T13250] ---- ---- [ 264.687099][T13250] lock(&common->filesem); [ 264.688473][T13250] lock(&p->frag_sem); [ 264.690712][T13250] lock(&common->filesem); [ 264.692877][T13250] rlock(sb_writers#5); [ 264.694214][T13250] [ 264.694214][T13250] *** DEADLOCK *** [ 264.694214][T13250] [ 264.696852][T13250] locks held by syz.4.2781/13250: 5, last CPU#3: [ 264.699054][T13250] #0: ffff88807293ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.702133][T13250] #1: ffff888022898460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.705120][T13250] #2: ffff8880291eca80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 264.708207][T13250] #3: ffff8880728e6d70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 264.711164][T13250] #4: ffff88804de07120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 264.714058][T13250] [ 264.714058][T13250] stack backtrace: [ 264.715861][T13250] CPU: 3 UID: 0 PID: 13250 Comm: syz.4.2781 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.719115][T13250] Tainted: [L]=SOFTLOCKUP [ 264.720498][T13250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.723609][T13250] Call Trace: [ 264.724823][T13250] [ 264.726115][T13250] dump_stack_lvl+0x100/0x190 [ 264.727991][T13250] print_circular_bug.cold+0x178/0x1be [ 264.730021][T13250] check_noncircular+0x146/0x160 [ 264.731596][T13250] check_prev_add+0xeb/0xe60 [ 264.732999][T13250] __lock_acquire+0x1492/0x1ec0 [ 264.734498][T13250] lock_acquire+0x1d1/0x380 [ 264.735907][T13250] ? lookup_open+0x150/0x1990 [ 264.737336][T13250] ? __pfx___might_resched+0x10/0x10 [ 264.739294][T13250] ? find_held_lock+0x2b/0x80 [ 264.740797][T13250] mnt_want_write+0x6f/0x420 [ 264.742247][T13250] ? lookup_open+0x150/0x1990 [ 264.743714][T13250] lookup_open+0x150/0x1990 [ 264.745093][T13250] path_openat+0xa2c/0x2440 [ 264.746467][T13250] ? __pfx_path_openat+0x10/0x10 [ 264.748012][T13250] ? kasan_save_stack+0x3f/0x50 [ 264.749703][T13250] ? kasan_save_stack+0x30/0x50 [ 264.751794][T13250] ? kasan_save_track+0x14/0x30 [ 264.753456][T13250] ? __kasan_slab_alloc+0x89/0x90 [ 264.755171][T13250] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 264.756909][T13250] ? do_getname_kernel+0x5d/0x250 [ 264.758482][T13250] ? filp_open+0x1d/0x50 [ 264.759796][T13250] do_file_open+0x20e/0x430 [ 264.761187][T13250] ? __pfx_do_file_open+0x10/0x10 [ 264.762763][T13250] file_open_name+0x1c3/0x3e0 [ 264.764211][T13250] ? __pfx_file_open_name+0x10/0x10 [ 264.765798][T13250] ? do_getname_kernel+0x5d/0x250 [ 264.767375][T13250] ? __asan_memcpy+0x3c/0x60 [ 264.768880][T13250] ? do_getname_kernel+0x1be/0x250 [ 264.770574][T13250] filp_open+0x2e/0x50 [ 264.771996][T13250] fsg_lun_open+0x6b/0x7b0 [ 264.773533][T13250] ? __pfx_down_read+0x10/0x10 [ 264.775172][T13250] fsg_store_file+0x1e7/0x450 [ 264.776622][T13250] configfs_write_iter+0x302/0x4e0 [ 264.778187][T13250] vfs_write+0x6af/0x1050 [ 264.779521][T13250] ? __pfx_configfs_write_iter+0x10/0x10 [ 264.781243][T13250] ? __pfx_vfs_write+0x10/0x10 [ 264.782699][T13250] ? find_held_lock+0x2b/0x80 [ 264.784124][T13250] ksys_write+0x12a/0x250 [ 264.785417][T13250] ? __pfx_ksys_write+0x10/0x10 [ 264.786902][T13250] __do_fast_syscall_32+0x13a/0x8b0 [ 264.788599][T13250] do_fast_syscall_32+0x32/0x70 [ 264.790717][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.793457][T13250] RIP: 0023:0xf7f53fec [ 264.795157][T13250] Code: Unable to access opcode bytes at 0xf7f53fc2. [ 264.797775][T13250] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 264.800995][T13250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 264.804352][T13250] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.808153][T13250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.811586][T13250] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 264.814867][T13250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.818060][T13250] [ 264.860361][T13250] mass_storage.0/lun.0: unable to open backing file: 0x0000000000010001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.911865][T12030] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.058406][T12604] bridge0: port 3(syz_tun) entered disabled state [ 265.079277][T12604] syz_tun (unregistering): left allmulticast mode [ 265.079340][T12604] syz_tun (unregistering): left promiscuous mode [ 265.079415][T12604] bridge0: port 3(syz_tun) entered disabled state [ 265.150682][ T228] smbdirect: ib_dev[syz1] removed [ 265.155902][T12188] bridge0: port 3(syz_tun) entered disabled state [ 265.170209][T12188] syz_tun (unregistering): left allmulticast mode [ 265.170295][T12188] syz_tun (unregistering): left promiscuous mode [ 265.170348][T12188] bridge0: port 3(syz_tun) entered disabled state [ 265.214669][T12030] usb 10-1: USB disconnect, device number 14 [ 265.219441][T12030] usblp0: removed [ 265.220823][ T5822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.288377][ T5822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.361855][ T5822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.446142][ T5822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.536956][ T5822] batadv0: left allmulticast mode [ 265.537006][ T5822] batadv0: left promiscuous mode [ 265.537154][ T5822] bridge0: port 4(batadv0) entered disabled state [ 265.538589][ T5822] bridge_slave_1: left allmulticast mode [ 265.538603][ T5822] bridge_slave_1: left promiscuous mode [ 265.538680][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.543783][ T5822] bridge_slave_0: left allmulticast mode [ 265.543807][ T5822] bridge_slave_0: left promiscuous mode [ 265.543918][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.651632][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.656175][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.660025][ T5822] bond0 (unregistering): Released all slaves [ 265.786806][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 265.843689][ T5822] hsr_slave_0: left promiscuous mode [ 265.846538][ T5822] hsr_slave_1: left promiscuous mode [ 265.847037][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.847076][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.856312][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.856327][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.863729][ T5822] veth1_macvtap: left promiscuous mode [ 265.864215][ T5822] veth0_macvtap: left promiscuous mode [ 265.864289][ T5822] veth1_vlan: left promiscuous mode [ 265.864324][ T5822] veth0_vlan: left promiscuous mode [ 265.996892][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 266.001673][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 266.060898][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 266.217774][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16 [ 266.338043][ T5822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.338100][ T5822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.360447][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17 [ 266.415277][ T5822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.415332][ T5822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.486526][ T5822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.486607][ T5822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.539608][ T5822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.539687][ T5822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.737314][ T5455] 8021q: adding VLAN 0 to HW filter on device eth18 [ 266.882041][ T5455] 8021q: adding VLAN 0 to HW filter on device eth19 [ 266.923833][ T5822] bridge_slave_1: left allmulticast mode [ 266.923896][ T5822] bridge_slave_1: left promiscuous mode [ 266.924107][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.938060][ T5822] bridge_slave_0: left allmulticast mode [ 266.938140][ T5822] bridge_slave_0: left promiscuous mode [ 266.938367][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.948853][ T5822] team0: left allmulticast mode [ 266.948911][ T5822] team_slave_0: left allmulticast mode [ 266.949132][ T5822] team_slave_1: left allmulticast mode [ 266.949148][ T5822] team0: left promiscuous mode [ 266.949159][ T5822] team_slave_0: left promiscuous mode [ 266.949264][ T5822] team_slave_1: left promiscuous mode [ 266.949497][ T5822] bridge0: port 3(team0) entered disabled state [ 266.953402][ T5822] bridge_slave_1: left allmulticast mode [ 266.953422][ T5822] bridge_slave_1: left promiscuous mode [ 266.953535][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.957517][ T5822] bridge_slave_0: left allmulticast mode [ 266.957538][ T5822] bridge_slave_0: left promiscuous mode [ 266.957681][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.053837][ T5822] bond2 (unregistering): (slave geneve2): Releasing active interface [ 267.067195][ T5822] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 267.067235][ T5822] bridge2 (unregistering): left promiscuous mode [ 267.078658][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.084642][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.089320][ T5822] bond0 (unregistering): Released all slaves [ 267.090591][ T5822] bond1 (unregistering): Released all slaves [ 267.092485][ T5822] bond2 (unregistering): Released all slaves [ 267.097336][ T5822] bond3 (unregistering): (slave lo): Releasing backup interface [ 267.100447][ T5822] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 267.100865][ T5822] bond3 (unregistering): Released all slaves [ 267.102866][ T5822] bond4 (unregistering): Released all slaves [ 267.174656][ T5822] bond3 (unregistering): (slave geneve3): Releasing active interface [ 267.180087][ T5822] bond1 (unregistering): (slave geneve2): Releasing active interface [ 267.192198][ T5822] team0: Port device bridge1 removed [ 267.197030][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.201302][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.204732][ T5822] bond0 (unregistering): Released all slaves [ 267.207026][ T5822] bond1 (unregistering): Released all slaves [ 267.210174][ T5822] bond2 (unregistering): (slave lo): Releasing backup interface [ 267.213113][ T5822] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 267.213324][ T5822] bond2 (unregistering): Released all slaves [ 267.216991][ T5822] bond3 (unregistering): Released all slaves [ 267.220696][ T5822] bond4 (unregistering): Released all slaves [ 267.225938][ T5455] 8021q: adding VLAN 0 to HW filter on device eth20 [ 267.523502][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21 [ 267.546743][ T43] kauditd_printk_skb: 121 callbacks suppressed [ 267.546829][ T43] audit: type=1800 audit(1788433801.248:4818): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127453 res=0 errno=0 [ 267.600366][ T43] audit: type=1800 audit(1788433801.304:4819): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146841 res=0 errno=0 [ 267.678159][ T5822] hsr_slave_0: left promiscuous mode [ 267.681297][ T5822] hsr_slave_1: left promiscuous mode [ 267.683266][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.683354][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.692620][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.695930][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.703510][ T5822] hsr_slave_0: left promiscuous mode [ 267.705974][ T5822] hsr_slave_1: left promiscuous mode [ 267.706866][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.709306][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.717096][ T5822] veth1_macvtap: left promiscuous mode [ 267.717181][ T5822] veth0_macvtap: left promiscuous mode [ 267.717255][ T5822] veth1_vlan: left promiscuous mode [ 267.717300][ T5822] veth0_vlan: left promiscuous mode [ 267.871477][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 267.879772][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 268.034829][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 268.038792][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 268.106499][ T5455] 8021q: adding VLAN 0 to HW filter on device eth22 [ 268.273943][ T5455] 8021q: adding VLAN 0 to HW filter on device eth23 [ 268.427228][ T5455] 8021q: adding VLAN 0 to HW filter on device eth24 [ 268.554011][ T5455] 8021q: adding VLAN 0 to HW filter on device eth25