last executing test programs: 16.0317763s ago: executing program 3 (id=1515): timer_create(0x8, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000), &(0x7f0000000240)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190880"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x400, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x40000}, &(0x7f0000000140)=0x8) 13.519651995s ago: executing program 4 (id=1521): socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x6, 0x7fffffff, 0x2, 0x5, 0xce44, 0x6, 0x181, 0x7, 0x0, 0x1, 0x7f, 0x3, 0x5, 0x5, 0x6f, 0xc], 0x6000, 0x40000}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0x46b5b071fb3773b1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/77, &(0x7f0000000180)=0x4d) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "ab387c589872ea7e", "154b638301000100da2301b70eba0e80", "4d6f0211", "fdffffffe6ffffff"}, 0x28) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) write$binfmt_elf64(r4, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r4) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x3, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) 12.469496485s ago: executing program 4 (id=1524): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@remote, @private, 0x0}, &(0x7f0000000080)=0xc) r1 = gettid() r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x2001) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7789, 0x40, 0xe, 0xffff, {{0x1b, 0x4, 0x3, 0x0, 0x6c, 0x64, 0x0, 0x29, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_addr={0x44, 0x1c, 0x49, 0x1, 0x9, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x6}, {@private=0xa010100, 0x6}]}, @ssrr={0x89, 0x13, 0x4a, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @lsrr={0x83, 0x27, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @empty, @broadcast, @remote, @loopback, @multicast2, @rand_addr=0x64010101]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYRES16=r5], 0x20}, 0x1, 0xc00000000000000}, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, &(0x7f00000000c0)={0x0, 0x22, ""/34}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x9, &(0x7f00000001c0)=@raw=[@generic={0x3, 0x4, 0x8, 0x5, 0x4}, @alu={0x7, 0x0, 0x6, 0x0, 0x3, 0x20, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 10.185105689s ago: executing program 3 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001200)='auxv\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1, 0xfffffffe, 0x80000000) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x5) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x85}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r3, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x11, "69fbd54ae5c72f55270fb651aa9d2f"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @mptcp=@remove_addr={0x1e, 0x8, 0x9, 0x0, "d3bfd50362"}]}}}}}}}}, 0x0) 6.887202273s ago: executing program 3 (id=1533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120108000000000d00000000000000000001090224000100000000090400000103000000092100000001220200090581030000000000"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x1, 0xef, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xf5601c12bd913139, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x9, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x20}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x1, 0x4, [0x8, 0x7, 0x6, 0x2], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x1, 0x6, 0x9}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x2, "92b4dc9d687c"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, 0x5, [0x6, 0x6, 0x8, 0x6, 0x6], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x2}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0xb, 0x74, 'u0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) 6.764083124s ago: executing program 1 (id=1535): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000004, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYBLOB="2cff66646e6f3d", @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 6.173827919s ago: executing program 4 (id=1539): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x168, 0x9, 0x0, 0xb, 0x2e8, 0x250, 0x250, 0x2e8, 0x250, 0x3, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x1a0, 0x1e8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@private1, [], @ipv4=@local, [], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [], @ipv4=@local}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'dvmrp0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0xfd}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x108) prlimit64(r2, 0xb, &(0x7f00000000c0)={0xb960, 0x1}, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f000000b880)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000031c0)=[{&(0x7f00000020c0)=""/4088, 0xff8}], 0x1) timerfd_settime(r5, 0x3, &(0x7f0000000140), 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000080)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000200)={0x1, 0x8, 0xc2, &(0x7f0000000500)=""/194}) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020007800500150000000000080012400000000011000300686173683a69702c6d61726b00000000050005000200000005000400000000008b3527d4119e1553306931fc4e7625b49e90f25ed613a404b7066753b9be1c9d705de13a7ae5110149be7b46a0a08d317d1fc8536ed97db100a8997cf086e476f02256ccb1f4dbf1db5de75068300e38d9b6baca0780bd9f32d4aba1a1a6c24201f2b454d702a2443e10cd6a51c8b1aef87ed3760bccda1c8651cb905c240a574859d7ba2385640e58eb6b173eb18d73"], 0x60}}, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000400), 0x208e24b) accept$alg(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a00060004000000070093f10ffd2fb2f181a04782296814e1aa3a60ee8f"], 0xf) socket$nl_generic(0x10, 0x3, 0x10) 6.169960852s ago: executing program 1 (id=1540): r0 = socket(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x1f, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "d196eeb4ebf971cd7208bd28e0265105c2274c4dc974b525ee8c2257c89fc781bcc47d111185998d213f7b1937c8b2e96e101df8a4bacb5241cbcf4f4300c64cbed7520168092c2996b3ed90b5f541bc97315878c2cda7ab6c5b66147d14356b995f6e46706472b6c2ec42431a14411dd13e74f65932c835e79fd8f832e10c7f0cd80e96d89c1039e2aebb5af082e349b20dcb12e367bda52e25481a7954aa18190b10b8e464ed561d4ad5897e6115124715b8394e6e8517b8b32b4c01487f9c226a3478030f00f2a940ce3896e1661b6f29812b1bfadc9f8e76e836cf702f4293d26f0eca6a518d81219ecaee4c0ea71e99e083c217e7e57a7c9743d833ce231ee1cdb48f87c521e30138e6c1213bb9f1d53df176a13074e99e82bd1bfcb0b2871821c0ab74bc95245fc8b18ab7c5899310ec89ea3c8f3c972ad58af2443c62197f3c3322b77b1dd1b004a9915b53a1d7a2a8886401991b352cedae1134590434fadd5e72cb75511b885a4a0e5489eae6a2fb8c941351eeaaab150afaec72500a3ccad4076d1c142cbc5b34e1beaf2f5304bef86c951e3bdabd3e970b74829edb5628a528b6ff41389741c0c618452828f188f11fd549a6ef6bbc3c8e6b0b08bf77b536d1f1dcfe381de08333eabe8708cea871712c7e09a965701ddc2476fb8f424ccc82c54d5fdf06acfc0903a82a80fde5988002bdb75cf508687e549c2c08af3fe5bda366a62372c9622eca7eee997d89cf4a63247882dfc45d16fe01e262cf852a2660e2682c61b7a86ad90c48cc933f270e0b29381301571f9987e574d457648336128365f141ab967671b6924832a252fc0b2691fec341f595d6ab2538c6569382d5ce0b24f254cdd563391b2b8148a7d227f164de3de023e9d6d545ae63b40c122da0722d26c54dd3acd5e06028356e8fd2c05de0fb0c9f34a70b6d07a505270299bfb4eec84df48d4d301ad033ceea73d0626c9c9eacbfd5fc83df879637f955918c0c9232afd750cf89dd46336d0e699a26c49e101513643f69cb601765810e816561b764bf60a0bf6e28085a542f343f6a7c8427212650b31cc23591b5cafd6e58da01327e86ca9366e442c1e88d5343ba1f5a4ebfcaabae67a158cef58ddf4b56cdb851185a3f7c1a710be4faa124030070de14988618991ca01a3ca109925f99ab5ab1cb456ba82f030db5da279b1df8fde1898483ca4494d57416e732d9c12d0a9337aa0216d08f9dfb76b8cd35b24ab8aaa6b070ca8515c1334c42f31b8fbd16c3a7ef6adaaf6068569bed9f48a16a389d02b0b7910f0fef609d5c57260af0910de5a59dfa8849e310b02d6a289cb4f4e0dc765f28e6516514ae9240b5e8227df4f7e9bb135ee669818223cb0ca68037b8a83ca9c3c220941a1008757b85af5381fa45f6d2146fbdcf1e10d2172cbd3f1ef5fccbd5235e497f30007de63481a213c5e8e73e96dc45b3be82d4a047144846be6e0cf2d69b265bf7f8ba7e3042f33c3bd2f2b469357070014066b95e55ff32286ef57eb677a9b357b17d667263df768b11a189c1c39c9d00d5220b5016f5a0621a4a9907d438b24d9b98ca02c41c70abecb34e48332e52fde63296fd39afe95795c10117b3f26c80a0df2d171a761a614e1a4ad6cde254737450fe45c8d0171ac788f2bf2334bfbb1e23b2cc065b794899272848a2582103ef58634d9cef554edb3b74a6ad81a96743af3ff7a8d9e635aa4cc262017ce65d566568a64d01bbd41ad391e9a494cd368e36f9ad19ad5d7df50f5698a381bd4f7f97483be38f4e8e997a9edd827762d445136bd6e0ab086cea8918053d2f7d4d1a734d48a01d41c085bde3c17563dcebb7d7662c54a77af595bedc7bb3e259c9066154a5f5e004524e37311e349587d5824ee81ebf0c64f2890fb5edde80040787e6bdd1efe70797b16255a684f92e52cbd290642a18281fe9e4de00eb16fa9adaeedb85211e6a2f759761b6ea8bfc488ac67deccbf20002b1d43d1c89bed76722c5e22d88f98bb2e867b36676e81ef67c07b097f12282e260323022c331ea9ae3ba40abc9e8e5fdcc636bbd1d166f0935c91a90572f260051f10c0443a8f7623478628aaf527f96a674d1d82335c9295071f425bc11a8ab3ff482f152fa2fbad5d7d764e5b6af0e35871f6687031e19a7a5a238cdf075f42c9402e7c19227903e6eaf20cac1887ecb126f696a52de0f8ed05c6fc695142a7b991bca2bf7e6ffb7c47ee6630c4fb69f5881fc0fcef2623e81e603f977da4a48214ca1db03b497a89a7aa55edd0260bd5e3213365eb004846e1a3e7303adef7feff831eb37b7b0276b19a5ac71d6962bdbba7927470ef254591f1d795e593d212a0197265a8d3daf4324d2ecfe1b6ff7308ab5c53c1688e48938460dff849c547229770314e9f4188857c78d92859c2df93a055b757e8532adbc04c73a93d1b11aac9eec7013563bccc754404187bbc15309bff6b029984162907c00cab4ceb0f04b9ebb78a83e7a4fb7bdf6d42c703431b4a52612b54edd88a4dec05efe48355ecfc1bea9060e720af33e27223f502fa03ab0696afa6a407e6557f9b1f732ca8e7571e651af3475f677a97082692efd0d82bf5ff92e7535b1719794c18a44c6f6f0247ecc1d71fa86bdca93470574c4e7ffce183ed8faab13705b516649edead5646f43b4abcb78d2b7ba5cb5c332ac63b16e94c7236f888d986e4d26676b5508576e5c80101453a9ff15fe7eb0a8745348362dae300f8b9762e4df50f0a47eac1e6935ca439d6ea25a272d149735fea918ad713266b4c6a9ed82dfb5b16e800bfa261c551059740e33de233269096913d0962ae9b89e1cb9b8934641433990fe6f927dcd174c5d249019768b7d9c366457c287da6e25452ae7a8e078b78ca2655377d711ac99081e336dc7a55ccbaca11bedd82db33cd88c9b4b6e4e2291413ba47e5961cc2ee3a20815aa78479da79c6799a7b07affa66a1c34bb192ea9237ffed5ba8eb3034d0d15574e43cfbfcce55c78279de6c5179cbf8bba083c3109c6cec0613fcf16685a343b1ddae515ff5a3fcec121c43a9cd5427e4f70df3eccc82ddd667bc7db330674fc7a9cdd07c3d705663c4ee34f963aacf88cd8c8f9c9c0f5243ae246d8aa063dc0c1e2b1ae03b1c055c7e6cfc80c89e0ce2ada041625f7da04e528e28d20e04e9af3b64cdd4a3b85216e2a4765b2942bad3c7c6f8b336aabf7f0b72667e2418ca59161b03b6a1bb334ce9356fcd5956a9d18fb28d10f5fdc5bd670ce86ae9cf1753a6514e486dd6aaeed5597df47c523faa75a760ee55840075eec84ee089fe0dc8cf50ae3e44bfa9a2e83f90e91741f08e05f47f88df23b221150eff44e5d271208e78962dad72525e770dd918cf1ecd5b64c8c041d9ba71a212eab58d00bdbe7adfa596bd14477372b5baa0f95cdb22dec140cb0a475cb261f70563930137eb300b99fdd4c4e878cd694f0fd8ca59d08bd04e1a3fdb4fb83335ac0ddd654044040914d8ce0c88e0d6312dcf1ec1a628f260bcf9b846720030973b1479bc3433c83ed0db07ad7666fcb08986a1bb94e9bc05b22a2e5a1aae1a27e3e9b0fb2a9292bed25e3df7ca0d9a521c7b2ff44256bf582062fe78884e9ff1231c49e30bc97b2af30267a270c4d8d3d2594309b1ed12aecd495f081048604feaf0bed7aa3462d1163df21b6ee6af1168aa1a8c132271dd02e9ae253dd786846cf5632218d95945dfc7d5de5b5c2fc7f75341f3606078bbf742cc72e4ffc369409e6b0bf5eb37a131738a639898048d46b83e56b564935d08b9aa776c2d098f88a8db29de35ca634b1b44c0b0e73d79a70fca34c483acd2f62c35d4a23411b8a983d0aa2fceb4c8dc3ad89592c23201a20d77a95dfbf487cc25653af88f04c3229444c20567f690c21cff5c336e225cdad4d1cdd4193ad632cda78a8b4ccea93e4cc718fb5c9389e62e679ea08e73086ced5d6bbaa3502f3e7eea3d4a0dbbbebf971b83c04e74ea7300ae0a8dd4ccfceda3d4e7ffee772b6c5561e542bf2766fca45757f35128877c91ed175a272b14c6362a01927e0c39c9c974acdaedf22177e6ce23466c489ce0c99b59688ac0bbe43a5ec9cbfa590bc2e0bdc3a408b32ca0623d110ab416c9fa4fa0a32dd3c52cd7350abd3ba060df121fd90e641e76ccdc37323c648e23e3fb36fe6a111f15492061b02d1a6c3bbed2c3fa7872e1fc3c68fbf5aca5f502257913d9a82700bb1f91b242ef777b338d992e14930744e52cc72f0e3557d8cb9a1e8949acae7b34cf642be12fe4e429376bcc544c1ea56537c06de619b90424d4c40782800358b61da9070710e9873cd19425f9b746e3c42f064a429dbfbebc74f7fc7b732e104ed97dde68c1acc2bf21e42b57201ace6c08016750092bc81d48067402d84c4f7fb0fdae6fec41bf66daa19afc07b5745f1efe87214494252cde8807c13eba65400eac97db1079f5c468ffdf3213a7f87be3d83e2d5a9337154c1e3a832e987cdc9585f36bff0e1d62d4035947b0eb8e13b02d961ca4f1ae71871d043b47f5132fef76e6b3556ed65b36dda96c2c319793723e9383d8f663b20b86b8a245c492a9f38fbaef561d2ea109684596cea7fa69fbae0cce48daaf2c65011381ad2b0bc23bd50585b399fb35c453c8f0a5d9b80abd784f45cf55af476442a08d15334c1f1c479aa2ba9d65d71b00f9dc34c425115fa179b126efae40091c7cbb8c8988f5662c8de3a089b446789a6d27740232e3617dc2907e299353814ed3878a8e4d2b36dce3353412569e5015ae0e8e251ae8adfdb4b76b48d5394cf91939ac96387ccbfc4be2ebf7e4546b4d72450b4c66140fa5c82bab6efee04779ade9cfe864f56997ad161d390a6281a1802fd5edcfe3d939dd4b5f403694df75f06091e81692d9e647a7bf22fdd84b4091a10635e74497c64509f9c1a7633bf068f2c4a7025387ac9d5d4fc35f7f74ec348c465e87cf5a55ccdbea0a23f8ab5908e8b4927d274130b8b9f9e93b7e3e74ea21e5bba1d89e731741ea41cddf310b422301c4eef12b1f386c503b916e2a384d1900072f7888083d4758afaf8b402eeaa203358f44a311e46928a2133bd937310fc2d16ea5bc952ab34b79455e64f1e419d5ef3702578d6ee2756252dabf4d932f963ff374eba4b30cfe38373b6257983e11d6db3891b4f4d5a0e275b6dd62f2c070805a5773064ee9a2aaa4595c57c8e5632b8b4f91de1e99c86e1e10c462c0cdf48e546cf6c0f7b631d556527905b4586c156d70d187a9c98d0ea701467a6208261647259151178c3be45fdc604301d05b6b75f5f13fa15583ff9600631b327caacd22e62bb5c9e7f086e8ab9dbf7f6314c33b1d455dc1bbea076cf80c0490c9d442a62d44e"}) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]}}) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.153495001s ago: executing program 0 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 5.887688229s ago: executing program 0 (id=1542): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x39, {0x1b, 0x0, 0x1ec350a8dcb8e3ee, 0x4}}}], 0x18}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0xb4, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000001a40)=[{0x0}], 0x1}}], 0x2, 0x40000) getpid() 4.962076607s ago: executing program 0 (id=1543): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x119, 0xb}], 0x10}, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000058c790780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000180)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) socket$isdn_base(0x22, 0x3, 0x0) 4.858807687s ago: executing program 4 (id=1545): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) 4.851087795s ago: executing program 1 (id=1546): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = userfaultfd(0x1) fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r3}, 0x10) close(r2) close(0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) 3.987450579s ago: executing program 0 (id=1547): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)={0x5}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) setresuid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0x40000000, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x48524742}}) 3.894331671s ago: executing program 2 (id=1548): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 4) 3.859477287s ago: executing program 1 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000, 0x71, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0xb9) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) (async) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000002780)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xfffffffffffffe7e, 0x0, 0x0, &(0x7f0000003e00)=""/4102, 0x1001}, 0x0) (async) r5 = dup3(r1, r3, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, 0xe, 0x16}}) 3.780070305s ago: executing program 2 (id=1550): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x28, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.627774326s ago: executing program 4 (id=1551): r0 = socket(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "817e63c37863ac06f909a7aa6f1cffe4fad674b47b089b1e4da2ed7bf4e829c7b7d15e0fed6b8c601113e94cf6d4bc5ce88cce23d3f7e5ead6bd812ba1da90dbb18300bb91a31bd916d3988393691c77ab9ef17e0fd77ce067f0e5b8984e716605eca9f3ad2f9f7e98a26e7921642c58e6e875076cac3e3df8286f09b6bb2f4ea38e949573d2234a56a953823f783513d33438fb3e69132872375265ce73e6cab4664f1d6190a50439e04fbf3df74ccbebf24b20765ea70296d49cb260fcc2252f3de0a6a9ddb0ec35ea4038b7781826acbe10981a0c26064d60b57c7ddcf756e7fd2eaf4bc35397ac2846d5b4aa80c1eb7f7255e6192315c8e96f16e1f291f0", "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"}) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_fd(0x20, &(0x7f0000000080)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]}}) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.627404202s ago: executing program 3 (id=1552): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x259a}}, './file0\x00'}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010062726964676500003c00028005002d000100000008001d000008000005001600010000000800040004000000050029"], 0x6c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x259a}}, './file0\x00'}) (async) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000001c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010062726964676500003c00028005002d000100000008001d000008000005001600010000000800040004000000050029"], 0x6c}}, 0x0) (async) 2.860681693s ago: executing program 0 (id=1553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x1e, 0x3, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/240, 0xf0}], 0x1, 0x0, 0x1) r7 = dup(r5) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r8 = dup(r5) sendfile(r8, r7, 0x0, 0x89ffc) 2.860169853s ago: executing program 2 (id=1554): mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}]}}) 2.774138255s ago: executing program 1 (id=1555): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000f00)={0xa, 0xa00, 0x0, @mcast1, 0x1}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 2.670229287s ago: executing program 3 (id=1556): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x168, 0x9, 0x0, 0xb, 0x2e8, 0x250, 0x250, 0x2e8, 0x250, 0x3, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x1a0, 0x1e8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@private1, [], @ipv4=@local, [], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [], @ipv4=@local}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'dvmrp0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0xfd}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x108) 367.168699ms ago: executing program 2 (id=1557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 249.942928ms ago: executing program 0 (id=1558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) listen(r4, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) 146.260906ms ago: executing program 4 (id=1559): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 145.83253ms ago: executing program 3 (id=1560): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = userfaultfd(0x1) fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r2}, 0x10) close(r1) close(0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) 124.68652ms ago: executing program 1 (id=1561): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) 65.522581ms ago: executing program 2 (id=1562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6 \x00'}, 0x20) 0s ago: executing program 2 (id=1563): r0 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat(r1, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.954'. [ 552.167923][ T9895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 552.174462][ T9895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.481630][ T9902] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 552.509526][ T9902] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.968'. [ 552.525889][ T9895] vhci_hcd vhci_hcd.0: Device attached [ 552.548648][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.558309][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.567014][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.580720][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.589319][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 552.596631][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.745825][ T5301] vhci_hcd: vhci_device speed not set [ 552.883714][ T5301] usb 11-1: new full-speed USB device number 7 using vhci_hcd [ 552.991787][ T9897] vhci_hcd: connection closed [ 553.016161][ T3398] vhci_hcd: stop threads [ 553.055773][ T3398] vhci_hcd: release socket [ 553.102544][ T9899] chnl_net:caif_netlink_parms(): no params data found [ 553.116655][ T3398] vhci_hcd: disconnect device [ 554.028003][ T9919] binder_alloc: binder_alloc_mmap_handler: 9914 20ffc000-20ffd000 already mapped failed -16 [ 555.193534][ T5229] Bluetooth: hci3: command tx timeout [ 555.470799][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.583018][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.591310][ T9899] bridge_slave_0: entered allmulticast mode [ 555.599073][ T9899] bridge_slave_0: entered promiscuous mode [ 555.809167][ T9932] overlayfs: failed to resolve './file0': -2 [ 556.021131][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.309486][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.332732][ T9899] bridge_slave_1: entered allmulticast mode [ 556.358043][ T9899] bridge_slave_1: entered promiscuous mode [ 556.503440][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 556.625265][ T3398] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.215866][ T5235] Bluetooth: hci3: command tx timeout [ 557.525035][ T9899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.662058][ T9954] 9pnet_fd: Insufficient options for proto=fd [ 557.669319][ T9955] tmpfs: Bad value for 'mpol' [ 557.784663][ T3398] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.820207][ T9899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.877790][ T9954] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 557.924110][ T3398] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.025859][ T5301] vhci_hcd: vhci_device speed not set [ 558.074355][ T9899] team0: Port device team_slave_0 added [ 558.255510][ T3398] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.449869][ T9899] team0: Port device team_slave_1 added [ 560.112062][ T5235] Bluetooth: hci3: command tx timeout [ 560.427652][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.434644][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.166493][ T9899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.185134][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 561.207059][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.223561][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.380888][ T9899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.541035][ T9983] binder_alloc: binder_alloc_mmap_handler: 9976 20ffc000-20ffd000 already mapped failed -16 [ 561.564612][ T9899] hsr_slave_0: entered promiscuous mode [ 562.333463][ T5235] Bluetooth: hci3: command tx timeout [ 562.348255][ T9899] hsr_slave_1: entered promiscuous mode [ 562.590414][ T9992] binder_alloc: binder_alloc_mmap_handler: 9987 20ffc000-20ffd000 already mapped failed -16 [ 563.073510][ T9899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.095743][ T9899] Cannot create hsr debugfs directory [ 563.354304][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.360856][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.474385][ T9995] 9pnet_fd: Insufficient options for proto=fd [ 563.537154][ T9995] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 563.571310][ T9998] overlayfs: failed to resolve './file0': -2 [ 563.618027][ T3398] bridge_slave_1: left allmulticast mode [ 563.623737][ T3398] bridge_slave_1: left promiscuous mode [ 563.666527][ T3398] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.698539][ T3398] bridge_slave_0: left allmulticast mode [ 563.711729][ T3398] bridge_slave_0: left promiscuous mode [ 563.735209][ T3398] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.874764][ T3398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.924400][ T3398] bond0 (unregistering): Released all slaves [ 567.956188][T10026] tmpfs: Bad value for 'mpol' [ 567.976039][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 572.824197][ T3398] hsr_slave_0: left promiscuous mode [ 572.935115][ T3398] hsr_slave_1: left promiscuous mode [ 573.314974][ T3398] veth1_macvtap: left promiscuous mode [ 573.325268][ T3398] veth0_macvtap: left promiscuous mode [ 573.347483][ T3398] veth1_vlan: left promiscuous mode [ 573.366726][ T3398] veth0_vlan: left promiscuous mode [ 574.184757][T10078] tmpfs: Bad value for 'mpol' [ 575.056158][ T5302] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 575.267556][ T5302] usb 1-1: Using ep0 maxpacket: 8 [ 575.278170][ T5302] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 575.315899][ T5302] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.351194][ T5302] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.375908][ T5302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.411995][ T5302] usbtmc 1-1:16.0: bulk endpoints not found [ 575.467005][ T3398] team0 (unregistering): Port device team_slave_1 removed [ 575.574011][ T3398] team0 (unregistering): Port device team_slave_0 removed [ 576.518414][T10076] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 576.556108][ T5270] usb 1-1: USB disconnect, device number 11 [ 576.941482][T10093] binder_alloc: binder_alloc_mmap_handler: 10088 20ffc000-20ffd000 already mapped failed -16 [ 578.467601][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 578.678090][ T8731] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 578.678509][ T9899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.703279][ T9899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.724543][ T9899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.748217][ T9899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.874647][ T9899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.882588][ T8731] usb 1-1: Using ep0 maxpacket: 8 [ 578.910923][ T8731] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 578.935022][ T8731] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.955064][ T9899] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.985570][ T8731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.008820][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.016103][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.037674][ T8731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.059857][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.067072][ T3398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.306592][ T8731] usbtmc 1-1:16.0: bulk endpoints not found [ 579.530469][T10133] binder_alloc: binder_alloc_mmap_handler: 10126 20ffc000-20ffd000 already mapped failed -16 [ 579.945602][ T9899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.493897][T10142] overlayfs: failed to resolve './file0': -2 [ 580.745222][ T5229] Bluetooth: hci2: command 0x0406 tx timeout [ 581.191606][ T5271] usb 1-1: USB disconnect, device number 12 [ 581.367125][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 581.482148][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 581.886055][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.222685][ T9899] veth0_vlan: entered promiscuous mode [ 582.695361][T10171] binder_alloc: binder_alloc_mmap_handler: 10164 20ffc000-20ffd000 already mapped failed -16 [ 582.959039][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 583.320374][ T9899] veth1_vlan: entered promiscuous mode [ 583.493653][T10182] overlayfs: failed to resolve './file0': -2 [ 583.602908][ T9899] veth0_macvtap: entered promiscuous mode [ 583.948131][T10194] binder_alloc: binder_alloc_mmap_handler: 10183 20ffc000-20ffd000 already mapped failed -16 [ 584.711088][T10198] tmpfs: Bad value for 'mpol' [ 584.834391][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 584.859738][ T9899] veth1_macvtap: entered promiscuous mode [ 584.912544][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 585.018228][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 585.164294][T10180] syzkaller0: entered promiscuous mode [ 585.235954][T10180] syzkaller0: entered allmulticast mode [ 585.924486][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.086725][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.129418][ T9899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.194189][ T9899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.203360][ T9899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.212514][ T9899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.445878][ T940] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 587.396872][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 587.430623][ T940] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 587.446973][ T940] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.461431][ T940] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 587.471706][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.484865][ T940] usbtmc 2-1:16.0: bulk endpoints not found [ 587.670174][T10232] netlink: 'syz.0.1027': attribute type 4 has an invalid length. [ 587.710669][T10232] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1027'. [ 588.885404][T10243] binder_alloc: binder_alloc_mmap_handler: 10240 20ffc000-20ffd000 already mapped failed -16 [ 591.608580][T10247] netlink: 'syz.4.1030': attribute type 4 has an invalid length. [ 591.637425][T10247] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1030'. [ 593.500267][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 593.510005][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 593.518718][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 593.553178][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 593.567739][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 593.582584][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.439535][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 595.518808][ T8731] usb 2-1: USB disconnect, device number 6 [ 595.617936][ T5235] Bluetooth: hci4: command tx timeout [ 595.700098][T10267] 9pnet_fd: Insufficient options for proto=fd [ 595.722231][T10267] netlink: 'syz.4.1035': attribute type 10 has an invalid length. [ 595.788997][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.824005][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.106936][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.115109][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.738500][ T5235] Bluetooth: hci4: command tx timeout [ 597.788787][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 598.171664][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 598.981389][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.241626][T10264] chnl_net:caif_netlink_parms(): no params data found [ 599.836570][ T5235] Bluetooth: hci4: command tx timeout [ 601.466244][T10316] binder_alloc: binder_alloc_mmap_handler: 10311 20ffc000-20ffd000 already mapped failed -16 [ 602.236600][T10320] binder_alloc: binder_alloc_mmap_handler: 10303 20ffc000-20ffd000 already mapped failed -16 [ 603.886338][ T5235] Bluetooth: hci4: command tx timeout [ 604.066157][T10304] tmpfs: Bad value for 'mpol' [ 604.416655][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.573405][T10309] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 606.864766][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.338651][T10341] tmpfs: Bad value for 'mpol' [ 607.918241][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 607.978553][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.677882][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.685145][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.698192][T10264] bridge_slave_0: entered allmulticast mode [ 608.722956][T10264] bridge_slave_0: entered promiscuous mode [ 608.738414][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.772078][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.797544][T10264] bridge_slave_1: entered allmulticast mode [ 608.815111][T10264] bridge_slave_1: entered promiscuous mode [ 608.830747][T10373] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 609.005476][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 609.860511][T10373] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1055'. [ 609.912031][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 610.065922][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 610.102164][ T5275] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 610.115217][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.145835][ T5275] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.168278][ T5275] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.192324][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.207965][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.275549][ T5275] usbtmc 3-1:16.0: bulk endpoints not found [ 610.313947][T10380] tmpfs: Bad value for 'mpol' [ 610.486107][ T52] bridge_slave_1: left allmulticast mode [ 610.498470][ T52] bridge_slave_1: left promiscuous mode [ 610.522448][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.569012][ T52] bridge_slave_0: left allmulticast mode [ 610.577121][ T52] bridge_slave_0: left promiscuous mode [ 610.774757][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.849186][T10395] binder_alloc: binder_alloc_mmap_handler: 10388 20ffc000-20ffd000 already mapped failed -16 [ 612.431842][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.448807][ T52] bond0 (unregistering): Released all slaves [ 612.526818][T10264] team0: Port device team_slave_0 added [ 612.566792][T10264] team0: Port device team_slave_1 added [ 612.611644][ T5275] usb 3-1: USB disconnect, device number 10 [ 612.901338][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.916065][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.005477][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.043778][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.050946][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.517690][T10412] binder_alloc: binder_alloc_mmap_handler: 10406 20ffc000-20ffd000 already mapped failed -16 [ 613.859167][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.039086][T10421] netlink: 'syz.1.1065': attribute type 4 has an invalid length. [ 617.064373][T10421] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1065'. [ 617.261891][T10433] tmpfs: Bad value for 'mpol' [ 617.277046][T10264] hsr_slave_0: entered promiscuous mode [ 617.364637][T10264] hsr_slave_1: entered promiscuous mode [ 617.385342][T10264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.413840][T10264] Cannot create hsr debugfs directory [ 617.560937][ T52] hsr_slave_0: left promiscuous mode [ 617.586224][ T52] hsr_slave_1: left promiscuous mode [ 617.719100][ T52] veth1_macvtap: left promiscuous mode [ 617.750050][ T52] veth0_macvtap: left promiscuous mode [ 617.766745][ T52] veth1_vlan: left promiscuous mode [ 617.786577][ T52] veth0_vlan: left promiscuous mode [ 618.898373][T10448] netlink: 'syz.1.1069': attribute type 4 has an invalid length. [ 618.906646][T10448] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1069'. [ 619.129199][T10456] overlayfs: missing 'lowerdir' [ 621.191614][ T52] team0 (unregistering): Port device team_slave_1 removed [ 621.233019][ T52] team0 (unregistering): Port device team_slave_0 removed [ 621.638147][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 621.678325][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 621.706302][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 621.949411][T10472] tmpfs: Bad value for 'mpol' [ 623.487525][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 624.173134][T10484] sch_fq: defrate 113 ignored. [ 624.209279][T10488] tmpfs: Bad value for 'mpol' [ 624.434908][T10497] netlink: 'syz.4.1081': attribute type 4 has an invalid length. [ 624.473539][T10497] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1081'. [ 624.701206][T10502] tmpfs: Bad value for 'mpol' [ 624.706856][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 624.740398][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.747496][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.390020][T10264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.899570][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 625.975938][T10264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.089669][T10530] netlink: 'syz.4.1085': attribute type 4 has an invalid length. [ 626.100126][T10530] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1085'. [ 626.137552][T10264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 626.168959][T10264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.587073][T10539] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 626.627085][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 626.653493][T10264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.680970][T10539] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.1084'. [ 626.756144][T10264] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.825520][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.832680][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.896163][ T3398] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.903311][ T3398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.969285][T10264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.005019][T10264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.131589][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 627.143321][T10554] netlink: 'syz.4.1088': attribute type 4 has an invalid length. [ 627.188895][T10554] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1088'. [ 627.847541][ T5270] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 628.175754][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 628.208107][ T5270] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 628.261881][ T5270] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.317736][ T5270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 628.343496][T10264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.358390][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.408707][ T5270] usbtmc 1-1:16.0: bulk endpoints not found [ 628.566860][T10264] veth0_vlan: entered promiscuous mode [ 628.658851][T10264] veth1_vlan: entered promiscuous mode [ 628.744110][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 628.795441][T10264] veth0_macvtap: entered promiscuous mode [ 628.823629][ T5270] usb 1-1: USB disconnect, device number 13 [ 628.836766][T10595] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 628.845087][T10264] veth1_macvtap: entered promiscuous mode [ 628.856600][T10595] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1092'. [ 628.930589][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.991482][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.950543][T10264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.020690][T10264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.135780][T10264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.194444][T10264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.258808][T10264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.046223][T10264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.055926][T10264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.154247][T10264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.378177][T10619] 9pnet_fd: Insufficient options for proto=fd [ 631.435483][T10620] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 631.446806][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.476641][T10620] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1098'. [ 631.495923][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.523101][T10621] netlink: 'syz.2.1096': attribute type 4 has an invalid length. [ 631.534464][T10621] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1096'. [ 631.561471][T10619] netlink: 'syz.4.1097': attribute type 10 has an invalid length. [ 631.780336][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.851716][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 632.505782][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.860765][T10638] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 632.905482][T10642] tmpfs: Bad value for 'mpol' [ 633.347036][T10654] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 633.382734][T10654] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1103'. [ 633.568056][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 634.020584][ T5235] Bluetooth: hci3: ISO packet for unknown connection handle 3840 [ 634.180208][T10670] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 634.202106][T10670] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1106'. [ 634.794019][T10678] tmpfs: Bad value for 'mpol' [ 636.007018][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 636.890494][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 637.889053][T10698] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 639.523410][T10717] tmpfs: Bad value for 'mpol' [ 639.563548][T10712] netlink: 'syz.2.1115': attribute type 4 has an invalid length. [ 639.573077][T10706] netlink: 'syz.4.1116': attribute type 4 has an invalid length. [ 639.591898][T10706] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1116'. [ 639.622180][T10712] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1115'. [ 640.366936][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 640.893477][T10738] binder_alloc: binder_alloc_mmap_handler: 10732 20ffc000-20ffd000 already mapped failed -16 [ 641.754535][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 641.797426][T10735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.816229][T10735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.959385][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 642.110488][T10735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.130192][T10735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.821396][T10752] binder_alloc: binder_alloc_mmap_handler: 10748 20ffc000-20ffd000 already mapped failed -16 [ 644.080054][T10763] tmpfs: Bad value for 'mpol' [ 644.827816][T10774] tmpfs: Bad value for 'mpol' [ 645.619564][T10780] binder_alloc: binder_alloc_mmap_handler: 10777 20ffc000-20ffd000 already mapped failed -16 [ 647.376498][T10791] tmpfs: Bad value for 'mpol' [ 647.445127][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 647.546568][T10795] netlink: 'syz.3.1136': attribute type 4 has an invalid length. [ 647.554468][T10795] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.1136'. [ 650.416975][T10821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 650.423524][T10821] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 650.435949][T10821] vhci_hcd vhci_hcd.0: Device attached [ 651.404678][T10822] vhci_hcd: connection closed [ 651.415888][ T5275] vhci_hcd: vhci_device speed not set [ 651.415904][ T5340] vhci_hcd: stop threads [ 651.415921][ T5340] vhci_hcd: release socket [ 651.485815][ T5275] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 651.525394][T10835] tmpfs: Bad value for 'mpol' [ 651.530507][ T5340] vhci_hcd: disconnect device [ 651.671796][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 652.539452][T10842] binder_alloc: binder_alloc_mmap_handler: 10839 20ffc000-20ffd000 already mapped failed -16 [ 654.169979][T10848] binder_alloc: binder_alloc_mmap_handler: 10845 20ffc000-20ffd000 already mapped failed -16 [ 654.970586][T10856] tmpfs: Bad value for 'mpol' [ 655.160733][T10857] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 655.182363][T10857] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1149'. [ 656.528894][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 657.268423][ T5275] vhci_hcd: vhci_device speed not set [ 657.901595][T10882] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 658.614192][T10882] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1154'. [ 659.574719][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.584364][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.592746][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.600888][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.609636][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 659.617327][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.698633][T10890] syzkaller0: entered promiscuous mode [ 659.738401][T10890] syzkaller0: entered allmulticast mode [ 659.957850][T10897] netlink: 'syz.0.1159': attribute type 4 has an invalid length. [ 659.978888][T10897] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1159'. [ 662.826179][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 665.606061][ T5229] Bluetooth: hci2: command tx timeout [ 666.192179][T10917] tmpfs: Bad value for 'mpol' [ 666.254579][T10919] netlink: 'syz.4.1166': attribute type 4 has an invalid length. [ 666.314149][T10919] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1166'. [ 666.683541][T10926] netlink: 'syz.4.1168': attribute type 4 has an invalid length. [ 666.699707][T10926] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1168'. [ 667.171420][T10930] netlink: 'syz.4.1169': attribute type 4 has an invalid length. [ 667.204327][T10930] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1169'. [ 667.603970][T10938] tmpfs: Bad value for 'mpol' [ 667.621456][ T5229] Bluetooth: hci2: command tx timeout [ 667.677216][T10937] netlink: 'syz.0.1171': attribute type 4 has an invalid length. [ 667.686796][T10937] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1171'. [ 669.673828][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 669.691728][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 669.699417][T10950] Bluetooth: hci2: command tx timeout [ 669.705334][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.710866][T10951] tmpfs: Bad value for 'mpol' [ 669.714631][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.729804][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 669.737361][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.828885][T10916] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 669.830792][T10936] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 670.001899][ T5340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.057764][T10959] tmpfs: Bad value for 'mpol' [ 670.502436][ T5340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.135994][T10972] tmpfs: Bad value for 'mpol' [ 671.146989][ T5340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.240680][ T5340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.263038][T10974] netlink: 'syz.0.1179': attribute type 4 has an invalid length. [ 671.271856][T10974] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1179'. [ 671.517294][T10979] netlink: 'syz.4.1180': attribute type 4 has an invalid length. [ 671.528948][T10979] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1180'. [ 671.664821][T10983] 9pnet_fd: Insufficient options for proto=fd [ 671.700906][T10893] chnl_net:caif_netlink_parms(): no params data found [ 671.712344][ T5340] bridge_slave_1: left allmulticast mode [ 671.722081][ T5340] bridge_slave_1: left promiscuous mode [ 671.729238][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.741238][ T5340] bridge_slave_0: left allmulticast mode [ 671.755966][ T5340] bridge_slave_0: left promiscuous mode [ 671.775897][ T5229] Bluetooth: hci5: command tx timeout [ 671.781649][ T5235] Bluetooth: hci2: command tx timeout [ 671.799386][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.965356][T10989] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 672.050271][ T5340] bond0: left promiscuous mode [ 672.055145][ T5340] bond_slave_1: left promiscuous mode [ 672.067674][T10989] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.1182'. [ 672.777752][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 672.913916][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 673.696679][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 673.945038][ T5235] Bluetooth: hci5: command tx timeout [ 674.677743][T11015] netlink: 'syz.2.1189': attribute type 4 has an invalid length. [ 674.685825][T11015] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1189'. [ 674.804393][ T5340] team0: Port device vlan2 removed [ 674.850799][ T5340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.861454][ T5340] bond0 (unregistering): Released all slaves [ 674.945447][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1188'. [ 674.982733][T10948] chnl_net:caif_netlink_parms(): no params data found [ 675.212571][T11030] netlink: 'syz.2.1190': attribute type 4 has an invalid length. [ 675.235400][T11030] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1190'. [ 675.592486][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 676.015778][ T5229] Bluetooth: hci5: command tx timeout [ 676.498405][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.510313][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.520036][T10893] bridge_slave_0: entered allmulticast mode [ 676.531670][T10893] bridge_slave_0: entered promiscuous mode [ 676.542694][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.553723][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.657470][T10893] bridge_slave_1: entered allmulticast mode [ 676.672666][T10893] bridge_slave_1: entered promiscuous mode [ 677.535035][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.555232][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.562533][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.571536][T10948] bridge_slave_0: entered allmulticast mode [ 677.579123][T10948] bridge_slave_0: entered promiscuous mode [ 677.593191][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.600443][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.611430][T10948] bridge_slave_1: entered allmulticast mode [ 677.618933][T10948] bridge_slave_1: entered promiscuous mode [ 678.015934][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 678.096105][ T5235] Bluetooth: hci5: command tx timeout [ 678.426437][T11059] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 678.440632][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.504420][ T5340] hsr_slave_0: left promiscuous mode [ 678.535851][ T5340] hsr_slave_1: left promiscuous mode [ 678.665265][ T5340] veth1_macvtap: left promiscuous mode [ 678.670939][ T5340] veth0_macvtap: left promiscuous mode [ 678.676734][ T5340] veth1_vlan: left promiscuous mode [ 678.682530][ T5340] veth0_vlan: left promiscuous mode [ 679.588503][T11068] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 679.596609][T11068] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1196'. [ 680.404562][T11081] netlink: 'syz.4.1200': attribute type 4 has an invalid length. [ 680.412648][T11081] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1200'. [ 681.598497][T11091] 9pnet_fd: Insufficient options for proto=fd [ 681.707441][T11093] tmpfs: Bad value for 'mpol' [ 681.721396][ T5340] team0 (unregistering): Port device team_slave_1 removed [ 681.769177][ T5340] team0 (unregistering): Port device team_slave_0 removed [ 682.229077][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 682.247147][T10893] team0: Port device team_slave_0 added [ 682.262054][T10893] team0: Port device team_slave_1 added [ 682.334627][T11092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1203'. [ 682.397457][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.739490][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.025234][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.191363][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.204363][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.226651][T11106] netlink: 'syz.4.1206': attribute type 4 has an invalid length. [ 683.240109][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.268537][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.306150][T11106] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1206'. [ 683.449767][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.660358][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 683.754837][T10948] team0: Port device team_slave_0 added [ 683.819135][T10948] team0: Port device team_slave_1 added [ 683.924395][T10893] hsr_slave_0: entered promiscuous mode [ 683.978609][T10893] hsr_slave_1: entered promiscuous mode [ 684.001009][T10893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.012483][T10893] Cannot create hsr debugfs directory [ 684.100127][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.119874][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.149591][T11131] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 684.156555][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.163954][T11131] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1209'. [ 684.216603][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.224205][ T5270] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 684.232408][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.270067][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.456003][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 684.478071][ T5270] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 684.590770][ T5270] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.981110][ T5270] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.991398][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.007432][ T5270] usbtmc 1-1:16.0: bulk endpoints not found [ 685.134299][T10948] hsr_slave_0: entered promiscuous mode [ 685.151072][T11136] netlink: 'syz.2.1211': attribute type 4 has an invalid length. [ 685.160932][T10948] hsr_slave_1: entered promiscuous mode [ 685.230072][T11136] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1211'. [ 685.244930][T10948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.396082][T10948] Cannot create hsr debugfs directory [ 685.722983][ T5271] usb 1-1: USB disconnect, device number 14 [ 685.880136][ T5340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.224464][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.231610][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.742508][ T5340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.240693][ T5340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.307254][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 689.542861][ T5340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.204722][T11186] netlink: 'syz.4.1220': attribute type 4 has an invalid length. [ 690.216802][T11186] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1220'. [ 690.560055][ T5340] bridge_slave_1: left allmulticast mode [ 690.619263][ T5340] bridge_slave_1: left promiscuous mode [ 690.663291][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.703780][ T5340] bridge_slave_0: left allmulticast mode [ 690.710627][ T5340] bridge_slave_0: left promiscuous mode [ 690.716575][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.252172][T11218] netlink: 'syz.2.1227': attribute type 4 has an invalid length. [ 693.292223][T11218] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1227'. [ 693.990596][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'. [ 694.003132][ T5340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.029460][ T5340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.047111][ T5340] bond0 (unregistering): Released all slaves [ 695.233354][T10893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 695.510566][T10893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 695.661770][T10893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 695.881392][T10893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.395837][ T5340] hsr_slave_0: left promiscuous mode [ 696.430242][ T5340] hsr_slave_1: left promiscuous mode [ 696.494893][ T5340] veth1_macvtap: left promiscuous mode [ 696.515951][ T5340] veth0_macvtap: left promiscuous mode [ 696.521655][ T5340] veth1_vlan: left promiscuous mode [ 696.536465][ T5340] veth0_vlan: left promiscuous mode [ 697.867931][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 698.129739][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 698.185055][ T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 698.591082][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.644708][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 698.719103][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.758089][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 699.413795][T11283] netlink: 'syz.4.1240': attribute type 4 has an invalid length. [ 699.445836][T11283] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1240'. [ 700.082720][ T5340] team0 (unregistering): Port device team_slave_1 removed [ 700.806390][ T5340] team0 (unregistering): Port device team_slave_0 removed [ 702.379093][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 702.555235][ T5235] Bluetooth: hci3: ISO packet for unknown connection handle 2816 [ 702.631941][T11309] netlink: 'syz.4.1247': attribute type 4 has an invalid length. [ 702.643091][T11309] netlink: 126052 bytes leftover after parsing attributes in process `syz.4.1247'. [ 703.403980][ T5275] usb 1-1: USB disconnect, device number 15 [ 704.640714][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1250'. [ 704.690156][T10948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 704.901716][T10948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 704.993997][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 705.151105][T10948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.504681][T10948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 705.637151][T10893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.800211][T10893] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.844514][T11348] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 705.854635][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.865645][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.953507][T11348] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.1253'. [ 706.561900][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.569335][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.102349][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.184635][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.789446][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.796638][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.927507][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.934653][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.182515][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.811427][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.840756][T10893] veth0_vlan: entered promiscuous mode [ 711.863658][T10893] veth1_vlan: entered promiscuous mode [ 712.013727][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'. [ 713.022837][T10948] veth0_vlan: entered promiscuous mode [ 713.093473][T10893] veth0_macvtap: entered promiscuous mode [ 713.579303][T10893] veth1_macvtap: entered promiscuous mode [ 713.653984][T11434] tmpfs: Bad value for 'mpol' [ 713.674180][T10948] veth1_vlan: entered promiscuous mode [ 713.710469][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.737674][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.754392][T10893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.772436][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.797073][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.818443][T10893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.850013][T10893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.870342][T10893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.915764][T10893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.931514][T10893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.761501][T10948] veth0_macvtap: entered promiscuous mode [ 715.785333][T10948] veth1_macvtap: entered promiscuous mode [ 716.191027][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.975869][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.005866][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.043379][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.095154][T10948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.167662][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.293834][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.335810][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.379247][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.414794][T10948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.628371][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.833330][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.991290][T11483] tmpfs: Bad value for 'mpol' [ 718.024636][T10948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.074892][T10948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.112676][T10948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.122044][T10948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.430693][T11493] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 718.446042][T11493] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1275'. [ 718.483817][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.521366][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.635853][ T1246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.677235][ T1246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.567737][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.578659][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.587275][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.758754][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.276999][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 721.319701][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 721.331621][ T1246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.523199][ T1246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.047825][T11526] netlink: 'syz.0.1278': attribute type 4 has an invalid length. [ 722.068164][T11526] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1278'. [ 722.172171][ T1246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.059941][ T1246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.537259][ T5235] Bluetooth: hci2: command tx timeout [ 724.121082][T11559] tmpfs: Bad value for 'mpol' [ 725.120595][T11569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1286'. [ 725.307103][ T1246] bridge_slave_1: left allmulticast mode [ 725.326531][ T1246] bridge_slave_1: left promiscuous mode [ 725.332234][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.366421][ T1246] bridge_slave_0: left allmulticast mode [ 725.383415][ T1246] bridge_slave_0: left promiscuous mode [ 725.392841][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.412700][T11581] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 725.426610][T11581] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1289'. [ 725.616653][ T5235] Bluetooth: hci2: command tx timeout [ 725.706048][T11589] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 725.751951][T11589] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.1290'. [ 726.409667][T11595] tmpfs: Bad value for 'mpol' [ 726.432142][ T1246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.454039][ T1246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.484741][ T1246] bond0 (unregistering): Released all slaves [ 727.434919][T11511] chnl_net:caif_netlink_parms(): no params data found [ 727.694576][T11608] tmpfs: Bad value for 'mpol' [ 727.707474][ T5235] Bluetooth: hci2: command tx timeout [ 729.776317][ T5235] Bluetooth: hci2: command tx timeout [ 730.073869][ T1246] hsr_slave_0: left promiscuous mode [ 730.155066][ T1246] hsr_slave_1: left promiscuous mode [ 731.084020][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.127348][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.162914][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.210402][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.658011][ T1246] veth1_macvtap: left promiscuous mode [ 731.676577][ T1246] veth0_macvtap: left promiscuous mode [ 731.725899][ T1246] veth1_vlan: left promiscuous mode [ 731.738134][ T1246] veth0_vlan: left promiscuous mode [ 734.314382][T11683] netlink: 'syz.3.1310': attribute type 4 has an invalid length. [ 734.386098][T11683] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.1310'. [ 736.048940][ T5271] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 736.338153][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 736.608054][ T5271] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 736.783612][ T5271] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.802273][ T5271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.839185][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.526578][ T5271] usbtmc 1-1:16.0: bulk endpoints not found [ 737.800781][ T1246] team0 (unregistering): Port device team_slave_1 removed [ 738.017893][ T1246] team0 (unregistering): Port device team_slave_0 removed [ 738.640410][T11721] tmpfs: Bad value for 'mpol' [ 738.864283][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1312'. [ 738.904502][ T5270] usb 1-1: USB disconnect, device number 16 [ 739.058131][T11511] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.065515][T11511] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.073191][T11511] bridge_slave_0: entered allmulticast mode [ 739.087636][T11511] bridge_slave_0: entered promiscuous mode [ 739.212698][T11733] tmpfs: Bad value for 'mpol' [ 739.926376][T11511] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.960896][T11511] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.006383][T11511] bridge_slave_1: entered allmulticast mode [ 740.037400][T11511] bridge_slave_1: entered promiscuous mode [ 740.163834][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.202349][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.378152][T11742] tmpfs: Bad value for 'mpol' [ 740.729595][T11511] team0: Port device team_slave_0 added [ 740.750216][T11511] team0: Port device team_slave_1 added [ 741.009994][T11737] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 741.011070][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1320'. [ 741.167848][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.174836][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.693259][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.024947][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.046622][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.107378][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.187278][T11763] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 742.195027][T11763] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1325'. [ 742.243245][T11763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1325'. [ 742.260379][T11511] hsr_slave_0: entered promiscuous mode [ 742.299476][T11511] hsr_slave_1: entered promiscuous mode [ 742.330058][T11511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.340420][T11511] Cannot create hsr debugfs directory [ 742.566289][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 742.592091][ T5271] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 742.708172][T11788] tmpfs: Bad value for 'mpol' [ 742.775787][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 742.784143][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 742.794542][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 742.819819][ T5271] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 742.843892][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.866209][ T5271] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.885369][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.900283][ T5271] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.917062][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.931676][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.980716][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 742.998996][ T5271] usbtmc 4-1:16.0: bulk endpoints not found [ 743.932419][ T5275] usb 3-1: USB disconnect, device number 11 [ 743.934257][ T5271] usb 4-1: USB disconnect, device number 10 [ 744.090959][T11799] tmpfs: Bad value for 'mpol' [ 745.144174][T11831] tmpfs: Bad value for 'mpol' [ 745.201134][T11833] netlink: 'syz.4.1334': attribute type 4 has an invalid length. [ 745.216257][T11833] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1334'. [ 745.353722][T11511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 745.396535][T11511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 745.426076][T11511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 745.459931][T11511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 745.465831][ T5275] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 745.955874][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 745.966042][ T5275] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 745.984492][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.006717][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.010580][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.022614][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.053462][ T5275] usbtmc 4-1:16.0: bulk endpoints not found [ 746.080575][T11511] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.721031][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.728397][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.906136][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.913455][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.700583][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.722995][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.776129][ T5271] usb 4-1: USB disconnect, device number 11 [ 748.887021][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 750.633780][T11511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.825529][T11511] veth0_vlan: entered promiscuous mode [ 750.864389][T11511] veth1_vlan: entered promiscuous mode [ 751.048642][T11511] veth0_macvtap: entered promiscuous mode [ 751.074047][T11511] veth1_macvtap: entered promiscuous mode [ 751.227612][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1347'. [ 752.273270][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.299215][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.310994][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.357702][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.407333][T11511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.445116][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.479219][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.505793][T11511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.540790][T11511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.644954][T11511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.610551][T11511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.656061][T11511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.664898][T11511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.674318][T11511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.990019][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.447576][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.729378][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.780439][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.686193][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 764.200134][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.210986][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.219515][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.254499][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.262416][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 764.269858][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.714320][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.491606][T12032] netlink: 'syz.1.1371': attribute type 4 has an invalid length. [ 765.573791][T12032] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1371'. [ 766.165179][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.335870][ T5229] Bluetooth: hci3: command tx timeout [ 766.349984][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.215122][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 767.636872][T12061] FAULT_INJECTION: forcing a failure. [ 767.636872][T12061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 767.702428][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.4.1381 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 767.713249][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 767.723435][T12061] Call Trace: [ 767.726710][T12061] [ 767.729658][T12061] dump_stack_lvl+0x241/0x360 [ 767.734332][T12061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.739518][T12061] ? __pfx__printk+0x10/0x10 [ 767.744098][T12061] ? snprintf+0xda/0x120 [ 767.748326][T12061] should_fail_ex+0x3b0/0x4e0 [ 767.753031][T12061] _copy_to_user+0x2f/0xb0 [ 767.757482][T12061] simple_read_from_buffer+0xca/0x150 [ 767.762899][T12061] proc_fail_nth_read+0x1ec/0x260 [ 767.768050][T12061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.773634][T12061] ? rw_verify_area+0x520/0x6b0 [ 767.778513][T12061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.784086][T12061] vfs_read+0x204/0xbc0 [ 767.788272][T12061] ? __pfx_lock_release+0x10/0x10 [ 767.793336][T12061] ? __pfx_vfs_read+0x10/0x10 [ 767.798046][T12061] ? __fget_files+0x29/0x470 [ 767.802662][T12061] ? __fget_files+0x3f6/0x470 [ 767.807454][T12061] ksys_read+0x1a0/0x2c0 [ 767.811792][T12061] ? __pfx_ksys_read+0x10/0x10 [ 767.816565][T12061] ? do_syscall_64+0x100/0x230 [ 767.821338][T12061] ? do_syscall_64+0xb6/0x230 [ 767.826020][T12061] do_syscall_64+0xf3/0x230 [ 767.830534][T12061] ? clear_bhb_loop+0x35/0x90 [ 767.835208][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.841116][T12061] RIP: 0033:0x7f4b73f7c93c [ 767.845528][T12061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 767.865129][T12061] RSP: 002b:00007f4b74d4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.873546][T12061] RAX: ffffffffffffffda RBX: 00007f4b74135f80 RCX: 00007f4b73f7c93c [ 767.881509][T12061] RDX: 000000000000000f RSI: 00007f4b74d4f0a0 RDI: 0000000000000003 [ 767.889476][T12061] RBP: 00007f4b74d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 767.897437][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.905397][T12061] R13: 0000000000000001 R14: 00007f4b74135f80 R15: 00007ffd83f1fb78 [ 767.913371][T12061] [ 768.553920][T12075] binder_alloc: 12062: binder_alloc_buf, no vma [ 768.588823][ T5229] Bluetooth: hci3: command tx timeout [ 768.953822][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.969085][T12080] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 769.009402][T12074] tipc: Started in network mode [ 769.024884][T12074] tipc: Node identity 663a20300a74797, cluster identity 4711 [ 769.054132][T12074] tipc: Enabling of bearer rejected, failed to enable media [ 769.130550][T12017] chnl_net:caif_netlink_parms(): no params data found [ 769.389990][T12095] netlink: 'syz.3.1392': attribute type 8 has an invalid length. [ 770.472651][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.510758][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.546102][T12017] bridge_slave_0: entered allmulticast mode [ 770.654336][T12017] bridge_slave_0: entered promiscuous mode [ 770.660574][ T5229] Bluetooth: hci3: command tx timeout [ 770.740362][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.898334][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.910810][T12017] bridge_slave_1: entered allmulticast mode [ 770.962576][T12017] bridge_slave_1: entered promiscuous mode [ 771.237914][ T12] bridge_slave_1: left allmulticast mode [ 771.243612][ T12] bridge_slave_1: left promiscuous mode [ 771.280811][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.339146][ T12] bridge_slave_0: left allmulticast mode [ 771.357661][ T12] bridge_slave_0: left promiscuous mode [ 771.408043][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.575190][T12123] FAULT_INJECTION: forcing a failure. [ 771.575190][T12123] name failslab, interval 1, probability 0, space 0, times 1 [ 771.614375][T12123] CPU: 1 UID: 0 PID: 12123 Comm: syz.0.1401 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 771.625198][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 771.635278][T12123] Call Trace: [ 771.638584][T12123] [ 771.641625][T12123] dump_stack_lvl+0x241/0x360 [ 771.646327][T12123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.651542][T12123] ? __pfx__printk+0x10/0x10 [ 771.656147][T12123] ? __kmalloc_node_noprof+0xb7/0x440 [ 771.661533][T12123] ? __pfx___might_resched+0x10/0x10 [ 771.666837][T12123] should_fail_ex+0x3b0/0x4e0 [ 771.671513][T12123] should_failslab+0xac/0x100 [ 771.676188][T12123] __kmalloc_node_noprof+0xdf/0x440 [ 771.681380][T12123] ? __kvmalloc_node_noprof+0x72/0x190 [ 771.686837][T12123] __kvmalloc_node_noprof+0x72/0x190 [ 771.692112][T12123] file_tty_write+0x2c7/0x9c0 [ 771.696789][T12123] vfs_write+0xa72/0xc90 [ 771.701029][T12123] ? __pfx_tty_write+0x10/0x10 [ 771.705794][T12123] ? __pfx_vfs_write+0x10/0x10 [ 771.710576][T12123] ksys_write+0x1a0/0x2c0 [ 771.714905][T12123] ? __pfx_ksys_write+0x10/0x10 [ 771.719754][T12123] ? do_syscall_64+0x100/0x230 [ 771.724513][T12123] ? do_syscall_64+0xb6/0x230 [ 771.729183][T12123] do_syscall_64+0xf3/0x230 [ 771.733682][T12123] ? clear_bhb_loop+0x35/0x90 [ 771.738358][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.744242][T12123] RIP: 0033:0x7f4b2757def9 [ 771.748649][T12123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.768430][T12123] RSP: 002b:00007f4b2845e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.776847][T12123] RAX: ffffffffffffffda RBX: 00007f4b27735f80 RCX: 00007f4b2757def9 [ 771.784809][T12123] RDX: 0000000000001006 RSI: 0000000020002080 RDI: 0000000000000004 [ 771.792775][T12123] RBP: 00007f4b2845e090 R08: 0000000000000000 R09: 0000000000000000 [ 771.800735][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.808699][T12123] R13: 0000000000000000 R14: 00007f4b27735f80 R15: 00007ffeff6e4738 [ 771.816679][T12123] [ 771.837047][ T940] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 771.862884][ T940] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 771.907520][ T940] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 772.737624][ T5229] Bluetooth: hci3: command tx timeout [ 773.154581][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.172922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.183595][ T12] bond0 (unregistering): Released all slaves [ 773.212788][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.250347][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.400010][ T940] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 773.438840][T12017] team0: Port device team_slave_0 added [ 773.450769][T12017] team0: Port device team_slave_1 added [ 774.429194][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.437356][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 774.448519][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.506322][ T940] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.526980][ T940] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.541738][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.565886][ T940] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 774.601611][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.610091][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.622193][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.660336][ T940] hub 1-1:4.0: USB hub found [ 774.665326][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.759043][ T12] hsr_slave_0: left promiscuous mode [ 774.790745][ T12] hsr_slave_1: left promiscuous mode [ 774.815548][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.833812][T12169] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 774.853276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.853512][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 774.873816][ T940] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 774.893475][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.921222][ T940] usb 1-1: USB disconnect, device number 17 [ 774.932052][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.994207][ T12] veth1_macvtap: left promiscuous mode [ 775.016531][ T12] veth0_macvtap: left promiscuous mode [ 775.030093][ T12] veth1_vlan: left promiscuous mode [ 775.035505][ T12] veth0_vlan: left promiscuous mode [ 775.081870][T12178] netlink: 'syz.1.1414': attribute type 4 has an invalid length. [ 775.095892][T12178] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1414'. [ 776.422592][ T12] team0 (unregistering): Port device team_slave_1 removed [ 776.497545][ T940] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 776.561645][ T12] team0 (unregistering): Port device team_slave_0 removed [ 776.706225][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 776.723123][ T940] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 776.755339][ T940] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.794375][ T940] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 776.806102][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.858504][ T940] usbtmc 2-1:16.0: bulk endpoints not found [ 776.861184][T12201] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 776.892934][T12201] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.1419'. [ 777.561092][T12205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.652401][ T5270] usb 2-1: USB disconnect, device number 7 [ 777.794250][T12017] hsr_slave_0: entered promiscuous mode [ 777.814058][T12017] hsr_slave_1: entered promiscuous mode [ 777.973593][T12017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.986341][T12017] Cannot create hsr debugfs directory [ 778.069403][T12214] Illegal XDP return value 4294967274 on prog (id 545) dev N/A, expect packet loss! [ 778.386170][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 778.698866][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 778.737411][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.756000][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.779189][ T8] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 778.805299][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.851006][ T8] usb 4-1: config 0 descriptor?? [ 779.106803][T12234] fuse: Unknown parameter ' ·|¼¤„' [ 779.159168][T12017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 779.185211][T12017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 779.227789][T12017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 779.250948][T12017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 779.309219][ T8] glorious 0003:258A:0033.0003: unknown main item tag 0x0 [ 779.341943][T12248] netlink: 'syz.4.1427': attribute type 4 has an invalid length. [ 779.345776][ T8] glorious 0003:258A:0033.0003: unknown main item tag 0x6 [ 779.366484][T12248] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1427'. [ 779.434458][ T8] glorious 0003:258A:0033.0003: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 779.512268][T12017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.571975][T12017] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.600789][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.607953][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.650493][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.657646][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.671428][T12255] FAULT_INJECTION: forcing a failure. [ 779.671428][T12255] name failslab, interval 1, probability 0, space 0, times 0 [ 779.696260][ T5302] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 779.731919][T12255] CPU: 0 UID: 0 PID: 12255 Comm: syz.1.1429 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 779.742737][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 779.752815][T12255] Call Trace: [ 779.756112][T12255] [ 779.759141][T12255] dump_stack_lvl+0x241/0x360 [ 779.763835][T12255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.769035][T12255] ? __pfx__printk+0x10/0x10 [ 779.773623][T12255] ? fs_reclaim_acquire+0x93/0x140 [ 779.778729][T12255] ? __pfx___might_resched+0x10/0x10 [ 779.784019][T12255] should_fail_ex+0x3b0/0x4e0 [ 779.788697][T12255] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 779.794414][T12255] should_failslab+0xac/0x100 [ 779.799091][T12255] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 779.804808][T12255] __kmalloc_noprof+0xd8/0x400 [ 779.809571][T12255] ? kfree+0x4e/0x360 [ 779.813551][T12255] tomoyo_realpath_from_path+0xcf/0x5e0 [ 779.819102][T12255] tomoyo_path_number_perm+0x23a/0x880 [ 779.824556][T12255] ? tomoyo_path_number_perm+0x208/0x880 [ 779.830181][T12255] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.836184][T12255] ? __fget_files+0x29/0x470 [ 779.840769][T12255] ? __fget_files+0x3f6/0x470 [ 779.845435][T12255] ? __fget_files+0x29/0x470 [ 779.850023][T12255] security_file_ioctl+0x75/0xb0 [ 779.854962][T12255] __se_sys_ioctl+0x47/0x170 [ 779.859549][T12255] do_syscall_64+0xf3/0x230 [ 779.864045][T12255] ? clear_bhb_loop+0x35/0x90 [ 779.868718][T12255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.874606][T12255] RIP: 0033:0x7f34daf7def9 [ 779.879016][T12255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.898615][T12255] RSP: 002b:00007f34dbd3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.907028][T12255] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7def9 [ 779.915083][T12255] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000003 [ 779.923047][T12255] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 779.931102][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.939065][T12255] R13: 0000000000000000 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 779.947063][T12255] [ 779.957225][T12255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.961023][T12017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 779.974830][T12017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 780.126208][ T5302] usb 1-1: device descriptor read/64, error -71 [ 780.232702][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.319032][ T8731] usb 4-1: USB disconnect, device number 12 [ 780.396652][ T5302] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 780.429397][T12017] veth0_vlan: entered promiscuous mode [ 780.435025][T12269] sp0: Synchronizing with TNC [ 780.443567][T12273] tmpfs: Bad value for 'mpol' [ 780.488716][T12017] veth1_vlan: entered promiscuous mode [ 780.578095][ T5302] usb 1-1: device descriptor read/64, error -71 [ 780.625295][T12017] veth0_macvtap: entered promiscuous mode [ 780.626624][T12280] tmpfs: Bad value for 'mpol' [ 780.670284][T12017] veth1_macvtap: entered promiscuous mode [ 780.702193][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.712754][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.719808][ T5302] usb usb1-port1: attempt power cycle [ 780.731185][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.749042][T12283] tmpfs: Bad value for 'mpol' [ 780.777790][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.807504][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.856024][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.871743][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.882568][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.901344][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.912964][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.952289][T12017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.964502][T12017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.994355][T12017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.217822][T12017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.758141][ T5302] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 781.819389][ T5302] usb 1-1: device descriptor read/8, error -71 [ 781.888275][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.907486][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.976864][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.026732][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.105787][ T5302] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 782.119567][T12309] FAULT_INJECTION: forcing a failure. [ 782.119567][T12309] name failslab, interval 1, probability 0, space 0, times 0 [ 782.126862][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 782.149524][T12309] CPU: 1 UID: 0 PID: 12309 Comm: syz.3.1439 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 782.158701][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 782.160339][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 782.179436][T12309] Call Trace: [ 782.182701][T12309] [ 782.185614][T12309] dump_stack_lvl+0x241/0x360 [ 782.190311][T12309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.195496][T12309] ? __pfx__printk+0x10/0x10 [ 782.200071][T12309] ? fs_reclaim_acquire+0x93/0x140 [ 782.205165][T12309] ? __pfx___might_resched+0x10/0x10 [ 782.210532][T12309] should_fail_ex+0x3b0/0x4e0 [ 782.215197][T12309] ? tomoyo_encode+0x26f/0x540 [ 782.219944][T12309] should_failslab+0xac/0x100 [ 782.224605][T12309] ? tomoyo_encode+0x26f/0x540 [ 782.229443][T12309] __kmalloc_noprof+0xd8/0x400 [ 782.234196][T12309] tomoyo_encode+0x26f/0x540 [ 782.238774][T12309] tomoyo_realpath_from_path+0x59e/0x5e0 [ 782.244396][T12309] tomoyo_path_number_perm+0x23a/0x880 [ 782.249842][T12309] ? tomoyo_path_number_perm+0x208/0x880 [ 782.255487][T12309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 782.261479][T12309] ? __fget_files+0x29/0x470 [ 782.266056][T12309] ? __fget_files+0x3f6/0x470 [ 782.270714][T12309] ? __fget_files+0x29/0x470 [ 782.275287][T12309] security_file_ioctl+0x75/0xb0 [ 782.280211][T12309] __se_sys_ioctl+0x47/0x170 [ 782.284789][T12309] do_syscall_64+0xf3/0x230 [ 782.289279][T12309] ? clear_bhb_loop+0x35/0x90 [ 782.293946][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.299825][T12309] RIP: 0033:0x7f516f17def9 [ 782.304221][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.323829][T12309] RSP: 002b:00007f5170054038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.332226][T12309] RAX: ffffffffffffffda RBX: 00007f516f335f80 RCX: 00007f516f17def9 [ 782.340181][T12309] RDX: 0000000020000040 RSI: 0000000040485404 RDI: 0000000000000003 [ 782.348135][T12309] RBP: 00007f5170054090 R08: 0000000000000000 R09: 0000000000000000 [ 782.356201][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.364163][T12309] R13: 0000000000000000 R14: 00007f516f335f80 R15: 00007ffdb7f16798 [ 782.372140][T12309] [ 782.379325][T12309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.390313][ T5302] usb 1-1: device descriptor read/8, error -71 [ 782.515952][ T5302] usb usb1-port1: unable to enumerate USB device [ 782.587087][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1440'. [ 782.670125][T12320] netlink: 'syz.2.1361': attribute type 4 has an invalid length. [ 782.679604][T12320] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1361'. [ 782.694822][T12319] netlink: 'syz.0.1441': attribute type 8 has an invalid length. [ 782.989969][T12323] netlink: 'syz.3.1442': attribute type 6 has an invalid length. [ 783.091744][T12330] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 783.098292][T12330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 783.157940][T12330] vhci_hcd vhci_hcd.0: Device attached [ 783.230966][T12336] FAULT_INJECTION: forcing a failure. [ 783.230966][T12336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.244859][T12336] CPU: 0 UID: 0 PID: 12336 Comm: syz.1.1444 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 783.255657][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 783.265737][T12336] Call Trace: [ 783.269039][T12336] [ 783.271989][T12336] dump_stack_lvl+0x241/0x360 [ 783.276695][T12336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.281919][T12336] ? __pfx__printk+0x10/0x10 [ 783.286543][T12336] ? mark_lock+0x9a/0x350 [ 783.290906][T12336] should_fail_ex+0x3b0/0x4e0 [ 783.295618][T12336] strncpy_from_user+0x36/0x2e0 [ 783.300509][T12336] strncpy_from_user_nofault+0x71/0x140 [ 783.306092][T12336] bpf_probe_read_user_str+0x2a/0x70 [ 783.311410][T12336] bpf_prog_4e6a4fc51b8ce294+0x40/0x42 [ 783.316893][T12336] __bpf_prog_test_run_raw_tp+0x204/0x440 [ 783.322614][T12336] ? __bpf_prog_test_run_raw_tp+0xd6/0x440 [ 783.328439][T12336] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 783.334698][T12336] ? __pfx_lock_release+0x10/0x10 [ 783.335822][T11201] vhci_hcd: vhci_device speed not set [ 783.339816][T12336] bpf_prog_test_run_raw_tp+0x47b/0x6a0 [ 783.350711][T12336] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 783.356768][T12336] ? __fget_files+0x3f6/0x470 [ 783.361436][T12336] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 783.367489][T12336] bpf_prog_test_run+0x33a/0x3b0 [ 783.372454][T12336] __sys_bpf+0x48d/0x810 [ 783.376687][T12336] ? __pfx___sys_bpf+0x10/0x10 [ 783.381459][T12336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 783.387447][T12336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 783.393777][T12336] ? do_syscall_64+0x100/0x230 [ 783.398533][T12336] __x64_sys_bpf+0x7c/0x90 [ 783.402935][T12336] do_syscall_64+0xf3/0x230 [ 783.407424][T12336] ? clear_bhb_loop+0x35/0x90 [ 783.412089][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.417974][T12336] RIP: 0033:0x7f34daf7def9 [ 783.422369][T12336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.442048][T12336] RSP: 002b:00007f34dbd3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.450447][T12336] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7def9 [ 783.458437][T12336] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 783.466396][T12336] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 783.474370][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.482325][T12336] R13: 0000000000000000 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 783.490301][T12336] [ 783.607896][T11201] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 783.714618][T12344] FAULT_INJECTION: forcing a failure. [ 783.714618][T12344] name failslab, interval 1, probability 0, space 0, times 0 [ 783.749495][T12344] CPU: 1 UID: 0 PID: 12344 Comm: syz.1.1445 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 783.760318][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 783.770393][T12344] Call Trace: [ 783.773689][T12344] [ 783.776640][T12344] dump_stack_lvl+0x241/0x360 [ 783.781349][T12344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.786578][T12344] ? __pfx__printk+0x10/0x10 [ 783.791283][T12344] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 783.797293][T12344] ? __pfx___might_resched+0x10/0x10 [ 783.802613][T12344] should_fail_ex+0x3b0/0x4e0 [ 783.807371][T12344] should_failslab+0xac/0x100 [ 783.812072][T12344] ? __alloc_skb+0x1c3/0x440 [ 783.817028][T12344] kmem_cache_alloc_node_noprof+0x71/0x320 [ 783.822949][T12344] __alloc_skb+0x1c3/0x440 [ 783.827393][T12344] ? __pfx___alloc_skb+0x10/0x10 [ 783.832356][T12344] ? netlink_autobind+0xd6/0x2f0 [ 783.837311][T12344] ? netlink_autobind+0x2b0/0x2f0 [ 783.842361][T12344] netlink_sendmsg+0x638/0xcb0 [ 783.847162][T12344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.852558][T12344] ? __import_iovec+0x536/0x820 [ 783.857617][T12344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 783.862929][T12344] ? security_socket_sendmsg+0x87/0xb0 [ 783.868417][T12344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.873735][T12344] __sock_sendmsg+0x221/0x270 [ 783.878463][T12344] ____sys_sendmsg+0x525/0x7d0 [ 783.883258][T12344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.888589][T12344] __sys_sendmsg+0x2b0/0x3a0 [ 783.893212][T12344] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.898354][T12344] ? vfs_write+0x7c4/0xc90 [ 783.902839][T12344] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 783.909194][T12344] ? do_syscall_64+0x100/0x230 [ 783.914161][T12344] ? do_syscall_64+0xb6/0x230 [ 783.919044][T12344] do_syscall_64+0xf3/0x230 [ 783.923579][T12344] ? clear_bhb_loop+0x35/0x90 [ 783.928286][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.934204][T12344] RIP: 0033:0x7f34daf7def9 [ 783.938641][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.958272][T12344] RSP: 002b:00007f34dbd3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.965586][T12331] vhci_hcd: connection reset by peer [ 783.966698][T12344] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7def9 [ 783.966718][T12344] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 783.966732][T12344] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 783.966744][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.966756][T12344] R13: 0000000000000000 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 783.981210][ T12] vhci_hcd: stop threads [ 783.987958][T12344] [ 784.098068][T12353] FAULT_INJECTION: forcing a failure. [ 784.098068][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.119374][ T12] vhci_hcd: release socket [ 784.162197][ T12] vhci_hcd: disconnect device [ 784.177737][T12353] CPU: 0 UID: 0 PID: 12353 Comm: syz.3.1447 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 784.188533][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 784.198580][T12353] Call Trace: [ 784.201863][T12353] [ 784.204798][T12353] dump_stack_lvl+0x241/0x360 [ 784.209470][T12353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.214655][T12353] ? __pfx__printk+0x10/0x10 [ 784.219248][T12353] ? snprintf+0xda/0x120 [ 784.223569][T12353] should_fail_ex+0x3b0/0x4e0 [ 784.228335][T12353] _copy_to_user+0x2f/0xb0 [ 784.232749][T12353] simple_read_from_buffer+0xca/0x150 [ 784.238119][T12353] proc_fail_nth_read+0x1ec/0x260 [ 784.243139][T12353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.248687][T12353] ? rw_verify_area+0x520/0x6b0 [ 784.253553][T12353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.259096][T12353] vfs_read+0x204/0xbc0 [ 784.263255][T12353] ? __pfx_lock_release+0x10/0x10 [ 784.268337][T12353] ? __pfx_vfs_read+0x10/0x10 [ 784.273020][T12353] ? __fget_files+0x29/0x470 [ 784.277611][T12353] ? __fget_files+0x3f6/0x470 [ 784.282294][T12353] ksys_read+0x1a0/0x2c0 [ 784.286548][T12353] ? __pfx_ksys_read+0x10/0x10 [ 784.291333][T12353] ? do_syscall_64+0x100/0x230 [ 784.296105][T12353] ? do_syscall_64+0xb6/0x230 [ 784.300954][T12353] do_syscall_64+0xf3/0x230 [ 784.305474][T12353] ? clear_bhb_loop+0x35/0x90 [ 784.310155][T12353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.316053][T12353] RIP: 0033:0x7f516f17c93c [ 784.320474][T12353] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 784.340162][T12353] RSP: 002b:00007f5170054030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 784.348566][T12353] RAX: ffffffffffffffda RBX: 00007f516f335f80 RCX: 00007f516f17c93c [ 784.356530][T12353] RDX: 000000000000000f RSI: 00007f51700540a0 RDI: 0000000000000003 [ 784.364486][T12353] RBP: 00007f5170054090 R08: 0000000000000000 R09: 0000000000000000 [ 784.372460][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.380436][T12353] R13: 0000000000000000 R14: 00007f516f335f80 R15: 00007ffdb7f16798 [ 784.388407][T12353] [ 784.584896][T12360] FAULT_INJECTION: forcing a failure. [ 784.584896][T12360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.599947][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.3.1449 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 784.610793][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 784.620868][T12360] Call Trace: [ 784.624142][T12360] [ 784.627066][T12360] dump_stack_lvl+0x241/0x360 [ 784.631739][T12360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.636955][T12360] ? __pfx__printk+0x10/0x10 [ 784.641539][T12360] should_fail_ex+0x3b0/0x4e0 [ 784.646208][T12360] strncpy_from_user+0x36/0x2e0 [ 784.651055][T12360] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 784.656684][T12360] getname_flags+0xf1/0x540 [ 784.661213][T12360] do_sys_openat2+0xd2/0x1d0 [ 784.665805][T12360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 784.671778][T12360] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.676971][T12360] ? __fget_files+0x3f6/0x470 [ 784.681640][T12360] __x64_sys_openat+0x247/0x2a0 [ 784.686484][T12360] ? __pfx___x64_sys_openat+0x10/0x10 [ 784.691846][T12360] ? do_syscall_64+0x100/0x230 [ 784.696601][T12360] ? do_syscall_64+0xb6/0x230 [ 784.701270][T12360] do_syscall_64+0xf3/0x230 [ 784.705765][T12360] ? clear_bhb_loop+0x35/0x90 [ 784.710467][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.716415][T12360] RIP: 0033:0x7f516f17def9 [ 784.720824][T12360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.740424][T12360] RSP: 002b:00007f5170054038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 784.748940][T12360] RAX: ffffffffffffffda RBX: 00007f516f335f80 RCX: 00007f516f17def9 [ 784.756935][T12360] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 784.764895][T12360] RBP: 00007f5170054090 R08: 0000000000000000 R09: 0000000000000000 [ 784.772942][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.780913][T12360] R13: 0000000000000000 R14: 00007f516f335f80 R15: 00007ffdb7f16798 [ 784.788897][T12360] [ 784.834096][T12362] FAULT_INJECTION: forcing a failure. [ 784.834096][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.863352][T12362] CPU: 0 UID: 0 PID: 12362 Comm: syz.1.1450 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 784.874147][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 784.884204][T12362] Call Trace: [ 784.887478][T12362] [ 784.890420][T12362] dump_stack_lvl+0x241/0x360 [ 784.895178][T12362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.900375][T12362] ? __pfx__printk+0x10/0x10 [ 784.904965][T12362] ? __pfx_lock_release+0x10/0x10 [ 784.909992][T12362] ? rcu_is_watching+0x15/0xb0 [ 784.914751][T12362] should_fail_ex+0x3b0/0x4e0 [ 784.919445][T12362] _copy_from_iter+0x1f6/0x1960 [ 784.924315][T12362] ? alloc_pages_mpol_noprof+0x417/0x680 [ 784.929941][T12362] ? __pfx__copy_from_iter+0x10/0x10 [ 784.935226][T12362] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 784.941211][T12362] ? alloc_pages_noprof+0xef/0x170 [ 784.946327][T12362] ? page_copy_sane+0x46/0x260 [ 784.951173][T12362] copy_page_from_iter+0x7a/0x100 [ 784.956203][T12362] tun_get_user+0x1f7d/0x4720 [ 784.960875][T12362] ? tun_get_user+0x871/0x4720 [ 784.965644][T12362] ? __lock_acquire+0x137a/0x2040 [ 784.970679][T12362] ? __pfx_tun_get_user+0x10/0x10 [ 784.975710][T12362] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 784.981163][T12362] ? tun_get+0x1e/0x2f0 [ 784.985312][T12362] ? __pfx_lock_release+0x10/0x10 [ 784.990339][T12362] ? tun_get+0x1e/0x2f0 [ 784.994484][T12362] ? tun_get+0x27d/0x2f0 [ 784.998718][T12362] tun_chr_write_iter+0x113/0x1f0 [ 785.003738][T12362] vfs_write+0xa72/0xc90 [ 785.007980][T12362] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 785.013519][T12362] ? __pfx_vfs_write+0x10/0x10 [ 785.018291][T12362] ksys_write+0x1a0/0x2c0 [ 785.022623][T12362] ? __pfx_ksys_write+0x10/0x10 [ 785.027478][T12362] ? do_syscall_64+0x100/0x230 [ 785.032240][T12362] ? do_syscall_64+0xb6/0x230 [ 785.036912][T12362] do_syscall_64+0xf3/0x230 [ 785.041410][T12362] ? clear_bhb_loop+0x35/0x90 [ 785.046087][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.051974][T12362] RIP: 0033:0x7f34daf7c9df [ 785.056384][T12362] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 785.075987][T12362] RSP: 002b:00007f34dbd3b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 785.084398][T12362] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7c9df [ 785.092363][T12362] RDX: 00000000000000c2 RSI: 0000000020000240 RDI: 00000000000000c8 [ 785.100415][T12362] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 785.108378][T12362] R10: 00000000000000c2 R11: 0000000000000293 R12: 0000000000000001 [ 785.116385][T12362] R13: 0000000000000001 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 785.124376][T12362] [ 785.958387][T12385] sctp: [Deprecated]: syz.4.1456 (pid 12385) Use of int in maxseg socket option. [ 785.958387][T12385] Use struct sctp_assoc_value instead [ 787.951532][T12390] 9pnet_fd: Insufficient options for proto=fd [ 788.813860][T12400] €Â: renamed from syzkaller0 [ 788.865970][ T5301] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 789.551059][T11201] vhci_hcd: vhci_device speed not set [ 789.728720][T12394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.867973][T12413] FAULT_INJECTION: forcing a failure. [ 789.867973][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.881586][T12413] CPU: 1 UID: 0 PID: 12413 Comm: syz.4.1463 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 789.892363][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 789.902433][T12413] Call Trace: [ 789.905894][T12413] [ 789.908831][T12413] dump_stack_lvl+0x241/0x360 [ 789.913528][T12413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.918738][T12413] ? __pfx__printk+0x10/0x10 [ 789.923340][T12413] ? __pfx_lock_release+0x10/0x10 [ 789.928387][T12413] should_fail_ex+0x3b0/0x4e0 [ 789.933105][T12413] _copy_to_iter+0x43a/0x1960 [ 789.939903][T12413] ? __virt_addr_valid+0x183/0x530 [ 789.945050][T12413] ? __pfx__copy_to_iter+0x10/0x10 [ 789.950180][T12413] ? __virt_addr_valid+0x183/0x530 [ 789.955300][T12413] ? __virt_addr_valid+0x183/0x530 [ 789.960418][T12413] ? __virt_addr_valid+0x45f/0x530 [ 789.965537][T12413] ? __phys_addr_symbol+0x2f/0x70 [ 789.970569][T12413] ? __check_object_size+0x49c/0x900 [ 789.975864][T12413] ? m_stop+0x17e/0x1e0 [ 789.980118][T12413] seq_read_iter+0xb72/0xd60 [ 789.984746][T12413] seq_read+0x3a4/0x4f0 [ 789.988925][T12413] ? __pfx_seq_read+0x10/0x10 [ 789.993634][T12413] ? __mutex_trylock_common+0x183/0x2e0 [ 789.999215][T12413] ? rw_verify_area+0x520/0x6b0 [ 790.004078][T12413] ? __pfx_seq_read+0x10/0x10 [ 790.008774][T12413] vfs_read+0x204/0xbc0 [ 790.012941][T12413] ? __pfx_lock_release+0x10/0x10 [ 790.018071][T12413] ? __pfx_vfs_read+0x10/0x10 [ 790.022780][T12413] ? __fget_files+0x29/0x470 [ 790.027378][T12413] ? __fget_files+0x3f6/0x470 [ 790.032073][T12413] ksys_read+0x1a0/0x2c0 [ 790.036337][T12413] ? __pfx_ksys_read+0x10/0x10 [ 790.041113][T12413] ? do_syscall_64+0x100/0x230 [ 790.045895][T12413] ? do_syscall_64+0xb6/0x230 [ 790.050585][T12413] do_syscall_64+0xf3/0x230 [ 790.055186][T12413] ? clear_bhb_loop+0x35/0x90 [ 790.059972][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.065875][T12413] RIP: 0033:0x7f4b73f7def9 [ 790.070302][T12413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.089919][T12413] RSP: 002b:00007f4b74d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 790.098345][T12413] RAX: ffffffffffffffda RBX: 00007f4b74136130 RCX: 00007f4b73f7def9 [ 790.106332][T12413] RDX: 00000000000010c8 RSI: 0000000020002140 RDI: 000000000000000e [ 790.114313][T12413] RBP: 00007f4b74d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 790.122462][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.130525][T12413] R13: 0000000000000000 R14: 00007f4b74136130 R15: 00007ffd83f1fb78 [ 790.138525][T12413] [ 791.865227][T12423] syz.3.1464[12423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.865325][T12423] syz.3.1464[12423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 793.007739][T12437] tmpfs: Bad value for 'mpol' [ 793.327504][T12439] 9pnet_fd: Insufficient options for proto=fd [ 794.545105][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 794.570137][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 794.936341][ T5301] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 795.129037][ T5301] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 795.144655][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 795.153827][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.181789][ T5301] usb 4-1: config 0 descriptor?? [ 795.795897][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 796.649838][ T5301] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 796.688509][ T5301] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 796.822344][ T5301] [drm:udl_init] *ERROR* Selecting channel failed [ 796.872769][T12476] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 796.890334][ T5301] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 796.900013][T12476] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 796.915797][T12476] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 796.949661][ T5301] [drm] Initialized udl on minor 2 [ 796.960521][ T5301] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 796.974639][T12476] Error parsing options; rc = [-22] [ 796.994979][T12481] netlink: 'syz.4.1482': attribute type 8 has an invalid length. [ 797.016830][ T5301] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 797.049092][T11201] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 797.049507][T11201] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 797.058678][ T5301] usb 4-1: USB disconnect, device number 14 [ 797.265989][T12487] FAULT_INJECTION: forcing a failure. [ 797.265989][T12487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.283471][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.0.1486 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 797.294279][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 797.304356][T12487] Call Trace: [ 797.307656][T12487] [ 797.310609][T12487] dump_stack_lvl+0x241/0x360 [ 797.315311][T12487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.320532][T12487] ? __pfx__printk+0x10/0x10 [ 797.325145][T12487] ? __pfx_lock_release+0x10/0x10 [ 797.330191][T12487] ? __bpf_prog_test_run_raw_tp+0x2ce/0x440 [ 797.336114][T12487] should_fail_ex+0x3b0/0x4e0 [ 797.340804][T12487] _copy_to_user+0x2f/0xb0 [ 797.345224][T12487] bpf_prog_test_run_raw_tp+0x4f0/0x6a0 [ 797.350767][T12487] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 797.356821][T12487] ? __fget_files+0x3f6/0x470 [ 797.361493][T12487] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 797.367552][T12487] bpf_prog_test_run+0x33a/0x3b0 [ 797.372489][T12487] __sys_bpf+0x48d/0x810 [ 797.376729][T12487] ? __pfx___sys_bpf+0x10/0x10 [ 797.381498][T12487] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 797.387485][T12487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 797.393821][T12487] ? do_syscall_64+0x100/0x230 [ 797.398583][T12487] __x64_sys_bpf+0x7c/0x90 [ 797.402998][T12487] do_syscall_64+0xf3/0x230 [ 797.407498][T12487] ? clear_bhb_loop+0x35/0x90 [ 797.412180][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.418075][T12487] RIP: 0033:0x7f4b2757def9 [ 797.422487][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.442089][T12487] RSP: 002b:00007f4b2845e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.450499][T12487] RAX: ffffffffffffffda RBX: 00007f4b27735f80 RCX: 00007f4b2757def9 [ 797.458463][T12487] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 797.466425][T12487] RBP: 00007f4b2845e090 R08: 0000000000000000 R09: 0000000000000000 [ 797.474391][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.482378][T12487] R13: 0000000000000000 R14: 00007f4b27735f80 R15: 00007ffeff6e4738 [ 797.490377][T12487] [ 797.493543][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.494820][ T5302] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 798.518506][ T5302] usb 3-1: device descriptor read/64, error -71 [ 798.906197][ T5302] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 798.985627][T12511] FAULT_INJECTION: forcing a failure. [ 798.985627][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 799.001570][T12511] CPU: 0 UID: 0 PID: 12511 Comm: syz.4.1493 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 799.012368][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 799.022442][T12511] Call Trace: [ 799.025735][T12511] [ 799.028770][T12511] dump_stack_lvl+0x241/0x360 [ 799.033470][T12511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.038687][T12511] ? __pfx__printk+0x10/0x10 [ 799.043296][T12511] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 799.049300][T12511] ? __pfx___might_resched+0x10/0x10 [ 799.054612][T12511] should_fail_ex+0x3b0/0x4e0 [ 799.059571][T12511] should_failslab+0xac/0x100 [ 799.064263][T12511] ? __alloc_skb+0x1c3/0x440 [ 799.068901][T12511] kmem_cache_alloc_node_noprof+0x71/0x320 [ 799.074731][T12511] __alloc_skb+0x1c3/0x440 [ 799.079173][T12511] ? __pfx___alloc_skb+0x10/0x10 [ 799.084133][T12511] ? netlink_autobind+0xd6/0x2f0 [ 799.089081][T12511] ? netlink_autobind+0x2b0/0x2f0 [ 799.094120][T12511] netlink_sendmsg+0x638/0xcb0 [ 799.098998][T12511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.104311][T12511] ? __import_iovec+0x536/0x820 [ 799.109187][T12511] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 799.114493][T12511] ? security_socket_sendmsg+0x87/0xb0 [ 799.119951][T12511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.125226][T12511] __sock_sendmsg+0x221/0x270 [ 799.129897][T12511] ____sys_sendmsg+0x525/0x7d0 [ 799.134659][T12511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 799.139959][T12511] __sys_sendmsg+0x2b0/0x3a0 [ 799.144575][T12511] ? __pfx___sys_sendmsg+0x10/0x10 [ 799.149687][T12511] ? vfs_write+0x7c4/0xc90 [ 799.154169][T12511] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 799.160496][T12511] ? do_syscall_64+0x100/0x230 [ 799.165253][T12511] ? do_syscall_64+0xb6/0x230 [ 799.169950][T12511] do_syscall_64+0xf3/0x230 [ 799.174462][T12511] ? clear_bhb_loop+0x35/0x90 [ 799.179129][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.185021][T12511] RIP: 0033:0x7f4b73f7def9 [ 799.189423][T12511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.209026][T12511] RSP: 002b:00007f4b74d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.217448][T12511] RAX: ffffffffffffffda RBX: 00007f4b74135f80 RCX: 00007f4b73f7def9 [ 799.225419][T12511] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 799.233380][T12511] RBP: 00007f4b74d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 799.241337][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.249301][T12511] R13: 0000000000000000 R14: 00007f4b74135f80 R15: 00007ffd83f1fb78 [ 799.257283][T12511] [ 799.366047][ T5302] usb 3-1: device descriptor read/64, error -71 [ 799.487656][ T5302] usb usb3-port1: attempt power cycle [ 799.695891][ T940] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 799.942775][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 799.963198][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.976647][ T5302] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 800.013420][ T940] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 800.039383][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.048254][ T5302] usb 3-1: device descriptor read/8, error -71 [ 800.059108][ T940] usb 1-1: Product: syz [ 800.063285][ T940] usb 1-1: Manufacturer: syz [ 800.076939][ T940] usb 1-1: SerialNumber: syz [ 800.087119][ T940] usb 1-1: config 0 descriptor?? [ 800.114844][ T940] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 800.120308][T12518] IPVS: Error connecting to the multicast addr [ 801.140211][ T3398] usb 1-1: Failed to submit usb control message: -110 [ 801.153238][ T3398] usb 1-1: unable to send the bmi data to the device: -110 [ 801.175237][ T3398] usb 1-1: unable to get target info from device [ 801.221986][ T3398] usb 1-1: could not get target info (-110) [ 801.228936][ T3398] usb 1-1: could not probe fw (-110) [ 802.461174][ T5270] usb 1-1: USB disconnect, device number 22 [ 804.942405][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.302778][T12569] 9pnet_fd: Insufficient options for proto=fd [ 808.546269][T12582] 9pnet_fd: Insufficient options for proto=fd [ 809.109656][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.116736][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.792915][T12600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 810.799545][T12600] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 810.809855][ T940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 811.068301][T12600] vhci_hcd vhci_hcd.0: Device attached [ 811.306263][ T5270] vhci_hcd: vhci_device speed not set [ 811.595806][T11201] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 811.603460][ T5270] usb 13-1: new full-speed USB device number 7 using vhci_hcd [ 811.697792][ T940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 811.730593][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 811.764731][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 811.795322][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.815817][T11201] usb 1-1: Using ep0 maxpacket: 16 [ 811.827048][T11201] usb 1-1: unable to get BOS descriptor or descriptor too short [ 811.858245][T11201] usb 1-1: config 4 has an invalid interface number: 3 but max is 0 [ 811.870526][T11201] usb 1-1: config 4 has no interface number 0 [ 811.880747][T11201] usb 1-1: config 4 interface 3 has no altsetting 0 [ 811.881051][ T940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.892907][T11201] usb 1-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=da.af [ 811.929187][T11201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.955783][T11201] usb 1-1: Product: syz [ 811.957709][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.980760][T11201] usb 1-1: Manufacturer: syz [ 811.996917][T11201] usb 1-1: SerialNumber: syz [ 812.024293][ T940] usb 4-1: config 0 descriptor?? [ 812.071540][T12591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.129829][T12602] vhci_hcd: connection reset by peer [ 812.141087][ T52] vhci_hcd: stop threads [ 812.146306][ T52] vhci_hcd: release socket [ 812.153723][ T52] vhci_hcd: disconnect device [ 812.254019][T11201] gspca_main: sonixb-2.14.0 probing 0c45:60b0 [ 812.275521][T11201] sonixb 1-1:4.3: Error reading register 00: -71 [ 812.287908][T11201] usb 1-1: USB disconnect, device number 23 [ 812.482022][T12621] FAULT_INJECTION: forcing a failure. [ 812.482022][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.508980][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.1.1522 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 812.519777][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 812.529836][T12621] Call Trace: [ 812.533107][T12621] [ 812.536026][T12621] dump_stack_lvl+0x241/0x360 [ 812.540706][T12621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.545893][T12621] ? __pfx__printk+0x10/0x10 [ 812.550472][T12621] ? snprintf+0xda/0x120 [ 812.554704][T12621] should_fail_ex+0x3b0/0x4e0 [ 812.559372][T12621] _copy_to_user+0x2f/0xb0 [ 812.563812][T12621] simple_read_from_buffer+0xca/0x150 [ 812.569195][T12621] proc_fail_nth_read+0x1ec/0x260 [ 812.574236][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.579778][T12621] ? rw_verify_area+0x520/0x6b0 [ 812.584622][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.590167][T12621] vfs_read+0x204/0xbc0 [ 812.594318][T12621] ? __pfx_lock_release+0x10/0x10 [ 812.599342][T12621] ? __pfx_vfs_read+0x10/0x10 [ 812.604014][T12621] ? __fget_files+0x29/0x470 [ 812.608590][T12621] ? __fget_files+0x3f6/0x470 [ 812.613263][T12621] ksys_read+0x1a0/0x2c0 [ 812.617515][T12621] ? __pfx_ksys_read+0x10/0x10 [ 812.622307][T12621] ? do_syscall_64+0x100/0x230 [ 812.627074][T12621] ? do_syscall_64+0xb6/0x230 [ 812.631774][T12621] do_syscall_64+0xf3/0x230 [ 812.636288][T12621] ? clear_bhb_loop+0x35/0x90 [ 812.640953][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.646839][T12621] RIP: 0033:0x7f34daf7c93c [ 812.651259][T12621] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 812.670884][T12621] RSP: 002b:00007f34dbd3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.679325][T12621] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7c93c [ 812.687323][T12621] RDX: 000000000000000f RSI: 00007f34dbd3b0a0 RDI: 0000000000000003 [ 812.695283][T12621] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 812.703244][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.711214][T12621] R13: 0000000000000001 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 812.719215][T12621] [ 812.758604][ T940] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 812.798440][ T940] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 812.837810][ T940] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 812.883992][T12625] FAULT_INJECTION: forcing a failure. [ 812.883992][T12625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.920121][T12625] CPU: 0 UID: 0 PID: 12625 Comm: syz.1.1523 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 812.930943][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 812.941024][T12625] Call Trace: [ 812.944327][T12625] [ 812.947282][T12625] dump_stack_lvl+0x241/0x360 [ 812.952600][T12625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.957826][T12625] ? __pfx__printk+0x10/0x10 [ 812.962452][T12625] ? snprintf+0xda/0x120 [ 812.966727][T12625] should_fail_ex+0x3b0/0x4e0 [ 812.971468][T12625] _copy_to_user+0x2f/0xb0 [ 812.975916][T12625] simple_read_from_buffer+0xca/0x150 [ 812.981314][T12625] proc_fail_nth_read+0x1ec/0x260 [ 812.986343][T12625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.991891][T12625] ? rw_verify_area+0x520/0x6b0 [ 812.996736][T12625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.002280][T12625] vfs_read+0x204/0xbc0 [ 813.006443][T12625] ? __pfx_lock_release+0x10/0x10 [ 813.011561][T12625] ? __pfx_vfs_read+0x10/0x10 [ 813.016237][T12625] ? trace_contention_end+0x3c/0x120 [ 813.021519][T12625] ? __fget_files+0x29/0x470 [ 813.026105][T12625] ? __fget_files+0x3f6/0x470 [ 813.030793][T12625] ksys_read+0x1a0/0x2c0 [ 813.035037][T12625] ? __pfx_ksys_read+0x10/0x10 [ 813.039797][T12625] ? do_syscall_64+0x100/0x230 [ 813.044557][T12625] ? do_syscall_64+0xb6/0x230 [ 813.049228][T12625] do_syscall_64+0xf3/0x230 [ 813.053812][T12625] ? clear_bhb_loop+0x35/0x90 [ 813.058485][T12625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.064372][T12625] RIP: 0033:0x7f34daf7c93c [ 813.068780][T12625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 813.088393][T12625] RSP: 002b:00007f34dbd3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.096805][T12625] RAX: ffffffffffffffda RBX: 00007f34db135f80 RCX: 00007f34daf7c93c [ 813.104772][T12625] RDX: 000000000000000f RSI: 00007f34dbd3b0a0 RDI: 0000000000000004 [ 813.112735][T12625] RBP: 00007f34dbd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 813.120696][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.128657][T12625] R13: 0000000000000000 R14: 00007f34db135f80 R15: 00007fff79b1a6e8 [ 813.136631][T12625] [ 813.181676][T11921] usb 4-1: USB disconnect, device number 15 [ 813.266672][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1526'. [ 813.319307][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1526'. [ 813.372621][T12632] erspan0: entered promiscuous mode [ 813.387956][T12632] batadv_slave_1: entered promiscuous mode [ 813.466426][T12638] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 814.815382][T12643] 9pnet_fd: Insufficient options for proto=fd [ 815.377484][T12650] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 818.365908][ T5270] vhci_hcd: vhci_device speed not set [ 818.573333][T12664] FAULT_INJECTION: forcing a failure. [ 818.573333][T12664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.582087][T12670] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001 [ 818.597311][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.2.1534 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 818.608107][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 818.618163][T12664] Call Trace: [ 818.621433][T12664] [ 818.624356][T12664] dump_stack_lvl+0x241/0x360 [ 818.629034][T12664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.634218][T12664] ? __pfx__printk+0x10/0x10 [ 818.638802][T12664] ? snprintf+0xda/0x120 [ 818.643036][T12664] should_fail_ex+0x3b0/0x4e0 [ 818.647703][T12664] _copy_to_user+0x2f/0xb0 [ 818.652121][T12664] simple_read_from_buffer+0xca/0x150 [ 818.657490][T12664] proc_fail_nth_read+0x1ec/0x260 [ 818.662511][T12664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.668085][T12664] ? rw_verify_area+0x520/0x6b0 [ 818.672952][T12664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.678563][T12664] vfs_read+0x204/0xbc0 [ 818.682724][T12664] ? __pfx_lock_release+0x10/0x10 [ 818.687749][T12664] ? __pfx_vfs_read+0x10/0x10 [ 818.692429][T12664] ? __fget_files+0x29/0x470 [ 818.697009][T12664] ? __fget_files+0x3f6/0x470 [ 818.701682][T12664] ksys_read+0x1a0/0x2c0 [ 818.706204][T12664] ? __pfx_ksys_read+0x10/0x10 [ 818.710966][T12664] ? do_syscall_64+0x100/0x230 [ 818.715731][T12664] ? do_syscall_64+0xb6/0x230 [ 818.720408][T12664] do_syscall_64+0xf3/0x230 [ 818.724909][T12664] ? clear_bhb_loop+0x35/0x90 [ 818.729629][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.735549][T12664] RIP: 0033:0x7f4257b7c93c [ 818.739965][T12664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 818.759665][T12664] RSP: 002b:00007f42589ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.768073][T12664] RAX: ffffffffffffffda RBX: 00007f4257d35f80 RCX: 00007f4257b7c93c [ 818.776122][T12664] RDX: 000000000000000f RSI: 00007f42589ac0a0 RDI: 0000000000000004 [ 818.784082][T12664] RBP: 00007f42589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 818.792055][T12664] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 818.800015][T12664] R13: 0000000000000000 R14: 00007f4257d35f80 R15: 00007fffdaff01f8 [ 818.807991][T12664] [ 818.966061][T11921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 819.156042][T12681] set match dimension is over the limit! [ 819.229030][T12681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1539'. [ 819.315769][T11921] usb 4-1: device descriptor read/64, error -71 [ 820.052604][T12685] 9pnet_fd: Insufficient options for proto=fd [ 820.308053][T11921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 820.486519][T11921] usb 4-1: device descriptor read/64, error -71 [ 820.622626][T11921] usb usb4-port1: attempt power cycle [ 821.045826][T11921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 821.089360][T11921] usb 4-1: device descriptor read/8, error -71 [ 821.366016][T11921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 821.604240][T11921] usb 4-1: device descriptor read/8, error -71 [ 822.242614][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 822.310857][T11921] usb usb4-port1: unable to enumerate USB device [ 822.347135][T12709] ALSA: mixer_oss: invalid OSS volume '' [ 822.359158][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 824.927881][T12734] set match dimension is over the limit! [ 825.295756][T12749] FAULT_INJECTION: forcing a failure. [ 825.295756][T12749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.295813][T12749] [ 825.295817][T12749] ====================================================== [ 825.295821][T12749] WARNING: possible circular locking dependency detected [ 825.295826][T12749] 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 Not tainted [ 825.295832][T12749] ------------------------------------------------------ [ 825.295835][T12749] syz.2.1563/12749 is trying to acquire lock: [ 825.295841][T12749] ffffffff8e613cb8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 825.295869][T12749] [ 825.295869][T12749] but task is already holding lock: [ 825.295872][T12749] ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 825.295896][T12749] [ 825.295896][T12749] which lock already depends on the new lock. [ 825.295896][T12749] [ 825.295899][T12749] [ 825.295899][T12749] the existing dependency chain (in reverse order) is: [ 825.295903][T12749] [ 825.295903][T12749] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 825.295915][T12749] lock_acquire+0x1ed/0x550 [ 825.295928][T12749] _raw_spin_lock_nested+0x31/0x40 [ 825.295937][T12749] raw_spin_rq_lock_nested+0x2a/0x140 [ 825.295947][T12749] task_fork_fair+0x61/0x1e0 [ 825.295960][T12749] sched_cgroup_fork+0x37c/0x410 [ 825.295968][T12749] copy_process+0x2217/0x3dc0 [ 825.295979][T12749] kernel_clone+0x223/0x880 [ 825.295990][T12749] user_mode_thread+0x132/0x1a0 [ 825.296002][T12749] rest_init+0x23/0x300 [ 825.296013][T12749] start_kernel+0x47a/0x500 [ 825.296025][T12749] x86_64_start_reservations+0x2a/0x30 [ 825.296035][T12749] x86_64_start_kernel+0x9f/0xa0 [ 825.296044][T12749] common_startup_64+0x13e/0x147 [ 825.296055][T12749] [ 825.296055][T12749] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 825.296066][T12749] lock_acquire+0x1ed/0x550 [ 825.296078][T12749] _raw_spin_lock_irqsave+0xd5/0x120 [ 825.296090][T12749] try_to_wake_up+0xb0/0x1470 [ 825.296102][T12749] up+0x72/0x90 [ 825.296110][T12749] console_unlock+0x22f/0x4d0 [ 825.296119][T12749] vprintk_emit+0x5dc/0x7c0 [ 825.296128][T12749] _printk+0xd5/0x120 [ 825.296136][T12749] batadv_check_known_mac_addr+0x2b1/0x410 [ 825.296147][T12749] batadv_hard_if_event+0x3a5/0x1620 [ 825.296157][T12749] notifier_call_chain+0x19f/0x3e0 [ 825.296168][T12749] dev_set_mac_address+0x3d9/0x510 [ 825.296179][T12749] dev_set_mac_address_user+0x31/0x50 [ 825.296189][T12749] do_setlink+0x8b6/0x41f0 [ 825.296197][T12749] rtnl_newlink+0x180d/0x20a0 [ 825.296215][T12749] rtnetlink_rcv_msg+0x73f/0xcf0 [ 825.296223][T12749] netlink_rcv_skb+0x1e3/0x430 [ 825.296232][T12749] netlink_unicast+0x7f6/0x990 [ 825.296244][T12749] netlink_sendmsg+0x8e4/0xcb0 [ 825.296253][T12749] __sock_sendmsg+0x221/0x270 [ 825.296261][T12749] __sys_sendto+0x3a4/0x4f0 [ 825.296270][T12749] __x64_sys_sendto+0xde/0x100 [ 825.296280][T12749] do_syscall_64+0xf3/0x230 [ 825.296289][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.296301][T12749] [ 825.296301][T12749] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 825.296313][T12749] validate_chain+0x18e0/0x5900 [ 825.296321][T12749] __lock_acquire+0x137a/0x2040 [ 825.296332][T12749] lock_acquire+0x1ed/0x550 [ 825.296343][T12749] _raw_spin_lock_irqsave+0xd5/0x120 [ 825.296355][T12749] down_trylock+0x20/0xa0 [ 825.296364][T12749] __down_trylock_console_sem+0x109/0x250 [ 825.296374][T12749] vprintk_emit+0x2aa/0x7c0 [ 825.296382][T12749] _printk+0xd5/0x120 [ 825.296390][T12749] should_fail_ex+0x391/0x4e0 [ 825.296398][T12749] strncpy_from_user+0x36/0x2e0 [ 825.296411][T12749] strncpy_from_user_nofault+0x71/0x140 [ 825.296425][T12749] bpf_probe_read_compat_str+0xe9/0x180 [ 825.296438][T12749] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 825.296446][T12749] bpf_trace_run2+0x2ec/0x540 [ 825.296455][T12749] __traceiter_tlb_flush+0x77/0xd0 [ 825.296466][T12749] trace_tlb_flush+0x118/0x140 [ 825.296474][T12749] switch_mm_irqs_off+0x7cb/0xae0 [ 825.296483][T12749] __schedule+0x1079/0x4a10 [ 825.296495][T12749] preempt_schedule_irq+0xfb/0x1c0 [ 825.296507][T12749] irqentry_exit+0x5e/0x90 [ 825.296515][T12749] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.296526][T12749] lock_acquire+0x264/0x550 [ 825.296536][T12749] fs_reclaim_acquire+0xaf/0x140 [ 825.296547][T12749] kmem_cache_alloc_lru_noprof+0x42/0x2b0 [ 825.296559][T12749] __d_alloc+0x31/0x700 [ 825.296569][T12749] d_alloc_parallel+0xdf/0x1600 [ 825.296580][T12749] path_openat+0x947/0x3470 [ 825.296591][T12749] do_filp_open+0x235/0x490 [ 825.296602][T12749] do_sys_openat2+0x13e/0x1d0 [ 825.296611][T12749] __x64_sys_openat+0x247/0x2a0 [ 825.296620][T12749] do_syscall_64+0xf3/0x230 [ 825.296629][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.296639][T12749] [ 825.296639][T12749] other info that might help us debug this: [ 825.296639][T12749] [ 825.296642][T12749] Chain exists of: [ 825.296642][T12749] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 825.296642][T12749] [ 825.296655][T12749] Possible unsafe locking scenario: [ 825.296655][T12749] [ 825.296658][T12749] CPU0 CPU1 [ 825.296660][T12749] ---- ---- [ 825.296663][T12749] lock(&rq->__lock); [ 825.296669][T12749] lock(&p->pi_lock); [ 825.296675][T12749] lock(&rq->__lock); [ 825.296681][T12749] lock((console_sem).lock); [ 825.296687][T12749] [ 825.296687][T12749] *** DEADLOCK *** [ 825.296687][T12749] [ 825.296689][T12749] 5 locks held by syz.2.1563/12749: [ 825.296695][T12749] #0: ffff888022d6ae90 (&sb->s_type->i_mutex_key#24){.+.+}-{3:3}, at: path_openat+0x7ec/0x3470 [ 825.296722][T12749] #1: ffffffff8e82e4a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x42/0x2b0 [ 825.296746][T12749] #2: ffffffff8e841120 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x93/0x140 [ 825.296768][T12749] #3: ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 825.296791][T12749] #4: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 825.296812][T12749] [ 825.296812][T12749] stack backtrace: [ 825.296816][T12749] CPU: 1 UID: 0 PID: 12749 Comm: syz.2.1563 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 825.296828][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 825.296835][T12749] Call Trace: [ 825.296839][T12749] [ 825.296843][T12749] dump_stack_lvl+0x241/0x360 [ 825.296855][T12749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.296868][T12749] ? print_circular_bug+0x130/0x1a0 [ 825.296878][T12749] check_noncircular+0x36a/0x4a0 [ 825.296889][T12749] ? __pfx_check_noncircular+0x10/0x10 [ 825.296899][T12749] ? lockdep_lock+0x123/0x2b0 [ 825.296915][T12749] validate_chain+0x18e0/0x5900 [ 825.296931][T12749] ? __pfx_validate_chain+0x10/0x10 [ 825.296940][T12749] ? __pfx_prb_first_seq+0x10/0x10 [ 825.296957][T12749] ? this_cpu_in_panic+0x4f/0x80 [ 825.296971][T12749] ? _prb_read_valid+0xa39/0xac0 [ 825.296988][T12749] ? mark_lock+0x9a/0x350 [ 825.297002][T12749] __lock_acquire+0x137a/0x2040 [ 825.297019][T12749] lock_acquire+0x1ed/0x550 [ 825.297031][T12749] ? down_trylock+0x20/0xa0 [ 825.297041][T12749] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 825.297055][T12749] ? __pfx_lock_acquire+0x10/0x10 [ 825.297067][T12749] ? rcu_is_watching+0x15/0xb0 [ 825.297081][T12749] ? vprintk_store+0xd3e/0x1160 [ 825.297094][T12749] _raw_spin_lock_irqsave+0xd5/0x120 [ 825.297106][T12749] ? down_trylock+0x20/0xa0 [ 825.297116][T12749] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 825.297129][T12749] ? check_noncircular+0x259/0x4a0 [ 825.297141][T12749] down_trylock+0x20/0xa0 [ 825.297151][T12749] __down_trylock_console_sem+0x109/0x250 [ 825.297163][T12749] ? _printk+0xd5/0x120 [ 825.297171][T12749] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 825.297186][T12749] vprintk_emit+0x2aa/0x7c0 [ 825.297196][T12749] ? __pfx_vprintk_emit+0x10/0x10 [ 825.297209][T12749] ? __bpf_ringbuf_reserve+0x48a/0x600 [ 825.297220][T12749] ? do_raw_spin_lock+0x14f/0x370 [ 825.297230][T12749] ? __pfx_lock_release+0x10/0x10 [ 825.297246][T12749] _printk+0xd5/0x120 [ 825.297257][T12749] ? __pfx__printk+0x10/0x10 [ 825.297270][T12749] should_fail_ex+0x391/0x4e0 [ 825.297280][T12749] strncpy_from_user+0x36/0x2e0 [ 825.297295][T12749] strncpy_from_user_nofault+0x71/0x140 [ 825.297310][T12749] bpf_probe_read_compat_str+0xe9/0x180 [ 825.297324][T12749] ? bpf_trace_run2+0x1fc/0x540 [ 825.297334][T12749] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 825.297343][T12749] bpf_trace_run2+0x2ec/0x540 [ 825.297355][T12749] ? __pfx_bpf_trace_run2+0x10/0x10 [ 825.297368][T12749] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 825.297381][T12749] __traceiter_tlb_flush+0x77/0xd0 [ 825.297393][T12749] trace_tlb_flush+0x118/0x140 [ 825.297403][T12749] switch_mm_irqs_off+0x7cb/0xae0 [ 825.297415][T12749] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 825.297427][T12749] __schedule+0x1079/0x4a10 [ 825.297446][T12749] ? __pfx___schedule+0x10/0x10 [ 825.297460][T12749] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 825.297475][T12749] ? preempt_schedule_irq+0xf0/0x1c0 [ 825.297490][T12749] preempt_schedule_irq+0xfb/0x1c0 [ 825.297504][T12749] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 825.297521][T12749] irqentry_exit+0x5e/0x90 [ 825.297530][T12749] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.297542][T12749] RIP: 0010:lock_acquire+0x264/0x550 [ 825.297556][T12749] Code: 2b 00 74 08 4c 89 f7 e8 7a e1 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 825.297564][T12749] RSP: 0018:ffffc90004c47540 EFLAGS: 00000206 [ 825.297573][T12749] RAX: 0000000000000001 RBX: 1ffff92000988eb4 RCX: 13a819ba9032b500 [ 825.297580][T12749] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fbb00 [ 825.297587][T12749] RBP: ffffc90004c47698 R08: ffffffff93fa6857 R09: 1ffffffff27f4d0a [ 825.297594][T12749] R10: dffffc0000000000 R11: fffffbfff27f4d0b R12: 1ffff92000988eb0 [ 825.297602][T12749] R13: dffffc0000000000 R14: ffffc90004c475a0 R15: 0000000000000246 [ 825.297616][T12749] ? __pfx_lock_acquire+0x10/0x10 [ 825.297631][T12749] ? __lock_acquire+0x137a/0x2040 [ 825.297645][T12749] ? fs_reclaim_acquire+0x93/0x140 [ 825.297655][T12749] ? __d_alloc+0x31/0x700 [ 825.297666][T12749] fs_reclaim_acquire+0xaf/0x140 [ 825.297676][T12749] ? fs_reclaim_acquire+0x93/0x140 [ 825.297686][T12749] kmem_cache_alloc_lru_noprof+0x42/0x2b0 [ 825.297700][T12749] __d_alloc+0x31/0x700 [ 825.297712][T12749] d_alloc_parallel+0xdf/0x1600 [ 825.297725][T12749] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 825.297741][T12749] ? __d_lookup+0x64/0x7b0 [ 825.297752][T12749] ? __d_lookup+0x64/0x7b0 [ 825.297764][T12749] ? __pfx_d_alloc_parallel+0x10/0x10 [ 825.297776][T12749] ? __d_lookup+0x706/0x7b0 [ 825.297792][T12749] path_openat+0x947/0x3470 [ 825.297812][T12749] ? __pfx_path_openat+0x10/0x10 [ 825.297829][T12749] do_filp_open+0x235/0x490 [ 825.297842][T12749] ? __pfx_do_filp_open+0x10/0x10 [ 825.297860][T12749] ? _raw_spin_unlock+0x28/0x50 [ 825.297873][T12749] ? alloc_fd+0x5a1/0x640 [ 825.297888][T12749] do_sys_openat2+0x13e/0x1d0 [ 825.297899][T12749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.297910][T12749] ? __pfx_do_sys_openat2+0x10/0x10 [ 825.297919][T12749] ? __fget_files+0x3f6/0x470 [ 825.297932][T12749] __x64_sys_openat+0x247/0x2a0 [ 825.297943][T12749] ? __pfx___x64_sys_openat+0x10/0x10 [ 825.297955][T12749] ? do_syscall_64+0x100/0x230 [ 825.297966][T12749] ? do_syscall_64+0xb6/0x230 [ 825.297977][T12749] do_syscall_64+0xf3/0x230 [ 825.297987][T12749] ? clear_bhb_loop+0x35/0x90 [ 825.298000][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.298011][T12749] RIP: 0033:0x7f4257b7def9 [ 825.298019][T12749] Code: Unable to access opcode bytes at 0x7f4257b7decf. [ 825.298023][T12749] RSP: 002b:00007f42589ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 825.298033][T12749] RAX: ffffffffffffffda RBX: 00007f4257d35f80 RCX: 00007f4257b7def9 [ 825.298040][T12749] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 825.298046][T12749] RBP: 00007f42589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 825.298052][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.298058][T12749] R13: 0000000000000000 R14: 00007f4257d35f80 R15: 00007fffdaff01f8 [ 825.298069][T12749] [ 826.499284][T12749] CPU: 1 UID: 0 PID: 12749 Comm: syz.2.1563 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 826.510020][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 826.520050][T12749] Call Trace: [ 826.523307][T12749] [ 826.526219][T12749] dump_stack_lvl+0x241/0x360 [ 826.530883][T12749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.536058][T12749] ? __pfx__printk+0x10/0x10 [ 826.540625][T12749] should_fail_ex+0x3b0/0x4e0 [ 826.545279][T12749] strncpy_from_user+0x36/0x2e0 [ 826.550124][T12749] strncpy_from_user_nofault+0x71/0x140 [ 826.555752][T12749] bpf_probe_read_compat_str+0xe9/0x180 [ 826.561278][T12749] ? bpf_trace_run2+0x1fc/0x540 [ 826.566103][T12749] bpf_prog_1ccb8ba97563bf77+0x40/0x63 [ 826.571533][T12749] bpf_trace_run2+0x2ec/0x540 [ 826.576187][T12749] ? __pfx_bpf_trace_run2+0x10/0x10 [ 826.581447][T12749] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 826.587230][T12749] __traceiter_tlb_flush+0x77/0xd0 [ 826.592318][T12749] trace_tlb_flush+0x118/0x140 [ 826.597056][T12749] switch_mm_irqs_off+0x7cb/0xae0 [ 826.602074][T12749] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 826.607596][T12749] __schedule+0x1079/0x4a10 [ 826.612087][T12749] ? __pfx___schedule+0x10/0x10 [ 826.616921][T12749] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 826.622896][T12749] ? preempt_schedule_irq+0xf0/0x1c0 [ 826.628162][T12749] preempt_schedule_irq+0xfb/0x1c0 [ 826.633255][T12749] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 826.638956][T12749] irqentry_exit+0x5e/0x90 [ 826.643345][T12749] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.649306][T12749] RIP: 0010:lock_acquire+0x264/0x550 [ 826.654567][T12749] Code: 2b 00 74 08 4c 89 f7 e8 7a e1 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 826.674150][T12749] RSP: 0018:ffffc90004c47540 EFLAGS: 00000206 [ 826.680194][T12749] RAX: 0000000000000001 RBX: 1ffff92000988eb4 RCX: 13a819ba9032b500 [ 826.688142][T12749] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fbb00 [ 826.696189][T12749] RBP: ffffc90004c47698 R08: ffffffff93fa6857 R09: 1ffffffff27f4d0a [ 826.704138][T12749] R10: dffffc0000000000 R11: fffffbfff27f4d0b R12: 1ffff92000988eb0 [ 826.712085][T12749] R13: dffffc0000000000 R14: ffffc90004c475a0 R15: 0000000000000246 [ 826.720112][T12749] ? __pfx_lock_acquire+0x10/0x10 [ 826.725178][T12749] ? __lock_acquire+0x137a/0x2040 [ 826.730219][T12749] ? fs_reclaim_acquire+0x93/0x140 [ 826.735344][T12749] ? __d_alloc+0x31/0x700 [ 826.739669][T12749] fs_reclaim_acquire+0xaf/0x140 [ 826.744599][T12749] ? fs_reclaim_acquire+0x93/0x140 [ 826.749715][T12749] kmem_cache_alloc_lru_noprof+0x42/0x2b0 [ 826.755431][T12749] __d_alloc+0x31/0x700 [ 826.759587][T12749] d_alloc_parallel+0xdf/0x1600 [ 826.764423][T12749] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 826.770386][T12749] ? __d_lookup+0x64/0x7b0 [ 826.774783][T12749] ? __d_lookup+0x64/0x7b0 [ 826.779174][T12749] ? __pfx_d_alloc_parallel+0x10/0x10 [ 826.784530][T12749] ? __d_lookup+0x706/0x7b0 [ 826.789035][T12749] path_openat+0x947/0x3470 [ 826.793526][T12749] ? __pfx_path_openat+0x10/0x10 [ 826.798453][T12749] do_filp_open+0x235/0x490 [ 826.802932][T12749] ? __pfx_do_filp_open+0x10/0x10 [ 826.807944][T12749] ? _raw_spin_unlock+0x28/0x50 [ 826.812779][T12749] ? alloc_fd+0x5a1/0x640 [ 826.817087][T12749] do_sys_openat2+0x13e/0x1d0 [ 826.821768][T12749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 826.827724][T12749] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.832910][T12749] ? __fget_files+0x3f6/0x470 [ 826.837563][T12749] __x64_sys_openat+0x247/0x2a0 [ 826.842392][T12749] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.847859][T12749] ? do_syscall_64+0x100/0x230 [ 826.852702][T12749] ? do_syscall_64+0xb6/0x230 [ 826.857369][T12749] do_syscall_64+0xf3/0x230 [ 826.861856][T12749] ? clear_bhb_loop+0x35/0x90 [ 826.866513][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.872384][T12749] RIP: 0033:0x7f4257b7def9 [ 826.876777][T12749] Code: Unable to access opcode bytes at 0x7f4257b7decf. [ 826.883769][T12749] RSP: 002b:00007f42589ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.892162][T12749] RAX: ffffffffffffffda RBX: 00007f4257d35f80 RCX: 00007f4257b7def9 [ 826.900139][T12749] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 826.908086][T12749] RBP: 00007f42589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 826.916033][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.923996][T12749] R13: 0000000000000000 R14: 00007f4257d35f80 R15: 00007fffdaff01f8 [ 826.931962][T12749]