last executing test programs: 6.163314496s ago: executing program 3 (id=3964): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000597000/0x400000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 5.213373746s ago: executing program 3 (id=3971): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x280dc0, 0x1ec541d9ca5bf1ff) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x3, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997cce6ef7b789812777bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4562e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) socket$nl_route(0x10, 0x3, 0x0) (async) setns(0xc9, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000380)) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x280dc0, 0x1ec541d9ca5bf1ff) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x3, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997cce6ef7b789812777bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4562e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) 4.7985483s ago: executing program 3 (id=3973): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2.228581912s ago: executing program 3 (id=3992): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f", 0xb3}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x400c0) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x2) 2.224033942s ago: executing program 1 (id=3993): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.122817727s ago: executing program 3 (id=3994): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0xc, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0x6, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_setup(0x389, &(0x7f0000000040)={0x0, 0xcec7, 0x4000, 0x1, 0x176}, &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x1, 0x6000040, 0x1, 0x2005, 0x8, 0x8, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r4, r6, 0x6700000000000000) syz_open_procfs(r3, &(0x7f00000023c0)='net/softnet_stat\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.049517037s ago: executing program 2 (id=3996): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf) r0 = socket$inet(0x2, 0x2, 0x806) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) setns(0xc9, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(0xffffffffffffffff, &(0x7f00000002c0)=""/153, 0x99) 1.932122699s ago: executing program 1 (id=3997): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.787292828s ago: executing program 3 (id=3999): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 1.481093059s ago: executing program 2 (id=4003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x3}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000ac0)="0d96f0280d65625ba798ac4847", 0xd}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1.332369715s ago: executing program 2 (id=4004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x3, 0x1188a, 0x0, 0x3}, 0x30, 0x3) landlock_restrict_self(r1, 0x9) 1.253051139s ago: executing program 0 (id=4005): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) 1.252796779s ago: executing program 1 (id=4006): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) (fail_nth: 1) 1.1565694s ago: executing program 0 (id=4007): socket(0x15, 0x5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x3, 0x7, 0x81, 0x81, 0x9, 0xf9, 0x40, 0x42, 0x6, 0x81, 0xc, 0x0, 0xf3, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x5, 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150008000000100016"], 0x3c}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x1, 0x50000028, r6, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000002c0)='./file0\x00', 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r11, 0x2000) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1.092854002s ago: executing program 1 (id=4008): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000180)={{[0x8, 0x9, 0x4, 0x8]}, 0x0, 0x1, 0x3, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x1da8, 0x800000]}, {0x200, 0x7, 0x2, 0x5}}, 0x4, 0x0, '[%{\x00'}, {{@align=0xf, {0x58, 0x2, 0x5, 0x8}}, 0xfffffffd, 0x0, 'GPL\x00'}, {{@align=0x1, {0xfff2, 0xbc5, 0xfffffffe, 0x6}}, 0x438, 0x0, '\xd5#\x00'}, {{@align=0x4, {0x0, 0x0, 0x8000, 0x400}}, 0x200, 0x0, ',-$$}+\xac.(\x00'}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10) 1.092293027s ago: executing program 1 (id=4009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001740)='./sys/kernel/mm/lru_gen/enabled\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x257f, &(0x7f0000003b40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269feb", 0x2549, 0x3a, 0x1, @loopback, @local, {[@dstopts={0x5c, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @jumbo={0xc2, 0x4, 0x318d}, @generic={0x5, 0x97, "553ac33536b6e989672593dfc8f5e8d75929f2d4c8c078b08cfb7a943c70f9a907f290e9552623ccc7a693cac85d9ea22ac49e0ed86afa93e6c47c24be050736402d82703cb411374d9068860910ab641383a6f3b49bb0bdf769ea97a341c3afe82fa2b83be6d2b916207fc71e033e08c52e2ec89f68911c9f2a384b6fee512928250235965b6c47c334593330af1102ccd8d2f684a7c5"}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x7, [0xec20, 0x1]}}, @enc_lim={0x4, 0x1, 0x9}]}, @routing={0x1d, 0xc, 0x1, 0x1, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @mcast2]}, @hopopts={0x62, 0x3, '\x00', [@ra={0x5, 0x2, 0xfff9}, @ra={0x5, 0x2, 0x21}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x62, 0xe, 0x0, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, @rand_addr=' \x01\x00', @private0]}, @dstopts={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x5, 0x12, "f5a7a97c1ee64d441a0105000000980172582ba56506939e4a4b4e65712f377aabf36005be02994ed0489497b4174d4e12a33b42f4082f76c8b95eece1804599b6ddff0f2c0467f9b8eeb88e87c8ba000f49df8fe27c535d98b05a1ee5c5ef18ab4389fba21fdfc773e75e99aa3aeb38d78cc556460f962e3128115bf9c87be592c41f211eb09a468e6cd1a3f5a929e89209027e"}, {0x0, 0x16, "4cb6f1e5d1552903d60849a03f03ba5e1a68dfe9924c4c257f2b7e36b4f4622a183705add1d5ffcc266ecc4d0645f45c198ea92514f8012ca72d17f8f9e39c2cd61e3969a5a1b7f3ec83408c05d6c6e68e4a2f86cae2d7eeeb6b0a8f71fcfef32886ac7d6ef22f14445c410a7b00474d5cb6057c7cbf0d08bba403ecb394da5de00f8c007c6f1291dbd6a3f3e5a6a4fe27bfb07036c07eb635973fb168f0d2cc097522329de820cd30b235d5606a7b"}, {0x3, 0x20a, "0b5fe4ff35185a0a4e174dbf3da25ab3cb0e645e454cd73d70d51c33259afcdd1677d7019d82c6137c07a6c228d54e0a602d2ed9584d6117cc8c477fa8927ede546b0ed9e27dc7e0b4bc93a56f3a9ee319ccf912c9bfb471a70077a85c5f34729ea0b0d7c994116393a564915faff8fbf86285de0c3a8ec8061abf162578c5773d243bfea2fbc5b2283ee8a8206a80d1e7a70768584654d53bda253e2b7b7f9410138f16d87138969cf0505c50b9082c3ad5117a5a80ef45537a883bb1f959a94312bae96907c732d5d83b00c726a16a069e16691778e38593a1c79a123bc43dafe9d5a19153209aeed0f9d48eec86ae5182462a17c60e4fdf8a9696f9792c5c86cfc8b3a0572011b03df52ddb4c52ab712e0e5986486525ca4339d4278b201c989866e1884ee4189246a47585409b3ad9e1f9f2d84276b13dea598a4623c74fe6378810bd4e44c317a29fdaa33b9581a77e6172c333726f8a310ad7c07032bda9ad65fa8522eb5ad7ae9416f2a7ad9ae3cdd72a82bcf55721963fb361a7438faf0fafd4f0af76d1bd074a36dedfd7b158bf69d4b57ffbd5de2ca6e1600e220f58b0610777a25e5fa9ea27db2f104cd4bd13e9976078b03c51fa0bb83b3a4b54785f553cf99134e3a77d92c0415fcb2ea90f3928b6b70e0c2632f1caaaec3a9a6c324544810f71c622bf77e6d37be166f4a2d559e21d59f760d55f440314b66885406eb134a6370a4dd2b21d4377e81e8b9a1425f5abd22159fe9aac3258c912b87aeab35d73fcfaff272449612808902e2a733d857b338abd906d6425f6775bb98f17903189ab668309f4cfac78c1af6fb4673b4693aeae3e77fce64da977a1e08b7e978a1e3dc086d7f0477a1b24fecc0e0cab475c605b30f4e1b9b1ef85c311bbcf75ad49d0715fc7586888afb2a4bddee9082151c7425d0487f3c85cbd2b1d66984c527d60b09171d1161cfff13cdb52c22bc72b14065f2193833b6383eb756eebb22c72dc44e2b58b6a68343643b7fd3d617787593bfd6794b73906d70853e40edb247b69364b0fda12352bbe2241739a9e8ad6e5ada148fea261520ff17984b9aeca1bb3f5e8b131b0fd0b40f13e96bac93223ec8b85d60e64179c212b3145837e2cbcdda8f995ff62d2d4c3cfb0cfe3012b40f98f9bc7c236842565b77a04cc0490a516225bb664fb50aca5c9de00ba2e5740d98af0199fee49d8d4477e3767089266a45fec34a5d833a054e8cfefe504dff0430804c0ab18d29b37bc9633ef94f92b74f2a2d56a67fa4c2a5ea50aada7b824fb0d5cb9519e8c4fff99db46efa7566614dfe5fddf2b2f5edd64aa7ed95c7fc4eceae19b4992874fbd9bea414d474eb286ecb4f337852be8fe67b94c996e6f21cafdda2168ed12abc4e65366d12e11ed591742489d729610b82fc8bdb9c35b20504862f2f03b20573a16d2a37b1240e9fbffffffffffffff27cd04631c1a277b5704f0f3696dea4860b85093d3b45a6606940817964fc4e2cbca3b6a6e39353ac804daeb5fa94e0d6e2f01f51365119d071b4f13ad95b2658c5a5a505dae22e99d77f7bafa680f07142a094db1eed58f4b275da337e36531f760e2925d5cb36588fe5e87e1d730fcb20d63b9a34278dbeb433028090d40db2c66e70a7074102db631830f39905e72a8e4eebd9bdf31648a7e175088fe174dfe6e4d4381353a05155356e1e32cd4a6ffbef02815647abd8573c1d1e3c4adab4d89aaf6ec94a4af0eb6e095ade975b1ac0f2288c246b83f9329c5338af19dc55081c43c6ef37fd82fb61cc93c66ce533cd59661090b40bbd0e2b934090c3a1294166895ce433e55ef95b12a4d5f91369a9c3cef16488d03c039ba7c5ed2a1218c17b68ef54a3bb4a104fb9ccfcf559beb1faf494593b59e711413b5fd94d50c2fafa39c943b3cf64aa9634db60fe8c25606de13fe28c9d6de8528296af87450f953c1c416e312c21ad0fd6b084e80875d28a566108918910e81935de9b4acf4cb63dc46bbce83716b870af25f8d32a692a66ab30f001a264f11e8e80b8a3c033b87e4a8ecf2200aee7b98b73fd1d7eb957da6b54b149cdf650188fbb917cd288fceaed52df555bec58a336de9b65fe568e4bd998be6c018a1b08b4afca835a0105219d0307b6ab34defe317d116409c5e2bc7b3e3c55994b714b4fbf56bc4acb8e6536fbd88d02ca5b17e03c7905cf7ae7e57b5dc1df5c441a389e9b078478f9e53e9d55e856a57019b5b2369707e6507df7e87bc063795cbe44d990f65df0dcab3dc680ca0b305e6d30604f01dec0f2301521faed4877286e272877b69be10905b69fa2e25a421dacf7992965541d40849e79578714a195623e793bbcc304b51989214a046c4e196e96cf30738c11a23cc59f0accc6c8a8cba9bb88811f3be00edf7c76131eab79e47cce2501b92512e45d49697c2816b324c1fcf9aa403ce4b78100311ff7a24ddc3896ad3ea138036f2885118a5d14001f5b23c7a29918c4b4fef2d0e9b13764a25c0c4da5b1ade84fe0fb4b062dff53264406b16e8643f0bac6e49e81dca6ee80ef69828c912c46ba80f69d33845559f668261c8743ca9815874444a80cc047a213837d22629f49fc0dcac1c16c4fd81c6cee5140735cee7cb1cec7b3cdf674ce7ae8a00deb91be26114e5734d5b84e7a0080f112b3080258c962162ec2a7608370cbfe60ca058adcc4b7f43bb28645b954bd7643876cdecbfd8dce0b425eb1e52bfb76210681c6b00e2d8a755e435f5a99e6a87dc45f0cac769ed8ee9c3b633f00851c870d34ac5df00f5ef2b07c83dc67137dbc46b8ba4f009eb7aaa849b3b2fb8271e1a2c61f6f1de218d2a9088a67021721e7fdedee3123943209b163cc80ce712caadcf2432b502fe2e29c26388320dcc4f165e566568a7fca6d06dce71ca1c7f3dedd4fabdb161ba5e84fd3070710ab0aff5f2a292197e3c5f28f60ae0d2d46b172859a48e3ef2ff2a0a996eb5056c35e007c63a46b8900d2787c911ed64de9ffc55a394f9af7fffb2d4d1967c00e2a3f5c48b720236d0d26d4479003565a4cfa06d22defe7d42733e58b06b199220bd382e9c3eac97a2a905ad122affb6b8b548e29e7ead6a4795e21849f0d06cebcf1c421e33cf4769ee785b5acb09fcad8f8874ec68f21de617c2155b4998a67783bb868163a62eda2e1b944ce298b658078c1c9974d58b85825cc4c3dbbe23c273f44f667df989057f67510c2672126328abdf9a02ab3c03e6108c26a2f763c56f23be6cd0112a7c643018e160ab54155ee7e1678c9b39ff3ebe283b9f1a909ab72441bb2072cdb473b9d8a8daf3f9dbdd9bc27628951b6a96e13069f7ff920f4e95a8b4a4f47d6c009b3e81e39476ca4790fbe64a38566d406f077dfb762ed0f4886195ae4068f8671d7d42baa572980b6c0889f61a12a0a40ab39a1967b8c66c44dc17a33673c18cf40b5d2b8d51c9f2e362223bff8944bec0c9ab93f1cd9ccdbc7db0854ac957c2d1c17f95d87ef6ebadd65e0194e42cdd3bd4df426b120cbfbab8f511f4893e4904ec8b6381a5665e8f5cdf2e30f1ae1de944f8a878e38ebc4003ea8633ad67663781b0e22d7eda25845c6bd17edc61add44b8602d0117deb05f0cf64c9142a91cfd3425a93ffb58de0f70831af121f6c9038e11e271c8bf023536d0c7da52579e843c377ced2b8b8d250a2b21151ef419e4a614e4b146cfa5d7aa1593bcf5f8a32f86c3204e7a5d9fc64cde75af77b9a2a5ea20915a1421a5eee514bb3df521410dcd5eec693ae0ee15d5b5260a22257eb1aadb32baf2347015fab1c0f984effcd00bd7aec3b24de949e81a5e22873eb968e7a1230f987aafaa99c69f490966c4689db99f7cf6d98226012aa34c9c90a97a358fc96ba21ecb03848613865b69a21b5d515a80fe2ac2cdd96f48e36fc7da1b558a5f5a1639e8c2c9b8bc6d29bb3cbfc6ef85e3099d69fde8297f07a434a7e8172804f184df768a28f3b18e8cbd9092f1690fe7ea00560f158c282b02ceca72b1ddb000a827014625baf5f89413b00dd1a79d57f24180cbdc742980328813dac1e819a9146ac0838ce9c3b16d05693aa71d361af3d17d9f77c4c963eb66f16589a6495c956c9976835de11d65bacb30bbf4d5e2a002afcc67bed85b21e113c4c7bef7f604ad34f9d7dce201516dc2f94f5a0ac078cbe0a778740377a2f302f37f7bd0dfb8ab986484275224e290f2a17710e89fb4117a5e0f4d4c061d00573c38552c8c8c4f6f9b80f53132d30e687d95dfd6f2fc68ef4392f6373d809c04dbbce3ccd6f7b26894380cd6750c3f188fee0e5f6bf944600af679a150a915b7d77905fc6fafd56544f63cc61483d150cfe174aff4504fbcdc6a4231f45c507aee97282a20b3d5bbd55034d4bc0f931d9338e9e81666912ccf4918ca00ea72b7ff985925d633c651cf643fbf000696003ee8f4bff75b7ca08730a4d789cc4a5a21aac41e5de9b4207a95c4661c0d0854359b32e644b5637c0a099e4f13043ebe4942ae66aea1b237d69d2f993aa2c0755ffc34ac237191c24f2508e1f1056b42691e341b51801ea38abd0c210960561289c69fba5b2d5871e542f9d6c9ee9546dcc2187b0cb159f06f62ca7b41375e1e248b24be576d6a553540b6ff636841c01358d89ad9276c7ed9f553ffbc1d8d7c10b35ba78f14d10c40ae863f6db3b597f021111df7d698ef09c195b2aab76d7e45911872f339220b766fa98952a52d4b864faad052131b4341628dc88d6dfe7bc83fe1a9284b86a3854499284483d9be631d88440e405f63e6880575e3cc27227eef2e3c3f639db439e8e3376334ae7e1756ede644d6c1f6d98ae23354476ced5b9aaabc085e3fb34606bdef68ead77b06035b438e6bb6b991c4ff96e326c44c8ff0eff658f0327e045ac6afcbb2b69b373815edb08e32155f28f8ca5f066ea5e986545f1f22fdbe2b5f76601c6061cbac301ffc5fc7b6def53324073c84a9c5f2d1a7fb2b0f5116581e4b15ad225b22e5d3831ac2f4a2643d0232c840c12b4b1f7d639913a50813e75e08db92af2080eb8c942b603abd45807800bb120ea6671f1119a0c20950e6fe471dabdfbb1e99b6aabd950f32a8cd9c6ba0dc5c611d9ae166269dccbaf26ee63799bb492962da38bbfcc890eab41aeb921b1e2473ac699c716cf44d42b05a6a6029561f0973feab74eb8dec14d8d2ba76aef7cb34956e5f8c06e2369483ae611bcce69fb4b25b7473b4db6fee1a15137adb79ff0bf86aa3fffb61aa2f9885f2aa8f007155deb3d4d926b63a1f41f1e23409c6a651b2e5843bf81d393d3ec955f4008296a9609040bd94a248c3537843ffb5927d14c49756df1654a1c333c0d89372371b7b32e3189138569cdd4737b377b775b86d97ab2f1a8fa69c64b6e18935f433cdbc0394594388b529224892c0e38f124be8b1aa577b46ef58b8ac92888a4eca99a7458329279c16622bf9b059b8c26ed33dc93324eb5905026997de1e436b04349e2120e3b9f10fb53929dc644a2755d8d695738d84638bed71e704c971c188c1ea1bac9abd8f64dae631ba2bf022c40d8c87c98fb3f7deb70e204f42540001ace8701bbdfa5c58f551e7d500eee44a448e307a8b661ced16e681af59bca31ffdd8ba6b783c43f9a209838f0df82072cc98884da2f3155629c7d38beac57b6d0b54dfda4c72124ce40b241844483764c9f386bc2aeb69ad008886997f01ef2e7d449fdaaab212a4c0687cd595d82a656ddfb7c2d3f8979146cf5b5b827a2773386e7f6a533ffa480a99ca963857f4399cb5e68293b922955db8046b469f3207367dcfb8ba0ccd2b0ce923384a9b287ccaa10fd2b3d67a3ed3485ca6543fe9bf4142c0e316dea923f877151d27553752130fefb"}, {0x4, 0x10, "034de7a161a81f0533a3c51fd1abd9297e826e063e247539b72ada46dea6767a6a70f87a1c5bc818b4f437d3854c122c715c33241de94ce6f812e50af16b8061c09a4ddc4e0410bbbc56fd9409e574304a4cd4d113a7d15c9f4f957710021bfc3c69ab7678cca2ce38778412acda46e516e2bcd200149abf28f1c264e644d48f7016fd"}, {0xe, 0x19, "2ba835171e4982913f7c0ce0caaaa3d73b7686936883ebdc7db016d3174cad7939a4256dce520814c6253edff375e3f8c309723c28e80f17b02aa8e0299cd369190c32f56435458d177a99524012ec7197c4efb2fefb6d98b2a9d9a145a7bde3a75bf43caa613ccc468fe7f7014d8abbb3c939cac0abec1b098c13d9f8c40cdc4fb548d1adb42316d7397d01a1b0486fcaacca2aabf6feb6b3b9f2463a7e9d0b037450b3d00bc0969eac0603547f3ad06822685d99d27bfa45cfaf5c9860a86dd28c97fc9966"}, {0x3, 0x200, "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"}, {0x2, 0xb, "7fe564fdd4455a43e807984b52946a530fb47542d0a333ab415f245799d43a4f557d6c7460efbc534aea8bfbfefe2aae914474cb2481a28b5288bad6e72ae92ca5887a6a2a582ad4ec527e5f70a09e0dd213567ed46ae885d8d5cd84c3"}]}}}}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_io_uring_setup(0x99a, &(0x7f0000000180)={0x0, 0xbdd2, 0x80000, 0x3, 0x30b}, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x6a01, 0x840, 0x2, 0x299}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf6d, 0x1, 0x0, 0x9c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf7b, 0x20000, 0x3, 0x16e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x94, 0x1000, 0x2, 0x233}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xebac, 0x20, 0x3, 0x196}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f00000015c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x2, 0x50b, 0x0, &(0x7f00000005c0)=@buf_4k="ea4ee669c57c834d1133054897aca39fab2f41ee5249de95a5c9be568ddae4e9c27f1f08054ae74bc3a7b0b22ade20e9cdf3eba22bd049f6cf102a3c4649f7c0a5500cd45a28f9f6cfb476550531addc8fdf45c5d2f2d7a1cf52837c67d7331a26e05f65a127202f6b80b36c2d6a36f554e1e0fb9d85300057425a8eaffa7c40f93b43c2c4a3fa45142b611e2c5b4dc17b164f2a686f596b7a715604975d156f0d3f783868ba050bafc9b8fa2e7d7415e6f0e4fad4a9f860bb23a8cba901a6a580ef47678b1f5893103f630d05e4198393ae29c74918cb70c28f8dc4be09b6b2a57639a56d4babe706a7f9431da1ebad51fa7119b8c1eb262bd911106b383068e231c17b75074313bb07c1486635be5fc8f73d7a36c8930f5c6b983cb6d62488635a97cfce33a8311407c81c5a9b32b3556d92642dc2d022e088efdadbde7ce70b3c10451a8f1b8a98fce2892f048e00790c26409c65f365fafe097c381722d27f7bae8a02d822f266090c09581a43c21161e7782957901f07a7d2f753b6c15f49e4b4048587d629ed57e174d5d4cebf2a47d33de6ae2447d936a4bd48824d205f3c2d3c568aa845b8d5593c4287077a14c631fd4336892a127e0d676d2bffb8bd2bb986ae9954bee0268073097a2fb2f3fe713c7e9913de9eb7b900c070f10b17cce440d4f3a000052627f6d8f17f22117fc769414f06fd34d88e6b31fd2e2a0500b73ca1fead6cc86e60139986b7691ef6d3c12b08e881d8f6e862099374fb19ab68a43fb7a81e5f493d73232f87b75bb1d8042f7b709eb7f8c07186cd6f4c0af7861c10ca4fb0531c41f331da5c132172647c5aa6c39640b106705f6502784e5f76ecbd1fb30598ff46a129dbb7ce02c06a00d3e06ec8bb24609ae33c0305413069ecc211a353c7b759fcd574a08f523486e0d5ce7ea539179427becd94740f361c2d66dfa4f4fc4f8ca9eff55eddffa401002e2e2c77983c51c11476a12d5a732cd3246366f5abc5ea3bd2a42053999e26570bdf99ab013bb5306d85ba28ed36c135e078df280a00d5e55c0e326d2167f74cb02d5e1b725c2bbf53ee608c628ab72f23465bb5c6edd2bde8a612151aeafb8be5995e689070390a14402b3759655d5ee0849bf8c13b03ee46221707aa4372b1bd0a276badec0dfb7cd9e12c2e95564550db637745b03bde13727ac0477c113eddfbf17b89652cad2b62433e45e3edda839eba7f9d02f96ca61ec5cb708cdaadb4502f0f70313cfd774d641b28999038347c1282cf8341bb3615f05872d49597af923383dbb69235da525babcc627aa06ff15916a21ca1c42c4ccd0d803676b89259459ef206ccc4c112c8de59ad2f03d951209281a445aadb5738b38e41eb552bb5836d9c7dbc3ef193036a374ea3acdfe2088603e3b08b043c44e470c073a7e404c0b85eaebe1e68a92e91a94fa34dd7587216f0cc996d475a6874539487fb66ad716d34d45440e8e85ed040d470a92439583f8f11e3428443f21f36caa2dbf8f4633ab07a3bc45e382d2fd48e8347a45d0b2d91d4e3e5ecfbfcf3abf5fe979556d8974fd41c6ddb419c80c1feb8b23c8a68b9e9ea78c633e3cb613518a418e26c209375856503001a1ade76d93019655d6e8e59ada4602cfe04c0cc019dbfb4a41ac97b90f5c888a562fa50f8f0a561ff4387a01ca9c30f37667d1d31dfd54733879ac7a88c012a2fc51b6df72233d8465ede9e38a7f5a079e1ca9fc3ae02e44719dbb7e13e29e7df5c7ae3f82eae66cf084a25f67992b29223569fbe2e787b5d87429e970b6e5899b0541a8ceed98788f8bc08ea58ae14c6862d36ab50d27b03d00a53428daee4e988c2e87f67ac5fcca31c331e0f26e4083bf86e672c7c88bee45a7a444151c83e6ce055f7ff8253d71c6d3b866098d291a64f96cbdb337502787d8abc9436d44d885f7e632522def00c9f8422920513ee57b76abc8a9e4b9bf3f92a22f48d065e1b24c79277859c7e65e1ce7973ac261722c422e98aee238cc91b7b66a921390e2b33552246ee9a181c6079b66e083a0366aa776136cea1537accedccc9d5265376ab600b0b637402b2249cc115331feffa36a847a4d7830756cf0fda351f42049409632ffbe37ff6cae95ef89c753fd737cf4e798fde419a53e401b72b54e50e3defb91a5f9e6ad4732a5e3f5c37bb26a7318a90458133cd27eac2d5af1ac0dca4dfdb65af29239b9651af99ec69061c9c1704d3d59261e23a4099f05d01bae873734711130b5e9144e73d2acf458d0d22dda1c99fe38713907a1cf9a4c84101224f9f3918b38ce819694a232adb913cc1dbf3055f8cd04f5d4074d9627aed71bf988bdb66afd7a4da820a0d6578d1f97e51ef696d6f7900b8155c0a3ed2e45446f653a5312f4b2fba5bf05e4c951c3602d72954b9dc4473b06b3496244a4ad78327a82f1373580a0c64b76593fcb8f1b5abc40523eecf949528aa01c5154e3acd710fd9600934f295af7db43b611e47c4600b01efb08899bf457a53c0241aa1d288c73f1ff1de8422f300ab7b3b8b4c8b5b2098efa7d2f16e3bd3eb40866681411429acc41dc792abc5226aca4f93a1a643a3896893713d774e33eec2d3496397800f33823c62692d5f3612821093dd3f1231768a8e68e6d3e27f489928df3e613c698fa3266c7fd0996574a7b98fc82e59faef0c93b75df36dabd8d20ec41afea95a5ab2be58736b905f83004783286a2dffb858ef6dbcfe55c64b5f2db73ed9d448efecc047956df39cbca211638ba3dcc12fd9a632c3ad4417859520e3a595803a4e7697cc5013348dc79b3739a18feee433cd5f0e4b033686abf39a5bd4167c3d3b8ac06c347664a21eadeb2c70fef05b9ac78496fe0e101626d57470497a1a8352ef8ac8a4f939fce95cfb27804c49e9fe0dc04459510fc0ca81a18f02f7ec662cfb64a984160afde81e607560b7ea5bcd8348241d62baa058890d5427ab0a739f6ce7893c27d546cf6301ab8032e5f99e11c3d7b54e2e176266681ed1cdf82c9014f462dc113222dc7f544e8670ebcdae10d7f3936a936e148e679533a80abfa919302f4daea2069841d82b6031037d30ed13a192b30481bc85ba30f69bb13f13c3b780b2a43b809691ed3ad91b7a9de7d274d3d8108aed4184e41286da4315dae2668e4c2df7674260265da48088869adb47e72a91870ef04188a9f83a1aca4be2a504e9ce0d44ec24c493d92505e6abab03c0254ad36fe0f0923f726752968cc912b35059fe6f63bcf1ab7220a46e3c2e34fe780f2ed02033a6d3aba8f579fd7166ca50bd087553c7399344aebbf18a1acbf83fadc00cc2fe6d9a43d2c6c3bcd7b83abaccdf6fdbbaa8551888b60c634ff4814982a22907f47ea37d09f925188fef48f9a84fda929ef2b4aa2ded911c37e7e6d118e41d6262e5d5909a999791ccd7699f598dfd386422093c774b94273d8b6da69be291c86c8a3bc2e14036ff6c4f7dcef2ea1703cc18986f09cd27c9a12c9e5494248419be712c9b168509410e3ff4a47175fe94fa13ad41dfd533216e99c382b9d9cf395125415c4edbe3385833ba52bbf00b0e38c5b113253ad3223b5061023e9559a419db026cad6ef4d36bf3982e19e78f12f2541de34f29827033fcd66095718404849f9741f35bf2e5d4fb8511ad9df56b586d4862998c28475d80b2cd8744b468ed230ea9c0ebf77b4b86006fa34fdebaad2ade99342d618a406eb648cbe30644502af1d0330b08fbed18997b837f8b86031cffefc6f3f833d9d449990969195b342df5ab96931a8d80e16cfcdc15cd3cc3d8468d7af6671bd9f0f5cb5af9e58746b849b446ebea000fc7c8957ce2b2f5ca170b6da8dadf47c34305cbfd094c7e6bebe96567365e3cbe0408af86b700046d0cf79c87e4341a1802d25e37df8a8dfc8f47554b9e7e4d519de77224bf7111127c85725fcb0bd14cfac66d573cad90c968bc4dc5654d96d9bc02063ebe2beb9154b41de74b56c7473fcba9b8062814f604daf826640464d6c1480358fdb3e42be14417c97af5ce2cbc251699bc8e37f40165827d63d80bec616980dbcc30d82d81fd34afa796a37e0cac4a431330cf4ded9d46ebcab92a9cf4be0f473a46c236fc9d1274a1483630eb91a9a953a0bf2cd6c7a7e43ff06999a32506a27ebde195c771a367881e3458792019bce8d8cba95d1c18543db33ed314aac1abc9d5a02f9bd1d16b524e3af590104a37a6eaa6736d941567cdf36f370c3dad1ad89ceb7120951653f9529623a4d52193a41a63e9439c92351f7500f182a12cec3418eeaf06cbbfa1dfc6bbd8bf448354b688dd9c4d3e66b395cb7820c9c8b9586f4079a961d7c51bed2fefc27710972ac2d8e95cbdf0cba3f08c65073be33c1eb79b2228a346bacd598672fe994401dd273704096c3d92f3adb24e01e60ee106a5cac6fca6158bbc5086135b4e63a81534704ab42fedaba3a47a0296173ac532d22522246bd0ec6f6d3aec2673555480cb3fca62cd3d916d67871c31b5fd3f469fbff82c743961340d864eea4b71ad4a56e7ab04a371328f5f036abb58e9c4699ba386f688f65045b5c7f3ac8a5c75a5b10d26ca216c04dc734e3c528f0c94c9c32cedc3735d5a085f00cc4380a646173433d01866cb2caa6d86d27790a1b13661e0dd3b30d117899d3a4ff0e74efb26d2bc5fa6f9ba12aa8be0d582a055c16606ab52f4a8bbe64192dd8fbc2695c6c2a4edac6592c63ffb792aeef3cb27974e2ac645f6535977afd70ba567d99a1a1ca84597b270f992584ba7d810e60c68c04e3949818fde9c5eff7efe48c854661eb436932fb8f4daf009e760cf5e54a266411f029e694dd5f6f96cc14262c0f3cb5ae71c27ff63f65173d210ae6e77ad5134b06aaca6e4070b6335b3d857cb97fbd5d7b4f992f7b6c50c1873af53cc4c797b2f142c02d721d92602827667a32cd89a6bf17393cee21affdf64e86b9aa3b0eb7443226833e0a624aa7e27e438b6e8698258c48a1a429af9c99970688748c4d415c9978a0933b4c9a1de4b98a95e9a0e2c8a3a584825543cdb0e639ba8f9c4fb72ecfb78ca2565f9c5d66693eb8d6751ad1fbf89bd23b43501149bf9d4af9e5e905eccfaa91a384d0f4e92c9ecbb3b698eb08993e58f9625d7fd270905864f3597f59e7d2f9a711e077f98556a611f492cd596bff691322a779fc81181add65e2edff4067e0fc820f9aad7dff57f643e2b7bbf8e34f0c6835f73fc259fdfaa667c0fc06eb93150d8e6d1aaf27054d58839bad6e939d8b4bdb1379ae738d23cc59cd35a0f1db3074b2073c213fbe281eac5e3441aad7bc65428999ab12cd5fefdbd905c43803d5055eb06d73dbf1a6fefb6d6105ff9a1472d41db3425237f55a862afcdfdec4f4f2147b4e5e116d29fac801a6d09bd9892b8335d37345d13f93d94221231a98eda1c2f8898c0114eabd1223d0d677ca799b43518657228b550933e70921de3c683b5014595423febe4d22ea8c498275487be2087de347a231c1c46cae05aaa6f2cd075c8e476052c580b943eee5890da2652f48a20ee16d167ca9b217e52a638240fb933c55dd74452c30a9372bb467989f20eec75ff7744aa2b8421cf1905e3c8d129c74d9640bc88effe2e80b900127df7b0f7b8b75b31a20ed1ba49b58697d732bcfa00ef4e56867259cb8c4fea0ebdeeabefd217b56223a0ec644c92efa47432156afb5ba4f82fe619e48fc039d2b123659a754eeb114f1f5a627cf56604047de01a33ffbc1e542c5c5c41c4b4b25c68"}}, &(0x7f0000001640)) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001680), 0x200e42, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r11 = io_uring_setup(0x664b, &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r11, 0x19, &(0x7f0000000180)={0xfd, 0x1}, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r13, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x1, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x81, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x1}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0x1, 0xff, 0xf5, '\x00', 0x2}, {0x4, 0x7, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0x1, 0x42, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x4, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x8, '\x00', 0x5e}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10}, 0x5c) syz_io_uring_submit(r1, r4, r5, &(0x7f00000016c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r9, 0x5, 0x4, 0x2, 0x4, 0x1, {0x0, 0x0, r10}}) r14 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r14, &(0x7f0000000140)='n', 0x1) 896.275768ms ago: executing program 1 (id=4010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000019280)={'syztnl1\x00', &(0x7f0000019200)={'gre0\x00', 0x0, 0x8640, 0x80, 0x8000, 0x78ff5cce, {{0x16, 0x4, 0x1, 0x1c, 0x58, 0x65, 0x0, 0xf8, 0x29, 0x0, @multicast1, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xc4, [@multicast2, @multicast2, @empty, @empty, @multicast1, @empty]}, @timestamp_addr={0x44, 0x24, 0xc7, 0x1, 0x0, [{@broadcast, 0x1}, {@empty}, {@local, 0xcd}, {@local, 0xcf32}]}, @noop]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000192c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xff, '\x00', r2, r3, 0x5, 0x5, 0x1}, 0x50) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='md0\n', 0x4) read(r5, &(0x7f0000019380)=""/130, 0x82) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x10000}) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) r8 = dup2(r5, r5) write$tun(r8, &(0x7f00000000c0)=ANY=[], 0x46) 799.510404ms ago: executing program 0 (id=4011): setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e0000080005fd", @ANYRES16=r0], 0x84}}, 0x20008040) 736.483002ms ago: executing program 0 (id=4012): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 520.609631ms ago: executing program 0 (id=4013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 379.078862ms ago: executing program 2 (id=4014): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x100000b3, 0x26) socket$inet(0x2, 0x1, 0x7fffffff) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 378.712534ms ago: executing program 2 (id=4015): prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0xbd) 259.80045ms ago: executing program 2 (id=4016): socket(0x15, 0x5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x3, 0x7, 0x81, 0x81, 0x9, 0xf9, 0x40, 0x42, 0x6, 0x81, 0xc, 0x0, 0xf3, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x5, 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 0s ago: executing program 0 (id=4017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000000c0)={0xc0000, 0x0, {[0x0, 0xfffffffffffeffff, 0xfffffffffffffff9, 0xd4, 0x3, 0x5, 0x3, 0x7]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='./backing_file', 0xe) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='1', 0x1) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 412.534973][ T1036] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 412.538125][ T1036] usb 6-1: config 0 interface 0 has no altsetting 0 [ 412.547518][ T1036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.551396][ T1036] usb 6-1: Product: syz [ 412.552941][ T1036] usb 6-1: Manufacturer: syz [ 412.554627][ T1036] usb 6-1: SerialNumber: syz [ 412.558234][ T1036] usb 6-1: config 0 descriptor?? [ 412.981083][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 412.981136][ T42] audit: type=1800 audit(410.635:5438): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 413.060376][T15725] syzkaller0: entered promiscuous mode [ 413.066314][T15725] syzkaller0: entered allmulticast mode [ 413.193004][ T42] audit: type=1800 audit(410.838:5439): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 413.310203][ T42] audit: type=1800 audit(410.949:5440): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3636" name="attach" dev="sysfs" ino=36920 res=0 errno=0 [ 413.313060][T15729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 413.318679][T15729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.333952][T15729] vhci_hcd vhci_hcd.0: Device attached [ 413.341731][T15733] vhci_hcd: connection closed [ 413.341899][ T13] vhci_hcd vhci_hcd.2: stop threads [ 413.345731][ T13] vhci_hcd vhci_hcd.2: release socket [ 413.350681][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 413.382335][T15738] syzkaller0: entered promiscuous mode [ 413.384147][T15738] syzkaller0: entered allmulticast mode [ 413.553908][T15740] openvswitch: netlink: IP tunnel TTL not specified. [ 413.577674][T15740] jffs2: notice: (15740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 1 orphan) and 4 of xref (1 dead, 0 orphan) found. [ 413.591590][ T42] audit: type=1400 audit(411.208:5441): avc: denied { write } for pid=15739 comm="syz.3.3640" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.623668][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 413.866899][ T42] audit: type=1800 audit(411.457:5442): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 414.034991][ T42] audit: type=1800 audit(411.605:5443): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 414.056082][T15747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.151439][T15747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.217085][ T42] audit: type=1800 audit(411.780:5444): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 414.300465][ T42] audit: type=1800 audit(411.854:5445): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245334 res=0 errno=0 [ 414.312874][ T42] audit: type=1800 audit(411.854:5446): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=245338 res=0 errno=0 [ 414.329554][T15751] bridge0: entered promiscuous mode [ 414.333743][ T42] audit: type=1800 audit(411.854:5447): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=245342 res=0 errno=0 [ 414.343841][T15751] bridge0: entered allmulticast mode [ 414.579446][T15759] syzkaller0: entered promiscuous mode [ 414.584049][T15759] syzkaller0: entered allmulticast mode [ 414.794563][T15772] FAULT_INJECTION: forcing a failure. [ 414.794563][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 414.814609][T15772] CPU: 2 UID: 0 PID: 15772 Comm: syz.0.3652 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.814629][T15772] Tainted: [L]=SOFTLOCKUP [ 414.814633][T15772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.814640][T15772] Call Trace: [ 414.814644][T15772] [ 414.814648][T15772] dump_stack_lvl+0x100/0x190 [ 414.814669][T15772] should_fail_ex.cold+0x5/0xa [ 414.814684][T15772] should_failslab+0xc2/0x120 [ 414.814718][T15772] __kmalloc_noprof+0xfc/0x820 [ 414.814732][T15772] ? rcu_is_watching+0x12/0xc0 [ 414.814766][T15772] ? tomoyo_realpath_from_path+0xb6/0x690 [ 414.814784][T15772] tomoyo_realpath_from_path+0xb6/0x690 [ 414.814798][T15772] tomoyo_path_number_perm+0x23c/0x580 [ 414.814814][T15772] ? tomoyo_path_number_perm+0x22e/0x580 [ 414.814831][T15772] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.814861][T15772] ? find_held_lock+0x2b/0x80 [ 414.814877][T15772] ? __fget_files+0x215/0x3d0 [ 414.814889][T15772] ? hook_file_ioctl_common+0x140/0x440 [ 414.814902][T15772] ? __fget_files+0x215/0x3d0 [ 414.814915][T15772] ? __fget_files+0x21f/0x3d0 [ 414.814929][T15772] security_file_ioctl+0xd3/0x230 [ 414.814960][T15772] __x64_sys_ioctl+0xb7/0x210 [ 414.814983][T15772] do_syscall_64+0x115/0x870 [ 414.814999][T15772] ? clear_bhb_loop+0x70/0xc0 [ 414.815014][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.815038][T15772] RIP: 0033:0x7faff6d9e0d9 [ 414.815050][T15772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.815061][T15772] RSP: 002b:00007faff7cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.815074][T15772] RAX: ffffffffffffffda RBX: 00007faff7025fa0 RCX: 00007faff6d9e0d9 [ 414.815083][T15772] RDX: 00002000000000c0 RSI: 00000000c050561a RDI: 0000000000000003 [ 414.815093][T15772] RBP: 00007faff7cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 414.815102][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.815111][T15772] R13: 00007faff7026038 R14: 00007faff7025fa0 R15: 00007ffea37bacb8 [ 414.815133][T15772] [ 414.815168][T15772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.979556][T15777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 414.981707][T15777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.988549][T15777] vhci_hcd vhci_hcd.0: Device attached [ 414.999639][T15780] vhci_hcd: connection closed [ 415.000074][ T13] vhci_hcd vhci_hcd.2: stop threads [ 415.003584][ T13] vhci_hcd vhci_hcd.2: release socket [ 415.005323][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 415.083382][T15784] ima: policy update failed [ 415.294893][T15792] syzkaller0: entered promiscuous mode [ 415.300300][T15792] syzkaller0: entered allmulticast mode [ 415.317249][ T1036] usb 6-1: Can not set alternate setting to 1, error: -71 [ 415.342463][ T1036] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -71 [ 415.358010][ T1036] usb 6-1: USB disconnect, device number 37 [ 415.375010][ T5741] udevd[5741]: setting mode of /dev/bus/usb/006/037 to 020664 failed: No such file or directory [ 415.388253][ T5741] udevd[5741]: setting owner of /dev/bus/usb/006/037 to uid=0, gid=0 failed: No such file or directory [ 415.424756][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.427878][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.585435][T15801] FAULT_INJECTION: forcing a failure. [ 415.585435][T15801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.600642][T15801] CPU: 2 UID: 0 PID: 15801 Comm: syz.3.3662 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.600672][T15801] Tainted: [L]=SOFTLOCKUP [ 415.600678][T15801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.600689][T15801] Call Trace: [ 415.600695][T15801] [ 415.600702][T15801] dump_stack_lvl+0x100/0x190 [ 415.600732][T15801] should_fail_ex.cold+0x5/0xa [ 415.600756][T15801] _copy_from_iter+0x1f4/0x1690 [ 415.600787][T15801] ? __pfx__copy_from_iter+0x10/0x10 [ 415.600809][T15801] ? _parse_integer_limit+0x1ac/0x220 [ 415.600831][T15801] ? _kstrtoull+0x13c/0x1f0 [ 415.600848][T15801] ? __pfx__kstrtoull+0x10/0x10 [ 415.600868][T15801] tun_get_user+0x265/0x3c20 [ 415.600911][T15801] ? __lock_acquire+0x49f/0x1a40 [ 415.600938][T15801] ? __pfx_tun_get_user+0x10/0x10 [ 415.600959][T15801] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.600990][T15801] ? find_held_lock+0x2b/0x80 [ 415.601005][T15801] ? tun_get+0x191/0x370 [ 415.601021][T15801] ? tun_get+0x191/0x370 [ 415.601042][T15801] tun_chr_write_iter+0xdc/0x200 [ 415.601062][T15801] vfs_write+0x6ac/0x1050 [ 415.601079][T15801] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 415.601098][T15801] ? __pfx_vfs_write+0x10/0x10 [ 415.601109][T15801] ? find_held_lock+0x2b/0x80 [ 415.601133][T15801] ksys_write+0x12a/0x250 [ 415.601148][T15801] ? __pfx_ksys_write+0x10/0x10 [ 415.601170][T15801] do_syscall_64+0x115/0x870 [ 415.601192][T15801] ? clear_bhb_loop+0x70/0xc0 [ 415.601213][T15801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.601232][T15801] RIP: 0033:0x7f0cfc39e0d9 [ 415.601249][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.601264][T15801] RSP: 002b:00007f0cfd260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.601281][T15801] RAX: ffffffffffffffda RBX: 00007f0cfc625fa0 RCX: 00007f0cfc39e0d9 [ 415.601309][T15801] RDX: 0000000000000088 RSI: 0000200000000140 RDI: 0000000000000003 [ 415.601318][T15801] RBP: 00007f0cfd260090 R08: 0000000000000000 R09: 0000000000000000 [ 415.601327][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.601336][T15801] R13: 00007f0cfc626038 R14: 00007f0cfc625fa0 R15: 00007ffcb1f8c128 [ 415.601358][T15801] [ 415.730746][ T1250] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.055796][T15820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3669'. [ 416.074155][T15820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3669'. [ 416.149241][T15826] FAULT_INJECTION: forcing a failure. [ 416.149241][T15826] name failslab, interval 1, probability 0, space 0, times 0 [ 416.156601][T15826] CPU: 3 UID: 0 PID: 15826 Comm: syz.3.3672 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.156623][T15826] Tainted: [L]=SOFTLOCKUP [ 416.156628][T15826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.156635][T15826] Call Trace: [ 416.156639][T15826] [ 416.156644][T15826] dump_stack_lvl+0x100/0x190 [ 416.156664][T15826] should_fail_ex.cold+0x5/0xa [ 416.156680][T15826] should_failslab+0xc2/0x120 [ 416.156698][T15826] __kvmalloc_node_noprof+0x116/0x970 [ 416.156714][T15826] ? traverse.part.0.constprop.0+0x397/0x650 [ 416.156735][T15826] traverse.part.0.constprop.0+0x397/0x650 [ 416.156753][T15826] seq_read_iter+0x93f/0x1270 [ 416.156770][T15826] seq_read+0x344/0x4d0 [ 416.156783][T15826] ? __pfx_seq_read+0x10/0x10 [ 416.156797][T15826] ? avc_policy_seqno+0x9/0x20 [ 416.156811][T15826] ? selinux_file_permission+0x8f/0x6d0 [ 416.156834][T15826] ? rw_verify_area+0xce/0x6d0 [ 416.156851][T15826] ? __pfx_seq_read+0x10/0x10 [ 416.156863][T15826] vfs_read+0x1e4/0xb40 [ 416.156883][T15826] ? __pfx_vfs_read+0x10/0x10 [ 416.156905][T15826] ? find_held_lock+0x2b/0x80 [ 416.156917][T15826] ? __fget_files+0x215/0x3d0 [ 416.156929][T15826] ? __fget_files+0x215/0x3d0 [ 416.156944][T15826] ? __fget_files+0x21f/0x3d0 [ 416.156960][T15826] __x64_sys_pread64+0x1eb/0x250 [ 416.156973][T15826] ? __pfx___x64_sys_pread64+0x10/0x10 [ 416.156989][T15826] do_syscall_64+0x115/0x870 [ 416.157006][T15826] ? clear_bhb_loop+0x70/0xc0 [ 416.157020][T15826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.157033][T15826] RIP: 0033:0x7f0cfc39e0d9 [ 416.157043][T15826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.157055][T15826] RSP: 002b:00007f0cfd260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 416.157067][T15826] RAX: ffffffffffffffda RBX: 00007f0cfc625fa0 RCX: 00007f0cfc39e0d9 [ 416.157075][T15826] RDX: 0000000000000109 RSI: 0000200000001480 RDI: 0000000000000004 [ 416.157082][T15826] RBP: 00007f0cfd260090 R08: 0000000000000000 R09: 0000000000000000 [ 416.157089][T15826] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 416.157095][T15826] R13: 00007f0cfc626038 R14: 00007f0cfc625fa0 R15: 00007ffcb1f8c128 [ 416.157110][T15826] [ 416.264590][T15828] syzkaller0: entered promiscuous mode [ 416.287471][T15828] syzkaller0: entered allmulticast mode [ 416.379706][T15834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 416.381848][T15834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.386313][T15834] vhci_hcd vhci_hcd.0: Device attached [ 416.414437][T15835] vhci_hcd: connection closed [ 416.414668][ T13] vhci_hcd vhci_hcd.1: stop threads [ 416.436337][ T13] vhci_hcd vhci_hcd.1: release socket [ 416.438300][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 416.572173][ T24] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 416.732762][ T24] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 416.736655][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 416.739945][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 416.749568][ T24] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 416.756783][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 416.761641][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.761663][ T24] usb 7-1: Product: syz [ 416.761676][ T24] usb 7-1: Manufacturer: syz [ 416.761687][ T24] usb 7-1: SerialNumber: syz [ 416.763870][ T24] usb 7-1: config 0 descriptor?? [ 416.860426][T15851] syzkaller0: entered promiscuous mode [ 416.862328][T15851] syzkaller0: entered allmulticast mode [ 416.882218][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.894731][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.125867][T15860] se_device not configured yet, cannot port link [ 417.154852][T15861] ima: policy update failed [ 417.352101][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input51 [ 417.360198][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.368078][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.382812][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.395482][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.407729][T15867] syzkaller0: entered promiscuous mode [ 417.409538][T15867] syzkaller0: entered allmulticast mode [ 417.443285][ T6112] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.481446][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.487351][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.501745][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.510725][ T5117] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.619374][T15820] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 417.714701][T15870] syzkaller0: entered promiscuous mode [ 417.716836][T15870] syzkaller0: entered allmulticast mode [ 418.036027][T15877] FAULT_INJECTION: forcing a failure. [ 418.036027][T15877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.043501][T15877] CPU: 0 UID: 0 PID: 15877 Comm: syz.0.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.043522][T15877] Tainted: [L]=SOFTLOCKUP [ 418.043527][T15877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.043534][T15877] Call Trace: [ 418.043539][T15877] [ 418.043544][T15877] dump_stack_lvl+0x100/0x190 [ 418.043564][T15877] should_fail_ex.cold+0x5/0xa [ 418.043580][T15877] _copy_from_user+0x2e/0xd0 [ 418.043597][T15877] copy_msghdr_from_user+0x9f/0x4c0 [ 418.043623][T15877] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 418.043638][T15877] ? __lock_acquire+0x49f/0x1a40 [ 418.043654][T15877] ? __lock_acquire+0x49f/0x1a40 [ 418.043669][T15877] ___sys_recvmsg+0xdd/0x1a0 [ 418.043681][T15877] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.043694][T15877] ? find_held_lock+0x2b/0x80 [ 418.043713][T15877] do_recvmmsg+0x2f3/0x740 [ 418.043726][T15877] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.043740][T15877] ? __mutex_unlock_slowpath+0x35d/0x930 [ 418.043766][T15877] ? __fget_files+0x21f/0x3d0 [ 418.043782][T15877] __x64_sys_recvmmsg+0x22a/0x280 [ 418.043799][T15877] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.043819][T15877] do_syscall_64+0x115/0x870 [ 418.043834][T15877] ? clear_bhb_loop+0x70/0xc0 [ 418.043848][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.043860][T15877] RIP: 0033:0x7faff6d9e0d9 [ 418.043870][T15877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.043882][T15877] RSP: 002b:00007faff7cb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.043894][T15877] RAX: ffffffffffffffda RBX: 00007faff7026090 RCX: 00007faff6d9e0d9 [ 418.043902][T15877] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 418.043908][T15877] RBP: 00007faff7cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 418.043915][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.043921][T15877] R13: 00007faff7026128 R14: 00007faff7026090 R15: 00007ffea37bacb8 [ 418.043936][T15877] [ 418.049569][ T24] usb 7-1: USB disconnect, device number 65 [ 418.248774][T15880] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 418.250942][T15880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.254074][T15880] vhci_hcd vhci_hcd.0: Device attached [ 418.256265][T15882] usbip_core: unknown command [ 418.258305][T15882] vhci_hcd: unknown pdu 1048576 [ 418.260355][T15882] usbip_core: unknown command [ 418.262029][ T12] vhci_hcd vhci_hcd.0: stop threads [ 418.263722][ T12] vhci_hcd vhci_hcd.0: release socket [ 418.265631][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 418.420484][T15887] syzkaller0: entered promiscuous mode [ 418.423685][T15887] syzkaller0: entered allmulticast mode [ 418.443959][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 418.443972][ T42] audit: type=1800 audit(415.686:5532): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 418.473784][T15889] FAULT_INJECTION: forcing a failure. [ 418.473784][T15889] name failslab, interval 1, probability 0, space 0, times 0 [ 418.481848][T15889] CPU: 0 UID: 0 PID: 15889 Comm: syz.1.3691 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.481869][T15889] Tainted: [L]=SOFTLOCKUP [ 418.481873][T15889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.481881][T15889] Call Trace: [ 418.481885][T15889] [ 418.481890][T15889] dump_stack_lvl+0x100/0x190 [ 418.481910][T15889] should_fail_ex.cold+0x5/0xa [ 418.481926][T15889] should_failslab+0xc2/0x120 [ 418.481943][T15889] kmem_cache_alloc_noprof+0x91/0x6a0 [ 418.481958][T15889] ? do_getname+0x35/0x390 [ 418.481976][T15889] do_getname+0x35/0x390 [ 418.481992][T15889] do_sys_openat2+0xc7/0x1e0 [ 418.482007][T15889] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.482022][T15889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.482040][T15889] ? __fget_files+0x21f/0x3d0 [ 418.482055][T15889] __x64_sys_openat+0x12d/0x210 [ 418.482070][T15889] ? __pfx___x64_sys_openat+0x10/0x10 [ 418.482084][T15889] ? ksys_write+0x1ac/0x250 [ 418.482100][T15889] do_syscall_64+0x115/0x870 [ 418.482136][T15889] ? clear_bhb_loop+0x70/0xc0 [ 418.482151][T15889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.482163][T15889] RIP: 0033:0x7f07d319e0d9 [ 418.482174][T15889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.482185][T15889] RSP: 002b:00007f07d13f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.482197][T15889] RAX: ffffffffffffffda RBX: 00007f07d3425fa0 RCX: 00007f07d319e0d9 [ 418.482205][T15889] RDX: 0000000000000001 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 418.482211][T15889] RBP: 00007f07d13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.482218][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.482225][T15889] R13: 00007f07d3426038 R14: 00007f07d3425fa0 R15: 00007ffdae7f6bd8 [ 418.482239][T15889] [ 418.556857][ T42] audit: type=1800 audit(415.778:5533): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 418.566283][T15891] syzkaller0: entered promiscuous mode [ 418.568049][T15891] syzkaller0: entered allmulticast mode [ 418.647283][ T42] audit: type=1800 audit(415.870:5534): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 418.686650][ T42] audit: type=1800 audit(415.907:5535): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 418.836301][T15902] netlink: 608 bytes leftover after parsing attributes in process `syz.0.3696'. [ 418.881157][ T42] audit: type=1800 audit(416.083:5536): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 418.892353][ T24] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 418.900082][ T42] audit: type=1800 audit(416.101:5537): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 419.093664][ T24] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 419.094200][ T5872] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 419.098129][ T24] usb 7-1: config 0 has no interfaces? [ 419.103918][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.106776][ T24] usb 7-1: Product: syz [ 419.108159][ T24] usb 7-1: Manufacturer: syz [ 419.109787][ T24] usb 7-1: SerialNumber: syz [ 419.112787][ T24] usb 7-1: config 0 descriptor?? [ 419.121019][ T42] audit: type=1800 audit(416.304:5538): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=246878 res=0 errno=0 [ 419.145780][ T42] audit: type=1800 audit(416.314:5539): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=246910 res=0 errno=0 [ 419.152991][ T42] audit: type=1800 audit(416.314:5540): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=246885 res=0 errno=0 [ 419.160676][ T42] audit: type=1800 audit(416.323:5541): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=246886 res=0 errno=0 [ 419.262759][ T5872] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 419.269536][ T5872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.283519][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.286290][ T5872] usb 6-1: Product: syz [ 419.290093][ T5872] usb 6-1: Manufacturer: syz [ 419.291761][ T5872] usb 6-1: SerialNumber: syz [ 419.317921][ T5872] symbolserial 6-1:1.0: symbol converter detected [ 419.330727][ T5872] usb 6-1: symbol converter now attached to ttyUSB0 [ 419.383589][ T24] usb 7-1: USB disconnect, device number 66 [ 419.554343][ T5880] usb 6-1: USB disconnect, device number 38 [ 419.589304][ T5880] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 419.599947][ T5880] symbolserial 6-1:1.0: device disconnected [ 420.040413][T15912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3699'. [ 420.049778][T15912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3699'. [ 420.071132][T15912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.078923][T15912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.562228][T15920] syzkaller0: entered promiscuous mode [ 420.564180][T15920] syzkaller0: entered allmulticast mode [ 420.679252][T15929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.685924][T15929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.711819][ T5727] Bluetooth: hci4: unexpected event for opcode 0x201c [ 420.760402][T15933] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 420.763015][T15933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.766501][T15933] vhci_hcd vhci_hcd.0: Device attached [ 420.769209][T15935] usbip_core: unknown command [ 420.771083][T15935] vhci_hcd: unknown pdu 1048576 [ 420.773427][T15935] usbip_core: unknown command [ 420.775280][ T13] vhci_hcd vhci_hcd.2: stop threads [ 420.777050][ T13] vhci_hcd vhci_hcd.2: release socket [ 420.778890][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 421.400295][T15952] FAULT_INJECTION: forcing a failure. [ 421.400295][T15952] name failslab, interval 1, probability 0, space 0, times 0 [ 421.425427][T15952] CPU: 3 UID: 0 PID: 15952 Comm: syz.2.3714 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.425473][T15952] Tainted: [L]=SOFTLOCKUP [ 421.425484][T15952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.425502][T15952] Call Trace: [ 421.425512][T15952] [ 421.425524][T15952] dump_stack_lvl+0x100/0x190 [ 421.425566][T15952] should_fail_ex.cold+0x5/0xa [ 421.425605][T15952] should_failslab+0xc2/0x120 [ 421.425646][T15952] __kmalloc_cache_noprof+0x91/0x6c0 [ 421.425679][T15952] ? ovl_iterate+0xa74/0x10d0 [ 421.425754][T15952] ovl_iterate+0xa74/0x10d0 [ 421.425792][T15952] ? __pfx_down_write+0x10/0x10 [ 421.425836][T15952] ? __pfx_down_read_killable+0x10/0x10 [ 421.425885][T15952] ? __pfx_ovl_iterate+0x10/0x10 [ 421.425921][T15952] wrap_directory_iterator+0xa2/0xe0 [ 421.425971][T15952] iterate_dir+0x296/0xae0 [ 421.426024][T15952] __x64_sys_getdents64+0x13b/0x2c0 [ 421.426075][T15952] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 421.426147][T15952] ? fput+0x79/0x100 [ 421.426182][T15952] ? __pfx_filldir64+0x10/0x10 [ 421.426242][T15952] do_syscall_64+0x115/0x870 [ 421.426287][T15952] ? clear_bhb_loop+0x70/0xc0 [ 421.426325][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.426356][T15952] RIP: 0033:0x7fc3e9d9e0d9 [ 421.426381][T15952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.426410][T15952] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 421.426438][T15952] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 421.426458][T15952] RDX: 0000000000000027 RSI: 00002000000001c0 RDI: 0000000000000004 [ 421.426477][T15952] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.426496][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.426515][T15952] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 421.426556][T15952] [ 421.618042][T15956] sg_write: data in/out 3243996/136 bytes for SCSI command 0x0-- guessing data in; [ 421.618042][T15956] program syz.2.3716 not setting count and/or reply_len properly [ 421.683742][T15958] FAULT_INJECTION: forcing a failure. [ 421.683742][T15958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.692403][T15958] CPU: 3 UID: 0 PID: 15958 Comm: syz.1.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.692422][T15958] Tainted: [L]=SOFTLOCKUP [ 421.692427][T15958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.692434][T15958] Call Trace: [ 421.692438][T15958] [ 421.692443][T15958] dump_stack_lvl+0x100/0x190 [ 421.692465][T15958] should_fail_ex.cold+0x5/0xa [ 421.692481][T15958] _copy_from_user+0x2e/0xd0 [ 421.692499][T15958] move_addr_to_kernel+0x65/0x170 [ 421.692512][T15958] __sys_connect+0xb5/0x170 [ 421.692525][T15958] ? __pfx___sys_connect+0x10/0x10 [ 421.692537][T15958] ? __fget_files+0x21f/0x3d0 [ 421.692555][T15958] ? __pfx_ksys_write+0x10/0x10 [ 421.692570][T15958] __x64_sys_connect+0x72/0xb0 [ 421.692582][T15958] ? lockdep_hardirqs_on+0x78/0x100 [ 421.692598][T15958] do_syscall_64+0x115/0x870 [ 421.692613][T15958] ? clear_bhb_loop+0x70/0xc0 [ 421.692626][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.692638][T15958] RIP: 0033:0x7f07d319e0d9 [ 421.692649][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.692660][T15958] RSP: 002b:00007f07d13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 421.692671][T15958] RAX: ffffffffffffffda RBX: 00007f07d3425fa0 RCX: 00007f07d319e0d9 [ 421.692678][T15958] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 421.692685][T15958] RBP: 00007f07d13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.692692][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.692698][T15958] R13: 00007f07d3426038 R14: 00007f07d3425fa0 R15: 00007ffdae7f6bd8 [ 421.692712][T15958] [ 421.905729][T15966] syzkaller0: entered promiscuous mode [ 421.907540][T15966] syzkaller0: entered allmulticast mode [ 421.966461][T15963] syzkaller0: entered promiscuous mode [ 421.972084][T15963] syzkaller0: entered allmulticast mode [ 422.885414][T15980] kernel read not supported for file /policy (pid: 15980 comm: syz.0.3726) [ 423.118017][T15986] openvswitch: netlink: Duplicate or invalid key (type 0). [ 423.121309][T15985] FAULT_INJECTION: forcing a failure. [ 423.121309][T15985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.126671][T15986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.131372][ T5727] Bluetooth: hci5: Malformed Event: 0x2f [ 423.147856][T15985] CPU: 2 UID: 0 PID: 15985 Comm: syz.2.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.147877][T15985] Tainted: [L]=SOFTLOCKUP [ 423.147881][T15985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 423.147889][T15985] Call Trace: [ 423.147893][T15985] [ 423.147898][T15985] dump_stack_lvl+0x100/0x190 [ 423.147918][T15985] should_fail_ex.cold+0x5/0xa [ 423.147933][T15985] _copy_from_user+0x2e/0xd0 [ 423.147952][T15985] do_ipv6_setsockopt+0x73d/0x44a0 [ 423.147986][T15985] ? find_held_lock+0x2b/0x80 [ 423.147998][T15985] ? avc_has_perm_noaudit+0xd0/0x3b0 [ 423.148012][T15985] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 423.148029][T15985] ? avc_has_perm_noaudit+0x145/0x3b0 [ 423.148044][T15985] ? avc_has_perm+0x135/0x1e0 [ 423.148057][T15985] ? __pfx_avc_has_perm+0x10/0x10 [ 423.148071][T15985] ? get_pid_task+0x106/0x250 [ 423.148092][T15985] ? sock_has_perm+0x25a/0x2f0 [ 423.148107][T15985] ? __pfx_sock_has_perm+0x10/0x10 [ 423.148122][T15985] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 423.148142][T15985] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 423.148164][T15985] ? ipv6_setsockopt+0xcb/0x170 [ 423.148178][T15985] ? __fget_files+0x215/0x3d0 [ 423.148190][T15985] ipv6_setsockopt+0xcb/0x170 [ 423.148206][T15985] udpv6_setsockopt+0x64/0xb0 [ 423.148224][T15985] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 423.148244][T15985] do_sock_setsockopt+0xf3/0x1d0 [ 423.148263][T15985] __sys_setsockopt+0x195/0x220 [ 423.148280][T15985] __x64_sys_setsockopt+0xbd/0x160 [ 423.148294][T15985] ? do_syscall_64+0x90/0x870 [ 423.148309][T15985] ? lockdep_hardirqs_on+0x78/0x100 [ 423.148325][T15985] do_syscall_64+0x115/0x870 [ 423.148339][T15985] ? clear_bhb_loop+0x70/0xc0 [ 423.148353][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.148365][T15985] RIP: 0033:0x7fc3e9d9e0d9 [ 423.148376][T15985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.148386][T15985] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.148398][T15985] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 423.148406][T15985] RDX: 0000000000000032 RSI: 0000000000000029 RDI: 0000000000000003 [ 423.148413][T15985] RBP: 00007fc3eabd6090 R08: 0000000000000014 R09: 0000000000000000 [ 423.148419][T15985] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 423.148426][T15985] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 423.148440][T15985] [ 423.293280][T15986] program syz.0.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.333135][T15989] syzkaller0: entered promiscuous mode [ 423.339178][T15989] syzkaller0: entered allmulticast mode [ 423.376173][ T5727] Bluetooth: hci4: Malformed Event: 0x2f [ 423.480019][T15993] syzkaller0: entered promiscuous mode [ 423.481713][T15993] syzkaller0: entered allmulticast mode [ 423.695442][T15997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 423.697529][T15997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.710352][T15997] vhci_hcd vhci_hcd.0: Device attached [ 423.721954][T16001] usbip_core: unknown command [ 423.724546][T16001] vhci_hcd: unknown pdu 1048576 [ 423.741170][T16001] usbip_core: unknown command [ 423.744835][ T13] vhci_hcd vhci_hcd.2: stop threads [ 423.746614][ T13] vhci_hcd vhci_hcd.2: release socket [ 423.748341][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 423.891952][T16008] ubi31: attaching mtd0 [ 423.893983][T16008] ubi31 error: ubi_attach_mtd_dev: bad VID header (4096) or data offsets (4160) [ 423.927083][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 423.927096][ T42] audit: type=1800 audit(420.745:5613): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 424.013467][ T42] audit: type=1800 audit(420.828:5614): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 424.056701][T16014] syzkaller0: entered promiscuous mode [ 424.058909][T16014] syzkaller0: entered allmulticast mode [ 424.193974][ T42] audit: type=1800 audit(420.985:5615): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 424.219740][T16016] FAULT_INJECTION: forcing a failure. [ 424.219740][T16016] name failslab, interval 1, probability 0, space 0, times 0 [ 424.223707][T16016] CPU: 3 UID: 0 PID: 16016 Comm: syz.0.3740 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.223727][T16016] Tainted: [L]=SOFTLOCKUP [ 424.223731][T16016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.223741][T16016] Call Trace: [ 424.223747][T16016] [ 424.223755][T16016] dump_stack_lvl+0x100/0x190 [ 424.223784][T16016] should_fail_ex.cold+0x5/0xa [ 424.223805][T16016] should_failslab+0xc2/0x120 [ 424.223836][T16016] __kmalloc_noprof+0xfc/0x820 [ 424.223854][T16016] ? rcu_is_watching+0x12/0xc0 [ 424.223896][T16016] ? tomoyo_realpath_from_path+0xb6/0x690 [ 424.223921][T16016] tomoyo_realpath_from_path+0xb6/0x690 [ 424.223944][T16016] tomoyo_path_number_perm+0x23c/0x580 [ 424.223968][T16016] ? tomoyo_path_number_perm+0x22e/0x580 [ 424.223993][T16016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 424.224037][T16016] ? find_held_lock+0x2b/0x80 [ 424.224049][T16016] ? __fget_files+0x215/0x3d0 [ 424.224062][T16016] ? hook_file_ioctl_common+0x140/0x440 [ 424.224074][T16016] ? __fget_files+0x215/0x3d0 [ 424.224089][T16016] ? __fget_files+0x21f/0x3d0 [ 424.224103][T16016] security_file_ioctl+0xd3/0x230 [ 424.224122][T16016] __x64_sys_ioctl+0xb7/0x210 [ 424.224142][T16016] do_syscall_64+0x115/0x870 [ 424.224157][T16016] ? clear_bhb_loop+0x70/0xc0 [ 424.224171][T16016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.224184][T16016] RIP: 0033:0x7faff6d9e0d9 [ 424.224194][T16016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.224205][T16016] RSP: 002b:00007faff7cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.224217][T16016] RAX: ffffffffffffffda RBX: 00007faff7025fa0 RCX: 00007faff6d9e0d9 [ 424.224224][T16016] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003 [ 424.224231][T16016] RBP: 00007faff7cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 424.224238][T16016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.224244][T16016] R13: 00007faff7026038 R14: 00007faff7025fa0 R15: 00007ffea37bacb8 [ 424.224259][T16016] [ 424.224567][T16016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 424.296198][T15427] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 424.304608][T16016] ubi31: attaching mtd0 [ 424.306112][T16016] ubi31 error: ubi_attach_mtd_dev: bad VID header (4096) or data offsets (4160) [ 424.328700][ T42] audit: type=1800 audit(421.096:5616): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 424.334668][T16018] syzkaller0: entered promiscuous mode [ 424.337163][T16018] syzkaller0: entered allmulticast mode [ 424.359319][ T42] audit: type=1800 audit(421.151:5617): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 424.450067][T16023] syzkaller0: entered promiscuous mode [ 424.452435][T16023] syzkaller0: entered allmulticast mode [ 424.474213][T15427] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 424.484785][T15427] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.494052][T15427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.497281][T15427] usb 6-1: Product: syz [ 424.499681][T15427] usb 6-1: Manufacturer: syz [ 424.501256][T15427] usb 6-1: SerialNumber: syz [ 424.508219][ T42] audit: type=1800 audit(421.280:5618): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248174 res=0 errno=0 [ 424.524825][T15427] symbolserial 6-1:1.0: required endpoints missing [ 424.539861][ T42] audit: type=1800 audit(421.290:5619): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=248206 res=0 errno=0 [ 424.559859][ T42] audit: type=1800 audit(421.290:5620): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248181 res=0 errno=0 [ 424.571681][ T42] audit: type=1800 audit(421.290:5621): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248182 res=0 errno=0 [ 424.577977][ T42] audit: type=1800 audit(421.308:5622): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=248203 res=0 errno=0 [ 424.750792][T16031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.754793][T16031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.890381][T15427] usb 6-1: USB disconnect, device number 39 [ 424.908764][T16035] syzkaller0: entered promiscuous mode [ 424.910698][T16035] syzkaller0: entered allmulticast mode [ 425.332095][ T24] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 425.414225][T16039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 425.416353][T16039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.421149][T16039] vhci_hcd vhci_hcd.0: Device attached [ 425.424147][T16041] usbip_core: unknown command [ 425.426928][T16041] vhci_hcd: unknown pdu 1048576 [ 425.428941][T16041] usbip_core: unknown command [ 425.431337][ T13] vhci_hcd vhci_hcd.0: stop threads [ 425.433439][ T13] vhci_hcd vhci_hcd.0: release socket [ 425.435736][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 425.506483][ T24] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 425.521470][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.529901][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.535278][ T24] usb 7-1: Product: syz [ 425.537319][ T24] usb 7-1: Manufacturer: syz [ 425.541139][ T24] usb 7-1: SerialNumber: syz [ 425.553027][ T24] symbolserial 7-1:1.0: symbol converter detected [ 425.560421][ T24] usb 7-1: symbol converter now attached to ttyUSB0 [ 425.769551][ T5809] usb 7-1: USB disconnect, device number 67 [ 425.781266][ T5809] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 425.787430][ T5809] symbolserial 7-1:1.0: device disconnected [ 425.895131][ T1039] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 426.040295][T16046] syzkaller0: entered promiscuous mode [ 426.042064][T16046] syzkaller0: entered allmulticast mode [ 426.058061][ T1039] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 426.065274][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.071888][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.077407][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.086502][ T1039] usb 6-1: config 0 descriptor?? [ 426.414911][T16054] syzkaller0: entered promiscuous mode [ 426.416866][T16054] syzkaller0: entered allmulticast mode [ 426.534203][ T1039] hid_parser_main: 6 callbacks suppressed [ 426.534218][ T1039] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 426.548477][ T1039] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 426.559156][ T1039] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0010/input/input52 [ 426.570972][ T1039] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 426.750305][T16044] FAULT_INJECTION: forcing a failure. [ 426.750305][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.755001][T16044] CPU: 2 UID: 0 PID: 16044 Comm: syz.1.3751 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.755021][T16044] Tainted: [L]=SOFTLOCKUP [ 426.755025][T16044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.755032][T16044] Call Trace: [ 426.755038][T16044] [ 426.755043][T16044] dump_stack_lvl+0x100/0x190 [ 426.755063][T16044] should_fail_ex.cold+0x5/0xa [ 426.755078][T16044] _copy_to_user+0x32/0xd0 [ 426.755096][T16044] simple_read_from_buffer+0xcb/0x170 [ 426.755111][T16044] proc_fail_nth_read+0x1af/0x230 [ 426.755132][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.755151][T16044] ? rw_verify_area+0xce/0x6d0 [ 426.755168][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.755186][T16044] vfs_read+0x1e4/0xb40 [ 426.755206][T16044] ? __pfx_vfs_read+0x10/0x10 [ 426.755224][T16044] ? __fget_files+0x215/0x3d0 [ 426.755239][T16044] ? __fget_files+0x21f/0x3d0 [ 426.755255][T16044] ksys_read+0x12a/0x250 [ 426.755265][T16044] ? __pfx_ksys_read+0x10/0x10 [ 426.755279][T16044] do_syscall_64+0x115/0x870 [ 426.755295][T16044] ? clear_bhb_loop+0x70/0xc0 [ 426.755309][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.755322][T16044] RIP: 0033:0x7f07d315e90e [ 426.755332][T16044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.755343][T16044] RSP: 002b:00007f07d13f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.755355][T16044] RAX: ffffffffffffffda RBX: 00007f07d13f66c0 RCX: 00007f07d315e90e [ 426.755367][T16044] RDX: 000000000000000f RSI: 00007f07d13f60a0 RDI: 0000000000000004 [ 426.755373][T16044] RBP: 00007f07d13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.755380][T16044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.755386][T16044] R13: 00007f07d3426038 R14: 00007f07d3425fa0 R15: 00007ffdae7f6bd8 [ 426.755401][T16044] [ 426.783368][T15427] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 426.788714][ T1039] usb 6-1: USB disconnect, device number 40 [ 426.856340][T16060] syzkaller0: entered promiscuous mode [ 426.858133][T16060] syzkaller0: entered allmulticast mode [ 426.959715][T15427] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 426.965224][T15427] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.978163][T15427] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.985131][T15427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.996337][T15427] usb 7-1: config 0 descriptor?? [ 427.096701][T16069] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 427.099535][T16069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.103269][T16069] vhci_hcd vhci_hcd.0: Device attached [ 427.108776][T16072] usbip_core: unknown command [ 427.110910][T16072] vhci_hcd: unknown pdu 1048576 [ 427.115649][T16072] usbip_core: unknown command [ 427.117428][ T13] vhci_hcd vhci_hcd.0: stop threads [ 427.119187][ T13] vhci_hcd vhci_hcd.0: release socket [ 427.121144][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 427.282715][T16077] binder: 16052:16077 ioctl c0306201 200000000640 returned -22 [ 427.325338][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 427.500914][ T9] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 427.506973][T15427] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 427.507683][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.512087][T15427] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 427.513250][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.519216][T15427] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0011/input/input53 [ 427.525960][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.529192][ T9] usb 6-1: Product: syz [ 427.531569][ T9] usb 6-1: Manufacturer: syz [ 427.532358][T15427] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 427.533276][ T9] usb 6-1: SerialNumber: syz [ 427.592124][ T9] symbolserial 6-1:1.0: required endpoints missing [ 427.703641][T16082] syzkaller0: entered promiscuous mode [ 427.705536][T16082] syzkaller0: entered allmulticast mode [ 427.827028][T16086] syzkaller0: entered promiscuous mode [ 427.828839][T16086] syzkaller0: entered allmulticast mode [ 427.847615][ T9] usb 6-1: USB disconnect, device number 41 [ 427.926930][T16088] syzkaller0: entered promiscuous mode [ 427.935094][T16088] syzkaller0: entered allmulticast mode [ 428.016722][T16090] FAULT_INJECTION: forcing a failure. [ 428.016722][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 428.022200][T16090] CPU: 2 UID: 0 PID: 16090 Comm: syz.3.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.022227][T16090] Tainted: [L]=SOFTLOCKUP [ 428.022235][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.022246][T16090] Call Trace: [ 428.022253][T16090] [ 428.022260][T16090] dump_stack_lvl+0x100/0x190 [ 428.022291][T16090] should_fail_ex.cold+0x5/0xa [ 428.022316][T16090] should_failslab+0xc2/0x120 [ 428.022341][T16090] __kmalloc_noprof+0xfc/0x820 [ 428.022369][T16090] ? rcu_is_watching+0x12/0xc0 [ 428.022398][T16090] ? tomoyo_realpath_from_path+0xb6/0x690 [ 428.022422][T16090] tomoyo_realpath_from_path+0xb6/0x690 [ 428.022447][T16090] tomoyo_path_number_perm+0x23c/0x580 [ 428.022473][T16090] ? tomoyo_path_number_perm+0x22e/0x580 [ 428.022498][T16090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.022547][T16090] ? find_held_lock+0x2b/0x80 [ 428.022566][T16090] ? __fget_files+0x215/0x3d0 [ 428.022586][T16090] ? hook_file_ioctl_common+0x140/0x440 [ 428.022608][T16090] ? __fget_files+0x215/0x3d0 [ 428.022632][T16090] ? __fget_files+0x21f/0x3d0 [ 428.022654][T16090] security_file_ioctl+0xd3/0x230 [ 428.022684][T16090] __x64_sys_ioctl+0xb7/0x210 [ 428.022714][T16090] do_syscall_64+0x115/0x870 [ 428.022738][T16090] ? clear_bhb_loop+0x70/0xc0 [ 428.022760][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.022779][T16090] RIP: 0033:0x7f0cfc39e0d9 [ 428.022796][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.022814][T16090] RSP: 002b:00007f0cfd260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.022834][T16090] RAX: ffffffffffffffda RBX: 00007f0cfc625fa0 RCX: 00007f0cfc39e0d9 [ 428.022847][T16090] RDX: 00002000000005c0 RSI: 00000000400448e7 RDI: 0000000000000004 [ 428.022857][T16090] RBP: 00007f0cfd260090 R08: 0000000000000000 R09: 0000000000000000 [ 428.022865][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.022877][T16090] R13: 00007f0cfc626038 R14: 00007f0cfc625fa0 R15: 00007ffcb1f8c128 [ 428.022901][T16090] [ 428.022909][T16090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.269728][T16094] syzkaller0: entered promiscuous mode [ 428.272251][T16094] syzkaller0: entered allmulticast mode [ 428.482741][T16097] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 428.484734][T16097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.489529][T16097] vhci_hcd vhci_hcd.0: Device attached [ 428.491768][T16099] usbip_core: unknown command [ 428.494025][T16099] vhci_hcd: unknown pdu 0 [ 428.496227][T16099] usbip_core: unknown command [ 428.498627][ T12] vhci_hcd vhci_hcd.3: stop threads [ 428.500822][ T12] vhci_hcd vhci_hcd.3: release socket [ 428.505302][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 428.637461][T16107] syzkaller0: entered promiscuous mode [ 428.639362][T16107] syzkaller0: entered allmulticast mode [ 428.862636][T16114] syzkaller0: entered promiscuous mode [ 428.866942][ T1039] usb 7-1: reset high-speed USB device number 68 using dummy_hcd [ 428.872570][T16114] syzkaller0: entered allmulticast mode [ 428.955594][T16116] syzkaller0: entered promiscuous mode [ 428.957468][T16116] syzkaller0: entered allmulticast mode [ 429.174621][T16123] FAULT_INJECTION: forcing a failure. [ 429.174621][T16123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.196590][T16123] CPU: 3 UID: 0 PID: 16123 Comm: syz.3.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.196611][T16123] Tainted: [L]=SOFTLOCKUP [ 429.196615][T16123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.196622][T16123] Call Trace: [ 429.196627][T16123] [ 429.196633][T16123] dump_stack_lvl+0x100/0x190 [ 429.196654][T16123] should_fail_ex.cold+0x5/0xa [ 429.196670][T16123] _copy_from_user+0x2e/0xd0 [ 429.196687][T16123] __sys_bpf+0x2f5/0x4e80 [ 429.196723][T16123] ? __pfx___sys_bpf+0x10/0x10 [ 429.196734][T16123] ? find_held_lock+0x2b/0x80 [ 429.196746][T16123] ? get_pid_task+0xfc/0x250 [ 429.196757][T16123] ? get_pid_task+0xfc/0x250 [ 429.196771][T16123] ? find_held_lock+0x2b/0x80 [ 429.196785][T16123] ? rcu_read_lock_any_held+0x6a/0xa0 [ 429.196797][T16123] ? find_held_lock+0x2b/0x80 [ 429.196807][T16123] ? ksys_write+0x190/0x250 [ 429.196818][T16123] ? ksys_write+0x190/0x250 [ 429.196837][T16123] ? fput+0x79/0x100 [ 429.196854][T16123] ? __x64_sys_bpf+0xce/0x140 [ 429.196865][T16123] __x64_sys_bpf+0xce/0x140 [ 429.196877][T16123] ? do_syscall_64+0x90/0x870 [ 429.196894][T16123] do_syscall_64+0x115/0x870 [ 429.196909][T16123] ? clear_bhb_loop+0x70/0xc0 [ 429.196923][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.196935][T16123] RIP: 0033:0x7f0cfc39e0d9 [ 429.196945][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.196956][T16123] RSP: 002b:00007f0cfd260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.196969][T16123] RAX: ffffffffffffffda RBX: 00007f0cfc625fa0 RCX: 00007f0cfc39e0d9 [ 429.196976][T16123] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000019 [ 429.196983][T16123] RBP: 00007f0cfd260090 R08: 0000000000000000 R09: 0000000000000000 [ 429.196990][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.196996][T16123] R13: 00007f0cfc626038 R14: 00007f0cfc625fa0 R15: 00007ffcb1f8c128 [ 429.197010][T16123] [ 429.359987][T16125] syzkaller0: entered promiscuous mode [ 429.364286][T16125] syzkaller0: entered allmulticast mode [ 429.405761][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 429.405776][ T42] audit: type=1800 audit(425.804:5728): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 429.427850][ T5872] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 429.479104][ T42] audit: type=1800 audit(425.869:5729): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 429.560401][T16130] syzkaller0: entered promiscuous mode [ 429.562287][T16130] syzkaller0: entered allmulticast mode [ 429.592933][ T5872] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 429.607557][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.611925][ T5872] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.627115][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.629816][ T5872] usb 6-1: Product: syz [ 429.637445][ T5872] usb 6-1: Manufacturer: syz [ 429.639288][ T5872] usb 6-1: SerialNumber: syz [ 429.644674][ T42] audit: type=1800 audit(426.026:5730): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 429.663350][ T42] audit: type=1800 audit(426.035:5731): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249910 res=0 errno=0 [ 429.687667][ T42] audit: type=1800 audit(426.063:5732): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=249942 res=0 errno=0 [ 429.696133][ T5872] symbolserial 6-1:1.0: required endpoints missing [ 429.708442][ T42] audit: type=1800 audit(426.081:5733): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=249917 res=0 errno=0 [ 429.714578][T16137] syzkaller0: entered promiscuous mode [ 429.716609][ T42] audit: type=1800 audit(426.081:5734): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=249918 res=0 errno=0 [ 429.720509][T16137] syzkaller0: entered allmulticast mode [ 429.746281][ T42] audit: type=1800 audit(426.090:5735): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=249939 res=0 errno=0 [ 429.760233][ T42] audit: type=1800 audit(426.100:5736): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=249940 res=0 errno=0 [ 429.783722][ T42] audit: type=1800 audit(426.100:5737): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 429.801381][T16141] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 429.803491][T16141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.807441][T16141] vhci_hcd vhci_hcd.0: Device attached [ 429.809622][T16143] usbip_core: unknown command [ 429.811616][T16143] vhci_hcd: unknown pdu 0 [ 429.813055][T16143] usbip_core: unknown command [ 429.815958][ T13] vhci_hcd vhci_hcd.3: stop threads [ 429.818557][ T13] vhci_hcd vhci_hcd.3: release socket [ 429.820679][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 429.886361][ T24] usb 6-1: USB disconnect, device number 42 [ 429.905628][T16149] se_device not configured yet, cannot port link [ 429.951859][T16147] syzkaller0: entered promiscuous mode [ 429.953678][T16147] syzkaller0: entered allmulticast mode [ 430.088928][T16155] syzkaller0: entered promiscuous mode [ 430.095481][T16155] syzkaller0: entered allmulticast mode [ 430.204539][T16157] FAULT_INJECTION: forcing a failure. [ 430.204539][T16157] name failslab, interval 1, probability 0, space 0, times 0 [ 430.208770][T16157] CPU: 3 UID: 0 PID: 16157 Comm: syz.0.3791 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.208789][T16157] Tainted: [L]=SOFTLOCKUP [ 430.208793][T16157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.208800][T16157] Call Trace: [ 430.208805][T16157] [ 430.208810][T16157] dump_stack_lvl+0x100/0x190 [ 430.208830][T16157] should_fail_ex.cold+0x5/0xa [ 430.208846][T16157] should_failslab+0xc2/0x120 [ 430.208862][T16157] kmem_cache_alloc_noprof+0x91/0x6a0 [ 430.208877][T16157] ? do_getname+0x35/0x390 [ 430.208896][T16157] do_getname+0x35/0x390 [ 430.208912][T16157] __x64_sys_mkdir+0x57/0x90 [ 430.208926][T16157] do_syscall_64+0x115/0x870 [ 430.208942][T16157] ? clear_bhb_loop+0x70/0xc0 [ 430.208956][T16157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.208968][T16157] RIP: 0033:0x7faff6d9e0d9 [ 430.208978][T16157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.208988][T16157] RSP: 002b:00007faff7cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 430.209000][T16157] RAX: ffffffffffffffda RBX: 00007faff7025fa0 RCX: 00007faff6d9e0d9 [ 430.209007][T16157] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000d00 [ 430.209014][T16157] RBP: 00007faff7cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 430.209021][T16157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.209028][T16157] R13: 00007faff7026038 R14: 00007faff7025fa0 R15: 00007ffea37bacb8 [ 430.209042][T16157] [ 430.209554][T16157] se_device not configured yet, cannot port link [ 430.313796][T16159] syzkaller0: entered promiscuous mode [ 430.318153][T16159] syzkaller0: entered allmulticast mode [ 430.336340][ T5727] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 430.337679][T16161] se_device not configured yet, cannot port link [ 430.456760][T16163] syzkaller0: entered promiscuous mode [ 430.466423][T16163] syzkaller0: entered allmulticast mode [ 430.530031][T16167] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3796'. [ 430.532493][ T5809] usb 7-1: USB disconnect, device number 68 [ 430.554045][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 430.582118][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.586995][T16167] usb usb9: check_ctrlrecip: process 16167 (syz.3.3796) requesting ep 01 but needs 81 [ 430.590363][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.593731][T16167] usb usb9: usbfs: process 16167 (syz.3.3796) did not claim interface 0 before use [ 430.651341][T16171] syzkaller0: entered promiscuous mode [ 430.656769][T16171] syzkaller0: entered allmulticast mode [ 430.740474][T16173] syzkaller0: entered promiscuous mode [ 430.742355][T16173] syzkaller0: entered allmulticast mode [ 430.933734][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3802'. [ 430.937307][T16180] netlink: 'syz.3.3802': attribute type 7 has an invalid length. [ 431.044176][T16187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 431.046264][T16187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 431.049403][T16187] vhci_hcd vhci_hcd.0: Device attached [ 431.052054][T16189] usbip_core: unknown command [ 431.053558][T16189] vhci_hcd: unknown pdu 0 [ 431.055387][T16189] usbip_core: unknown command [ 431.057136][ T12] vhci_hcd vhci_hcd.1: stop threads [ 431.058816][ T12] vhci_hcd vhci_hcd.1: release socket [ 431.060566][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 431.173671][ T1036] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 431.199624][T16192] syzkaller0: entered promiscuous mode [ 431.201443][T16192] syzkaller0: entered allmulticast mode [ 431.332598][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.336810][ T1036] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 431.340046][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.343379][ T1036] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.352064][ T1036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.355155][ T1036] usb 7-1: Product: syz [ 431.356504][ T1036] usb 7-1: Manufacturer: syz [ 431.358075][ T1036] usb 7-1: SerialNumber: syz [ 431.371600][ T1036] symbolserial 7-1:1.0: symbol converter detected [ 431.378560][ T1036] usb 7-1: symbol converter now attached to ttyUSB0 [ 431.596734][T16178] FAULT_INJECTION: forcing a failure. [ 431.596734][T16178] name failslab, interval 1, probability 0, space 0, times 0 [ 431.600918][T16178] CPU: 3 UID: 0 PID: 16178 Comm: syz.2.3801 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.600939][T16178] Tainted: [L]=SOFTLOCKUP [ 431.600943][T16178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.600950][T16178] Call Trace: [ 431.600955][T16178] [ 431.600960][T16178] dump_stack_lvl+0x100/0x190 [ 431.600981][T16178] should_fail_ex.cold+0x5/0xa [ 431.600996][T16178] should_failslab+0xc2/0x120 [ 431.601013][T16178] kmem_cache_alloc_noprof+0x91/0x6a0 [ 431.601028][T16178] ? do_getname+0x35/0x390 [ 431.601046][T16178] do_getname+0x35/0x390 [ 431.601063][T16178] do_sys_openat2+0xc7/0x1e0 [ 431.601078][T16178] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.601093][T16178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.601111][T16178] ? __fget_files+0x21f/0x3d0 [ 431.601127][T16178] __x64_sys_openat+0x12d/0x210 [ 431.601142][T16178] ? __pfx___x64_sys_openat+0x10/0x10 [ 431.601157][T16178] ? ksys_write+0x1ac/0x250 [ 431.601172][T16178] do_syscall_64+0x115/0x870 [ 431.601187][T16178] ? clear_bhb_loop+0x70/0xc0 [ 431.601202][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.601214][T16178] RIP: 0033:0x7fc3e9d9e0d9 [ 431.601224][T16178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.601235][T16178] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.601248][T16178] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 431.601255][T16178] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 431.601262][T16178] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 431.601269][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.601275][T16178] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 431.601289][T16178] [ 431.609864][ T9] usb 7-1: USB disconnect, device number 69 [ 431.659835][T16198] syzkaller0: entered promiscuous mode [ 431.670636][T16198] syzkaller0: entered allmulticast mode [ 431.710957][ T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 431.717412][ T9] symbolserial 7-1:1.0: device disconnected [ 431.808812][T16200] syzkaller0: entered promiscuous mode [ 431.813356][T16200] syzkaller0: entered allmulticast mode [ 431.939088][T16202] syzkaller0: entered promiscuous mode [ 431.943025][T16202] syzkaller0: entered allmulticast mode [ 432.008503][T16204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.014302][T16204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.453531][T16212] syzkaller0: entered promiscuous mode [ 432.456008][T16212] syzkaller0: entered allmulticast mode [ 432.656943][T16216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 432.659228][T16216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.662418][T16216] vhci_hcd vhci_hcd.0: Device attached [ 432.665823][T16218] vhci_hcd: cannot find a urb of seqnum 7168 max seqnum 0 [ 432.671732][ T13] vhci_hcd vhci_hcd.0: stop threads [ 432.673805][ T13] vhci_hcd vhci_hcd.0: release socket [ 432.677079][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 432.816697][ T5809] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 432.980525][ T5809] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.989269][ T5809] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.993664][ T5809] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.999109][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.030149][T16221] syzkaller0: entered promiscuous mode [ 433.033002][T16221] syzkaller0: entered allmulticast mode [ 433.234871][ T5809] usb 7-1: usb_control_msg returned -32 [ 433.237338][ T5809] usbtmc 7-1:16.0: can't read capabilities [ 433.469587][T16227] syzkaller0: entered promiscuous mode [ 433.471540][T16227] syzkaller0: entered allmulticast mode [ 433.618704][T16228] FAULT_INJECTION: forcing a failure. [ 433.618704][T16228] name failslab, interval 1, probability 0, space 0, times 0 [ 433.624103][T16228] CPU: 2 UID: 0 PID: 16228 Comm: syz.2.3815 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.624130][T16228] Tainted: [L]=SOFTLOCKUP [ 433.624136][T16228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.624146][T16228] Call Trace: [ 433.624154][T16228] [ 433.624162][T16228] dump_stack_lvl+0x100/0x190 [ 433.624192][T16228] should_fail_ex.cold+0x5/0xa [ 433.624217][T16228] should_failslab+0xc2/0x120 [ 433.624238][T16228] __kmalloc_noprof+0xfc/0x820 [ 433.624260][T16228] ? rcu_is_watching+0x12/0xc0 [ 433.624291][T16228] ? tomoyo_realpath_from_path+0xb6/0x690 [ 433.624317][T16228] tomoyo_realpath_from_path+0xb6/0x690 [ 433.624342][T16228] tomoyo_path_number_perm+0x23c/0x580 [ 433.624368][T16228] ? tomoyo_path_number_perm+0x22e/0x580 [ 433.624394][T16228] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.624444][T16228] ? find_held_lock+0x2b/0x80 [ 433.624463][T16228] ? __fget_files+0x215/0x3d0 [ 433.624482][T16228] ? hook_file_ioctl_common+0x140/0x440 [ 433.624502][T16228] ? __fget_files+0x215/0x3d0 [ 433.624525][T16228] ? __fget_files+0x21f/0x3d0 [ 433.624544][T16228] security_file_ioctl+0xd3/0x230 [ 433.624574][T16228] __x64_sys_ioctl+0xb7/0x210 [ 433.624603][T16228] do_syscall_64+0x115/0x870 [ 433.624626][T16228] ? clear_bhb_loop+0x70/0xc0 [ 433.624648][T16228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.624667][T16228] RIP: 0033:0x7fc3e9d9e0d9 [ 433.624683][T16228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.624710][T16228] RSP: 002b:00007fc3eabb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.624729][T16228] RAX: ffffffffffffffda RBX: 00007fc3ea026090 RCX: 00007fc3e9d9e0d9 [ 433.624741][T16228] RDX: 0000000000000000 RSI: 0000000080045b10 RDI: 0000000000000004 [ 433.624752][T16228] RBP: 00007fc3eabb5090 R08: 0000000000000000 R09: 0000000000000000 [ 433.624763][T16228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.624774][T16228] R13: 00007fc3ea026128 R14: 00007fc3ea026090 R15: 00007ffdb7fc9c18 [ 433.624799][T16228] [ 433.624808][T16228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.639908][T15427] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 433.752819][T16230] syzkaller0: entered promiscuous mode [ 433.754732][T16230] syzkaller0: entered allmulticast mode [ 433.881101][T15427] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 433.888409][T15427] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 433.897290][T15427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.910717][T15427] usb 6-1: Product: syz [ 433.912470][T15427] usb 6-1: Manufacturer: syz [ 433.914139][T15427] usb 6-1: SerialNumber: syz [ 433.928348][T15427] symbolserial 6-1:1.0: required endpoints missing [ 434.088974][T16234] syzkaller0: entered promiscuous mode [ 434.090823][T16234] syzkaller0: entered allmulticast mode [ 434.146332][ T1039] usb 6-1: USB disconnect, device number 43 [ 434.219804][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.226151][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.459045][T16240] syzkaller0: entered promiscuous mode [ 434.461316][T16240] syzkaller0: entered allmulticast mode [ 434.656812][T16242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 434.658898][T16242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 434.664348][T16242] vhci_hcd vhci_hcd.0: Device attached [ 434.671556][T16244] vhci_hcd: cannot find a urb of seqnum 7168 max seqnum 0 [ 434.674498][ T13] vhci_hcd vhci_hcd.3: stop threads [ 434.676278][ T13] vhci_hcd vhci_hcd.3: release socket [ 434.678179][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 434.878710][T16248] syzkaller0: entered promiscuous mode [ 434.880524][T16248] syzkaller0: entered allmulticast mode [ 434.901211][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.910790][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.933558][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 434.933575][ T42] audit: type=1800 audit(430.909:5822): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 434.948271][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.952126][ T42] audit: type=1800 audit(430.909:5823): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251809 res=0 errno=0 [ 434.961092][ T42] audit: type=1800 audit(430.919:5824): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251820 res=0 errno=0 [ 434.977773][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.981609][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.995737][ T42] audit: type=1800 audit(430.956:5825): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251839 res=0 errno=0 [ 435.038789][ T42] audit: type=1800 audit(430.974:5826): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251850 res=0 errno=0 [ 435.066382][ T42] audit: type=1800 audit(430.993:5827): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 435.324947][ T42] audit: type=1800 audit(431.269:5828): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 435.383584][T16259] syzkaller0: entered promiscuous mode [ 435.385593][T16259] syzkaller0: entered allmulticast mode [ 435.518077][ T42] audit: type=1800 audit(431.445:5829): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 435.578902][ T42] audit: type=1400 audit(431.500:5830): avc: denied { create } for pid=16262 comm="syz.0.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.594731][ T42] audit: type=1400 audit(431.500:5831): avc: denied { setopt } for pid=16262 comm="syz.0.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.726640][T16268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.742223][T16270] syzkaller0: entered promiscuous mode [ 435.745698][T16270] syzkaller0: entered allmulticast mode [ 435.761663][T16268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.779023][T16249] lo speed is unknown, defaulting to 1000 [ 435.828096][ T5809] usb 7-1: USB disconnect, device number 70 [ 435.930193][T16249] xfrm0 speed is unknown, defaulting to 1000 [ 436.085664][T16276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 436.087755][T16276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 436.092157][T16276] vhci_hcd vhci_hcd.0: Device attached [ 436.096408][T16281] vhci_hcd: cannot find a urb of seqnum 7168 max seqnum 0 [ 436.105554][ T13] vhci_hcd vhci_hcd.3: stop threads [ 436.107431][ T13] vhci_hcd vhci_hcd.3: release socket [ 436.120446][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 436.207075][ T5809] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 436.245120][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.248107][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.252842][T16249] bridge_slave_0: entered allmulticast mode [ 436.256614][T16249] bridge_slave_0: entered promiscuous mode [ 436.261447][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.264402][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.267397][T16249] bridge_slave_1: entered allmulticast mode [ 436.271134][T16249] bridge_slave_1: entered promiscuous mode [ 436.298359][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.304840][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.368326][T16249] team0: Port device team_slave_0 added [ 436.381359][ T5809] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 436.393156][ T5809] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.397353][T16249] team0: Port device team_slave_1 added [ 436.411313][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.417251][ T5809] usb 7-1: Product: syz [ 436.419006][ T5809] usb 7-1: Manufacturer: syz [ 436.426314][ T5809] usb 7-1: SerialNumber: syz [ 436.439404][ T5809] symbolserial 7-1:1.0: required endpoints missing [ 436.460799][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.462990][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.477630][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.482371][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.484653][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.492692][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.518572][T16249] hsr_slave_0: entered promiscuous mode [ 436.520969][T16249] hsr_slave_1: entered promiscuous mode [ 436.523776][T16249] debugfs: 'hsr0' already exists in 'hsr' [ 436.525580][T16249] Cannot create hsr debugfs directory [ 436.604362][T16290] syzkaller0: entered promiscuous mode [ 436.606109][T16290] syzkaller0: entered allmulticast mode [ 436.684836][ T5872] usb 7-1: USB disconnect, device number 71 [ 436.758708][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.785667][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.825290][T16293] FAULT_INJECTION: forcing a failure. [ 436.825290][T16293] name failslab, interval 1, probability 0, space 0, times 0 [ 436.831991][T16293] CPU: 3 UID: 0 PID: 16293 Comm: syz.0.3842 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.832012][T16293] Tainted: [L]=SOFTLOCKUP [ 436.832016][T16293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.832024][T16293] Call Trace: [ 436.832028][T16293] [ 436.832033][T16293] dump_stack_lvl+0x100/0x190 [ 436.832053][T16293] should_fail_ex.cold+0x5/0xa [ 436.832068][T16293] should_failslab+0xc2/0x120 [ 436.832085][T16293] kmem_cache_alloc_noprof+0x91/0x6a0 [ 436.832100][T16293] ? do_getname+0x35/0x390 [ 436.832119][T16293] do_getname+0x35/0x390 [ 436.832135][T16293] do_sys_openat2+0xc7/0x1e0 [ 436.832150][T16293] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.832165][T16293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.832184][T16293] ? __fget_files+0x21f/0x3d0 [ 436.832199][T16293] __x64_sys_openat+0x12d/0x210 [ 436.832214][T16293] ? __pfx___x64_sys_openat+0x10/0x10 [ 436.832229][T16293] ? ksys_write+0x1ac/0x250 [ 436.832244][T16293] do_syscall_64+0x115/0x870 [ 436.832260][T16293] ? clear_bhb_loop+0x70/0xc0 [ 436.832274][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.832286][T16293] RIP: 0033:0x7faff6d5e90e [ 436.832296][T16293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.832311][T16293] RSP: 002b:00007faff7cd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.832323][T16293] RAX: ffffffffffffffda RBX: 00007faff7cd56c0 RCX: 00007faff6d5e90e [ 436.832331][T16293] RDX: 000000000010d800 RSI: 00007faff7cd4c00 RDI: ffffffffffffff9c [ 436.832338][T16293] RBP: 00007faff7cd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 436.832345][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 436.832352][T16293] R13: 00007faff7026038 R14: 00007faff7025fa0 R15: 00007ffea37bacb8 [ 436.832365][T16293] [ 436.995999][T16249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.010395][T16249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.018947][T16249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.040031][T16249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.048163][T16249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.062536][T16249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.067500][T16249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.083046][T16249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.192946][ T64] Bluetooth: hci2: command tx timeout [ 437.297886][T16249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.307220][T16249] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.313519][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.315904][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.328095][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.330447][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.456349][T16311] syzkaller0: entered promiscuous mode [ 437.458110][T16311] syzkaller0: entered allmulticast mode [ 437.685497][T16249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.743045][T16325] syzkaller0: entered promiscuous mode [ 437.744784][T16325] syzkaller0: entered allmulticast mode [ 437.799417][ T64] Bluetooth: hci5: command 0x0406 tx timeout [ 437.945936][T16249] veth0_vlan: entered promiscuous mode [ 438.008192][T16249] veth1_vlan: entered promiscuous mode [ 438.128341][T16249] veth0_macvtap: entered promiscuous mode [ 438.136395][T16249] veth1_macvtap: entered promiscuous mode [ 438.163885][T16249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.183198][T16249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.222298][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.226080][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.299679][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.306786][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.366597][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.372693][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.407654][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.414497][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.568618][T15427] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 438.665377][T16343] FAULT_INJECTION: forcing a failure. [ 438.665377][T16343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.685107][T16343] CPU: 3 UID: 0 PID: 16343 Comm: syz.1.3856 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.685129][T16343] Tainted: [L]=SOFTLOCKUP [ 438.685133][T16343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 438.685141][T16343] Call Trace: [ 438.685146][T16343] [ 438.685151][T16343] dump_stack_lvl+0x100/0x190 [ 438.685171][T16343] should_fail_ex.cold+0x5/0xa [ 438.685187][T16343] _copy_from_user+0x2e/0xd0 [ 438.685205][T16343] move_addr_to_kernel+0x65/0x170 [ 438.685218][T16343] __sys_connect+0xb5/0x170 [ 438.685231][T16343] ? __pfx___sys_connect+0x10/0x10 [ 438.685243][T16343] ? __fget_files+0x21f/0x3d0 [ 438.685261][T16343] ? __pfx_ksys_write+0x10/0x10 [ 438.685275][T16343] __x64_sys_connect+0x72/0xb0 [ 438.685288][T16343] ? lockdep_hardirqs_on+0x78/0x100 [ 438.685304][T16343] do_syscall_64+0x115/0x870 [ 438.685319][T16343] ? clear_bhb_loop+0x70/0xc0 [ 438.685334][T16343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.685347][T16343] RIP: 0033:0x7f4be739e0d9 [ 438.685357][T16343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.685369][T16343] RSP: 002b:00007f4be55d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 438.685381][T16343] RAX: ffffffffffffffda RBX: 00007f4be7626090 RCX: 00007f4be739e0d9 [ 438.685388][T16343] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 438.685395][T16343] RBP: 00007f4be55d5090 R08: 0000000000000000 R09: 0000000000000000 [ 438.685402][T16343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.685409][T16343] R13: 00007f4be7626128 R14: 00007f4be7626090 R15: 00007ffc23614cc8 [ 438.685423][T16343] [ 438.767105][T15427] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 438.771099][T15427] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.778847][T15427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.781962][T15427] usb 7-1: Product: syz [ 438.783327][T15427] usb 7-1: Manufacturer: syz [ 438.784818][T15427] usb 7-1: SerialNumber: syz [ 438.793347][T15427] symbolserial 7-1:1.0: required endpoints missing [ 438.924793][T16347] syzkaller0: entered promiscuous mode [ 438.930365][T16347] syzkaller0: entered allmulticast mode [ 439.033468][ T5812] usb 7-1: USB disconnect, device number 72 [ 439.256320][T16350] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 439.445988][ T5727] Bluetooth: hci2: command tx timeout [ 439.678127][T16355] syzkaller0: entered promiscuous mode [ 439.680071][T16355] syzkaller0: entered allmulticast mode [ 440.200592][T16367] syzkaller0: entered promiscuous mode [ 440.209937][T16367] syzkaller0: entered allmulticast mode [ 440.766080][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 440.766095][ T42] audit: type=1800 audit(436.282:5888): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 440.801966][ T42] audit: type=1800 audit(436.329:5889): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 440.817721][T16379] binder: 16377:16379 ioctl c0207511 200000002580 returned -22 [ 440.872696][T16379] syz.3.3873 (16379): drop_caches: 2 [ 440.990811][T16378] syzkaller0: entered promiscuous mode [ 440.993099][T16378] syzkaller0: entered allmulticast mode [ 441.141591][ T42] audit: type=1800 audit(436.633:5890): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 441.172167][ T5727] Bluetooth: hci5: unexpected event for opcode 0x201c [ 441.183784][ T42] audit: type=1800 audit(436.661:5891): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 441.217773][ T42] audit: type=1800 audit(436.707:5892): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 441.249287][ T42] audit: type=1800 audit(436.726:5893): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 441.334949][ T42] audit: type=1800 audit(436.818:5894): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 441.417327][ T42] audit: type=1400 audit(436.883:5895): avc: denied { accept } for pid=16395 comm="syz.2.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 441.440737][ T42] audit: type=1800 audit(436.910:5896): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 441.467017][ T42] audit: type=1800 audit(436.929:5897): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16930 res=0 errno=0 [ 441.524826][T16399] FAULT_INJECTION: forcing a failure. [ 441.524826][T16399] name failslab, interval 1, probability 0, space 0, times 0 [ 441.536938][T16399] CPU: 3 UID: 0 PID: 16399 Comm: syz.2.3882 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.536960][T16399] Tainted: [L]=SOFTLOCKUP [ 441.536964][T16399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.536972][T16399] Call Trace: [ 441.536977][T16399] [ 441.536981][T16399] dump_stack_lvl+0x100/0x190 [ 441.537002][T16399] should_fail_ex.cold+0x5/0xa [ 441.537019][T16399] should_failslab+0xc2/0x120 [ 441.537035][T16399] __kvmalloc_node_noprof+0x116/0x970 [ 441.537049][T16399] ? _kstrtoull+0x13c/0x1f0 [ 441.537062][T16399] ? seq_read_iter+0x819/0x1270 [ 441.537077][T16399] seq_read_iter+0x819/0x1270 [ 441.537090][T16399] ? register_lock_class+0x40/0x560 [ 441.537106][T16399] ? __lock_acquire+0x49f/0x1a40 [ 441.537125][T16399] seq_read+0x344/0x4d0 [ 441.537136][T16399] ? __pfx_seq_read+0x10/0x10 [ 441.537150][T16399] ? lock_acquire+0x1b9/0x370 [ 441.537170][T16399] full_proxy_read+0x135/0x1a0 [ 441.537186][T16399] ? __pfx_full_proxy_read+0x10/0x10 [ 441.537201][T16399] vfs_read+0x1e4/0xb40 [ 441.537221][T16399] ? __pfx_vfs_read+0x10/0x10 [ 441.537238][T16399] ? __fget_files+0x215/0x3d0 [ 441.537253][T16399] ? __fget_files+0x21f/0x3d0 [ 441.537269][T16399] ksys_read+0x12a/0x250 [ 441.537283][T16399] ? __pfx_ksys_read+0x10/0x10 [ 441.537298][T16399] do_syscall_64+0x115/0x870 [ 441.537313][T16399] ? clear_bhb_loop+0x70/0xc0 [ 441.537327][T16399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.537340][T16399] RIP: 0033:0x7fc3e9d9e0d9 [ 441.537350][T16399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.537361][T16399] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.537373][T16399] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 441.537381][T16399] RDX: 0000000000000400 RSI: 0000200000000500 RDI: 0000000000000003 [ 441.537387][T16399] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.537394][T16399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.537400][T16399] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 441.537415][T16399] [ 441.710113][ T64] Bluetooth: hci2: command tx timeout [ 441.882849][T16405] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 441.998581][T16412] syzkaller0: entered promiscuous mode [ 442.004144][T16412] syzkaller0: entered allmulticast mode [ 442.063427][T16416] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 442.157148][ T64] Bluetooth: hci5: unexpected event for opcode 0x201c [ 442.269269][T16425] overlayfs: upper fs does not support tmpfile. [ 442.520241][T16435] Bluetooth: MGMT ver 1.23 [ 442.588846][T16438] FAULT_INJECTION: forcing a failure. [ 442.588846][T16438] name failslab, interval 1, probability 0, space 0, times 0 [ 442.593138][T16438] CPU: 3 UID: 0 PID: 16438 Comm: syz.1.3898 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.593157][T16438] Tainted: [L]=SOFTLOCKUP [ 442.593161][T16438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.593169][T16438] Call Trace: [ 442.593178][T16438] [ 442.593184][T16438] dump_stack_lvl+0x100/0x190 [ 442.593204][T16438] should_fail_ex.cold+0x5/0xa [ 442.593221][T16438] should_failslab+0xc2/0x120 [ 442.593237][T16438] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 442.593253][T16438] ? __alloc_skb+0x5b7/0x710 [ 442.593282][T16438] ? __alloc_skb+0x140/0x710 [ 442.593298][T16438] __alloc_skb+0x140/0x710 [ 442.593311][T16438] ? __alloc_skb+0x5b7/0x710 [ 442.593324][T16438] ? __pfx___alloc_skb+0x10/0x10 [ 442.593338][T16438] ? find_held_lock+0x2b/0x80 [ 442.593350][T16438] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 442.593365][T16438] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 442.593380][T16438] alloc_skb_with_frags+0xdd/0x760 [ 442.593396][T16438] ? avc_has_perm_noaudit+0x145/0x3b0 [ 442.593413][T16438] sock_alloc_send_pskb+0x801/0x980 [ 442.593431][T16438] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 442.593444][T16438] ? sock_has_perm+0x25a/0x2f0 [ 442.593459][T16438] ? __pfx_sock_has_perm+0x10/0x10 [ 442.593485][T16438] hci_sock_sendmsg+0x1c7/0x2620 [ 442.593525][T16438] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 442.593549][T16438] ? selinux_socket_sendmsg+0x198/0x2f0 [ 442.593579][T16438] sock_write_iter+0x53a/0x5b0 [ 442.593608][T16438] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 442.593633][T16438] ? __pfx_sock_write_iter+0x10/0x10 [ 442.593667][T16438] ? bpf_lsm_file_permission+0x9/0x10 [ 442.593705][T16438] ? security_file_permission+0x76/0x210 [ 442.593726][T16438] ? rw_verify_area+0xce/0x6d0 [ 442.593745][T16438] vfs_write+0x6ac/0x1050 [ 442.593756][T16438] ? __pfx_sock_write_iter+0x10/0x10 [ 442.593776][T16438] ? __pfx_vfs_write+0x10/0x10 [ 442.593785][T16438] ? find_held_lock+0x2b/0x80 [ 442.593804][T16438] ksys_write+0x1f8/0x250 [ 442.593814][T16438] ? __pfx_ksys_write+0x10/0x10 [ 442.593828][T16438] do_syscall_64+0x115/0x870 [ 442.593845][T16438] ? clear_bhb_loop+0x70/0xc0 [ 442.593859][T16438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.593872][T16438] RIP: 0033:0x7f4be739e0d9 [ 442.593882][T16438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.593893][T16438] RSP: 002b:00007f4be55f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.593906][T16438] RAX: ffffffffffffffda RBX: 00007f4be7625fa0 RCX: 00007f4be739e0d9 [ 442.593913][T16438] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 442.593919][T16438] RBP: 00007f4be55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.593926][T16438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.593932][T16438] R13: 00007f4be7626038 R14: 00007f4be7625fa0 R15: 00007ffc23614cc8 [ 442.593946][T16438] [ 442.743754][T16441] syzkaller0: entered promiscuous mode [ 442.754054][T16441] syzkaller0: entered allmulticast mode [ 443.104433][T16467] FAULT_INJECTION: forcing a failure. [ 443.104433][T16467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.131667][T16467] CPU: 2 UID: 0 PID: 16467 Comm: syz.2.3906 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.131691][T16467] Tainted: [L]=SOFTLOCKUP [ 443.131696][T16467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.131703][T16467] Call Trace: [ 443.131708][T16467] [ 443.131713][T16467] dump_stack_lvl+0x100/0x190 [ 443.131735][T16467] should_fail_ex.cold+0x5/0xa [ 443.131751][T16467] _copy_from_user+0x2e/0xd0 [ 443.131770][T16467] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 443.131792][T16467] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 443.131821][T16467] do_sock_getsockopt+0x530/0x6e0 [ 443.131839][T16467] ? __lock_acquire+0x49f/0x1a40 [ 443.131858][T16467] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 443.131877][T16467] ? rcu_read_lock_any_held+0x6a/0xa0 [ 443.131904][T16467] ? find_held_lock+0x2b/0x80 [ 443.131922][T16467] ? __fget_files+0x21f/0x3d0 [ 443.131945][T16467] __sys_getsockopt+0x148/0x260 [ 443.131972][T16467] ? __x64_sys_getsockopt+0xbd/0x160 [ 443.131991][T16467] __x64_sys_getsockopt+0xbd/0x160 [ 443.132014][T16467] ? do_syscall_64+0x90/0x870 [ 443.132038][T16467] ? lockdep_hardirqs_on+0x78/0x100 [ 443.132054][T16467] do_syscall_64+0x115/0x870 [ 443.132069][T16467] ? clear_bhb_loop+0x70/0xc0 [ 443.132083][T16467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.132095][T16467] RIP: 0033:0x7fc3e9d9e0d9 [ 443.132106][T16467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.132117][T16467] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 443.132130][T16467] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 443.132137][T16467] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000003 [ 443.132143][T16467] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.132150][T16467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.132157][T16467] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 443.132171][T16467] [ 443.876793][T16487] syzkaller0: entered promiscuous mode [ 443.879559][T16487] syzkaller0: entered allmulticast mode [ 443.952683][ T64] Bluetooth: hci2: command tx timeout [ 444.100320][T16489] syzkaller0: entered promiscuous mode [ 444.103533][T16489] syzkaller0: entered allmulticast mode [ 444.373701][T16498] (syz.1.3918,16498,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 444.659705][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.837215][T16529] syzkaller0: entered promiscuous mode [ 444.840830][T16529] syzkaller0: entered allmulticast mode [ 444.944003][T16532] syzkaller0: entered promiscuous mode [ 444.946421][T16532] syzkaller0: entered allmulticast mode [ 444.968517][T16532] FAULT_INJECTION: forcing a failure. [ 444.968517][T16532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.975940][T16532] CPU: 2 UID: 0 PID: 16532 Comm: syz.1.3929 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.975970][T16532] Tainted: [L]=SOFTLOCKUP [ 444.975976][T16532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 444.975995][T16532] Call Trace: [ 444.976010][T16532] [ 444.976018][T16532] dump_stack_lvl+0x100/0x190 [ 444.976132][T16532] should_fail_ex.cold+0x5/0xa [ 444.976174][T16532] _copy_from_user+0x2e/0xd0 [ 444.976228][T16532] copy_msghdr_from_user+0x9f/0x4c0 [ 444.976255][T16532] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 444.976282][T16532] ___sys_sendmsg+0x106/0x1e0 [ 444.976303][T16532] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.976320][T16532] ? __lock_acquire+0x49f/0x1a40 [ 444.976383][T16532] ? get_pid_task+0x106/0x250 [ 444.976435][T16532] __sys_sendmsg+0x160/0x210 [ 444.976461][T16532] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.976497][T16532] do_syscall_64+0x115/0x870 [ 444.976528][T16532] ? clear_bhb_loop+0x70/0xc0 [ 444.976552][T16532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.976570][T16532] RIP: 0033:0x7f4be739e0d9 [ 444.976587][T16532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.976605][T16532] RSP: 002b:00007f4be55f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.976623][T16532] RAX: ffffffffffffffda RBX: 00007f4be7625fa0 RCX: 00007f4be739e0d9 [ 444.976635][T16532] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 444.976646][T16532] RBP: 00007f4be55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 444.976661][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.976671][T16532] R13: 00007f4be7626038 R14: 00007f4be7625fa0 R15: 00007ffc23614cc8 [ 444.976696][T16532] [ 445.131560][T16534] syzkaller0: entered promiscuous mode [ 445.133504][T16534] syzkaller0: entered allmulticast mode [ 445.473170][T16538] syzkaller0: entered promiscuous mode [ 445.478358][T16538] syzkaller0: entered allmulticast mode [ 445.498310][ T5873] kernel write not supported for file /member (pid: 5873 comm: kworker/2:5) [ 445.658883][T16545] dummy0: entered allmulticast mode [ 445.827596][T16558] syzkaller0: entered promiscuous mode [ 445.829484][T16558] syzkaller0: entered allmulticast mode [ 445.837508][T16560] syzkaller0: entered promiscuous mode [ 445.839966][T16560] syzkaller0: entered allmulticast mode [ 446.272820][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 446.272953][ T42] audit: type=1800 audit(441.379:5952): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 446.290302][ T42] audit: type=1400 audit(441.388:5953): avc: denied { unmount } for pid=13011 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 446.306564][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 446.318912][ T42] audit: type=1800 audit(441.415:5954): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 446.323003][T16569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.378536][ T42] audit: type=1800 audit(441.425:5955): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 446.457142][T16577] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 446.465617][ T42] audit: type=1800 audit(441.554:5956): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=267756 res=0 errno=0 [ 446.497161][ T42] audit: type=1400 audit(441.572:5957): avc: denied { mounton } for pid=16578 comm="syz.3.3946" path="/207/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 446.649425][T16582] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 446.656111][ T42] audit: type=1800 audit(441.729:5958): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 446.676923][T16582] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 446.705101][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 446.708233][T16586] syzkaller0: entered promiscuous mode [ 446.710088][T16586] syzkaller0: entered allmulticast mode [ 446.864966][ T42] audit: type=1800 audit(441.914:5959): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 446.962335][ T42] audit: type=1800 audit(442.006:5960): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 447.143040][ T42] audit: type=1800 audit(442.172:5961): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 447.283611][T16611] FAULT_INJECTION: forcing a failure. [ 447.283611][T16611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.289691][T16611] CPU: 2 UID: 0 PID: 16611 Comm: syz.0.3953 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.289721][T16611] Tainted: [L]=SOFTLOCKUP [ 447.289728][T16611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.289740][T16611] Call Trace: [ 447.289759][T16611] [ 447.289766][T16611] dump_stack_lvl+0x100/0x190 [ 447.289874][T16611] should_fail_ex.cold+0x5/0xa [ 447.289919][T16611] _copy_from_user+0x2e/0xd0 [ 447.290000][T16611] sk_setsockopt+0x2f2/0x5d80 [ 447.290047][T16611] ? __pfx_sk_setsockopt+0x10/0x10 [ 447.290072][T16611] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 447.290106][T16611] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 447.290141][T16611] ? find_held_lock+0x2b/0x80 [ 447.290186][T16611] ? __fget_files+0x215/0x3d0 [ 447.290230][T16611] ? selinux_socket_setsockopt+0x6a/0x80 [ 447.290260][T16611] do_sock_setsockopt+0x193/0x1d0 [ 447.290291][T16611] __sys_setsockopt+0x195/0x220 [ 447.290320][T16611] __x64_sys_setsockopt+0xbd/0x160 [ 447.290341][T16611] ? do_syscall_64+0x90/0x870 [ 447.290375][T16611] ? lockdep_hardirqs_on+0x78/0x100 [ 447.290406][T16611] do_syscall_64+0x115/0x870 [ 447.290429][T16611] ? clear_bhb_loop+0x70/0xc0 [ 447.290454][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.290476][T16611] RIP: 0033:0x7faff6d9e0d9 [ 447.290493][T16611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.290512][T16611] RSP: 002b:00007faff7cb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.290531][T16611] RAX: ffffffffffffffda RBX: 00007faff7026090 RCX: 00007faff6d9e0d9 [ 447.290544][T16611] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 447.290555][T16611] RBP: 00007faff7cb4090 R08: 0000000000000004 R09: 0000000000000000 [ 447.290566][T16611] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 447.290579][T16611] R13: 00007faff7026128 R14: 00007faff7026090 R15: 00007ffea37bacb8 [ 447.290603][T16611] [ 447.526592][ T1039] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 447.711864][ T1039] usb 6-1: not running at top speed; connect to a high speed hub [ 447.716986][ T1039] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 447.731040][ T1039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.739045][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.753314][ T1039] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 447.758313][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 447.763379][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 447.769399][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 447.775613][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 447.784441][ T1039] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 447.792140][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 447.803806][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 447.809771][ T1039] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 448.053844][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 448.153146][T16627] syzkaller0: entered promiscuous mode [ 448.165420][T16627] syzkaller0: entered allmulticast mode [ 448.187255][ T1039] usb 6-1: USB disconnect, device number 44 [ 448.200971][ T1039] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 448.217683][ T1039] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 448.228726][ T1039] keyspan 6-1:1.0: device disconnected [ 448.498881][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3960'. [ 449.232813][T16657] syzkaller0: entered promiscuous mode [ 449.234980][T16657] syzkaller0: entered allmulticast mode [ 449.448572][ T92] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.191712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.233647][T16674] smc: removing ib device syz2 [ 450.278300][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 450.423210][T16674] smbdirect: ib_dev[syz2] removed [ 450.497948][T16681] FAULT_INJECTION: forcing a failure. [ 450.497948][T16681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.508632][T16681] CPU: 3 UID: 0 PID: 16681 Comm: syz.2.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.508653][T16681] Tainted: [L]=SOFTLOCKUP [ 450.508657][T16681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.508664][T16681] Call Trace: [ 450.508669][T16681] [ 450.508673][T16681] dump_stack_lvl+0x100/0x190 [ 450.508694][T16681] should_fail_ex.cold+0x5/0xa [ 450.508710][T16681] _copy_from_user+0x2e/0xd0 [ 450.508728][T16681] do_tcp_setsockopt+0x73e/0x2b50 [ 450.508757][T16681] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 450.508781][T16681] ? trace_contention_end+0x126/0x160 [ 450.508805][T16681] ? __mutex_lock+0x26d/0x1bd0 [ 450.508824][T16681] ? avc_has_perm+0x135/0x1e0 [ 450.508838][T16681] ? __pfx___mutex_lock+0x10/0x10 [ 450.508854][T16681] ? get_pid_task+0x106/0x250 [ 450.508876][T16681] ? sock_has_perm+0x25a/0x2f0 [ 450.508893][T16681] tcp_setsockopt+0xe2/0x100 [ 450.508905][T16681] smc_setsockopt+0x1b6/0xa40 [ 450.508924][T16681] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 450.508945][T16681] ? __pfx_smc_setsockopt+0x10/0x10 [ 450.508957][T16681] ? __fget_files+0x215/0x3d0 [ 450.508971][T16681] ? selinux_socket_setsockopt+0x6a/0x80 [ 450.508988][T16681] ? __pfx_smc_setsockopt+0x10/0x10 [ 450.509001][T16681] do_sock_setsockopt+0xf3/0x1d0 [ 450.509020][T16681] __sys_setsockopt+0x195/0x220 [ 450.509037][T16681] __x64_sys_setsockopt+0xbd/0x160 [ 450.509051][T16681] ? do_syscall_64+0x90/0x870 [ 450.509067][T16681] ? lockdep_hardirqs_on+0x78/0x100 [ 450.509082][T16681] do_syscall_64+0x115/0x870 [ 450.509096][T16681] ? clear_bhb_loop+0x70/0xc0 [ 450.509111][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.509123][T16681] RIP: 0033:0x7fc3e9d9e0d9 [ 450.509133][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.509144][T16681] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.509156][T16681] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 450.509164][T16681] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000003 [ 450.509170][T16681] RBP: 00007fc3eabd6090 R08: 0000000000000004 R09: 0000000000000000 [ 450.509177][T16681] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 450.509184][T16681] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 450.509198][T16681] [ 450.741566][T16687] FAULT_INJECTION: forcing a failure. [ 450.741566][T16687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.749270][T16687] CPU: 3 UID: 0 PID: 16687 Comm: syz.2.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.749290][T16687] Tainted: [L]=SOFTLOCKUP [ 450.749294][T16687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.749301][T16687] Call Trace: [ 450.749306][T16687] [ 450.749310][T16687] dump_stack_lvl+0x100/0x190 [ 450.749331][T16687] should_fail_ex.cold+0x5/0xa [ 450.749346][T16687] _copy_from_user+0x2e/0xd0 [ 450.749364][T16687] copy_msghdr_from_user+0x9f/0x4c0 [ 450.749377][T16687] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 450.749395][T16687] ___sys_sendmsg+0x106/0x1e0 [ 450.749407][T16687] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.749418][T16687] ? __lock_acquire+0x49f/0x1a40 [ 450.749434][T16687] ? get_pid_task+0x106/0x250 [ 450.749459][T16687] __sys_sendmsg+0x160/0x210 [ 450.749475][T16687] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.749497][T16687] do_syscall_64+0x115/0x870 [ 450.749513][T16687] ? clear_bhb_loop+0x70/0xc0 [ 450.749526][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.749539][T16687] RIP: 0033:0x7fc3e9d9e0d9 [ 450.749549][T16687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.749560][T16687] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.749573][T16687] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 450.749581][T16687] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 450.749587][T16687] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.749594][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.749600][T16687] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 450.749614][T16687] [ 450.925881][T16693] syzkaller0: entered promiscuous mode [ 450.941629][T16693] syzkaller0: entered allmulticast mode [ 451.085983][T16708] FAULT_INJECTION: forcing a failure. [ 451.085983][T16708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.094043][T16708] CPU: 3 UID: 0 PID: 16708 Comm: syz.2.3980 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.094062][T16708] Tainted: [L]=SOFTLOCKUP [ 451.094066][T16708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.094074][T16708] Call Trace: [ 451.094079][T16708] [ 451.094084][T16708] dump_stack_lvl+0x100/0x190 [ 451.094105][T16708] should_fail_ex.cold+0x5/0xa [ 451.094120][T16708] _copy_from_user+0x2e/0xd0 [ 451.094139][T16708] copy_msghdr_from_user+0x9f/0x4c0 [ 451.094152][T16708] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 451.094170][T16708] ___sys_sendmsg+0x106/0x1e0 [ 451.094182][T16708] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.094193][T16708] ? __lock_acquire+0x49f/0x1a40 [ 451.094209][T16708] ? get_pid_task+0x106/0x250 [ 451.094235][T16708] __sys_sendmsg+0x160/0x210 [ 451.094251][T16708] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.094273][T16708] do_syscall_64+0x115/0x870 [ 451.094289][T16708] ? clear_bhb_loop+0x70/0xc0 [ 451.094303][T16708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.094315][T16708] RIP: 0033:0x7fc3e9d9e0d9 [ 451.094326][T16708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.094337][T16708] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.094349][T16708] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 451.094356][T16708] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000005 [ 451.094363][T16708] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.094369][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.094376][T16708] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 451.094390][T16708] [ 451.175887][ T64] Bluetooth: hci5: unexpected event for opcode 0x201c [ 451.246044][T16714] xt_bpf: check failed: parse error [ 451.508598][T16727] FAULT_INJECTION: forcing a failure. [ 451.508598][T16727] name failslab, interval 1, probability 0, space 0, times 0 [ 451.539429][T16727] CPU: 2 UID: 0 PID: 16727 Comm: syz.2.3985 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.539463][T16727] Tainted: [L]=SOFTLOCKUP [ 451.539468][T16727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.539475][T16727] Call Trace: [ 451.539480][T16727] [ 451.539485][T16727] dump_stack_lvl+0x100/0x190 [ 451.539507][T16727] should_fail_ex.cold+0x5/0xa [ 451.539522][T16727] should_failslab+0xc2/0x120 [ 451.539560][T16727] __kmalloc_noprof+0xfc/0x820 [ 451.539574][T16727] ? rcu_is_watching+0x12/0xc0 [ 451.539600][T16727] ? tomoyo_realpath_from_path+0xb6/0x690 [ 451.539616][T16727] tomoyo_realpath_from_path+0xb6/0x690 [ 451.539631][T16727] tomoyo_path_number_perm+0x23c/0x580 [ 451.539647][T16727] ? tomoyo_path_number_perm+0x22e/0x580 [ 451.539665][T16727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 451.539699][T16727] ? find_held_lock+0x2b/0x80 [ 451.539711][T16727] ? __fget_files+0x215/0x3d0 [ 451.539723][T16727] ? hook_file_ioctl_common+0x140/0x440 [ 451.539736][T16727] ? __fget_files+0x215/0x3d0 [ 451.539750][T16727] ? __fget_files+0x21f/0x3d0 [ 451.539764][T16727] security_file_ioctl+0xd3/0x230 [ 451.539798][T16727] __x64_sys_ioctl+0xb7/0x210 [ 451.539818][T16727] do_syscall_64+0x115/0x870 [ 451.539833][T16727] ? clear_bhb_loop+0x70/0xc0 [ 451.539848][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.539860][T16727] RIP: 0033:0x7fc3e9d9e0d9 [ 451.539871][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.539883][T16727] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.539895][T16727] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 451.539903][T16727] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 451.539909][T16727] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.539916][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.539923][T16727] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 451.539938][T16727] [ 451.556316][T16727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 451.983252][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 451.983271][ T42] audit: type=1800 audit(446.650:6016): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 452.416970][T16744] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3989'. [ 452.426448][T16744] openvswitch: netlink: Actions may not be safe on all matching packets [ 452.506969][ T42] audit: type=1800 audit(447.130:6017): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 452.618942][T16748] FAULT_INJECTION: forcing a failure. [ 452.618942][T16748] name failslab, interval 1, probability 0, space 0, times 0 [ 452.631416][ T42] audit: type=1800 audit(447.250:6018): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 452.640811][T16748] CPU: 3 UID: 0 PID: 16748 Comm: syz.2.3991 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.640831][T16748] Tainted: [L]=SOFTLOCKUP [ 452.640835][T16748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.640842][T16748] Call Trace: [ 452.640847][T16748] [ 452.640852][T16748] dump_stack_lvl+0x100/0x190 [ 452.640876][T16748] should_fail_ex.cold+0x5/0xa [ 452.640892][T16748] should_failslab+0xc2/0x120 [ 452.640909][T16748] __kmalloc_noprof+0xfc/0x820 [ 452.640922][T16748] ? rcu_is_watching+0x12/0xc0 [ 452.640941][T16748] ? tomoyo_realpath_from_path+0xb6/0x690 [ 452.640957][T16748] tomoyo_realpath_from_path+0xb6/0x690 [ 452.640972][T16748] tomoyo_path_number_perm+0x23c/0x580 [ 452.640988][T16748] ? tomoyo_path_number_perm+0x22e/0x580 [ 452.641005][T16748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.641035][T16748] ? find_held_lock+0x2b/0x80 [ 452.641046][T16748] ? __fget_files+0x215/0x3d0 [ 452.641059][T16748] ? hook_file_ioctl_common+0x140/0x440 [ 452.641071][T16748] ? __fget_files+0x215/0x3d0 [ 452.641085][T16748] ? __fget_files+0x21f/0x3d0 [ 452.641099][T16748] security_file_ioctl+0xd3/0x230 [ 452.641118][T16748] __x64_sys_ioctl+0xb7/0x210 [ 452.641137][T16748] do_syscall_64+0x115/0x870 [ 452.641153][T16748] ? clear_bhb_loop+0x70/0xc0 [ 452.641167][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.641179][T16748] RIP: 0033:0x7fc3e9d9e0d9 [ 452.641190][T16748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.641200][T16748] RSP: 002b:00007fc3eabd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.641213][T16748] RAX: ffffffffffffffda RBX: 00007fc3ea025fa0 RCX: 00007fc3e9d9e0d9 [ 452.641220][T16748] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 452.641227][T16748] RBP: 00007fc3eabd6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.641233][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.641239][T16748] R13: 00007fc3ea026038 R14: 00007fc3ea025fa0 R15: 00007ffdb7fc9c18 [ 452.641258][T16748] [ 452.641263][T16748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.754166][T16748] comedi: No check for data length of config insn id 3 is implemented [ 452.759297][T16748] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 452.768985][T16748] comedi: Assuming n=15 is correct [ 452.876287][ T64] Bluetooth: hci0: unexpected event for opcode 0x201c [ 452.949557][ T42] audit: type=1800 audit(447.536:6019): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 452.990294][ T42] audit: type=1800 audit(447.573:6020): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 453.028040][T16764] syzkaller0: entered promiscuous mode [ 453.033466][T16764] syzkaller0: entered allmulticast mode [ 453.132774][ T42] audit: type=1800 audit(447.702:6021): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35324 res=0 errno=0 [ 453.155606][ T42] audit: type=1800 audit(447.702:6022): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35347 res=0 errno=0 [ 453.187877][ T42] audit: type=1800 audit(447.758:6023): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 453.230433][ T42] audit: type=1400 audit(447.795:6024): avc: denied { read } for pid=16775 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 453.271967][ T42] audit: type=1800 audit(447.841:6025): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4001" name="delay_retrans" dev="sysfs" ino=59272 res=0 errno=0 [ 453.386067][T16786] syzkaller0: entered promiscuous mode [ 453.387965][T16786] syzkaller0: entered allmulticast mode [ 453.659514][T16798] FAULT_INJECTION: forcing a failure. [ 453.659514][T16798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.667752][T16798] CPU: 2 UID: 0 PID: 16798 Comm: syz.1.4006 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.667772][T16798] Tainted: [L]=SOFTLOCKUP [ 453.667777][T16798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.667783][T16798] Call Trace: [ 453.667788][T16798] [ 453.667793][T16798] dump_stack_lvl+0x100/0x190 [ 453.667813][T16798] should_fail_ex.cold+0x5/0xa [ 453.667830][T16798] _copy_from_user+0x2e/0xd0 [ 453.667848][T16798] mptcp_setsockopt+0x11ed/0x3300 [ 453.667861][T16798] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 453.667884][T16798] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 453.667897][T16798] ? __fget_files+0x215/0x3d0 [ 453.667912][T16798] ? selinux_socket_setsockopt+0x6a/0x80 [ 453.667928][T16798] ? sock_common_setsockopt+0x2e/0xf0 [ 453.667947][T16798] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 453.667980][T16798] do_sock_setsockopt+0xf3/0x1d0 [ 453.667999][T16798] __sys_setsockopt+0x195/0x220 [ 453.668015][T16798] __x64_sys_setsockopt+0xbd/0x160 [ 453.668029][T16798] ? do_syscall_64+0x90/0x870 [ 453.668045][T16798] ? lockdep_hardirqs_on+0x78/0x100 [ 453.668060][T16798] do_syscall_64+0x115/0x870 [ 453.668075][T16798] ? clear_bhb_loop+0x70/0xc0 [ 453.668089][T16798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.668101][T16798] RIP: 0033:0x7f4be739e0d9 [ 453.668112][T16798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.668123][T16798] RSP: 002b:00007f4be55f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 453.668135][T16798] RAX: ffffffffffffffda RBX: 00007f4be7625fa0 RCX: 00007f4be739e0d9 [ 453.668142][T16798] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000003 [ 453.668149][T16798] RBP: 00007f4be55f6090 R08: 0000000000000004 R09: 0000000000000000 [ 453.668155][T16798] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.668162][T16798] R13: 00007f4be7626038 R14: 00007f4be7625fa0 R15: 00007ffc23614cc8 [ 453.668176][T16798] [ 454.086410][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'. [ 455.060772][T16837] nvmet: adding nsid 1 to subsystem testnqn [ 455.082675][T16837] lo: entered allmulticast mode [ 455.096868][T16835] [ 455.097692][T16835] ====================================================== [ 455.099936][T16835] WARNING: possible circular locking dependency detected [ 455.102172][T16835] syzkaller #0 Tainted: G L [ 455.104117][T16835] ------------------------------------------------------ [ 455.106261][T16835] syz.0.4017/16835 is trying to acquire lock: [ 455.108135][T16835] ffff88803f28da28 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 455.111398][T16835] [ 455.111398][T16835] but task is already holding lock: [ 455.113669][T16835] ffff888057bcb868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 455.117092][T16835] [ 455.117092][T16835] which lock already depends on the new lock. [ 455.117092][T16835] [ 455.121178][T16835] [ 455.121178][T16835] the existing dependency chain (in reverse order) is: [ 455.124704][T16835] [ 455.124704][T16835] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 455.127714][T16835] lock_acquire+0x1b9/0x370 [ 455.129838][T16835] __mutex_lock+0x1a4/0x1bd0 [ 455.131988][T16835] nvmet_ns_device_path_store+0x57/0x1c0 [ 455.134490][T16835] configfs_write_iter+0x302/0x4e0 [ 455.136738][T16835] vfs_write+0x6ac/0x1050 [ 455.138747][T16835] ksys_write+0x12a/0x250 [ 455.140802][T16835] do_syscall_64+0x115/0x870 [ 455.142866][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.145429][T16835] [ 455.145429][T16835] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 455.148508][T16835] lock_acquire+0x1b9/0x370 [ 455.150655][T16835] down_read+0x99/0x4c0 [ 455.152634][T16835] __configfs_open_file+0xe8/0x9c0 [ 455.154931][T16835] do_dentry_open+0x6ab/0x14d0 [ 455.157050][T16835] vfs_open+0x82/0x3f0 [ 455.158936][T16835] dentry_open+0x71/0xd0 [ 455.160965][T16835] ima_calc_file_hash+0xe1/0x380 [ 455.163240][T16835] ima_collect_measurement+0x94f/0xb30 [ 455.165723][T16835] process_measurement+0xdfe/0x2350 [ 455.167861][T16835] ima_file_check+0xc3/0x110 [ 455.169775][T16835] security_file_post_open+0xc4/0x210 [ 455.172005][T16835] path_openat+0x985/0x4280 [ 455.173878][T16835] do_file_open+0x20e/0x430 [ 455.175755][T16835] do_sys_openat2+0x10f/0x1e0 [ 455.177673][T16835] __x64_sys_openat+0x12d/0x210 [ 455.179579][T16835] do_syscall_64+0x115/0x870 [ 455.181202][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.183189][T16835] [ 455.183189][T16835] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 455.185880][T16835] check_prev_add+0xeb/0xe60 [ 455.187651][T16835] __lock_acquire+0x136c/0x1a40 [ 455.189326][T16835] lock_acquire+0x1b9/0x370 [ 455.190907][T16835] __mutex_lock+0x1a4/0x1bd0 [ 455.192505][T16835] process_measurement+0x5ab/0x2350 [ 455.194302][T16835] ima_file_check+0xc3/0x110 [ 455.195925][T16835] security_file_post_open+0xc4/0x210 [ 455.197801][T16835] path_openat+0x985/0x4280 [ 455.199412][T16835] do_file_open+0x20e/0x430 [ 455.201010][T16835] file_open_name+0x1c3/0x3e0 [ 455.202676][T16835] filp_open+0x2e/0x50 [ 455.204153][T16835] nvmet_file_ns_enable+0x95/0x420 [ 455.205927][T16835] nvmet_ns_enable+0x35f/0x5d0 [ 455.207631][T16835] nvmet_ns_enable_store+0x11e/0x160 [ 455.209503][T16835] configfs_write_iter+0x302/0x4e0 [ 455.211289][T16835] vfs_write+0x6ac/0x1050 [ 455.212857][T16835] ksys_write+0x12a/0x250 [ 455.214393][T16835] do_syscall_64+0x115/0x870 [ 455.215962][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.217897][T16835] [ 455.217897][T16835] other info that might help us debug this: [ 455.217897][T16835] [ 455.221042][T16835] Chain exists of: [ 455.221042][T16835] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 455.221042][T16835] [ 455.225239][T16835] Possible unsafe locking scenario: [ 455.225239][T16835] [ 455.227579][T16835] CPU0 CPU1 [ 455.229283][T16835] ---- ---- [ 455.231006][T16835] lock(&subsys->lock); [ 455.232385][T16835] lock(&p->frag_sem); [ 455.234488][T16835] lock(&subsys->lock); [ 455.236608][T16835] lock(&ima_iint_mutex_key[depth]); [ 455.238303][T16835] [ 455.238303][T16835] *** DEADLOCK *** [ 455.238303][T16835] [ 455.240854][T16835] 6 locks held by syz.0.4017/16835: [ 455.242491][T16835] #0: ffff888034a06b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 455.245468][T16835] #1: ffff888023fde450 (sb_writers#17){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 455.248317][T16835] #2: ffff8880270f3c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 455.251388][T16835] #3: ffff88802c6fb070 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 455.254422][T16835] #4: ffffffff8fd29b08 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 455.257604][T16835] #5: ffff888057bcb868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 455.260548][T16835] [ 455.260548][T16835] stack backtrace: [ 455.262428][T16835] CPU: 3 UID: 0 PID: 16835 Comm: syz.0.4017 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.262446][T16835] Tainted: [L]=SOFTLOCKUP [ 455.262451][T16835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.262458][T16835] Call Trace: [ 455.262464][T16835] [ 455.262469][T16835] dump_stack_lvl+0x100/0x190 [ 455.262485][T16835] print_circular_bug.cold+0x178/0x1c7 [ 455.262517][T16835] check_noncircular+0x146/0x160 [ 455.262535][T16835] check_prev_add+0xeb/0xe60 [ 455.262552][T16835] __lock_acquire+0x136c/0x1a40 [ 455.262573][T16835] lock_acquire+0x1b9/0x370 [ 455.262589][T16835] ? process_measurement+0x5ab/0x2350 [ 455.262602][T16835] ? __pfx___might_resched+0x10/0x10 [ 455.262617][T16835] __mutex_lock+0x1a4/0x1bd0 [ 455.262633][T16835] ? process_measurement+0x5ab/0x2350 [ 455.262645][T16835] ? process_measurement+0x5ab/0x2350 [ 455.262658][T16835] ? __pfx___mutex_lock+0x10/0x10 [ 455.262676][T16835] ? __pfx___might_resched+0x10/0x10 [ 455.262692][T16835] ? down_write+0x146/0x1f0 [ 455.262709][T16835] ? process_measurement+0x5ab/0x2350 [ 455.262720][T16835] process_measurement+0x5ab/0x2350 [ 455.262734][T16835] ? find_held_lock+0x2b/0x80 [ 455.262746][T16835] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 455.262759][T16835] ? __pfx_process_measurement+0x10/0x10 [ 455.262773][T16835] ? avc_has_perm+0x135/0x1e0 [ 455.262785][T16835] ? __pfx_avc_has_perm+0x10/0x10 [ 455.262797][T16835] ? hook_file_open+0x24f/0x8f0 [ 455.262815][T16835] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 455.262832][T16835] ima_file_check+0xc3/0x110 [ 455.262843][T16835] ? __pfx_ima_file_check+0x10/0x10 [ 455.262856][T16835] security_file_post_open+0xc4/0x210 [ 455.262873][T16835] path_openat+0x985/0x4280 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.262887][T16835] ? stack_depot_save_flags+0x479/0x9d0 [ 455.262906][T16835] ? __pfx_path_openat+0x10/0x10 [ 455.262919][T16835] ? kasan_save_stack+0x3f/0x50 [ 455.262933][T16835] ? kasan_save_stack+0x30/0x50 [ 455.262945][T16835] ? kasan_save_track+0x14/0x30 [ 455.262958][T16835] ? __kasan_slab_alloc+0x89/0x90 [ 455.262972][T16835] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 455.262985][T16835] ? do_getname_kernel+0x5d/0x250 [ 455.262998][T16835] ? filp_open+0x1d/0x50 [ 455.263011][T16835] ? nvmet_file_ns_enable+0x95/0x420 [ 455.263026][T16835] do_file_open+0x20e/0x430 [ 455.263038][T16835] ? __pfx_do_file_open+0x10/0x10 [ 455.263055][T16835] ? rcu_is_watching+0x12/0xc0 [ 455.263072][T16835] file_open_name+0x1c3/0x3e0 [ 455.263086][T16835] ? __pfx_file_open_name+0x10/0x10 [ 455.263100][T16835] ? do_getname_kernel+0x5d/0x250 [ 455.263113][T16835] ? __asan_memcpy+0x3c/0x60 [ 455.263124][T16835] ? do_getname_kernel+0x1be/0x250 [ 455.263142][T16835] filp_open+0x2e/0x50 [ 455.263156][T16835] nvmet_file_ns_enable+0x95/0x420 [ 455.263170][T16835] nvmet_ns_enable+0x35f/0x5d0 [ 455.263185][T16835] nvmet_ns_enable_store+0x11e/0x160 [ 455.263205][T16835] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 455.263226][T16835] configfs_write_iter+0x302/0x4e0 [ 455.263244][T16835] vfs_write+0x6ac/0x1050 [ 455.263253][T16835] ? __pfx_configfs_write_iter+0x10/0x10 [ 455.263267][T16835] ? __pfx_vfs_write+0x10/0x10 [ 455.263280][T16835] ksys_write+0x12a/0x250 [ 455.263291][T16835] ? __pfx_ksys_write+0x10/0x10 [ 455.263302][T16835] do_syscall_64+0x115/0x870 [ 455.263317][T16835] ? clear_bhb_loop+0x70/0xc0 [ 455.263330][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.263342][T16835] RIP: 0033:0x7faff6d9e0d9 [ 455.263353][T16835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.263364][T16835] RSP: 002b:00007faff7cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.263375][T16835] RAX: ffffffffffffffda RBX: 00007faff7025fa0 RCX: 00007faff6d9e0d9 [ 455.263382][T16835] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009 [ 455.263390][T16835] RBP: 00007faff6e35024 R08: 0000000000000000 R09: 0000000000000000 [ 455.263398][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.263406][T16835] R13: 00007faff7026038 R14: 00007faff7025fa0 R15: 00007ffea37bacb8 [ 455.263418][T16835] [ 455.946682][ T5801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.120797][ T5801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.191577][ T5801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.296389][ T5801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.433820][ T5801] bridge_slave_1: left allmulticast mode [ 456.436944][ T5801] bridge_slave_1: left promiscuous mode [ 456.439492][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.447266][ T5801] bridge_slave_0: left allmulticast mode [ 456.449148][ T5801] bridge_slave_0: left promiscuous mode [ 456.452111][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.504507][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.515359][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.527341][ T5801] bond0 (unregistering): Released all slaves [ 456.718696][ T5435] 8021q: adding VLAN 0 to HW filter on device eth1 [ 456.842325][ T5801] hsr_slave_0: left promiscuous mode [ 456.844579][ T5801] hsr_slave_1: left promiscuous mode [ 456.846587][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.848879][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.851544][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.859454][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.864795][ T5801] veth1_macvtap: left promiscuous mode [ 456.866613][ T5801] veth0_macvtap: left promiscuous mode [ 456.868412][ T5801] veth1_vlan: left promiscuous mode [ 456.870092][ T5801] veth0_vlan: left promiscuous mode [ 456.935278][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 456.940488][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 457.009028][ T5435] 8021q: adding VLAN 0 to HW filter on device eth3 [ 457.144609][ T5435] 8021q: adding VLAN 0 to HW filter on device eth2 [ 457.294416][ T5435] 8021q: adding VLAN 0 to HW filter on device eth4 [ 457.389776][ T5801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.442412][ T5801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.514063][ T5801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.575999][ T5801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.660041][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 457.660141][ T42] audit: type=1800 audit(451.885:6074): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268843 res=0 errno=0 [ 457.673256][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.676644][ T42] audit: type=1800 audit(451.903:6075): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=268848 res=0 errno=0 [ 457.684593][ T42] audit: type=1800 audit(451.903:6076): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=268852 res=0 errno=0 [ 457.691489][ T42] audit: type=1800 audit(451.903:6077): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=268851 res=0 errno=0 [ 457.699969][ T42] audit: type=1800 audit(451.903:6078): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=268854 res=0 errno=0 [ 457.709114][ T42] audit: type=1800 audit(451.903:6079): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=268929 res=0 errno=0 [ 457.716034][ T42] audit: type=1800 audit(451.912:6080): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269015 res=0 errno=0 [ 457.725629][ T42] audit: type=1800 audit(451.912:6081): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=268934 res=0 errno=0 [ 457.736053][ T42] audit: type=1800 audit(451.912:6082): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=269101 res=0 errno=0 [ 457.744334][ T42] audit: type=1800 audit(451.912:6083): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=268938 res=0 errno=0 [ 457.753706][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.836523][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.848160][ T5435] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.914498][ T5801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.013693][ T5801] bridge_slave_1: left allmulticast mode [ 458.015532][ T5801] bridge_slave_1: left promiscuous mode [ 458.017755][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.021684][ T5801] bridge_slave_0: left allmulticast mode [ 458.024192][ T5801] bridge_slave_0: left promiscuous mode [ 458.026262][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.039625][ T5801] bridge_slave_1: left allmulticast mode [ 458.042058][ T5801] bridge_slave_1: left promiscuous mode [ 458.044907][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.049987][ T5801] bridge_slave_0: left allmulticast mode [ 458.052284][ T5801] bridge_slave_0: left promiscuous mode [ 458.054288][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.061731][ T5801] lo: left allmulticast mode [ 458.146980][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.156440][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.160233][ T5801] bond0 (unregistering): Released all slaves [ 458.168601][ T5801] bond1 (unregistering): Released all slaves [ 458.215741][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.222537][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.234703][ T5801] bond0 (unregistering): Released all slaves [ 458.297322][ T5801] : left promiscuous mode [ 458.430731][ T5435] 8021q: adding VLAN 0 to HW filter on device eth6 [ 458.569023][ T5435] 8021q: adding VLAN 0 to HW filter on device eth7 [ 458.741821][ T5435] 8021q: adding VLAN 0 to HW filter on device eth8 [ 458.871169][ T5801] hsr_slave_0: left promiscuous mode [ 458.873643][ T5801] hsr_slave_1: left promiscuous mode [ 458.876487][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.879742][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.883225][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.886346][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.892505][ T5801] hsr_slave_0: left promiscuous mode [ 458.895442][ T5801] hsr_slave_1: left promiscuous mode [ 458.897689][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.900376][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.903259][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.905732][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.915769][ T5801] veth1_macvtap: left promiscuous mode [ 458.918208][ T5801] veth0_macvtap: left promiscuous mode [ 458.920682][ T5801] veth1_vlan: left promiscuous mode [ 458.923352][ T5801] veth0_vlan: left promiscuous mode [ 458.927135][ T5801] veth1_macvtap: left promiscuous mode [ 458.929616][ T5801] veth0_macvtap: left promiscuous mode [ 458.932100][ T5801] veth1_vlan: left promiscuous mode [ 458.934589][ T5801] veth0_vlan: left promiscuous mode [ 459.039301][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 459.046225][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 459.209272][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 459.217572][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 459.255146][ T5435] 8021q: adding VLAN 0 to HW filter on device eth9 [ 459.472718][ T5435] 8021q: adding VLAN 0 to HW filter on device eth10 [ 459.704534][ T5435] 8021q: adding VLAN 0 to HW filter on device eth11 [ 459.768941][ T5801] IPVS: stop unused estimator thread 0... [ 459.771113][ T5801] IPVS: stop unused estimator thread 0... [ 459.903662][ T5435] 8021q: adding VLAN 0 to HW filter on device eth12