last executing test programs: 2.827019153s ago: executing program 2 (id=159): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618b, &(0x7f0000000000)) 2.669254091s ago: executing program 1 (id=160): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) (async) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) r0 = syz_io_uring_setup(0x3d, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500, 0xfffffffc}, &(0x7f0000000640), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000000010103fffffff10000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.619651518s ago: executing program 1 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x4408, &(0x7f00000003c0)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, 0xee00}}]}}) landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) (fail_nth: 3) 2.619469862s ago: executing program 1 (id=162): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value=0x500}, 0x28) 2.449589025s ago: executing program 1 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10c) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x4408, &(0x7f00000003c0)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, 0xee00}}]}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) fanotify_mark(0xffffffffffffffff, 0x2, 0x48001008, r2, &(0x7f0000000080)='./file0\x00') landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) 2.389327025s ago: executing program 1 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) sched_setscheduler(0xffffffffffffffff, 0x7, &(0x7f0000000340)=0x99a) r2 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f00000002c0)={0x0, 0x80000001, 0x101, 0x4, 0x786a, 0x6, 0x387, 0xfffffff9}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) write$sysctl(r3, &(0x7f0000000080)='6\x00', 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x42d82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000ffff27bd0feb7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000004400128009000100766c616e0000000034000280280003800c00010001000000030000000c00010001000000060000000c0001000100000040000000060001000400000008000500", @ANYRES32=r7, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @generic="1614ae5f700f2a29bc3dc30b2c80bf90020470963786caf100562d15d78e2f9675505145b48458637ce8869d3815cbea5f29eb38694b01528f2aa6445f130955e591576312c5b1aafebeadb4ec9d88a537c8125da781482f245526ef21"]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x9be7, 0x8) 2.058806359s ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)="a621ccc1d30fca", 0x7) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x28, r3, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xe, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000440)={0xc, &(0x7f0000000300)={0x20, 0x3c, 0xe1, {0xe1, 0xd, "eae11fc8ed98eef878d2a597ca31c2887ccef2d965ac039426413634942c8bc99db7f3461860a6c2d3a65ce4789f3e109565ad79feae6aac5d3582fc6a50bba5a747c3f2daa502e2fec637b5cff03523c43c06bb58e4d6312fdcb7771aa21053b5fb54bf477abd471ca1a8fcaadbb8cb45909c0a74c6353a56f6d9f22a21363b8c900f54d4d05e4ca15bba2bcbfb240f360af6d31929945c3ea7d327ca0655d42f448e02c592f44bc838a609e574f98613a33ee41fcfd34757a1827a5636d74c8e375c7366572e10dba09bba945d58ca69762bd04296eb62003c6edf9db771"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000940)={0x10, &(0x7f0000000480)={0x40, 0x8, 0xe, "651a1b62b634e968b2e394f5f513"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000900)={0x21, 0x0, 0x2, "ab69"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f0000000180)={0x0, 0x0, 0x3}) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000980)={&(0x7f0000000200)=[{0x401, 0x0, 0x0, {0x7fffffffffffffff, 0xf7, 0x1}}, {0x400, 0x1, 0x0, {0x0, 0x7, 0x2}}, {0xb, 0x1, 0x0, {0x8, 0x7fff, 0x1}}, {0x8, 0x2, 0x0, {0x6, 0x6, 0x2}}, {0x7, 0x0, 0x0, {0x4, 0xc, 0x2}}, {0x8, 0x1, 0x0, {0x3, 0x2, 0x2}}], 0x6, 0x20, 0x6, 0x6}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r12], 0x15) 1.557643513s ago: executing program 3 (id=166): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0xd, 0x810, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 1.557501498s ago: executing program 3 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x4408, &(0x7f00000003c0)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, 0xee00}}]}}) landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) 1.491660245s ago: executing program 3 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 1.269584069s ago: executing program 3 (id=169): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.189411347s ago: executing program 2 (id=172): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0xd3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) chroot(0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48}, 0x4000000) write(r0, &(0x7f00000000c0)="73dc7dee95096499af0516a5ec12e1594fd62f7044d4311c4f38b12f587e7131b4c779b9c643cbfc57b278a462de2264339dff177cafb7b0f24b75dff0ad08cefda56acb10d5d8175982a7c460624915f126acbb208c4e529f0524504ecdfcd225563aeab459db40816e4ee6a16d608e40a66ade7295d2873a3a0756b04090e7f2a80db0471fd8f5e9aae71dec8d8d84c4906c5fb4145c063a30702adc0aa89f119e5f723c23608bdb8468502949458a6f10be358aab7199f5f32badc91eba05d2dd0860f4", 0xc5) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) 979.825357ms ago: executing program 2 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18b0ffffffffffffff0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 979.416456ms ago: executing program 3 (id=176): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c940)={0x150, 0x0, 0x6, [{{0x4, 0x1, 0x2, 0x8, 0x2, 0x9, {0x1, 0xa4d, 0x1, 0xe591, 0x1, 0xc00000000000, 0x10000, 0x5, 0x1ff, 0x6000, 0x8009, r6, r7, 0x80000000, 0xd8}}, {0x2, 0x1, 0x5, 0x2, 'fuse\x00'}}, {{0x5, 0x2, 0x0, 0x7ff, 0x7ff, 0xe, {0x7, 0x3, 0x4, 0x81, 0x80000001, 0x1c00000000000, 0x6, 0x7, 0x7f, 0x2000, 0x4, r6, 0x0, 0x80000000, 0x8}}, {0x6, 0x1, 0x5, 0x6, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000004600)='./file0\x00', 0x1000, 0x800, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004740)='./file0\x00', &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000005180)=@broute={'broute\x00', 0x20, 0x6, 0x960, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80004800], 0x0, &(0x7f0000000200), &(0x7f0000004800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x8, 0x88e7, 'pim6reg\x00', 'ip_vti0\x00', 'vxcan1\x00', 'syzkaller1\x00', @random="73524fb2e5f8", [], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xd2, 0xd2, 0xfa, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x9, 0x74da, 0x4d68, 0x1, 0x4, 0x3}}}, @connlabel={{'connlabel\x00', 0x0, 0x4}, {{0x1f, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x4}}, {0xc, 0x48, 0x886c, 'veth1\x00', 'ip6gretap0\x00', 'hsr0\x00', 'bond_slave_1\x00', @remote, [0x0, 0x0, 0x101, 0xff, 0xff, 0xff], @random="3bc522a9e5ca", [0x0, 0xff, 0x1fe, 0xff, 0xff, 0xff], 0xa6, 0x13e, 0x186, [@devgroup={{'devgroup\x00', 0x0, 0x14}, {{0x0, 0x768d72c6, 0x1, 0x97, 0x7}}}], [@common=@STANDARD={'\x00', 0x4, {0xffffffffffffffff}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x8, 0x8, 0x6, 0x1, 0x0, "2fd79efd8b9d2ee7662d46a8d94e3f5d73fff9f26a2cabb89ca92410a16c10fe35fc41211d0b17cd5c551ebff0e342cd38015f1fe01a51f56213d3743f01985b"}}}], @common=@log={'log\x00', 0x24, {{0x8, "aaa2b4934089afe4af011ce0631869f97b4e7a82c9569e43114614c89ff6", 0xe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x5c, 0xf5, 'veth0_vlan\x00', 'gretap0\x00', 'batadv_slave_0\x00', 'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @random="7770be527f1f", [0xff, 0xff, 0x0, 0xff, 0xff], 0xf2, 0xf2, 0x11a, [@helper={{'helper\x00', 0x0, 0x24}, {{0x0, 'Q.931\x00'}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x80000001, {0x8cd}}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0xe3e}}}}, {0x5, 0x21, 0x5, 'wlan1\x00', 'dvmrp0\x00', 'ip6gretap0\x00', 'ip6erspan0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @random="77a9b5215d4d", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x19a, 0x2c6, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5dd, 'system_u:object_r:tmpfs_t:s0\x00'}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:selinux_config_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x64, 0x88ca, 'wlan0\x00', 'ip6gretap0\x00', 'bridge_slave_0\x00', 'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], 0xa6, 0xee, 0x116, [@owner={{'owner\x00', 0x0, 0x14}, {{r6, r8, r9, r10, 0x3, 0x4}}}], [@common=@log={'log\x00', 0x24, {{0xa, "3c30c4b292d77a6c21d213ef189e1b9309f9e8bb7a702c85fb7c90b8453d", 0x2}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x4de5}}}}, {0x5, 0x60, 0x7, 'wg0\x00', 'macsec0\x00', 'team0\x00', 'wlan1\x00', @remote, [0x0, 0x0, 0x0, 0x7f, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff], 0x96, 0x102, 0x12a, [@pkttype={{'pkttype\x00', 0x0, 0x4}, {{0x4, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}, @common=@ERROR={'ERROR\x00', 0x20, {"b2970fa786c70b7bb5d3e5e43ca7afd8dace7f0199026472108a663bb37d"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0xb}}}}]}]}, 0x9b0) r11 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000280)={r11, 0x20001ffd, {0x0, 0x0, 0x0, 0x6, 0x14a1fa, 0x0, 0x0, 0xe, 0x14, "3347879ffa82b32e8b9f05186d265000b4e90500000003740250ce02000000b3d741dc1bc1c50d38ef2a565ef1e83300", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f05054a33b584efe54e9af0000000000000000000004000", [0x278b, 0x500]}}) setns(0xc9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r13 = dup(r11) write$P9_RSETATTR(r13, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5, 0xd, 0x10}, @GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004010}, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x8) 979.321917ms ago: executing program 2 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 518.146212ms ago: executing program 0 (id=178): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x3, 0x8, 0x45a9, 0xa, 0xc, 0xff, 0x7, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x7, 0x5, [0x2, 0x3, 0x3, 0x7, 0x3a50]}, &(0x7f0000000140)=0x12) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 517.991198ms ago: executing program 0 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x4408, &(0x7f00000003c0)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, 0xee00}}]}}) landlock_create_ruleset(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0xee) 429.498431ms ago: executing program 0 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000110500000a4c000000090a010400000000000000000a00000a0900010073797a318000000008000540000000020900020073797a310000000008000a40fffffffc080003400000018408000840ff"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 259.038093ms ago: executing program 3 (id=181): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r0, 0x4010618b, &(0x7f0000000000)) 258.661612ms ago: executing program 0 (id=182): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0xfffffff1, @mcast2, 0x1}}, 0x0, 0x0, 0x1, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000300)={0x0, 0x8, 0x1, {0x1, @vbi={0x8, 0x7, 0x8, 0x43353039, [0x9, 0x4], [0x9, 0x400], 0x13a}}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000180)=0xffffffffffffffff, 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x200000b3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, r2}, 0x94) r7 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r11, 0x0, 0x0}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, 0x0) 59.655575ms ago: executing program 0 (id=183): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000}, 0x28) 57.42631ms ago: executing program 2 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 88) 57.217095ms ago: executing program 0 (id=185): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000a80)="9122b209cae56c3a8f2af5cca2d60532420abc2b30aa77bd68f9a2cc9aae6c3b82b882bc8d48d3c8cf190dde474ecf68bb5bdc4107f08f2574ccae94e029ee831783babfcdac11ead28a3a648e547b712bcfdc5bd3966801e9aac37b387fe3d4a1d01b5e823554a1156a80ed650749afc07a77a6cda7489b1d8d4a77a8dbd73dc1ca4d7a54d7228d3311a5414a3f064bc18a947eefdb17052f740fc9f9fbc5b496f15483322e34144af5c735af57500d9646363d74e1e2fc22c17de631aa611760049903414be791874b66dbdaebb5da28e4b63935ed992e3fb5f33d37bff2c194307ce31d509c2ebc7037b5aa6d5022443767260df2457731b8cc7047203c019784a1089af0e5c0eac256f3e91ecac398d32ae2dd2bdd944ad8ad904d89517db35c4c9677f9cb88f46edf95ad2994c3df1557112d3b4fb8735f99f963308fd7824ae19b7beae74d05a6b3a0a69daeb153924ba3e9667224af4a0d262ce98716da2e2b1c3b38dd09d8605a43d7df00b0d32b9691c0057b37c0fa4a85dbb8828c7e0750c8fe1a754afc386aa7225735d6c4b46050baad3d1d74883c5aecd2a698f1a1456241d565baec46735b77e66c19c02b5118f29a82f9c035dd0fc9c10d45bbf3b0ec336d1400451ad0eb550d31cc87def4820add36b941ef1bbbca24ee38421c27a911f86fdce1e2e2c970a38c264b6d9c6e08650288332abcdf0cb27b49869b4e73699272e8de849b57cce912ff00483255f459ac3217a156ba58491f5c01cda3f3bbbca2f97b2c42dc821a2f6ebb85b87ca8d8203506e8be7182c1c250f5928ef294e9d98bf0e1f6e66bb535486ab750a7653bccf76b4c987c4c7eae3fd3059b168855a0014ea417b0fc311bca2097595cc7b3f645027b2cf5f1441a836956e824d993cd4b50cdd991d4aa203ee75b4858b98e3fea16aacd4ad111da4d597e742dfdcc980fa8aeedcbae6843d268cefc19f9a9d74e64b0c1abda5abb0deadb8ad44e473b9763402343171370cdbf32997d937b09318e8f9279c72c4bf397d45948592c6b6acae73165fad170afc3d69a168528fe9f51f0abdcc435582318a0f1ce9c3c794c7dfa5f6b375cc0118fbcd8c2544c8f95aa5b6acc022d017304994b73a1dceb347e7d7d31a60d244841b806d9e054eae1af6f6a799c74dbc49e3869d6cd4406dca63e9d68dfd3e306885db89ce5d9600a44bc513d06a8b7cccd0cc0eb974afcb6b9c240829b17424712fde8784266e9ebdafb3564394eafcf266c2ed156923cebb3e111da1e8608fa98c0671660294c41aaeac73cc26381a389c9f6c443a0db4490ca4a74e87fc22edfa4225e946ff0475ab5d419b4367f1e0094ea3852d6b2afaebff3998adb0b8f39806c4bd9c97efc91aec6fefc999fefd510fb989708c60569f837b5d0fd020fa7f72514f6964adff307411e38a16a61500839dbebeae3ebe6c44b23c3314f184e69b9e3681e363a825b0a292d44a17c043fa80c30684cd4b07b47bfda33fa8851f91b5551d8962d239939475694466664686217d15031ccc39139da1d289b27313ba6713bcfcc3906631ea91b5a1c6aa1d6d0212e57c23f8edf131e2619a7b814ff62b544437d13580f7c98ccba744414b6f1a334e45f65171cd8b77f69bd6a55dfe9d6a976c842d37253939ce0d6fd8d27b3fbff3ab53c22a0d033f2f8acec5bd9705b000f974790294797f397be96347abbabb335703fec7165d14bd0009fb55af1b1ec481cb52bdbb4e5dea55e74e522a546dfa615cfca6a409aa91cd8874a1d69b426d6f2ddb0364308c7ab4a5c8e1c2522e08ea6f28de0d2ef867b73d3304d213284c239479ba770267e7e3f39f3d93e072aa4b59a7ba69e213d9e1261ae9dbd3b883999da6342f40fec2626915dab417582bc42601454ff3319c644093dfe7ee740cff083bc6f6efd10754bb3c8220943aeb51c4a3366cf5506dc6cac267a99256ebded6c9bf9ac164c278cac52607303923078fb91d54022a5f002b5fd1a8fd1f81fc50ed58196742b5b2d5ca3beb5b71aaf536f8071db33667fe65e5b45c398d56044f9f974ddd7dbaac47af91bc408a6fcc55109d0abe2ae35ded1941cf3fd119d204b3b21d69f20fa9f260ce32b47442833d0973cb6d26be69ff7354d38056f2be7bfb991a602fe2bc0615040e2ac55011b83a7faab2b8889d92900b07aba92d1d501a862fa8726059973671b8573093772e8068e41fa02890d79ba602417d1a9a0474841a49abbdd8de772a93654444e3e03d39bf7c50cef35ce8882c0380bcc9c3668557237d58328941177da6ad223bbd6480892312f5f8d9a1d81067262e4ef9fa53e90fc9aa85870eccf86c98dba919de7e2b8864946afdea56db6c5dc285d9b95ca1d97b7ec57671e5f3261212aeb88a00e5cb39dc6835f974a30f186e7e85ad29f1bf78e83ea88352b67f1f0979fd3d80c9303f18362d97a5bd1094c23101d618569779d2379f28785c027e17003386713d85509de65f405f6bad5be0c6a0742ebcf52b342e32d1ee849383f25670a5f8ac499faaa171b3ac19ce3bbed49acacef929ec346200ea4bc5b2eef0310c2720e34465726a54fce58cc71bc25ed9dc4bb741fa060fdf29b5fa603bee6786ab188dc4eb79364d705db5e5c2b372cee3a16a3be70564bc4ebaea5a0c7b2bf2a173b45f9b3485658e233a95f2c0b6b567eb82e10b06e9881735b893017187f6a454460cd9bac0a070da90b0f022795f5e0dcf2a5ac70d80c8ae7e338821e8872f095fe375dfbf594659d47723111ada8f70f0c6c28e87a4b82a18edfa6a3321cc0a2f422d3fa2f1102cf50d6afde043bcd8422e02b7d2fb43aed5f6339c41fa2f3a2a80f68a0d8770d1656b947a77fd8b9fe8704b0373a08b3baadd585117beb791e1e36d29aa03e73e2811e98841e607f3c61a043bf241137ffc943e0813e527d57d241d3a118b42a97b96ccc104e4be349ae5540f74db233f9a0119aeff584d97a8ddf0540583240d465162fa5a632fc588bda7978f4b518e787b35e46bad3e9e5422b484a804c74656837719db3678c11c26bff4dbbbe7368a7b2969ff471e5bfb3309abde753e198725bdab75fc7aceadf1baa28947cb144fe505e412b6890d8a1fe94e23f618f4a1fef051e55f1c762ccd3ba8590070b40071a95ece8f5b08a403bccb68397cd8813f1c39642d75b519f8fca2c6a1be08999de90417bec1d860b6c27da5cd422f0b33b8b975fb56d113960fbbf07f7d63f7878e3322f20e716b124ca3496d153e3ab34bc6d6b4e8a9415adbabd22d66adbd472b63758f76d13405223a6999e6c08091566f19f9fd8e6cf6f644d949f39ebbf9bddcf48b65ebb9eb733a6ec52a8edcf5e1d04f6386fa9cd4121e96d761b890ca53b96b005bcc1f1858590942f76b5cb43a1a7f266c37b84057269582508d094583a815f2676c1571992a49c891740da63d8833cb82c59de539197b083b2889b3042", 0x9a5}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff811628080000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 0s ago: executing program 2 (id=186): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r0, 0x4010618c, &(0x7f0000000000)) 0s ago: executing program 0 (id=187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b', 0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000b00), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000140)=[{0x9, 0x1, 0x2, 0x1000}, {0xf, 0x9, 0xee, 0x40}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:44509' (ED25519) to the list of known hosts. [ 34.238130][ T5658] cgroup: Unknown subsys name 'net' [ 34.367804][ T5658] cgroup: Unknown subsys name 'cpuset' [ 34.370148][ T5658] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.420439][ T5658] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.937336][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.943346][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.944161][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.946829][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.948296][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.949294][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.950211][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.950975][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.951864][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.952306][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.952693][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.953116][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.954792][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.956735][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.957195][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.960349][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.967089][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.970171][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.974701][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.984502][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.462893][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.463025][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.463128][ T5735] bridge_slave_0: entered allmulticast mode [ 40.465222][ T5735] bridge_slave_0: entered promiscuous mode [ 40.468961][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.469030][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.469154][ T5735] bridge_slave_1: entered allmulticast mode [ 40.471420][ T5735] bridge_slave_1: entered promiscuous mode [ 40.559047][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.560799][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.588349][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.588399][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.588469][ T5734] bridge_slave_0: entered allmulticast mode [ 40.589157][ T5734] bridge_slave_0: entered promiscuous mode [ 40.613913][ T5735] team0: Port device team_slave_0 added [ 40.621085][ T5735] team0: Port device team_slave_1 added [ 40.621172][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.621228][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.621284][ T5734] bridge_slave_1: entered allmulticast mode [ 40.622040][ T5734] bridge_slave_1: entered promiscuous mode [ 40.644892][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.644962][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.645020][ T5741] bridge_slave_0: entered allmulticast mode [ 40.645764][ T5741] bridge_slave_0: entered promiscuous mode [ 40.680837][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.680915][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.680999][ T5741] bridge_slave_1: entered allmulticast mode [ 40.682301][ T5741] bridge_slave_1: entered promiscuous mode [ 40.694221][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.694232][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.694244][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.695911][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.697922][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.713100][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.713110][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.713123][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.759025][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.759131][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.759223][ T5742] bridge_slave_0: entered allmulticast mode [ 40.760457][ T5742] bridge_slave_0: entered promiscuous mode [ 40.763321][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.763391][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.763480][ T5742] bridge_slave_1: entered allmulticast mode [ 40.764820][ T5742] bridge_slave_1: entered promiscuous mode [ 40.769155][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.771809][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.783887][ T5734] team0: Port device team_slave_0 added [ 40.808199][ T5735] hsr_slave_0: entered promiscuous mode [ 40.808877][ T5735] hsr_slave_1: entered promiscuous mode [ 40.818595][ T5734] team0: Port device team_slave_1 added [ 40.831605][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.832493][ T5741] team0: Port device team_slave_0 added [ 40.834207][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.840046][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.840054][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.840067][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.841137][ T5741] team0: Port device team_slave_1 added [ 40.857502][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.857511][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.857523][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.867502][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.867511][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.867523][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.879702][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.879712][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.879725][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.884197][ T5742] team0: Port device team_slave_0 added [ 40.885419][ T5742] team0: Port device team_slave_1 added [ 40.960478][ T5734] hsr_slave_0: entered promiscuous mode [ 40.960939][ T5734] hsr_slave_1: entered promiscuous mode [ 40.961254][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 40.961293][ T5734] Cannot create hsr debugfs directory [ 40.965770][ T5741] hsr_slave_0: entered promiscuous mode [ 40.966491][ T5741] hsr_slave_1: entered promiscuous mode [ 40.966973][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 40.966988][ T5741] Cannot create hsr debugfs directory [ 40.967659][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.967671][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.967691][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.970028][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.970038][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.970058][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.105488][ T5742] hsr_slave_0: entered promiscuous mode [ 41.106348][ T5742] hsr_slave_1: entered promiscuous mode [ 41.106873][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 41.106890][ T5742] Cannot create hsr debugfs directory [ 41.250511][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.257028][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.275391][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.277405][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.277815][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.279825][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.302495][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.306823][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.362727][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.365972][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.368546][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.373198][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.374701][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.380470][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.381227][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.384667][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.439747][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.443403][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.444253][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.454393][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.456276][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.460460][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.466925][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.472921][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.535486][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.553603][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.559050][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.566409][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.569704][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.575957][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.580249][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.595764][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.599741][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.608813][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.630783][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.630853][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.641508][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.641551][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.656243][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.687771][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.700244][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.700289][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.721382][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.722664][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.722707][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.769027][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.772154][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.784561][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.784607][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.792439][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.798354][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.798439][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.811054][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.811103][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.829317][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.829387][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.035108][ T5743] Bluetooth: hci2: command tx timeout [ 42.035266][ T5743] Bluetooth: hci0: command tx timeout [ 42.035359][ T5743] Bluetooth: hci1: command tx timeout [ 42.044319][ T66] Bluetooth: hci3: command tx timeout [ 42.075267][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.091982][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.107461][ T5734] veth0_vlan: entered promiscuous mode [ 42.119425][ T5734] veth1_vlan: entered promiscuous mode [ 42.151168][ T5735] veth0_vlan: entered promiscuous mode [ 42.157945][ T5734] veth0_macvtap: entered promiscuous mode [ 42.160194][ T5734] veth1_macvtap: entered promiscuous mode [ 42.163960][ T5735] veth1_vlan: entered promiscuous mode [ 42.170552][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.176926][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.190232][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.206743][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.224496][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.224676][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.231289][ T5735] veth0_macvtap: entered promiscuous mode [ 42.237559][ T5742] veth0_vlan: entered promiscuous mode [ 42.243610][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.248516][ T5735] veth1_macvtap: entered promiscuous mode [ 42.253963][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.255150][ T5742] veth1_vlan: entered promiscuous mode [ 42.282922][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.316908][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.332521][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.332531][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.342008][ T5742] veth0_macvtap: entered promiscuous mode [ 42.352935][ T5741] veth0_vlan: entered promiscuous mode [ 42.357448][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.357465][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.360700][ T5742] veth1_macvtap: entered promiscuous mode [ 42.367235][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.367523][ T5741] veth1_vlan: entered promiscuous mode [ 42.391658][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.409731][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.413910][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.413928][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.425202][ T5734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.427826][ T5734] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.430303][ T5734] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.431738][ T5734] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.439535][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.439550][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.440813][ T5734] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 42.441212][ T5741] veth0_macvtap: entered promiscuous mode [ 42.447678][ T5741] veth1_macvtap: entered promiscuous mode [ 42.499361][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.509496][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.532853][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.532872][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.560965][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.560987][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.564609][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.589245][ T5886] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 42.602714][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.602732][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.634250][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.634264][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.654037][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654391][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654581][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654701][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654720][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654737][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654754][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654777][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654794][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654810][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.771495][ T1172] IPVS: starting estimator thread 0... [ 42.876364][ T5895] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.882955][ T5889] Zero length message leads to an empty skb [ 43.351468][ T5907] bridge_slave_0: left allmulticast mode [ 43.351486][ T5907] bridge_slave_0: left promiscuous mode [ 43.352391][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.363625][ T5907] bridge_slave_1: left allmulticast mode [ 43.363640][ T5907] bridge_slave_1: left promiscuous mode [ 43.367848][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.373558][ T5907] bond0: (slave bond_slave_0): Releasing backup interface [ 43.379002][ T5907] bond0: (slave bond_slave_1): Releasing backup interface [ 43.383126][ T5907] team0: Port device team_slave_0 removed [ 43.389675][ T5907] team0: Port device team_slave_1 removed [ 43.390004][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.390014][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.390996][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.391006][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.392086][ T5907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.466374][ T5907] team0: Port device xfrm0 added [ 43.606721][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606730][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.606772][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606776][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.606824][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606828][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.606884][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606888][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.606929][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606933][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.606972][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.606976][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607014][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607018][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607070][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607074][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607114][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607118][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607157][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607161][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607200][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607204][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607257][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607261][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607301][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607305][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607344][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607348][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607387][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607391][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607440][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607444][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607483][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607487][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607526][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607530][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607570][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607574][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607625][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607629][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607668][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607672][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607790][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607800][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.607937][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.607944][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608016][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608021][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608073][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608081][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608133][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608138][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608175][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608179][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608229][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608233][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608269][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608273][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608312][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608316][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608352][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608356][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 43.608403][ T5911] binder: BINDER_SET_CONTEXT_MGR already set [ 43.608407][ T5911] binder: 5910:5911 ioctl 4018620d 80000100 returned -16 [ 44.070521][ T5922] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 44.070539][ T5922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 44.072887][ T5922] vhci_hcd vhci_hcd.0: Device attached [ 44.113879][ T66] Bluetooth: hci3: command tx timeout [ 44.123969][ T5743] Bluetooth: hci0: command tx timeout [ 44.123991][ T5743] Bluetooth: hci2: command tx timeout [ 44.124051][ T66] Bluetooth: hci1: command tx timeout [ 44.528079][ T5922] wg2 speed is unknown, defaulting to 1000 [ 44.553962][ T64] usb 44-1: SetAddress Request (2) to port 0 [ 44.554004][ T64] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 44.592630][ T5922] wg2 speed is unknown, defaulting to 1000 [ 44.618990][ T74] IPVS: starting estimator thread 0... [ 44.703886][ T5929] IPVS: using max 26 ests per chain, 62400 per kthread [ 44.822689][ T5922] wg2 speed is unknown, defaulting to 1000 [ 44.976309][ T5923] vhci_hcd: connection reset by peer [ 44.979119][ T5812] vhci_hcd vhci_hcd.3: stop threads [ 44.979249][ T5812] vhci_hcd vhci_hcd.3: release socket [ 44.979583][ T5812] vhci_hcd vhci_hcd.3: disconnect device [ 45.691801][ T5922] infiniband syz2: set active [ 45.692601][ T5880] wg2 speed is unknown, defaulting to 1000 [ 45.692715][ T5922] infiniband syz2: added wg2 [ 45.715933][ T5922] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 45.715963][ T5922] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 45.715990][ T5922] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 45.760212][ T5922] RDS/IB: syz2: added [ 45.760432][ T5922] smc: adding ib device syz2 with port count 1 [ 45.760485][ T5922] smc: ib device syz2 port 1 has no pnetid [ 45.761546][ T1036] wg2 speed is unknown, defaulting to 1000 [ 45.779079][ T5922] wg2 speed is unknown, defaulting to 1000 [ 46.171725][ T5922] wg2 speed is unknown, defaulting to 1000 [ 46.194061][ T5747] Bluetooth: hci2: command tx timeout [ 46.194091][ T5747] Bluetooth: hci0: command tx timeout [ 46.194110][ T5747] Bluetooth: hci3: command tx timeout [ 46.194264][ T66] Bluetooth: hci1: command tx timeout [ 46.288933][ T5922] wg2 speed is unknown, defaulting to 1000 [ 46.407287][ T5922] wg2 speed is unknown, defaulting to 1000 [ 47.604687][ T5970] ======================================================= [ 47.604687][ T5970] WARNING: The mand mount option has been deprecated and [ 47.604687][ T5970] and is ignored by this kernel. Remove the mand [ 47.604687][ T5970] option from the mount to silence this warning. [ 47.604687][ T5970] ======================================================= [ 47.606568][ T5970] netlink: 200 bytes leftover after parsing attributes in process `syz.2.22'. [ 47.735268][ T5972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.989226][ T5972] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 47.990636][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 47.990666][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 48.007962][ T5972] batman_adv: batadv0: Adding interface: bridge1 [ 48.007979][ T5972] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.008001][ T5972] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 48.168305][ T5812] syzkaller0: tun_net_xmit 76 [ 48.169692][ T5812] syzkaller0: tun_net_xmit 48 [ 48.176396][ T5985] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 48.176410][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.1.26 Tainted: G L syzkaller #0 PREEMPT(full) [ 48.176425][ T5985] Tainted: [L]=SOFTLOCKUP [ 48.176429][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.176435][ T5985] Call Trace: [ 48.176439][ T5985] [ 48.176444][ T5985] dump_stack_lvl+0x100/0x190 [ 48.176463][ T5985] sysfs_warn_dup.cold+0x1c/0x28 [ 48.176480][ T5985] sysfs_create_dir_ns+0x24b/0x2b0 [ 48.176495][ T5985] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 48.176506][ T5985] ? find_held_lock+0x2b/0x80 [ 48.176517][ T5985] ? kobject_add_internal+0x25f/0x930 [ 48.176529][ T5985] ? kobject_add_internal+0x25f/0x930 [ 48.176544][ T5985] ? do_raw_spin_unlock+0x145/0x1e0 [ 48.176555][ T5985] kobject_add_internal+0x2c8/0x930 [ 48.176569][ T5985] kobject_init_and_add+0x121/0x180 [ 48.176582][ T5985] ? __pfx_kobject_init_and_add+0x10/0x10 [ 48.176595][ T5985] ? __kasan_kmalloc+0xaa/0xb0 [ 48.176609][ T5985] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 48.176626][ T5985] ? lookup_or_create_module_kobject+0x76/0x1a0 [ 48.176647][ T5985] lookup_or_create_module_kobject+0xf3/0x1a0 [ 48.176665][ T5985] module_add_driver+0x23a/0x420 [ 48.176678][ T5985] bus_add_driver+0x34a/0x5b0 [ 48.176695][ T5985] driver_register+0x1e2/0x360 [ 48.176710][ T5985] ? rcu_is_watching+0x13/0xc0 [ 48.176721][ T5985] usb_gadget_register_driver_owner+0x132/0x210 [ 48.176737][ T5985] raw_ioctl+0x1a85/0x2b80 [ 48.176752][ T5985] ? __pfx_raw_ioctl+0x10/0x10 [ 48.176765][ T5985] ? __pfx_raw_ioctl+0x10/0x10 [ 48.176777][ T5985] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 48.176796][ T5985] __do_fast_syscall_32+0x13a/0x8b0 [ 48.176815][ T5985] do_fast_syscall_32+0x32/0x70 [ 48.176832][ T5985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.176845][ T5985] RIP: 0023:0xf7f36fec [ 48.176858][ T5985] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 48.176863][ T5985] RSP: 002b:00000000f53f4424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 48.176874][ T5985] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000005501 [ 48.176880][ T5985] RDX: 0000000000000000 RSI: 00000000f73c8ff4 RDI: 00000000f53f54c0 [ 48.176886][ T5985] RBP: 00000000f73c8ff4 R08: 0000000000000000 R09: 0000000000000000 [ 48.176892][ T5985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.176898][ T5985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.176911][ T5985] [ 48.176922][ T5985] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 48.176929][ T5985] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 48.177030][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.177196][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.184719][ T57] syzkaller0: tun_net_xmit 76 [ 48.273867][ T5743] Bluetooth: hci3: command tx timeout [ 48.273888][ T5743] Bluetooth: hci0: command tx timeout [ 48.273900][ T5743] Bluetooth: hci2: command tx timeout [ 48.273929][ T66] Bluetooth: hci1: command tx timeout [ 48.360073][ T5995] FAULT_INJECTION: forcing a failure. [ 48.360073][ T5995] name failslab, interval 1, probability 0, space 0, times 1 [ 48.360094][ T5995] CPU: 3 UID: 0 PID: 5995 Comm: syz.3.32 Tainted: G L syzkaller #0 PREEMPT(full) [ 48.360108][ T5995] Tainted: [L]=SOFTLOCKUP [ 48.360112][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.360118][ T5995] Call Trace: [ 48.360121][ T5995] [ 48.360126][ T5995] dump_stack_lvl+0x100/0x190 [ 48.360144][ T5995] should_fail_ex.cold+0x5/0xa [ 48.360158][ T5995] should_failslab+0xc2/0x120 [ 48.360173][ T5995] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 48.360188][ T5995] ? bpf_push_jmp_history+0x3a0/0x790 [ 48.360202][ T5995] krealloc_node_align_noprof+0x1f9/0x3e0 [ 48.360216][ T5995] bpf_push_jmp_history+0x3a0/0x790 [ 48.360230][ T5995] do_check_common+0x1144/0xc600 [ 48.360254][ T5995] ? bpf_compute_live_registers+0xcbb/0x1650 [ 48.360267][ T5995] ? kfree+0x22b/0x6d0 [ 48.360282][ T5995] ? __pfx_do_check_common+0x10/0x10 [ 48.360303][ T5995] ? __pfx_verbose+0x10/0x10 [ 48.360314][ T5995] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 48.360328][ T5995] ? mark_fastcall_pattern_for_call+0x692/0x810 [ 48.360348][ T5995] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 48.360367][ T5995] bpf_check+0x95ba/0xa980 [ 48.360382][ T5995] ? __css_rstat_updated+0x1ce/0x590 [ 48.360397][ T5995] ? __lock_acquire+0x5c0/0x1f40 [ 48.360412][ T5995] ? __pfx___css_rstat_updated+0x10/0x10 [ 48.360435][ T5995] ? __pfx_bpf_check+0x10/0x10 [ 48.360450][ T5995] ? lock_acquire+0x1d1/0x380 [ 48.360465][ T5995] ? find_held_lock+0x2b/0x80 [ 48.360475][ T5995] ? bpf_prog_load+0x1a09/0x2a80 [ 48.360492][ T5995] ? __asan_memset+0x23/0x50 [ 48.360505][ T5995] ? bpf_prog_load+0x1ac3/0x2a80 [ 48.360519][ T5995] bpf_prog_load+0x1ac3/0x2a80 [ 48.360537][ T5995] ? __pfx_bpf_prog_load+0x10/0x10 [ 48.360562][ T5995] __sys_bpf+0x1f46/0x4a30 [ 48.360575][ T5995] ? __pfx___sys_bpf+0x10/0x10 [ 48.360585][ T5995] ? lock_acquire+0x1d1/0x380 [ 48.360599][ T5995] ? get_pid_task+0x2a/0x250 [ 48.360610][ T5995] ? find_held_lock+0x2b/0x80 [ 48.360621][ T5995] ? get_pid_task+0xfc/0x250 [ 48.360631][ T5995] ? get_pid_task+0xfc/0x250 [ 48.360644][ T5995] ? proc_fail_nth_write+0x9f/0x220 [ 48.360656][ T5995] ? find_held_lock+0x2b/0x80 [ 48.360670][ T5995] ? rcu_read_lock_any_held+0x6a/0x90 [ 48.360682][ T5995] ? find_held_lock+0x2b/0x80 [ 48.360693][ T5995] ? ksys_write+0x190/0x250 [ 48.360703][ T5995] ? ksys_write+0x190/0x250 [ 48.360714][ T5995] ? lock_acquire+0x1d1/0x380 [ 48.360736][ T5995] ? fput+0x7c/0x100 [ 48.360751][ T5995] ? __ia32_sys_bpf+0xcc/0x170 [ 48.360773][ T5995] __ia32_sys_bpf+0xcc/0x170 [ 48.360788][ T5995] ? __do_fast_syscall_32+0xb3/0x8b0 [ 48.360806][ T5995] __do_fast_syscall_32+0x13a/0x8b0 [ 48.360822][ T5995] ? lockdep_hardirqs_on+0x7d/0x110 [ 48.360839][ T5995] do_fast_syscall_32+0x32/0x70 [ 48.360856][ T5995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 48.360869][ T5995] RIP: 0023:0xf707efec [ 48.360882][ T5995] Code: Unable to access opcode bytes at 0xf707efc2. [ 48.360887][ T5995] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 48.360897][ T5995] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 48.360904][ T5995] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.360910][ T5995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.360916][ T5995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 48.360922][ T5995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.360934][ T5995] [ 48.464205][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.614700][ T35] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 48.615922][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.615963][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 48.615983][ T35] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 48.616007][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.763876][ T3377] syzkaller0: tun_net_xmit 76 [ 48.914053][ T3377] syzkaller0: tun_net_xmit 76 [ 49.036989][ T5985] syzkaller0: create flow: hash 3423694412 index 2 [ 49.129678][ T5986] syzkaller0: delete flow: hash 3423694412 index 2 [ 49.137234][ T35] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 49.137275][ T35] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 49.137285][ T35] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 49.151722][ T35] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 49.164371][ T35] usb 6-1: USB disconnect, device number 2 [ 50.468083][ T64] usb 44-1: device descriptor read/8, error -110 [ 51.174319][ T64] usb usb44-port1: attempt power cycle [ 51.818584][ T64] usb usb44-port1: unable to enumerate USB device [ 51.893038][ T853] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.093876][ T853] usb 8-1: device descriptor read/64, error -71 [ 52.185239][ T6057] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 52.515722][ T853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.653846][ T853] usb 8-1: device descriptor read/64, error -71 [ 52.765782][ T853] usb usb8-port1: attempt power cycle [ 53.103857][ T853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 53.125116][ T853] usb 8-1: device descriptor read/8, error -71 [ 53.363807][ T853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 53.396111][ T853] usb 8-1: device descriptor read/8, error -71 [ 53.504874][ T853] usb usb8-port1: unable to enumerate USB device [ 53.610221][ T6066] bridge_slave_0: left allmulticast mode [ 53.610239][ T6066] bridge_slave_0: left promiscuous mode [ 53.611032][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.613080][ T6066] bridge_slave_1: left allmulticast mode [ 53.613094][ T6066] bridge_slave_1: left promiscuous mode [ 53.613180][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.642948][ T6066] bond0: (slave bond_slave_0): Releasing backup interface [ 53.659970][ T6066] bond0: (slave bond_slave_1): Releasing backup interface [ 53.775325][ T6066] team0: Port device team_slave_0 removed [ 53.783841][ T6066] team0: Port device team_slave_1 removed [ 53.784532][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.784549][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.792172][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.792189][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.794884][ T6066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.811068][ T6071] team0: Port device xfrm0 added [ 53.912818][ T6076] FAULT_INJECTION: forcing a failure. [ 53.912818][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 53.912847][ T6076] CPU: 2 UID: 0 PID: 6076 Comm: syz.2.50 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.912867][ T6076] Tainted: [L]=SOFTLOCKUP [ 53.912872][ T6076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.912880][ T6076] Call Trace: [ 53.912885][ T6076] [ 53.912890][ T6076] dump_stack_lvl+0x100/0x190 [ 53.912911][ T6076] should_fail_ex.cold+0x5/0xa [ 53.912929][ T6076] should_failslab+0xc2/0x120 [ 53.912948][ T6076] __kvmalloc_node_noprof+0x113/0x9b0 [ 53.912964][ T6076] ? bpf_check+0x2030/0xa980 [ 53.912982][ T6076] ? bpf_check+0x2078/0xa980 [ 53.912999][ T6076] ? bpf_check+0x3551/0xa980 [ 53.913019][ T6076] bpf_check+0x3551/0xa980 [ 53.913037][ T6076] ? __css_rstat_updated+0x1ce/0x590 [ 53.913058][ T6076] ? __lock_acquire+0x5c0/0x1f40 [ 53.913090][ T6076] ? __pfx_bpf_check+0x10/0x10 [ 53.913110][ T6076] ? lock_acquire+0x1d1/0x380 [ 53.913130][ T6076] ? find_held_lock+0x2b/0x80 [ 53.913146][ T6076] ? bpf_prog_load+0x1a09/0x2a80 [ 53.913178][ T6076] ? __asan_memset+0x23/0x50 [ 53.913197][ T6076] ? bpf_prog_load+0x1ac3/0x2a80 [ 53.913218][ T6076] bpf_prog_load+0x1ac3/0x2a80 [ 53.913245][ T6076] ? __pfx_bpf_prog_load+0x10/0x10 [ 53.913286][ T6076] __sys_bpf+0x1f46/0x4a30 [ 53.913309][ T6076] ? __pfx___sys_bpf+0x10/0x10 [ 53.913345][ T6076] ? lock_acquire+0x1d1/0x380 [ 53.913366][ T6076] ? get_pid_task+0x2a/0x250 [ 53.913384][ T6076] ? find_held_lock+0x2b/0x80 [ 53.913400][ T6076] ? get_pid_task+0xfc/0x250 [ 53.913416][ T6076] ? get_pid_task+0xfc/0x250 [ 53.913438][ T6076] ? proc_fail_nth_write+0x9f/0x220 [ 53.913456][ T6076] ? find_held_lock+0x2b/0x80 [ 53.913477][ T6076] ? rcu_read_lock_any_held+0x6a/0x90 [ 53.913495][ T6076] ? find_held_lock+0x2b/0x80 [ 53.913511][ T6076] ? ksys_write+0x190/0x250 [ 53.913528][ T6076] ? ksys_write+0x190/0x250 [ 53.913544][ T6076] ? lock_acquire+0x1d1/0x380 [ 53.913580][ T6076] ? fput+0x7c/0x100 [ 53.913602][ T6076] ? __ia32_sys_bpf+0xcc/0x170 [ 53.913619][ T6076] __ia32_sys_bpf+0xcc/0x170 [ 53.913637][ T6076] ? __do_fast_syscall_32+0xb3/0x8b0 [ 53.913664][ T6076] __do_fast_syscall_32+0x13a/0x8b0 [ 53.913687][ T6076] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.913712][ T6076] do_fast_syscall_32+0x32/0x70 [ 53.913736][ T6076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 53.913756][ T6076] RIP: 0023:0xf702efec [ 53.913775][ T6076] Code: Unable to access opcode bytes at 0xf702efc2. [ 53.913782][ T6076] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 53.913799][ T6076] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 53.913809][ T6076] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.913819][ T6076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 53.913828][ T6076] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.913838][ T6076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.913859][ T6076] [ 54.261217][ T6096] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 54.699966][ T6117] FAULT_INJECTION: forcing a failure. [ 54.699966][ T6117] name failslab, interval 1, probability 0, space 0, times 0 [ 54.699986][ T6117] CPU: 3 UID: 0 PID: 6117 Comm: syz.3.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.700001][ T6117] Tainted: [L]=SOFTLOCKUP [ 54.700004][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.700010][ T6117] Call Trace: [ 54.700014][ T6117] [ 54.700018][ T6117] dump_stack_lvl+0x100/0x190 [ 54.700037][ T6117] should_fail_ex.cold+0x5/0xa [ 54.700052][ T6117] should_failslab+0xc2/0x120 [ 54.700066][ T6117] __kmalloc_cache_node_noprof+0x94/0x720 [ 54.700079][ T6117] ? find_held_lock+0x2b/0x80 [ 54.700091][ T6117] ? stack_depot_save_flags+0x49a/0x9f0 [ 54.700106][ T6117] ? __get_vm_area_node+0x124/0x350 [ 54.700122][ T6117] __get_vm_area_node+0x124/0x350 [ 54.700136][ T6117] ? stack_depot_save_flags+0x49a/0x9f0 [ 54.700153][ T6117] __vmalloc_node_range_noprof+0x268/0x1420 [ 54.700168][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.700182][ T6117] ? kasan_save_stack+0x3f/0x50 [ 54.700194][ T6117] ? kasan_save_stack+0x30/0x50 [ 54.700205][ T6117] ? kasan_save_track+0x14/0x30 [ 54.700217][ T6117] ? __kasan_kmalloc+0xaa/0xb0 [ 54.700228][ T6117] ? __kmalloc_noprof+0x32f/0x840 [ 54.700239][ T6117] ? bpf_jit_subprogs+0xf9c/0x4660 [ 54.700254][ T6117] ? bpf_fixup_call_args+0x2cd/0x340 [ 54.700276][ T6117] ? bpf_check+0x434d/0xa980 [ 54.700290][ T6117] ? bpf_prog_load+0x1ac3/0x2a80 [ 54.700304][ T6117] ? __do_fast_syscall_32+0x13a/0x8b0 [ 54.700321][ T6117] ? do_fast_syscall_32+0x32/0x70 [ 54.700337][ T6117] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.700351][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.700368][ T6117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.700388][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.700401][ T6117] __vmalloc_node_noprof+0xad/0xf0 [ 54.700416][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.700431][ T6117] __vmalloc_noprof+0xa3/0x120 [ 54.700446][ T6117] ? __pfx___vmalloc_noprof+0x10/0x10 [ 54.700460][ T6117] ? rcu_is_watching+0x13/0xc0 [ 54.700471][ T6117] ? trace_kmalloc+0xeb/0x110 [ 54.700484][ T6117] ? __kasan_kmalloc+0xaa/0xb0 [ 54.700496][ T6117] ? __kmalloc_noprof+0x350/0x840 [ 54.700508][ T6117] bpf_prog_alloc_no_stats+0x58/0x690 [ 54.700525][ T6117] bpf_jit_subprogs+0x10d5/0x4660 [ 54.700550][ T6117] bpf_fixup_call_args+0x2cd/0x340 [ 54.700568][ T6117] bpf_check+0x434d/0xa980 [ 54.700592][ T6117] ? __pfx_bpf_check+0x10/0x10 [ 54.700621][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.700636][ T6117] ? find_held_lock+0x2b/0x80 [ 54.700647][ T6117] ? bpf_prog_load+0x1a09/0x2a80 [ 54.700663][ T6117] ? __asan_memset+0x23/0x50 [ 54.700676][ T6117] ? bpf_prog_load+0x1ac3/0x2a80 [ 54.700690][ T6117] bpf_prog_load+0x1ac3/0x2a80 [ 54.700708][ T6117] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.700734][ T6117] __sys_bpf+0x1f46/0x4a30 [ 54.700748][ T6117] ? __pfx___sys_bpf+0x10/0x10 [ 54.700758][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.700772][ T6117] ? get_pid_task+0x2a/0x250 [ 54.700783][ T6117] ? find_held_lock+0x2b/0x80 [ 54.700793][ T6117] ? get_pid_task+0xfc/0x250 [ 54.700803][ T6117] ? get_pid_task+0xfc/0x250 [ 54.700817][ T6117] ? proc_fail_nth_write+0x9f/0x220 [ 54.700829][ T6117] ? find_held_lock+0x2b/0x80 [ 54.700843][ T6117] ? rcu_read_lock_any_held+0x6a/0x90 [ 54.700854][ T6117] ? find_held_lock+0x2b/0x80 [ 54.700865][ T6117] ? ksys_write+0x190/0x250 [ 54.700875][ T6117] ? ksys_write+0x190/0x250 [ 54.700886][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.700909][ T6117] ? fput+0x7c/0x100 [ 54.700923][ T6117] ? __ia32_sys_bpf+0xcc/0x170 [ 54.700934][ T6117] __ia32_sys_bpf+0xcc/0x170 [ 54.700945][ T6117] ? __do_fast_syscall_32+0xb3/0x8b0 [ 54.700962][ T6117] __do_fast_syscall_32+0x13a/0x8b0 [ 54.700979][ T6117] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.700995][ T6117] do_fast_syscall_32+0x32/0x70 [ 54.701011][ T6117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.701024][ T6117] RIP: 0023:0xf707efec [ 54.701037][ T6117] Code: Unable to access opcode bytes at 0xf707efc2. [ 54.701042][ T6117] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 54.701053][ T6117] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 54.701059][ T6117] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.701065][ T6117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.701071][ T6117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.701077][ T6117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.701090][ T6117] [ 54.701220][ T6117] syz.3.62: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 54.701293][ T6117] CPU: 3 UID: 0 PID: 6117 Comm: syz.3.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.701307][ T6117] Tainted: [L]=SOFTLOCKUP [ 54.701311][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.701316][ T6117] Call Trace: [ 54.701320][ T6117] [ 54.701324][ T6117] dump_stack_lvl+0x100/0x190 [ 54.701340][ T6117] warn_alloc.cold+0x9e/0xb2 [ 54.701351][ T6117] ? __pfx_warn_alloc+0x10/0x10 [ 54.701361][ T6117] ? __kasan_kmalloc+0x8a/0xb0 [ 54.701375][ T6117] ? stack_depot_save_flags+0x49a/0x9f0 [ 54.701393][ T6117] ? __get_vm_area_node+0x22b/0x350 [ 54.701409][ T6117] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 54.701423][ T6117] ? kasan_save_stack+0x3f/0x50 [ 54.701435][ T6117] ? kasan_save_stack+0x30/0x50 [ 54.701446][ T6117] ? kasan_save_track+0x14/0x30 [ 54.701458][ T6117] ? __kasan_kmalloc+0xaa/0xb0 [ 54.701469][ T6117] ? __kmalloc_noprof+0x32f/0x840 [ 54.701480][ T6117] ? bpf_jit_subprogs+0xf9c/0x4660 [ 54.701495][ T6117] ? bpf_fixup_call_args+0x2cd/0x340 [ 54.701511][ T6117] ? bpf_check+0x434d/0xa980 [ 54.701524][ T6117] ? bpf_prog_load+0x1ac3/0x2a80 [ 54.701539][ T6117] ? __do_fast_syscall_32+0x13a/0x8b0 [ 54.701555][ T6117] ? do_fast_syscall_32+0x32/0x70 [ 54.701571][ T6117] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.701584][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.701601][ T6117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.701620][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.701634][ T6117] __vmalloc_node_noprof+0xad/0xf0 [ 54.701649][ T6117] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 54.701664][ T6117] __vmalloc_noprof+0xa3/0x120 [ 54.701678][ T6117] ? __pfx___vmalloc_noprof+0x10/0x10 [ 54.701693][ T6117] ? rcu_is_watching+0x13/0xc0 [ 54.701704][ T6117] ? trace_kmalloc+0xeb/0x110 [ 54.701716][ T6117] ? __kasan_kmalloc+0xaa/0xb0 [ 54.701729][ T6117] ? __kmalloc_noprof+0x350/0x840 [ 54.701741][ T6117] bpf_prog_alloc_no_stats+0x58/0x690 [ 54.701757][ T6117] bpf_jit_subprogs+0x10d5/0x4660 [ 54.701782][ T6117] bpf_fixup_call_args+0x2cd/0x340 [ 54.701800][ T6117] bpf_check+0x434d/0xa980 [ 54.701824][ T6117] ? __pfx_bpf_check+0x10/0x10 [ 54.701839][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.701854][ T6117] ? find_held_lock+0x2b/0x80 [ 54.701864][ T6117] ? bpf_prog_load+0x1a09/0x2a80 [ 54.701881][ T6117] ? __asan_memset+0x23/0x50 [ 54.701893][ T6117] ? bpf_prog_load+0x1ac3/0x2a80 [ 54.701908][ T6117] bpf_prog_load+0x1ac3/0x2a80 [ 54.701925][ T6117] ? __pfx_bpf_prog_load+0x10/0x10 [ 54.701950][ T6117] __sys_bpf+0x1f46/0x4a30 [ 54.701964][ T6117] ? __pfx___sys_bpf+0x10/0x10 [ 54.701974][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.701988][ T6117] ? get_pid_task+0x2a/0x250 [ 54.701999][ T6117] ? find_held_lock+0x2b/0x80 [ 54.702010][ T6117] ? get_pid_task+0xfc/0x250 [ 54.702020][ T6117] ? get_pid_task+0xfc/0x250 [ 54.702033][ T6117] ? proc_fail_nth_write+0x9f/0x220 [ 54.702044][ T6117] ? find_held_lock+0x2b/0x80 [ 54.702058][ T6117] ? rcu_read_lock_any_held+0x6a/0x90 [ 54.702070][ T6117] ? find_held_lock+0x2b/0x80 [ 54.702104][ T6117] ? ksys_write+0x190/0x250 [ 54.702115][ T6117] ? ksys_write+0x190/0x250 [ 54.702125][ T6117] ? lock_acquire+0x1d1/0x380 [ 54.702148][ T6117] ? fput+0x7c/0x100 [ 54.702162][ T6117] ? __ia32_sys_bpf+0xcc/0x170 [ 54.702172][ T6117] __ia32_sys_bpf+0xcc/0x170 [ 54.702184][ T6117] ? __do_fast_syscall_32+0xb3/0x8b0 [ 54.702201][ T6117] __do_fast_syscall_32+0x13a/0x8b0 [ 54.702217][ T6117] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.702234][ T6117] do_fast_syscall_32+0x32/0x70 [ 54.702250][ T6117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.702263][ T6117] RIP: 0023:0xf707efec [ 54.702277][ T6117] Code: Unable to access opcode bytes at 0xf707efc2. [ 54.702282][ T6117] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 54.702292][ T6117] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 54.702298][ T6117] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.702304][ T6117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.702310][ T6117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.702316][ T6117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.702328][ T6117] [ 54.702332][ T6117] Mem-Info: [ 54.702338][ T6117] active_anon:8162 inactive_anon:352 isolated_anon:0 [ 54.702338][ T6117] active_file:11 inactive_file:53872 isolated_file:0 [ 54.702338][ T6117] unevictable:1000 dirty:524 writeback:0 [ 54.702338][ T6117] slab_reclaimable:9934 slab_unreclaimable:52044 [ 54.702338][ T6117] mapped:27557 shmem:4326 pagetables:1062 [ 54.702338][ T6117] sec_pagetables:292 bounce:0 [ 54.702338][ T6117] kernel_misc_reclaimable:0 [ 54.702338][ T6117] free:35161 free_pcp:16773 free_cma:0 [ 54.702363][ T6117] Node 0 active_anon:68kB inactive_anon:100kB active_file:44kB inactive_file:164kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1272kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 54.702389][ T6117] Node 1 active_anon:32580kB inactive_anon:1308kB active_file:0kB inactive_file:215324kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:110132kB dirty:2084kB writeback:0kB shmem:15304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4384kB pagetables:2976kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 54.702415][ T6117] Node 0 DMA free:1864kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:96kB free_cma:0kB [ 54.702443][ T6117] lowmem_reserve[]: 0 277 277 277 277 [ 54.702461][ T6117] Node 0 DMA32 free:13768kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:68kB inactive_anon:100kB active_file:44kB inactive_file:164kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:9992kB local_pcp:1304kB free_cma:0kB [ 54.702490][ T6117] lowmem_reserve[]: 0 0 0 0 0 [ 54.702507][ T6117] Node 1 DMA32 free:125012kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32580kB inactive_anon:1308kB active_file:0kB inactive_file:215324kB unevictable:2000kB writepending:2084kB zspages:1848kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:56672kB local_pcp:14436kB free_cma:0kB [ 54.702536][ T6117] lowmem_reserve[]: 0 0 0 0 0 [ 54.702553][ T6117] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 1864kB [ 54.702617][ T6117] Node 0 DMA32: 6*4kB (UE) 54*8kB (UME) 58*16kB (UME) 97*32kB (UME) 43*64kB (UME) 11*128kB (UM) 6*256kB (M) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 13768kB [ 54.702692][ T6117] Node 1 DMA32: 55*4kB (M) 101*8kB (UME) 71*16kB (UME) 10*32kB (UM) 42*64kB (UME) 8*128kB (UME) 4*256kB (UME) 10*512kB (UME) 4*1024kB (M) 3*2048kB (M) 25*4096kB (UM) = 124980kB [ 54.702773][ T6117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.702781][ T6117] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.702789][ T6117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.702797][ T6117] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.702804][ T6117] 58678 total pagecache pages [ 54.702808][ T6117] 473 pages in swap cache [ 54.702812][ T6117] Free swap = 119260kB [ 54.702815][ T6117] Total swap = 124996kB [ 54.702819][ T6117] 524155 pages RAM [ 54.702822][ T6117] 0 pages HighMem/MovableOnly [ 54.702826][ T6117] 212121 pages reserved [ 54.702829][ T6117] 0 pages cma reserved [ 54.784147][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.68'. [ 54.799188][ T6129] capability: warning: `syz.0.69' uses 32-bit capabilities (legacy support in use) [ 54.829077][ T37] IPVS: starting estimator thread 0... [ 54.925907][ T6133] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.963655][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 54.963676][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 55.171601][ T6157] FAULT_INJECTION: forcing a failure. [ 55.171601][ T6157] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.171630][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.1.76 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.171652][ T6157] Tainted: [L]=SOFTLOCKUP [ 55.171658][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.171667][ T6157] Call Trace: [ 55.171673][ T6157] [ 55.171679][ T6157] dump_stack_lvl+0x100/0x190 [ 55.171705][ T6157] should_fail_ex.cold+0x5/0xa [ 55.171722][ T6157] ? prepare_alloc_pages+0x16d/0x5b0 [ 55.171745][ T6157] should_fail_alloc_page+0xeb/0x140 [ 55.171768][ T6157] prepare_alloc_pages+0x1f0/0x5b0 [ 55.171793][ T6157] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 55.171811][ T6157] ? __pfx_get_page_from_freelist+0x10/0x10 [ 55.171828][ T6157] ? prepare_alloc_pages+0x1f0/0x5b0 [ 55.171848][ T6157] ? is_bpf_text_address+0x94/0x1a0 [ 55.171872][ T6157] ? rcu_is_watching+0x13/0xc0 [ 55.171888][ T6157] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 55.171906][ T6157] ? do_raw_spin_lock+0x128/0x260 [ 55.171931][ T6157] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.171951][ T6157] ? rcu_is_watching+0x13/0xc0 [ 55.171967][ T6157] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.171989][ T6157] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.172013][ T6157] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 55.172034][ T6157] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 55.172056][ T6157] ? kasan_save_track+0x14/0x30 [ 55.172074][ T6157] ? __kasan_slab_alloc+0x89/0x90 [ 55.172092][ T6157] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 55.172109][ T6157] ? alloc_vmap_area+0x640/0x2bb0 [ 55.172146][ T6157] ? __get_vm_area_node+0x1ed/0x350 [ 55.172164][ T6157] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 55.172185][ T6157] ? __vmalloc_node_noprof+0xad/0xf0 [ 55.172210][ T6157] ? __vmalloc_noprof+0xa3/0x120 [ 55.172229][ T6157] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 55.172249][ T6157] ? bpf_jit_subprogs+0x10d5/0x4660 [ 55.172273][ T6157] ? bpf_fixup_call_args+0x2cd/0x340 [ 55.172295][ T6157] ? bpf_check+0x434d/0xa980 [ 55.172316][ T6157] ? bpf_prog_load+0x1ac3/0x2a80 [ 55.172336][ T6157] ? __sys_bpf+0x1f46/0x4a30 [ 55.172350][ T6157] ? __ia32_sys_bpf+0xcc/0x170 [ 55.172372][ T6157] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 55.172393][ T6157] ? policy_nodemask+0xed/0x4f0 [ 55.172417][ T6157] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 55.172446][ T6157] __kasan_populate_vmalloc+0xf0/0x210 [ 55.172468][ T6157] alloc_vmap_area+0x95d/0x2bb0 [ 55.172494][ T6157] ? kasan_save_track+0x14/0x30 [ 55.172512][ T6157] ? __kasan_kmalloc+0xaa/0xb0 [ 55.172530][ T6157] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.172550][ T6157] ? __get_vm_area_node+0x124/0x350 [ 55.172572][ T6157] __get_vm_area_node+0x1ed/0x350 [ 55.172596][ T6157] __vmalloc_node_range_noprof+0x268/0x1420 [ 55.172619][ T6157] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 55.172638][ T6157] ? kasan_save_stack+0x3f/0x50 [ 55.172655][ T6157] ? kasan_save_stack+0x30/0x50 [ 55.172672][ T6157] ? kasan_save_track+0x14/0x30 [ 55.172689][ T6157] ? __kasan_kmalloc+0xaa/0xb0 [ 55.172705][ T6157] ? __kmalloc_noprof+0x32f/0x840 [ 55.172721][ T6157] ? bpf_jit_subprogs+0xf9c/0x4660 [ 55.172743][ T6157] ? bpf_fixup_call_args+0x2cd/0x340 [ 55.172766][ T6157] ? bpf_check+0x434d/0xa980 [ 55.172785][ T6157] ? bpf_prog_load+0x1ac3/0x2a80 [ 55.172805][ T6157] ? __do_fast_syscall_32+0x13a/0x8b0 [ 55.172828][ T6157] ? do_fast_syscall_32+0x32/0x70 [ 55.172851][ T6157] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.172872][ T6157] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 55.172897][ T6157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.172927][ T6157] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 55.172948][ T6157] __vmalloc_node_noprof+0xad/0xf0 [ 55.172969][ T6157] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 55.172992][ T6157] __vmalloc_noprof+0xa3/0x120 [ 55.173013][ T6157] ? __pfx___vmalloc_noprof+0x10/0x10 [ 55.173034][ T6157] ? rcu_is_watching+0x13/0xc0 [ 55.173050][ T6157] ? trace_kmalloc+0xeb/0x110 [ 55.173069][ T6157] ? __kasan_kmalloc+0xaa/0xb0 [ 55.173088][ T6157] ? __kmalloc_noprof+0x350/0x840 [ 55.173107][ T6157] bpf_prog_alloc_no_stats+0x58/0x690 [ 55.173130][ T6157] bpf_jit_subprogs+0x10d5/0x4660 [ 55.173170][ T6157] bpf_fixup_call_args+0x2cd/0x340 [ 55.173200][ T6157] bpf_check+0x434d/0xa980 [ 55.173240][ T6157] ? __pfx_bpf_check+0x10/0x10 [ 55.173261][ T6157] ? lock_acquire+0x1d1/0x380 [ 55.173283][ T6157] ? find_held_lock+0x2b/0x80 [ 55.173300][ T6157] ? bpf_prog_load+0x1a09/0x2a80 [ 55.173326][ T6157] ? __asan_memset+0x23/0x50 [ 55.173345][ T6157] ? bpf_prog_load+0x1ac3/0x2a80 [ 55.173366][ T6157] bpf_prog_load+0x1ac3/0x2a80 [ 55.173393][ T6157] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.173433][ T6157] __sys_bpf+0x1f46/0x4a30 [ 55.173455][ T6157] ? __pfx___sys_bpf+0x10/0x10 [ 55.173470][ T6157] ? lock_acquire+0x1d1/0x380 [ 55.173490][ T6157] ? get_pid_task+0x2a/0x250 [ 55.173508][ T6157] ? find_held_lock+0x2b/0x80 [ 55.173524][ T6157] ? get_pid_task+0xfc/0x250 [ 55.173540][ T6157] ? get_pid_task+0xfc/0x250 [ 55.173561][ T6157] ? proc_fail_nth_write+0x9f/0x220 [ 55.173579][ T6157] ? find_held_lock+0x2b/0x80 [ 55.173601][ T6157] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.173619][ T6157] ? find_held_lock+0x2b/0x80 [ 55.173635][ T6157] ? ksys_write+0x190/0x250 [ 55.173651][ T6157] ? ksys_write+0x190/0x250 [ 55.173667][ T6157] ? lock_acquire+0x1d1/0x380 [ 55.173702][ T6157] ? fput+0x7c/0x100 [ 55.173723][ T6157] ? __ia32_sys_bpf+0xcc/0x170 [ 55.173739][ T6157] __ia32_sys_bpf+0xcc/0x170 [ 55.173756][ T6157] ? __do_fast_syscall_32+0xb3/0x8b0 [ 55.173781][ T6157] __do_fast_syscall_32+0x13a/0x8b0 [ 55.173803][ T6157] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.173828][ T6157] do_fast_syscall_32+0x32/0x70 [ 55.173852][ T6157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.173871][ T6157] RIP: 0023:0xf7f36fec [ 55.173889][ T6157] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 55.173897][ T6157] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 55.173913][ T6157] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 55.173923][ T6157] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.173932][ T6157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.173942][ T6157] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.173951][ T6157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.173972][ T6157] [ 55.324111][ T5812] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.325309][ T5812] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.325330][ T5812] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.325348][ T5812] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.361110][ T6176] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 55.361195][ T6176] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 55.991393][ T6203] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 55.991410][ T6203] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 55.991663][ T6203] vhci_hcd vhci_hcd.0: Device attached [ 56.040704][ T6198] tipc: Started in network mode [ 56.040722][ T6198] tipc: Node identity ac14140f, cluster identity 4711 [ 56.041188][ T6198] tipc: New replicast peer: 255.255.255.255 [ 56.041580][ T6198] tipc: Enabled bearer , priority 10 [ 56.079642][ T6203] rdma_rxe: rxe_newlink: failed to add wg2 [ 56.254162][ T5880] usb 40-1: SetAddress Request (2) to port 0 [ 56.254207][ T5880] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 56.386811][ T6204] vhci_hcd: connection reset by peer [ 56.388427][ T5575] vhci_hcd vhci_hcd.1: stop threads [ 56.388450][ T5575] vhci_hcd vhci_hcd.1: release socket [ 56.388531][ T5575] vhci_hcd vhci_hcd.1: disconnect device [ 56.467113][ T6216] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 56.478592][ T6216] : entered promiscuous mode [ 56.584600][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.663806][ T1036] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 56.734712][ T25] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 56.737396][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.737433][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.741353][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.741366][ T25] usb 5-1: Product: syz [ 56.741408][ T25] usb 5-1: Manufacturer: syz [ 56.741417][ T25] usb 5-1: SerialNumber: syz [ 56.839101][ T1036] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 56.840786][ T1036] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.840823][ T1036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 56.840846][ T1036] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 56.840878][ T1036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.044852][ T5883] tipc: Node number set to 2886997007 [ 57.163620][ T1037] usb 5-1: USB disconnect, device number 2 [ 57.224208][ T25] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 57.260046][ T1036] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 57.260062][ T1036] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 57.260068][ T1036] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 57.260845][ T1036] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 57.265865][ T1036] usb 8-1: USB disconnect, device number 6 [ 57.425030][ T25] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 57.427015][ T25] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 57.427077][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.427092][ T25] usb 7-1: config 0 has no interface number 0 [ 57.427115][ T25] usb 7-1: config 0 interface 205 has no altsetting 0 [ 57.431875][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.431896][ T25] usb 7-1: Product: syz [ 57.431907][ T25] usb 7-1: Manufacturer: syz [ 57.431918][ T25] usb 7-1: SerialNumber: syz [ 57.460211][ T25] usb 7-1: config 0 descriptor?? [ 57.467523][ T25] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 57.467673][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 57.487244][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 57.488100][ T25] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 57.488139][ T25] usb 7-1: media controller created [ 57.491402][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.499629][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 57.499725][ T25] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 57.503590][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 57.510628][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 57.510667][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 57.523776][ T25] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 57.665095][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 57.665118][ T25] dvb-usb: error while querying for an remote control event. [ 57.824474][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 57.824501][ T25] dvb-usb: error while querying for an remote control event. [ 57.984660][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 57.984687][ T5883] dvb-usb: error while querying for an remote control event. [ 58.084883][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 58.144066][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 58.144094][ T5883] dvb-usb: error while querying for an remote control event. [ 58.234353][ T25] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 58.235178][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.235200][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 58.235213][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 58.235231][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.115148][ T25] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 59.115166][ T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 59.115172][ T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 59.116062][ T25] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 59.119845][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 59.119861][ T5883] dvb-usb: error while querying for an remote control event. [ 59.120539][ T25] usb 8-1: USB disconnect, device number 7 [ 59.274258][ T6145] dvb-usb: bulk message failed: -22 (1/0) [ 59.275488][ T6145] dvb-usb: error while querying for an remote control event. [ 59.445111][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 59.445139][ T25] dvb-usb: error while querying for an remote control event. [ 59.450028][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 59.605619][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 59.605902][ T25] dvb-usb: error while querying for an remote control event. [ 59.633510][ T2431] usb 7-1: USB disconnect, device number 2 [ 59.895966][ T2431] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 60.209047][ T6288] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20002 [ 61.371930][ T5880] usb 40-1: device descriptor read/8, error -110 [ 61.485091][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 61.575476][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.576685][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.578638][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.578852][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.579334][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.580555][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.580851][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.581288][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.581783][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 61.604570][ T6316] vlan2: entered promiscuous mode [ 61.604583][ T6316] hsr0: entered promiscuous mode [ 61.604717][ T6316] vlan2: entered allmulticast mode [ 61.604725][ T6316] hsr0: entered allmulticast mode [ 61.604732][ T6316] hsr_slave_0: entered allmulticast mode [ 61.604740][ T6316] hsr_slave_1: entered allmulticast mode [ 61.611280][ T6316] hsr_slave_0: left promiscuous mode [ 61.615009][ T6316] hsr_slave_1: left promiscuous mode [ 61.645650][ T35] kernel read not supported for file /rfkill (pid: 35 comm: kworker/3:0) [ 61.681500][ T66] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 61.708839][ T6327] fuse: blksize only supported for fuseblk [ 61.803857][ T2431] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 61.832629][ T6337] FAULT_INJECTION: forcing a failure. [ 61.832629][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 61.832651][ T6337] CPU: 3 UID: 0 PID: 6337 Comm: syz.0.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.832665][ T6337] Tainted: [L]=SOFTLOCKUP [ 61.832669][ T6337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.832675][ T6337] Call Trace: [ 61.832679][ T6337] [ 61.832683][ T6337] dump_stack_lvl+0x100/0x190 [ 61.832701][ T6337] should_fail_ex.cold+0x5/0xa [ 61.832717][ T6337] should_failslab+0xc2/0x120 [ 61.832731][ T6337] __kmalloc_noprof+0xfc/0x840 [ 61.832743][ T6337] ? tomoyo_realpath_from_path+0x19c/0x690 [ 61.832755][ T6337] ? tomoyo_encode2+0xfb/0x3c0 [ 61.832768][ T6337] tomoyo_encode2+0xfb/0x3c0 [ 61.832781][ T6337] tomoyo_encode+0x29/0x50 [ 61.832791][ T6337] tomoyo_path_perm+0x3a7/0x460 [ 61.832809][ T6337] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 61.832827][ T6337] ? find_held_lock+0x2b/0x80 [ 61.832843][ T6337] ? _raw_spin_unlock+0x28/0x50 [ 61.832865][ T6337] ? simple_lookup+0xfc/0x1d0 [ 61.832878][ T6337] ? lookup_one_qstr_excl+0xaf/0x250 [ 61.832895][ T6337] tomoyo_path_symlink+0x97/0xe0 [ 61.832907][ T6337] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 61.832920][ T6337] ? lock_acquire+0x1d1/0x380 [ 61.832936][ T6337] security_path_symlink+0x152/0x2d0 [ 61.832952][ T6337] filename_symlinkat+0x122/0x560 [ 61.832969][ T6337] ? __pfx_filename_symlinkat+0x10/0x10 [ 61.832985][ T6337] ? strncpy_from_user+0x19d/0x2d0 [ 61.833001][ T6337] ? do_getname+0x191/0x390 [ 61.833018][ T6337] __ia32_sys_symlink+0x78/0xb0 [ 61.833032][ T6337] __do_fast_syscall_32+0x13a/0x8b0 [ 61.833048][ T6337] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.833064][ T6337] do_fast_syscall_32+0x32/0x70 [ 61.833088][ T6337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.833102][ T6337] RIP: 0023:0xf7f14fec [ 61.833115][ T6337] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 61.833121][ T6337] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 61.833133][ T6337] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000100 [ 61.833140][ T6337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.833147][ T6337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.833154][ T6337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.833161][ T6337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.833175][ T6337] [ 61.907736][ T5880] usb usb40-port1: attempt power cycle [ 61.957369][ T2431] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 61.965216][ T2431] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.965385][ T2431] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 61.965424][ T2431] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 61.965953][ T2431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.394682][ T6343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 62.394708][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.396080][ T6343] vhci_hcd vhci_hcd.0: Device attached [ 62.447973][ T2431] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 62.447989][ T2431] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 62.447996][ T2431] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 62.484280][ T2431] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 62.525722][ T2431] usb 8-1: USB disconnect, device number 8 [ 62.915735][ T6355] netlink: 'syz.0.131': attribute type 3 has an invalid length. [ 62.936120][ T6357] netlink: 'syz.0.131': attribute type 3 has an invalid length. [ 62.993872][ T5880] usb 40-1: SetAddress Request (4) to port 0 [ 62.993910][ T5880] usb 40-1: new SuperSpeed USB device number 4 using vhci_hcd [ 63.002685][ T6343] rdma_rxe: rxe_newlink: failed to add wg2 [ 63.056069][ T6343] random: crng reseeded on system resumption [ 63.151644][ T6366] loop0: detected capacity change from 0 to 3904 [ 63.169920][ T6344] vhci_hcd: connection reset by peer [ 63.170020][ T5575] vhci_hcd vhci_hcd.1: stop threads [ 63.170033][ T5575] vhci_hcd vhci_hcd.1: release socket [ 63.170094][ T5575] vhci_hcd vhci_hcd.1: disconnect device [ 63.383535][ T6366] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 63.383568][ T6366] ldm_validate_privheads(): Disk read failed. [ 63.383606][ T6366] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be 'lf¹<¾¼Â’/ÙD5P'. [ 63.383622][ T6366] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 63.383632][ T6366] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 63.383642][ T6366] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 63.383652][ T6366] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 63.383684][ T6366] loop0: [ 63.398406][ T6366] loop0: partition table partially beyond EOD, truncated [ 64.019275][ T6376] FAULT_INJECTION: forcing a failure. [ 64.019275][ T6376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.019297][ T6376] CPU: 2 UID: 0 PID: 6376 Comm: syz.3.136 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.019312][ T6376] Tainted: [L]=SOFTLOCKUP [ 64.019315][ T6376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.019322][ T6376] Call Trace: [ 64.019326][ T6376] [ 64.019330][ T6376] dump_stack_lvl+0x100/0x190 [ 64.019349][ T6376] should_fail_ex.cold+0x5/0xa [ 64.019361][ T6376] ? prepare_alloc_pages+0x16d/0x5b0 [ 64.019377][ T6376] should_fail_alloc_page+0xeb/0x140 [ 64.019392][ T6376] prepare_alloc_pages+0x1f0/0x5b0 [ 64.019408][ T6376] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 64.019420][ T6376] ? __pfx_get_page_from_freelist+0x10/0x10 [ 64.019431][ T6376] ? prepare_alloc_pages+0x1f0/0x5b0 [ 64.019447][ T6376] ? rcu_is_watching+0x13/0xc0 [ 64.019459][ T6376] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 64.019471][ T6376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.019486][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 64.019516][ T6376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.019528][ T6376] ? is_bpf_text_address+0x94/0x1a0 [ 64.019544][ T6376] ? __kernel_text_address+0xd/0x30 [ 64.019560][ T6376] ? do_raw_spin_lock+0x128/0x260 [ 64.019577][ T6376] ? find_held_lock+0x2b/0x80 [ 64.019588][ T6376] ? stack_depot_save_flags+0x49a/0x9f0 [ 64.019609][ T6376] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 64.019623][ T6376] ? policy_nodemask+0xed/0x4f0 [ 64.019639][ T6376] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 64.019651][ T6376] ? do_fast_syscall_32+0x32/0x70 [ 64.019674][ T6376] __kasan_populate_vmalloc+0xf0/0x210 [ 64.019689][ T6376] alloc_vmap_area+0x95d/0x2bb0 [ 64.019706][ T6376] ? kasan_save_track+0x14/0x30 [ 64.019718][ T6376] ? __kasan_kmalloc+0xaa/0xb0 [ 64.019731][ T6376] ? __pfx_alloc_vmap_area+0x10/0x10 [ 64.019744][ T6376] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.019759][ T6376] ? __get_vm_area_node+0x124/0x350 [ 64.019774][ T6376] __get_vm_area_node+0x1ed/0x350 [ 64.019790][ T6376] __vmalloc_node_range_noprof+0x268/0x1420 [ 64.019805][ T6376] ? bpf_prog_calc_tag+0x63/0x340 [ 64.019820][ T6376] ? rcu_is_watching+0x13/0xc0 [ 64.019830][ T6376] ? trace_contention_end+0x126/0x160 [ 64.019847][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 64.019862][ T6376] ? bpf_prog_calc_tag+0x63/0x340 [ 64.019877][ T6376] ? __pfx___css_rstat_updated+0x10/0x10 [ 64.019894][ T6376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 64.019909][ T6376] ? lock_acquire+0x1d1/0x380 [ 64.019925][ T6376] ? rcu_is_watching+0x13/0xc0 [ 64.019936][ T6376] ? bpf_prog_calc_tag+0x63/0x340 [ 64.019950][ T6376] __vmalloc_node_noprof+0xad/0xf0 [ 64.019964][ T6376] ? bpf_prog_calc_tag+0x63/0x340 [ 64.019980][ T6376] __vmalloc_noprof+0xa3/0x120 [ 64.019994][ T6376] ? __pfx___vmalloc_noprof+0x10/0x10 [ 64.020009][ T6376] ? lockdep_init_map_type+0x5c/0x250 [ 64.020025][ T6376] ? mutex_init_lockdep+0xf1/0x120 [ 64.020042][ T6376] bpf_prog_calc_tag+0x63/0x340 [ 64.020058][ T6376] bpf_jit_subprogs+0x11bb/0x4660 [ 64.020085][ T6376] bpf_fixup_call_args+0x2cd/0x340 [ 64.020103][ T6376] bpf_check+0x434d/0xa980 [ 64.020128][ T6376] ? __pfx_bpf_check+0x10/0x10 [ 64.020143][ T6376] ? lock_acquire+0x1d1/0x380 [ 64.020157][ T6376] ? find_held_lock+0x2b/0x80 [ 64.020168][ T6376] ? bpf_prog_load+0x1a09/0x2a80 [ 64.020185][ T6376] ? __asan_memset+0x23/0x50 [ 64.020197][ T6376] ? bpf_prog_load+0x1ac3/0x2a80 [ 64.020212][ T6376] bpf_prog_load+0x1ac3/0x2a80 [ 64.020229][ T6376] ? __pfx_bpf_prog_load+0x10/0x10 [ 64.020260][ T6376] __sys_bpf+0x1f46/0x4a30 [ 64.020274][ T6376] ? __pfx___sys_bpf+0x10/0x10 [ 64.020284][ T6376] ? lock_acquire+0x1d1/0x380 [ 64.020297][ T6376] ? get_pid_task+0x2a/0x250 [ 64.020308][ T6376] ? find_held_lock+0x2b/0x80 [ 64.020319][ T6376] ? get_pid_task+0xfc/0x250 [ 64.020329][ T6376] ? get_pid_task+0xfc/0x250 [ 64.020343][ T6376] ? proc_fail_nth_write+0x9f/0x220 [ 64.020355][ T6376] ? find_held_lock+0x2b/0x80 [ 64.020369][ T6376] ? rcu_read_lock_any_held+0x6a/0x90 [ 64.020380][ T6376] ? find_held_lock+0x2b/0x80 [ 64.020391][ T6376] ? ksys_write+0x190/0x250 [ 64.020401][ T6376] ? ksys_write+0x190/0x250 [ 64.020412][ T6376] ? lock_acquire+0x1d1/0x380 [ 64.020435][ T6376] ? fput+0x7c/0x100 [ 64.020450][ T6376] ? __ia32_sys_bpf+0xcc/0x170 [ 64.020460][ T6376] __ia32_sys_bpf+0xcc/0x170 [ 64.020472][ T6376] ? __do_fast_syscall_32+0xb3/0x8b0 [ 64.020489][ T6376] __do_fast_syscall_32+0x13a/0x8b0 [ 64.020505][ T6376] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.020522][ T6376] do_fast_syscall_32+0x32/0x70 [ 64.020538][ T6376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.020552][ T6376] RIP: 0023:0xf707efec [ 64.020566][ T6376] Code: Unable to access opcode bytes at 0xf707efc2. [ 64.020570][ T6376] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 64.020581][ T6376] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 64.020587][ T6376] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.020593][ T6376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.020600][ T6376] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.020605][ T6376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.020618][ T6376] [ 64.330202][ T6384] FAULT_INJECTION: forcing a failure. [ 64.330202][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 64.330223][ T6384] CPU: 2 UID: 0 PID: 6384 Comm: syz.0.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.330244][ T6384] Tainted: [L]=SOFTLOCKUP [ 64.330248][ T6384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.330254][ T6384] Call Trace: [ 64.330258][ T6384] [ 64.330262][ T6384] dump_stack_lvl+0x100/0x190 [ 64.330280][ T6384] should_fail_ex.cold+0x5/0xa [ 64.330294][ T6384] should_failslab+0xc2/0x120 [ 64.330309][ T6384] kmem_cache_alloc_noprof+0x92/0x6a0 [ 64.330322][ T6384] ? do_getname+0x35/0x390 [ 64.330339][ T6384] do_getname+0x35/0x390 [ 64.330355][ T6384] do_sys_openat2+0xc7/0x1e0 [ 64.330370][ T6384] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.330386][ T6384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 64.330399][ T6384] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 64.330414][ T6384] __ia32_compat_sys_openat+0x12d/0x210 [ 64.330430][ T6384] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 64.330452][ T6384] __do_fast_syscall_32+0x13a/0x8b0 [ 64.330471][ T6384] do_fast_syscall_32+0x32/0x70 [ 64.330488][ T6384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.330502][ T6384] RIP: 0023:0xf7f14fec [ 64.330514][ T6384] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 64.330519][ T6384] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 64.330529][ T6384] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 64.330536][ T6384] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 64.330542][ T6384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.330548][ T6384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.330554][ T6384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.330566][ T6384] [ 64.384973][ T6145] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 64.544552][ T6145] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 64.548725][ T6145] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.548755][ T6145] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 64.548768][ T6145] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 64.548786][ T6145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.603844][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.755617][ T25] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 64.756728][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.756751][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 64.756764][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 64.756783][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.798247][ T6397] cgroup: fork rejected by pids controller in /syz2 [ 64.923855][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.961469][ T6145] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 64.961486][ T6145] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 64.961493][ T6145] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 64.964822][ T6145] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 64.972731][ T6145] usb 8-1: USB disconnect, device number 9 [ 65.063882][ T5813] usb 5-1: device descriptor read/64, error -71 [ 65.164649][ T25] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 65.164667][ T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 65.164673][ T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 65.165497][ T25] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 65.169716][ T25] usb 6-1: USB disconnect, device number 3 [ 65.303983][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.343884][ T6162] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.433954][ T5813] usb 5-1: device descriptor read/64, error -71 [ 65.493891][ T6162] usb 7-1: Using ep0 maxpacket: 16 [ 65.504750][ T6162] usb 7-1: unable to get BOS descriptor or descriptor too short [ 65.504777][ T6162] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 65.504793][ T6162] usb 7-1: no configurations [ 65.504799][ T6162] usb 7-1: can't read configurations, error -22 [ 65.529851][ T6442] capability: warning: `syz.3.148' uses deprecated v2 capabilities in a way that may be insecure [ 65.544102][ T5813] usb usb5-port1: attempt power cycle [ 65.702502][ T6449] FAULT_INJECTION: forcing a failure. [ 65.702502][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.702523][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.1.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.702538][ T6449] Tainted: [L]=SOFTLOCKUP [ 65.702542][ T6449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.702548][ T6449] Call Trace: [ 65.702552][ T6449] [ 65.702556][ T6449] dump_stack_lvl+0x100/0x190 [ 65.702574][ T6449] should_fail_ex.cold+0x5/0xa [ 65.702589][ T6449] strncpy_from_user+0x3b/0x2d0 [ 65.702606][ T6449] do_getname+0x78/0x390 [ 65.702622][ T6449] do_sys_openat2+0xc7/0x1e0 [ 65.702643][ T6449] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.702659][ T6449] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 65.702672][ T6449] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 65.702687][ T6449] __ia32_compat_sys_openat+0x12d/0x210 [ 65.702704][ T6449] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 65.702725][ T6449] __do_fast_syscall_32+0x13a/0x8b0 [ 65.702744][ T6449] do_fast_syscall_32+0x32/0x70 [ 65.702761][ T6449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.702775][ T6449] RIP: 0023:0xf7f36fec [ 65.702787][ T6449] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 65.702792][ T6449] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 65.702803][ T6449] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 65.702810][ T6449] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 65.702816][ T6449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.702821][ T6449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.702827][ T6449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.702840][ T6449] [ 65.805080][ T6452] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 65.883956][ T5813] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.904371][ T5813] usb 5-1: device descriptor read/8, error -71 [ 66.143927][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.164332][ T5813] usb 5-1: device descriptor read/8, error -71 [ 66.195993][ T6158] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 66.257620][ T6475] FAULT_INJECTION: forcing a failure. [ 66.257620][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 66.257651][ T6475] CPU: 3 UID: 0 PID: 6475 Comm: syz.1.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.257673][ T6475] Tainted: [L]=SOFTLOCKUP [ 66.257680][ T6475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.257691][ T6475] Call Trace: [ 66.257697][ T6475] [ 66.257704][ T6475] dump_stack_lvl+0x100/0x190 [ 66.257734][ T6475] should_fail_ex.cold+0x5/0xa [ 66.257759][ T6475] should_failslab+0xc2/0x120 [ 66.257782][ T6475] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.257802][ T6475] ? alloc_empty_file+0x5b/0x1c0 [ 66.257831][ T6475] alloc_empty_file+0x5b/0x1c0 [ 66.257855][ T6475] path_openat+0xdb/0x2440 [ 66.257880][ T6475] ? __pfx_path_openat+0x10/0x10 [ 66.257908][ T6475] do_file_open+0x20e/0x430 [ 66.257930][ T6475] ? __pfx_do_file_open+0x10/0x10 [ 66.257967][ T6475] ? _raw_spin_unlock+0x28/0x50 [ 66.257990][ T6475] ? alloc_fd+0x471/0x7a0 [ 66.258018][ T6475] do_sys_openat2+0x10f/0x1e0 [ 66.258065][ T6475] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.258091][ T6475] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 66.258112][ T6475] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 66.258138][ T6475] __ia32_compat_sys_openat+0x12d/0x210 [ 66.258165][ T6475] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 66.258201][ T6475] __do_fast_syscall_32+0x13a/0x8b0 [ 66.258232][ T6475] do_fast_syscall_32+0x32/0x70 [ 66.258259][ T6475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.258287][ T6475] RIP: 0023:0xf7f36fec [ 66.258307][ T6475] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 66.258315][ T6475] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 66.258332][ T6475] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 66.258343][ T6475] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 66.258354][ T6475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.258364][ T6475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.258374][ T6475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.258421][ T6475] [ 66.275718][ T5813] usb usb5-port1: unable to enumerate USB device [ 66.364842][ T6158] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 66.366273][ T6158] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.366307][ T6158] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 66.366328][ T6158] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 66.366355][ T6158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.563853][ T6162] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.679044][ T6481] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.688979][ T6481] __nla_validate_parse: 26 callbacks suppressed [ 66.688995][ T6481] netlink: 76 bytes leftover after parsing attributes in process `syz.1.164'. [ 66.689451][ T6481] netlink: 96 bytes leftover after parsing attributes in process `syz.1.164'. [ 66.734566][ T6162] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 66.735846][ T6162] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.735869][ T6162] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 66.735882][ T6162] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 66.735900][ T6162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.777070][ T6158] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 66.777133][ T6158] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 66.777141][ T6158] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 66.779670][ T6158] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 66.787377][ T6158] usb 8-1: USB disconnect, device number 10 [ 67.074105][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.148586][ T6162] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 67.148611][ T6162] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 67.148622][ T6162] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 67.150312][ T6162] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 67.157173][ T6162] usb 7-1: USB disconnect, device number 4 [ 67.223984][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 67.224621][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.225586][ T35] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 67.225620][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.225637][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.225656][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.225675][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.225705][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.430275][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 67.430298][ T35] usbtmc 6-1:16.0: can't read capabilities [ 67.694763][ T6496] wg2 speed is unknown, defaulting to 1000 [ 67.736461][ T66] Bluetooth: hci3: Malformed LE Event: 0x1b [ 68.033820][ T5880] usb 40-1: device descriptor read/8, error -110 [ 68.424383][ T5880] usb usb40-port1: unable to enumerate USB device [ 68.818198][ T6526] FAULT_INJECTION: forcing a failure. [ 68.818198][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 68.818230][ T6526] CPU: 2 UID: 0 PID: 6526 Comm: syz.2.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.818253][ T6526] Tainted: [L]=SOFTLOCKUP [ 68.818260][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.818276][ T6526] Call Trace: [ 68.818282][ T6526] [ 68.818287][ T6526] dump_stack_lvl+0x100/0x190 [ 68.818305][ T6526] should_fail_ex.cold+0x5/0xa [ 68.818320][ T6526] should_failslab+0xc2/0x120 [ 68.818334][ T6526] __kmalloc_node_noprof+0xff/0x880 [ 68.818347][ T6526] ? __get_vm_area_node+0x1ff/0x350 [ 68.818360][ T6526] ? __get_vm_area_node+0x22b/0x350 [ 68.818373][ T6526] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 68.818391][ T6526] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 68.818406][ T6526] ? rcu_is_watching+0x13/0xc0 [ 68.818419][ T6526] ? __lock_acquire+0x5c0/0x1f40 [ 68.818434][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.818449][ T6526] ? __pfx___css_rstat_updated+0x10/0x10 [ 68.818466][ T6526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.818482][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.818497][ T6526] ? rcu_is_watching+0x13/0xc0 [ 68.818508][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.818522][ T6526] __vmalloc_node_noprof+0xad/0xf0 [ 68.818537][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.818552][ T6526] __vmalloc_noprof+0xa3/0x120 [ 68.818567][ T6526] ? __pfx___vmalloc_noprof+0x10/0x10 [ 68.818581][ T6526] ? lockdep_init_map_type+0x5c/0x250 [ 68.818597][ T6526] ? mutex_init_lockdep+0xf1/0x120 [ 68.818614][ T6526] bpf_prog_calc_tag+0x63/0x340 [ 68.818630][ T6526] bpf_jit_subprogs+0x11bb/0x4660 [ 68.818656][ T6526] bpf_fixup_call_args+0x2cd/0x340 [ 68.818674][ T6526] bpf_check+0x434d/0xa980 [ 68.818699][ T6526] ? __pfx_bpf_check+0x10/0x10 [ 68.818713][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.818728][ T6526] ? find_held_lock+0x2b/0x80 [ 68.818739][ T6526] ? bpf_prog_load+0x1a09/0x2a80 [ 68.818755][ T6526] ? __asan_memset+0x23/0x50 [ 68.818768][ T6526] ? bpf_prog_load+0x1ac3/0x2a80 [ 68.818784][ T6526] bpf_prog_load+0x1ac3/0x2a80 [ 68.818801][ T6526] ? __pfx_bpf_prog_load+0x10/0x10 [ 68.818827][ T6526] __sys_bpf+0x1f46/0x4a30 [ 68.818841][ T6526] ? __pfx___sys_bpf+0x10/0x10 [ 68.818851][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.818865][ T6526] ? get_pid_task+0x2a/0x250 [ 68.818876][ T6526] ? find_held_lock+0x2b/0x80 [ 68.818887][ T6526] ? get_pid_task+0xfc/0x250 [ 68.818897][ T6526] ? get_pid_task+0xfc/0x250 [ 68.818910][ T6526] ? proc_fail_nth_write+0x9f/0x220 [ 68.818922][ T6526] ? find_held_lock+0x2b/0x80 [ 68.818936][ T6526] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.818948][ T6526] ? find_held_lock+0x2b/0x80 [ 68.818958][ T6526] ? ksys_write+0x190/0x250 [ 68.818969][ T6526] ? ksys_write+0x190/0x250 [ 68.818979][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.819002][ T6526] ? fput+0x7c/0x100 [ 68.819017][ T6526] ? __ia32_sys_bpf+0xcc/0x170 [ 68.819027][ T6526] __ia32_sys_bpf+0xcc/0x170 [ 68.819039][ T6526] ? __do_fast_syscall_32+0xb3/0x8b0 [ 68.819056][ T6526] __do_fast_syscall_32+0x13a/0x8b0 [ 68.819072][ T6526] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.819089][ T6526] do_fast_syscall_32+0x32/0x70 [ 68.819105][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.819119][ T6526] RIP: 0023:0xf702efec [ 68.819132][ T6526] Code: Unable to access opcode bytes at 0xf702efc2. [ 68.819137][ T6526] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 68.819147][ T6526] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 68.819154][ T6526] RDX: 0000000000000094 RSI ** replaying previous printk message ** [ 68.819154][ T6526] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.819160][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.819166][ T6526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.819172][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.819185][ T6526] [ 68.819190][ T6526] warn_alloc: 2 callbacks suppressed [ 68.819196][ T6526] syz.2.184: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 68.819230][ T6526] CPU: 2 UID: 0 PID: 6526 Comm: syz.2.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.819250][ T6526] Tainted: [L]=SOFTLOCKUP [ 68.819256][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.819264][ T6526] Call Trace: [ 68.819275][ T6526] [ 68.819281][ T6526] dump_stack_lvl+0x100/0x190 [ 68.819306][ T6526] warn_alloc.cold+0x9e/0xb2 [ 68.819324][ T6526] ? __pfx_warn_alloc+0x10/0x10 [ 68.819337][ T6526] ? dump_stack_lvl+0x17c/0x190 [ 68.819357][ T6526] ? rcu_is_watching+0x13/0xc0 [ 68.819374][ T6526] ? __kasan_kmalloc+0x8a/0xb0 [ 68.819394][ T6526] ? __kmalloc_node_noprof+0x360/0x880 [ 68.819414][ T6526] ? __get_vm_area_node+0x1ff/0x350 [ 68.819436][ T6526] ? __get_vm_area_node+0x22b/0x350 [ 68.819454][ T6526] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 68.819471][ T6526] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 68.819487][ T6526] ? rcu_is_watching+0x13/0xc0 [ 68.819499][ T6526] ? __lock_acquire+0x5c0/0x1f40 [ 68.819514][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.819529][ T6526] ? __pfx___css_rstat_updated+0x10/0x10 [ 68.819546][ T6526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.819562][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.819577][ T6526] ? rcu_is_watching+0x13/0xc0 [ 68.819588][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.819602][ T6526] __vmalloc_node_noprof+0xad/0xf0 [ 68.819617][ T6526] ? bpf_prog_calc_tag+0x63/0x340 [ 68.819632][ T6526] __vmalloc_noprof+0xa3/0x120 [ 68.819647][ T6526] ? __pfx___vmalloc_noprof+0x10/0x10 [ 68.819661][ T6526] ? lockdep_init_map_type+0x5c/0x250 [ 68.819677][ T6526] ? mutex_init_lockdep+0xf1/0x120 [ 68.819694][ T6526] bpf_prog_calc_tag+0x63/0x340 [ 68.819710][ T6526] bpf_jit_subprogs+0x11bb/0x4660 [ 68.819736][ T6526] bpf_fixup_call_args+0x2cd/0x340 [ 68.819754][ T6526] bpf_check+0x434d/0xa980 [ 68.819782][ T6526] ? __pfx_bpf_check+0x10/0x10 [ 68.819797][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.819812][ T6526] ? find_held_lock+0x2b/0x80 [ 68.819822][ T6526] ? bpf_prog_load+0x1a09/0x2a80 [ 68.819839][ T6526] ? __asan_memset+0x23/0x50 [ 68.819852][ T6526] ? bpf_prog_load+0x1ac3/0x2a80 [ 68.819866][ T6526] bpf_prog_load+0x1ac3/0x2a80 [ 68.819883][ T6526] ? __pfx_bpf_prog_load+0x10/0x10 [ 68.819909][ T6526] __sys_bpf+0x1f46/0x4a30 [ 68.819923][ T6526] ? __pfx___sys_bpf+0x10/0x10 [ 68.819933][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.819946][ T6526] ? get_pid_task+0x2a/0x250 [ 68.819957][ T6526] ? find_held_lock+0x2b/0x80 [ 68.819968][ T6526] ? get_pid_task+0xfc/0x250 [ 68.819978][ T6526] ? get_pid_task+0xfc/0x250 [ 68.819992][ T6526] ? proc_fail_nth_write+0x9f/0x220 [ 68.820003][ T6526] ? find_held_lock+0x2b/0x80 [ 68.820017][ T6526] ? rcu_read_lock_any_held+0x6a/0x90 [ 68.820028][ T6526] ? find_held_lock+0x2b/0x80 [ 68.820039][ T6526] ? ksys_write+0x190/0x250 [ 68.820049][ T6526] ? ksys_write+0x190/0x250 [ 68.820060][ T6526] ? lock_acquire+0x1d1/0x380 [ 68.820083][ T6526] ? fput+0x7c/0x100 [ 68.820097][ T6526] ? __ia32_sys_bpf+0xcc/0x170 [ 68.820108][ T6526] __ia32_sys_bpf+0xcc/0x170 [ 68.820120][ T6526] ? __do_fast_syscall_32+0xb3/0x8b0 [ 68.820137][ T6526] __do_fast_syscall_32+0x13a/0x8b0 [ 68.820153][ T6526] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.820170][ T6526] do_fast_syscall_32+0x32/0x70 [ 68.820187][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.820200][ T6526] RIP: 0023:0xf702efec [ 68.820210][ T6526] Code: Unable to access opcode bytes at 0xf702efc2. [ 68.820214][ T6526] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 68.820224][ T6526] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 68.820230][ T6526] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.820237][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.820242][ T6526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.820248][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.820261][ T6526] [ 68.820266][ T6526] Mem-Info: [ 68.820275][ T6526] active_anon:7715 inactive_anon:539 isolated_anon:0 [ 68.820275][ T6526] active_file:14 inactive_file:64147 isolated_file:0 [ 68.820275][ T6526] unevictable:1000 dirty:24 writeback:0 [ 68.820275][ T6526] slab_reclaimable:9994 slab_unreclaimable:52904 [ 68.820275][ T6526] mapped:24168 shmem:3575 pagetables:1121 [ 68.820275][ T6526] sec_pagetables:292 bounce:0 [ 68.820275][ T6526] kernel_misc_reclaimable:0 [ 68.820275][ T6526] free:32016 free_pcp:9419 free_cma:0 [ 68.820300][ T6526] Node 0 active_anon:160kB inactive_anon:156kB active_file:56kB inactive_file:152kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:2044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:1556kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 68.820326][ T6526] Node 1 active_anon:30700kB inactive_anon:2000kB active_file:0kB inactive_file:256436kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96568kB dirty:96kB writeback:0kB shmem:12256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4640kB pagetables:2928kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 68.820352][ T6526] Node 0 DMA free:2032kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:40kB free_cma:0kB [ 68.820380][ T6526] lowmem_reserve[]: 0 277 277 277 277 [ 68.820399][ T6526] Node 0 DMA32 free:15748kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:156kB inactive_anon:156kB active_file:56kB inactive_file:152kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:5956kB local_pcp:632kB free_cma:0kB [ 68.820427][ T6526] lowmem_reserve[]: 0 0 0 0 0 [ 68.820444][ T6526] Node 1 DMA32 free:110284kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30700kB inactive_anon:2000kB active_file:0kB inactive_file:256436kB unevictable:2000kB writepending:96kB zspages:1740kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:31672kB local_pcp:8856kB free_cma:0kB [ 68.820488][ T6526] lowmem_reserve[]: 0 0 0 0 0 [ 68.820517][ T6526] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 1*16kB (M) 6*32kB (UM) 2*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2032kB [ 68.820602][ T6526] Node 0 DMA32: 7*4kB (ME) 38*8kB (UME) 48*16kB (UME) 73*32kB (UME) 48*64kB (UME) 8*128kB (UM) 4*256kB (M) 4*512kB (UM) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 15724kB [ 68.820680][ T6526] Node 1 DMA32: 747*4kB (UME) 793*8kB (UME) 324*16kB (UME) 229*32kB (UME) 104*64kB (UME) 42*128kB (UME) 16*256kB (UM) 15*512kB (UM) 11*1024kB (UME) 8*2048kB (UM) 9*4096kB (UM) = 110164kB [ 68.820761][ T6526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.820770][ T6526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.820779][ T6526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.820787][ T6526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.820794][ T6526] 68453 total pagecache pages [ 68.820798][ T6526] 721 pages in swap cache [ 68.820802][ T6526] Free swap = 119284kB [ 68.820805][ T6526] Total swap = 124996kB [ 68.820809][ T6526] 524155 pages RAM [ 68.820812][ T6526] 0 pages HighMem/MovableOnly [ 68.820816][ T6526] 212121 pages reserved [ 68.820819][ T6526] 0 pages cma reserved [ 68.952928][ T6536] [ 69.236417][ T6536] ====================================================== [ 69.238658][ T6536] WARNING: possible circular locking dependency detected [ 69.240902][ T6536] syzkaller #0 Tainted: G L [ 69.242846][ T6536] ------------------------------------------------------ [ 69.244991][ T6536] syz.0.187/6536 is trying to acquire lock: [ 69.246845][ T6536] ffffffff903fe7e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.250363][ T6536] [ 69.250363][ T6536] but task is already holding lock: [ 69.252647][ T6536] ffff8880131ae9c0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 69.255877][ T6536] [ 69.255877][ T6536] which lock already depends on the new lock. [ 69.255877][ T6536] [ 69.259088][ T6536] [ 69.259088][ T6536] the existing dependency chain (in reverse order) is: [ 69.261963][ T6536] [ 69.261963][ T6536] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 69.264675][ T6536] lock_acquire+0x1d1/0x380 [ 69.266274][ T6536] down_write+0x8b/0x1f0 [ 69.267805][ T6536] configfs_depend_item_unlocked+0xf3/0x6a0 [ 69.269828][ T6536] usbg_make_tpg+0x251/0x610 [ 69.271459][ T6536] target_fabric_make_tpg+0xab/0x8c0 [ 69.273315][ T6536] configfs_mkdir+0x525/0xd40 [ 69.274972][ T6536] vfs_mkdir+0x364/0x850 [ 69.276483][ T6536] filename_mkdirat+0x48b/0x5e0 [ 69.278220][ T6536] __ia32_sys_mkdir+0x6a/0x90 [ 69.279855][ T6536] __do_fast_syscall_32+0x13a/0x8b0 [ 69.281751][ T6536] do_fast_syscall_32+0x32/0x70 [ 69.283467][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.285597][ T6536] [ 69.285597][ T6536] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 69.288168][ T6536] lock_acquire+0x1d1/0x380 [ 69.290260][ T6536] __mutex_lock+0x1a4/0x1bd0 [ 69.292310][ T6536] tcm_alloc_inst+0x5f/0x1e0 [ 69.294515][ T6536] try_get_usb_function_instance+0x136/0x1f0 [ 69.297197][ T6536] usb_get_function_instance+0x16/0x70 [ 69.299245][ T6536] function_make+0x18c/0x3f0 [ 69.300879][ T6536] configfs_mkdir+0x525/0xd40 [ 69.302530][ T6536] vfs_mkdir+0x364/0x850 [ 69.304078][ T6536] filename_mkdirat+0x48b/0x5e0 [ 69.305769][ T6536] __ia32_sys_mkdir+0x6a/0x90 [ 69.307422][ T6536] __do_fast_syscall_32+0x13a/0x8b0 [ 69.309247][ T6536] do_fast_syscall_32+0x32/0x70 [ 69.310974][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.313114][ T6536] [ 69.313114][ T6536] -> #1 (func_lock){+.+.}-{4:4}: [ 69.315362][ T6536] lock_acquire+0x1d1/0x380 [ 69.316960][ T6536] __mutex_lock+0x1a4/0x1bd0 [ 69.318615][ T6536] try_get_usb_function_instance+0x26/0x1f0 [ 69.320631][ T6536] usb_get_function_instance+0x16/0x70 [ 69.322514][ T6536] function_make+0x18c/0x3f0 [ 69.324146][ T6536] configfs_mkdir+0x525/0xd40 [ 69.325805][ T6536] vfs_mkdir+0x364/0x850 [ 69.327334][ T6536] filename_mkdirat+0x48b/0x5e0 [ 69.329059][ T6536] __ia32_sys_mkdir+0x6a/0x90 [ 69.330716][ T6536] __do_fast_syscall_32+0x13a/0x8b0 [ 69.332523][ T6536] do_fast_syscall_32+0x32/0x70 [ 69.334243][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.336363][ T6536] [ 69.336363][ T6536] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 69.339172][ T6536] check_prev_add+0xeb/0xe60 [ 69.341342][ T6536] __lock_acquire+0x1528/0x1f40 [ 69.343649][ T6536] lock_acquire+0x1d1/0x380 [ 69.345822][ T6536] __mutex_lock+0x1a4/0x1bd0 [ 69.348080][ T6536] uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.350964][ T6536] configfs_symlink+0x695/0x1340 [ 69.353326][ T6536] vfs_symlink+0x178/0x4d0 [ 69.355488][ T6536] filename_symlinkat+0x2a6/0x560 [ 69.357877][ T6536] __ia32_sys_symlinkat+0x9b/0xe0 [ 69.360227][ T6536] __do_fast_syscall_32+0x13a/0x8b0 [ 69.362675][ T6536] do_fast_syscall_32+0x32/0x70 [ 69.364978][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.367761][ T6536] [ 69.367761][ T6536] other info that might help us debug this: [ 69.367761][ T6536] [ 69.372041][ T6536] Chain exists of: [ 69.372041][ T6536] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 69.372041][ T6536] [ 69.378276][ T6536] Possible unsafe locking scenario: [ 69.378276][ T6536] [ 69.381458][ T6536] CPU0 CPU1 [ 69.383775][ T6536] ---- ---- [ 69.386000][ T6536] lock(&sb->s_type->i_mutex_key#25); [ 69.388324][ T6536] lock(tpg_instances_lock); [ 69.391444][ T6536] lock(&sb->s_type->i_mutex_key#25); [ 69.394855][ T6536] lock(gadget_subsys.su_mutex); [ 69.397031][ T6536] [ 69.397031][ T6536] *** DEADLOCK *** [ 69.397031][ T6536] [ 69.400437][ T6536] locks held by syz.0.187/6536: 2, last CPU#2: [ 69.403101][ T6536] #0: ffff888022306460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 69.407118][ T6536] #1: ffff8880131ae9c0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 69.411737][ T6536] [ 69.411737][ T6536] stack backtrace: [ 69.414293][ T6536] CPU: 2 UID: 0 PID: 6536 Comm: syz.0.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.418782][ T6536] Tainted: [L]=SOFTLOCKUP [ 69.420625][ T6536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.424917][ T6536] Call Trace: [ 69.426370][ T6536] [ 69.427653][ T6536] dump_stack_lvl+0x100/0x190 [ 69.429750][ T6536] print_circular_bug.cold+0x178/0x1be [ 69.432183][ T6536] check_noncircular+0x146/0x160 [ 69.434209][ T6536] check_prev_add+0xeb/0xe60 [ 69.436070][ T6536] __lock_acquire+0x1528/0x1f40 [ 69.438148][ T6536] lock_acquire+0x1d1/0x380 [ 69.440074][ T6536] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.442747][ T6536] ? __pfx___might_resched+0x10/0x10 [ 69.445044][ T6536] __mutex_lock+0x1a4/0x1bd0 [ 69.447067][ T6536] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.449783][ T6536] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.452475][ T6536] ? __lock_acquire+0xe8b/0x1f40 [ 69.454640][ T6536] ? __pfx___mutex_lock+0x10/0x10 [ 69.456830][ T6536] ? make_vfsuid+0xec/0x140 [ 69.458832][ T6536] ? __pfx___might_resched+0x10/0x10 [ 69.461087][ T6536] ? make_vfsgid+0xf1/0x140 [ 69.462936][ T6536] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.465513][ T6536] ? security_inode_permission+0xbf/0x250 [ 69.467951][ T6536] uvcg_streaming_header_allow_link+0x7c/0x650 [ 69.470623][ T6536] ? inode_permission+0x374/0x620 [ 69.472805][ T6536] ? mntput_no_expire+0xe7/0x220 [ 69.474985][ T6536] configfs_symlink+0x695/0x1340 [ 69.477147][ T6536] ? bpf_lsm_inode_permission+0x9/0x10 [ 69.479489][ T6536] ? security_inode_permission+0xbf/0x250 [ 69.481851][ T6536] ? __pfx_configfs_symlink+0x10/0x10 [ 69.484181][ T6536] vfs_symlink+0x178/0x4d0 [ 69.486140][ T6536] filename_symlinkat+0x2a6/0x560 [ 69.488366][ T6536] ? __pfx_filename_symlinkat+0x10/0x10 [ 69.490842][ T6536] ? strncpy_from_user+0x19d/0x2d0 [ 69.493029][ T6536] ? do_getname+0x191/0x390 [ 69.494990][ T6536] __ia32_sys_symlinkat+0x9b/0xe0 [ 69.497122][ T6536] __do_fast_syscall_32+0x13a/0x8b0 [ 69.499336][ T6536] do_fast_syscall_32+0x32/0x70 [ 69.501405][ T6536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.504098][ T6536] RIP: 0023:0xf7f14fec [ 69.505840][ T6536] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 69.508543][ T6536] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 69.512082][ T6536] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 69.515465][ T6536] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.518813][ T6536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.522151][ T6536] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.525520][ T6536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.528962][ T6536] [ 69.819204][ T5883] usb 6-1: USB disconnect, device number 4 [ 70.915527][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.915567][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.915871][ T3268] cfg80211: failed to load regulatory.db