last executing test programs: 17m15.681738808s ago: executing program 4 (id=8259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000002000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b400000000208000a40000000032800048008000240000000120800014000000000140003"], 0xa0}}, 0x0) 17m15.5312209s ago: executing program 4 (id=8262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m15.374019141s ago: executing program 4 (id=8268): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000100)) 17m15.274015791s ago: executing program 4 (id=8273): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 17m15.154949242s ago: executing program 4 (id=8276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000015c0)={0x3c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x812}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x14) 17m15.029732657s ago: executing program 4 (id=8281): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa2482) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0xfffd, 0x1, 0x0, 0x40000005, 0x0}) 16m59.948988563s ago: executing program 32 (id=8281): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa2482) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0xfffd, 0x1, 0x0, 0x40000005, 0x0}) 6m22.531868941s ago: executing program 5 (id=20942): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) 6m22.511954264s ago: executing program 5 (id=20943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 6m22.387531663s ago: executing program 5 (id=20944): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x50, r2, 0xb97534d5fe9704cf, 0x70bd25, 0x25dbdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080c3}, 0x24000000) 6m22.26783953s ago: executing program 5 (id=20946): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x207) 6m22.245824482s ago: executing program 5 (id=20947): syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x10100, 0x2}, &(0x7f0000000280), 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 6m21.951487938s ago: executing program 5 (id=20950): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x9, 0x800, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 6m13.50371717s ago: executing program 33 (id=20950): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x9, 0x800, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 4m7.387168616s ago: executing program 3 (id=22752): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r0, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m7.331189611s ago: executing program 3 (id=22753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) 4m7.191714173s ago: executing program 3 (id=22755): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) writev(r2, &(0x7f0000001340)=[{&(0x7f00000000c0)="7f8eb936e8e5", 0x6}], 0x1) 4m6.313373233s ago: executing program 3 (id=22775): mkdir(&(0x7f00000020c0)='./file0\x00', 0x14) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)={0x210000, 0x0, 0x2}, 0x18) 4m6.266492292s ago: executing program 3 (id=22776): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000407d1eed2c40000102030109022d000101ff500909040002010301020409210500770122b10f09058103"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x23, 0x2, {0x2, 0x8}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@global=@item_012={0x2, 0x1, 0x1, "24c7"}, @global=@item_012={0x2, 0x1, 0x7, "0f6b"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}, @main=@item_4={0x3, 0x0, 0xc, "efbd5435"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x81, 0x1, {0x22, 0xa25}}}}, 0x0) 4m6.11829618s ago: executing program 3 (id=22779): socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 4m5.920889557s ago: executing program 34 (id=22779): socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 3m59.002493007s ago: executing program 7 (id=22839): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m58.92622539s ago: executing program 7 (id=22840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) 3m58.039412808s ago: executing program 7 (id=22849): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8180, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 3m57.367327088s ago: executing program 7 (id=22857): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m57.294925736s ago: executing program 7 (id=22858): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) 3m57.042493708s ago: executing program 7 (id=22863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=')', 0x1}], 0x1, 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3m56.792011672s ago: executing program 35 (id=22863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=')', 0x1}], 0x1, 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 24.583844655s ago: executing program 2 (id=24899): syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000) 23.255253588s ago: executing program 0 (id=24904): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 22.937949598s ago: executing program 6 (id=24905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040048}, 0x20000000) 22.583239052s ago: executing program 0 (id=24906): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000640)={0x0, 0x30}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 21.415788385s ago: executing program 2 (id=24907): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 20.984369519s ago: executing program 2 (id=24910): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0xfb, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 20.012445394s ago: executing program 2 (id=24918): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 19.731232088s ago: executing program 6 (id=24919): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x4d9b6eaf) 19.665668489s ago: executing program 6 (id=24920): r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044c02}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 19.499947023s ago: executing program 0 (id=24921): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 19.46641639s ago: executing program 6 (id=24922): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19.38615149s ago: executing program 0 (id=24925): r0 = io_uring_setup(0x4a86, &(0x7f0000000000)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close_range(r0, 0xffffffffffffffff, 0x0) 19.318382869s ago: executing program 0 (id=24927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x9, 0x63, 0x9, 0x400, 0x58d1, 0x7, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 19.238425955s ago: executing program 0 (id=24930): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001240)={@void, @val={0x0, 0x1, 0x9, 0x6, 0xee9f, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}, "465835170fa06ded05427a07dab063fd416d24e0"}}, 0x32) 19.089102104s ago: executing program 2 (id=24931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="ea71c50000800066ba200066ed0f01c4650f01c40f0178680f01cfc4e27932f165f30fc7370f20e035040000000f22e066b833018ee8", 0x36}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.947703762s ago: executing program 2 (id=24932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 18.55285371s ago: executing program 8 (id=24933): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x2000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x3) 18.520548304s ago: executing program 8 (id=24934): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000c4b000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fd0000/0xa000)=nil, &(0x7f0000576000/0x2000)=nil, &(0x7f0000fcd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fb3000/0x3000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f000067e000/0x3000)=nil, &(0x7f0000000200)="ce4d023a2c09aa2c67", 0x9}, 0x68) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x9, r0, 0x42b, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$cont(0x21, r0, 0x5, 0x4) 18.472103391s ago: executing program 8 (id=24935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.350834818s ago: executing program 8 (id=24937): getuid() socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) 18.259678409s ago: executing program 1 (id=24939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = dup3(r2, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94) 18.209476542s ago: executing program 1 (id=24940): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4036, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) 18.086174059s ago: executing program 1 (id=24941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18.044816569s ago: executing program 1 (id=24942): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 17.946601686s ago: executing program 1 (id=24943): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x40, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000081000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 17.756854139s ago: executing program 1 (id=24944): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc000000000300000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 16.383579458s ago: executing program 6 (id=24945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5836, 0x1038000000000001, 0x5, 0x40, 0x1, 0x10003, 0x1038, 0x6, 0xfffffffffffffffc, 0x10, 0x3, 0x800100000002, 0x9, 0x504, 0x2, 0x3], 0x2000, 0x385813}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.351040911s ago: executing program 6 (id=24946): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 15.307665873s ago: executing program 8 (id=24947): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x1, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0xfffffffffffffffe, 0xb, 0x8, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x1000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) 15.224843872s ago: executing program 8 (id=24948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.004139587s ago: executing program 36 (id=24930): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001240)={@void, @val={0x0, 0x1, 0x9, 0x6, 0xee9f, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}, "465835170fa06ded05427a07dab063fd416d24e0"}}, 0x32) 3.503702163s ago: executing program 37 (id=24932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 2.504813s ago: executing program 38 (id=24944): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc000000000300000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 999.942786ms ago: executing program 39 (id=24946): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 0s ago: executing program 40 (id=24948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): bridge_slave_1: entered allmulticast mode [ 1340.706517][T26750] bridge_slave_1: entered promiscuous mode [ 1340.726544][T26792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.756723][ T3288] hsr_slave_0: left promiscuous mode [ 1340.763437][ T3288] hsr_slave_1: left promiscuous mode [ 1340.769743][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.777409][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.786456][ T3288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.794517][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.808589][ T3288] veth1_macvtap: left promiscuous mode [ 1340.825269][ T3288] veth0_macvtap: left promiscuous mode [ 1340.831881][ T3288] veth1_vlan: left promiscuous mode [ 1340.837566][ T3288] veth0_vlan: left promiscuous mode [ 1340.858218][ T3867] usb 1-1: USB disconnect, device number 12 [ 1341.007805][ T3288] team0 (unregistering): Port device team_slave_1 removed [ 1341.021838][ T3288] team0 (unregistering): Port device team_slave_0 removed [ 1341.045956][ T24] plantronics 0003:047F:FFFF.0112: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1341.140367][ T5286] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1341.156652][T26750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.173709][T26750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.189591][ T2034] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1341.205378][T26750] team0: Port device team_slave_0 added [ 1341.213080][T26750] team0: Port device team_slave_1 added [ 1341.243431][T26750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.253621][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.285660][T26750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.298320][T26750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.305719][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.333586][T26750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.381517][ T2034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.410555][ T2034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.430407][ T2034] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1341.449599][ T2034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.478457][ T2034] usb 3-1: config 0 descriptor?? [ 1341.487463][T26750] hsr_slave_0: entered promiscuous mode [ 1341.495059][T26750] hsr_slave_1: entered promiscuous mode [ 1341.502163][T26750] debugfs: 'hsr0' already exists in 'hsr' [ 1341.512054][T26750] Cannot create hsr debugfs directory [ 1341.549698][T16233] Bluetooth: hci4: command tx timeout [ 1341.916546][ T2034] hid_parser_main: 5 callbacks suppressed [ 1341.916571][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1341.947858][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1341.974580][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1341.996149][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1342.011406][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1342.029545][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1342.048670][ T2034] pyra 0003:1E7D:2CF6.0113: unknown main item tag 0x0 [ 1342.061334][ T2034] pyra 0003:1E7D:2CF6.0113: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1342.172900][T26750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1342.185614][T26750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1342.195837][T26750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1342.206841][T26750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.216166][T26750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1342.237180][T26750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1342.254140][T26750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1342.264825][ T9] usb 2-1: USB disconnect, device number 107 [ 1342.288400][T26750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1342.453261][T26750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.474629][T26750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.488240][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.495532][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.515210][T25281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.522409][T25281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.596988][T26750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.665361][T26750] veth0_vlan: entered promiscuous mode [ 1342.680976][T26750] veth1_vlan: entered promiscuous mode [ 1342.724244][T26750] veth0_macvtap: entered promiscuous mode [ 1342.729117][ T2034] pyra 0003:1E7D:2CF6.0113: couldn't init struct pyra_device [ 1342.747870][ T2034] pyra 0003:1E7D:2CF6.0113: couldn't install mouse [ 1342.756770][T26750] veth1_macvtap: entered promiscuous mode [ 1342.765849][ T2034] pyra 0003:1E7D:2CF6.0113: probe with driver pyra failed with error -71 [ 1342.786440][ T2034] usb 3-1: USB disconnect, device number 127 [ 1342.806202][T26750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.831033][T26750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.848923][T25276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.892973][T25276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.917209][T25276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.934404][T25276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.983653][T25276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.002395][T25276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.045202][T25293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.069962][ T2034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.081462][T25293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.629646][T16233] Bluetooth: hci4: command tx timeout [ 1344.088160][T26932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.096779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.270289][T26942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1344.510666][T26951] kvm: user requested TSC rate below hardware speed [ 1344.521059][T26951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1345.072319][T26985] netlink: 'syz.0.23782': attribute type 22 has an invalid length. [ 1345.083569][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23782'. [ 1345.093417][T26985] netlink: 'syz.0.23782': attribute type 22 has an invalid length. [ 1345.102376][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23782'. [ 1345.563911][T27002] loop7: detected capacity change from 0 to 16384 [ 1345.631136][ T3288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.640063][T25281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.648245][T25281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.711443][T16233] Bluetooth: hci4: command tx timeout [ 1345.939811][T18495] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1346.072780][T27014] netlink: 'syz.2.23795': attribute type 1 has an invalid length. [ 1346.093243][T18495] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 1346.107276][T27014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1346.114364][T18495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.127083][ T3867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.142997][T18495] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1346.152163][T27016] bond4: (slave geneve3): making interface the new active one [ 1346.154824][T27016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.169207][T27016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.170712][T18495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.185604][T27016] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1346.202598][T25281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.219560][T18495] usb 2-1: Product: syz [ 1346.224030][T18495] usb 2-1: Manufacturer: syz [ 1346.229973][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.239869][T18495] usb 2-1: SerialNumber: syz [ 1346.268021][T18495] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input315 [ 1346.396132][T27022] input: syz0 as /devices/virtual/input/input316 [ 1346.429916][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.460346][ T4976] bcm5974 2-1:1.0: could not read from device [ 1346.470895][T18495] bcm5974 2-1:1.0: could not read from device [ 1346.477449][ T4976] bcm5974 2-1:1.0: could not read from device [ 1346.486080][T18495] input: failed to attach handler mousedev to device input315, error: -5 [ 1346.496780][ T4976] bcm5974 2-1:1.0: could not read from device [ 1346.516081][ T4976] bcm5974 2-1:1.0: could not read from device [ 1346.518796][T18495] usb 2-1: USB disconnect, device number 108 [ 1346.525290][ T3288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.759893][ T5737] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1346.859608][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1346.910170][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 1346.917078][ T5737] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1346.925615][ T5737] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1346.934529][ T5737] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1346.943925][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1346.953894][ T5737] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1346.963686][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1346.977088][ T5737] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1346.986244][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.995707][ T5737] usb 1-1: config 0 descriptor?? [ 1347.019489][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1347.027058][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.037404][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1347.046769][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1347.058025][ T9] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1347.073075][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1347.083573][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1347.092688][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1347.101938][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.110100][ T9] usb 3-1: Product: syz [ 1347.114341][ T9] usb 3-1: Manufacturer: syz [ 1347.119041][ T9] usb 3-1: SerialNumber: syz [ 1347.212656][ T5737] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1347.277975][ T5737] usb 1-1: USB disconnect, device number 13 [ 1347.292564][ T5737] usblp0: removed [ 1347.347107][ T9] usb 3-1: selecting invalid altsetting 0 [ 1347.445685][T27045] syzkaller1: entered promiscuous mode [ 1347.451936][T27045] syzkaller1: entered allmulticast mode [ 1347.546340][ T9] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1347.757061][ T9] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1347.789800][T16233] Bluetooth: hci4: command tx timeout [ 1347.806752][ T9] usb 3-1: USB disconnect, device number 2 [ 1347.838276][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1347.931484][T27067] netlink: 'syz.0.23816': attribute type 1 has an invalid length. [ 1347.955449][T27067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1347.976000][T27067] bond2: (slave gretap1): making interface the new active one [ 1347.986399][T27067] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1348.469601][T18495] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1348.629536][T18495] usb 2-1: Using ep0 maxpacket: 8 [ 1348.636315][T18495] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1348.645563][T18495] usb 2-1: config 179 has no interface number 0 [ 1348.653075][T18495] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1348.665377][T18495] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1348.679216][T18495] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1348.692382][T18495] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1348.704979][T18495] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1348.719481][T18495] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1348.728661][T18495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.745773][T27079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1348.978060][T18495] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input317 [ 1349.190792][T27079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.209954][T27079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.322793][ T9] usb 2-1: USB disconnect, device number 109 [ 1349.322989][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1349.337965][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1349.759605][T18495] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1349.855568][T27130] netlink: 27 bytes leftover after parsing attributes in process `syz.2.23843'. [ 1349.909670][T18495] usb 1-1: Using ep0 maxpacket: 16 [ 1349.938745][T18495] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1349.951207][T18495] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1349.961451][T18495] usb 1-1: Product: syz [ 1349.965878][T18495] usb 1-1: Manufacturer: syz [ 1349.973112][T18495] usb 1-1: SerialNumber: syz [ 1350.339515][ T2034] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1350.501598][ T2034] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1350.511199][ T2034] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 1350.520683][ T2034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.528779][ T2034] usb 2-1: Product: syz [ 1350.534835][ T2034] usb 2-1: Manufacturer: syz [ 1350.540614][ T2034] usb 2-1: SerialNumber: syz [ 1350.771556][ T2034] usbhid 2-1:1.0: can't add hid device: -71 [ 1350.777728][ T2034] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1350.789850][ T2034] usb 2-1: USB disconnect, device number 110 [ 1350.805682][T18495] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1350.832248][T18495] usb 1-1: USB disconnect, device number 14 [ 1351.389606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1351.431694][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23861'. [ 1351.749528][ T2034] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1351.769765][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1351.899473][ T2034] usb 3-1: Using ep0 maxpacket: 32 [ 1351.907974][ T2034] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.920775][ T2034] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1351.931012][ T2034] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1351.940904][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1351.946336][ T2034] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1351.956078][ T2034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.964574][ T2034] usb 3-1: Product: syz [ 1351.964574][ T9] usb 1-1: config 3 has an invalid interface number: 20 but max is 0 [ 1351.964599][ T9] usb 1-1: config 3 has no interface number 0 [ 1351.968874][ T2034] usb 3-1: Manufacturer: syz [ 1351.979691][ T9] usb 1-1: config 3 interface 20 has no altsetting 0 [ 1351.985330][ T2034] usb 3-1: SerialNumber: syz [ 1352.002763][ T2034] usb 3-1: config 0 descriptor?? [ 1352.012153][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1352.021628][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.032001][ T9] usb 1-1: Product: syz [ 1352.036241][ T9] usb 1-1: Manufacturer: syz [ 1352.041146][ T9] usb 1-1: SerialNumber: syz [ 1352.113335][T27194] input: syz0 as /devices/virtual/input/input318 [ 1352.257949][T27175] loop5: detected capacity change from 0 to 7 [ 1352.267206][T27175] Dev loop5: unable to read RDB block 7 [ 1352.274745][T27175] loop5: AHDI p1 p3 p4 [ 1352.279085][T27175] loop5: partition table partially beyond EOD, truncated [ 1352.288507][T27175] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1352.296154][T27175] loop5: p3 start 719360596 is beyond EOD, truncated [ 1352.319327][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input319 [ 1352.340781][ T4976] bcm5974 1-1:3.20: could not read from device [ 1352.354022][ T9] usb 1-1: USB disconnect, device number 15 [ 1352.361883][ T4976] bcm5974 1-1:3.20: could not read from device [ 1352.415716][ T2034] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1352.817018][ T2034] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1352.834393][ T2034] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1352.846500][ T2034] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1353.099064][ T2034] usb 3-1: USB disconnect, device number 3 [ 1353.259789][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1353.389715][T18495] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1353.409513][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1353.415407][ T9] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 1353.424562][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.436731][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.448185][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.459205][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.471915][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.483548][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.494634][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.506438][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.517686][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1353.526799][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1353.535410][ T9] usb 1-1: SerialNumber: syz [ 1353.539776][T18495] usb 2-1: Using ep0 maxpacket: 32 [ 1353.545883][ T9] usb 1-1: config 0 descriptor?? [ 1353.553513][T18495] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1353.562457][T18495] usb 2-1: config 0 has no interface number 0 [ 1353.565948][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input320 [ 1353.568637][T18495] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1353.588060][T18495] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1353.598388][T18495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.606587][T18495] usb 2-1: Product: syz [ 1353.611789][T18495] usb 2-1: Manufacturer: syz [ 1353.616445][T18495] usb 2-1: SerialNumber: syz [ 1353.629793][T18495] usb 2-1: config 0 descriptor?? [ 1353.767512][ T4976] bcm5974 1-1:0.0: could not read from device [ 1353.785631][ T4976] bcm5974 1-1:0.0: could not read from device [ 1353.795303][ T9] usb 1-1: USB disconnect, device number 16 [ 1354.259871][T18495] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1354.272040][T18495] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1354.683576][T18495] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1354.696870][T18495] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1354.712565][T18495] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1354.722707][T18495] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1354.736615][T18495] usb 2-1: USB disconnect, device number 111 [ 1355.078622][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23918'. [ 1355.094316][T27296] ipvlan0: entered allmulticast mode [ 1355.100757][T27296] gretap0: entered allmulticast mode [ 1355.212684][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23919'. [ 1355.232048][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23919'. [ 1355.242350][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23919'. [ 1356.313695][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23937'. [ 1356.322972][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23937'. [ 1356.795724][T15521] hid-generic 0000:0000:0000.0114: unknown main item tag 0x0 [ 1356.819175][T15521] hid-generic 0000:0000:0000.0114: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1357.261735][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1357.261753][ T30] audit: type=1326 audit(1782082552.951:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.297604][ T30] audit: type=1326 audit(1782082552.971:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.325159][ T30] audit: type=1326 audit(1782082552.981:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.372073][ T30] audit: type=1326 audit(1782082552.981:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.397729][ T30] audit: type=1326 audit(1782082552.981:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.424860][ T30] audit: type=1326 audit(1782082552.981:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.452976][ T30] audit: type=1326 audit(1782082552.981:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.485207][ T30] audit: type=1326 audit(1782082553.011:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.510761][ T30] audit: type=1326 audit(1782082553.011:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.543116][ T30] audit: type=1326 audit(1782082553.011:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27377 comm="syz.6.23953" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f850639ce59 code=0x7ffc0000 [ 1357.632787][T27385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23955'. [ 1357.680579][T27387] bridge4: entered promiscuous mode [ 1357.686173][T27387] bridge4: entered allmulticast mode [ 1357.748816][T27391] usb usb7: usbfs: process 27391 (syz.1.23959) did not claim interface 0 before use [ 1357.760631][T27391] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1358.754201][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23969'. [ 1358.786671][T27421] ipvlan2: entered allmulticast mode [ 1358.792286][T27421] gretap0: entered allmulticast mode [ 1359.130013][T18495] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1359.277809][T27449] syzkaller1: entered promiscuous mode [ 1359.283734][T27449] syzkaller1: entered allmulticast mode [ 1359.289555][T18495] usb 2-1: Using ep0 maxpacket: 32 [ 1359.293301][T18495] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 1359.303424][T18495] usb 2-1: config 2 has no interface number 0 [ 1359.310107][T18495] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1359.320421][T18495] usb 2-1: config 2 interface 88 has no altsetting 0 [ 1359.328910][T18495] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1359.338777][T18495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.347404][T18495] usb 2-1: Product: syz [ 1359.352310][T18495] usb 2-1: Manufacturer: syz [ 1359.356973][T18495] usb 2-1: SerialNumber: syz [ 1359.368758][T27424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1359.582822][T27456] netlink: 264 bytes leftover after parsing attributes in process `syz.2.23986'. [ 1359.595380][T27424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1360.150370][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1360.320343][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1360.330159][ T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1360.339275][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.347453][ T9] usb 3-1: Product: syz [ 1360.352074][ T9] usb 3-1: Manufacturer: syz [ 1360.356740][ T9] usb 3-1: SerialNumber: syz [ 1360.364874][ T9] usb 3-1: config 0 descriptor?? [ 1360.373820][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1360.419004][T18495] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1360.431011][T18495] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1360.445531][T18495] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1360.455764][T18495] usb 2-1: USB disconnect, device number 112 [ 1360.509618][T15521] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1360.681276][T15521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.692502][T15521] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.703106][T15521] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1360.712331][T15521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.721876][T15521] usb 1-1: config 0 descriptor?? [ 1361.335638][T15521] usb 1-1: language id specifier not provided by device, defaulting to English [ 1361.584801][ T9] gspca_topro: reg_w err -71 [ 1361.630280][ T9] gspca_topro: Sensor soi763a [ 1361.633688][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.643652][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.653710][ T9] usb 3-1: USB disconnect, device number 4 [ 1361.747482][T15521] uclogic 0003:256C:006D.0115: failed retrieving string descriptor #100: -71 [ 1361.759063][T15521] uclogic 0003:256C:006D.0115: failed retrieving pen parameters: -71 [ 1361.770315][T15521] uclogic 0003:256C:006D.0115: failed probing pen v1 parameters: -71 [ 1361.778856][T15521] uclogic 0003:256C:006D.0115: failed probing parameters: -71 [ 1361.788469][T15521] uclogic 0003:256C:006D.0115: probe with driver uclogic failed with error -71 [ 1361.804201][T15521] usb 1-1: USB disconnect, device number 17 [ 1362.569477][ T2034] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1362.731110][ T2034] usb 3-1: Using ep0 maxpacket: 32 [ 1362.738072][ T2034] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1362.755490][ T2034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.766394][ T2034] usb 3-1: config 0 descriptor?? [ 1362.784761][ T2034] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1363.474115][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1363.474133][ T30] audit: type=1326 audit(1782082559.161:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27551 comm="syz.1.24027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8819ce59 code=0x0 [ 1364.007743][ T2034] gspca_vc032x: reg_w err -71 [ 1364.016991][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.024081][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.029809][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.035248][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.041123][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.046538][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.052067][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.057508][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.063421][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.068771][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.074543][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.082269][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.087648][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.093170][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.098517][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.104198][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.109719][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.115050][ T2034] gspca_vc032x: I2c Bus Busy Wait 00 [ 1364.120461][ T2034] gspca_vc032x: Unknown sensor... [ 1364.125571][ T2034] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1364.135824][ T2034] usb 3-1: USB disconnect, device number 5 [ 1364.789581][T15521] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1364.959657][ T2034] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1364.963143][T15521] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1364.976196][T15521] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1364.987427][T15521] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1364.996745][T15521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.005501][T15521] usb 3-1: Product: syz [ 1365.009771][T15521] usb 3-1: Manufacturer: syz [ 1365.014451][T15521] usb 3-1: SerialNumber: syz [ 1365.021519][T15521] usb 3-1: config 0 descriptor?? [ 1365.029982][T15521] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1365.119844][ T2034] usb 2-1: Using ep0 maxpacket: 32 [ 1365.127294][ T2034] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1365.136141][ T2034] usb 2-1: config 0 has no interface number 0 [ 1365.144174][ T2034] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1365.153676][ T2034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.161991][ T2034] usb 2-1: Product: syz [ 1365.166212][ T2034] usb 2-1: Manufacturer: syz [ 1365.170926][ T2034] usb 2-1: SerialNumber: syz [ 1365.177169][ T2034] usb 2-1: config 0 descriptor?? [ 1365.189024][ T2034] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1365.391090][ T2034] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1365.403298][ T2034] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1365.591406][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1366.247176][ T9] usb 3-1: USB disconnect, device number 6 [ 1366.306721][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1366.308169][T15521] usb 2-1: USB disconnect, device number 113 [ 1366.326444][T15521] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1366.344106][T15521] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1366.358429][T15521] quatech2 2-1:0.51: device disconnected [ 1368.064856][T27690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.080482][T18495] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1368.099526][ T5686] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1368.251847][T18495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1368.274454][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.285261][T18495] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1368.295750][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.305385][T18495] usb 3-1: string descriptor 0 read error: -22 [ 1368.311283][ T5686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1368.320313][T18495] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.40 [ 1368.326962][ T5686] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.349577][T18495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.382900][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.406023][ T5686] usb 2-1: config 0 descriptor?? [ 1368.816052][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.832711][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.847427][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.862527][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.880207][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.895714][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.897887][ T5686] plantronics 0003:047F:FFFF.0117: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1368.918341][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.945226][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1368.981736][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1369.017191][T18495] ntrig 0003:1B96:0011.0116: unknown main item tag 0x0 [ 1369.064414][T27703] syz_tun: entered allmulticast mode [ 1369.092332][T27702] syz_tun: left allmulticast mode [ 1369.170178][T18495] ntrig 0003:1B96:0011.0116: hidraw1: USB HID v0.03 Device [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 1369.226117][T18495] usb 3-1: USB disconnect, device number 7 [ 1369.276574][T27706] fido_id[27706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1369.318288][T27709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24090'. [ 1369.365469][T27709] ipvlan2: entered allmulticast mode [ 1369.381503][T27709] gretap0: entered allmulticast mode [ 1369.992044][T27720] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1370.004666][T27720] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1370.021446][T27720] veth0_to_bridge: entered allmulticast mode [ 1370.047239][T27720] veth0_to_bridge: entered promiscuous mode [ 1370.058742][T27720] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1370.077727][T27720] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1370.085093][T27720] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1370.641088][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24104'. [ 1370.666143][T27742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1371.030584][T12005] usb 2-1: USB disconnect, device number 114 [ 1371.626500][T27779] input: syz0 as /devices/virtual/input/input321 [ 1372.516892][ C1] net_ratelimit: 11 callbacks suppressed [ 1372.516913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1372.535028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.547414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.560476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1372.572831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.585214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.598252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1372.610640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.623043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.636023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1372.819814][ T5686] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1372.923810][T27809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24127'. [ 1373.006614][ T5686] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1373.039001][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.057344][T27809] bridge0: port 3(wlan0) entered blocking state [ 1373.067842][ T5686] usb 3-1: config 0 descriptor?? [ 1373.089469][T27809] bridge0: port 3(wlan0) entered disabled state [ 1373.096328][T27809] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1373.105913][T27809] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1373.577399][T27829] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24136'. [ 1374.311613][ T5686] usb 3-1: Cannot set autoneg [ 1374.319063][ T5686] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1374.349113][ T5686] usb 3-1: USB disconnect, device number 8 [ 1374.800495][T27850] xt_hashlimit: size too large, truncated to 1048576 [ 1375.298190][ T30] audit: type=1326 audit(1782082570.961:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27864 comm="syz.1.24153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8819ce59 code=0x0 [ 1377.180960][T27902] input: syz0 as /devices/virtual/input/input322 [ 1377.255942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 1377.384222][T27912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24170'. [ 1377.519500][ C1] net_ratelimit: 12171 callbacks suppressed [ 1377.519515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.538302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1377.550698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1377.563026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.575232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.587836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1377.600039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1377.612248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.624495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.637101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1380.455365][T27956] netlink: 'syz.2.24188': attribute type 30 has an invalid length. [ 1380.730489][T27956] netlink: 'syz.2.24188': attribute type 30 has an invalid length. [ 1380.887984][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24193'. [ 1381.409520][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1381.551585][T27985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24201'. [ 1381.595423][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1381.605852][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.616800][ T9] usb 3-1: config 220 has no interface number 2 [ 1381.623507][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1381.638173][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1381.672576][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1381.688557][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1381.708416][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1381.739496][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.773044][ T9] usb 3-1: Product: syz [ 1381.783970][ T9] usb 3-1: Manufacturer: syz [ 1381.804006][ T9] usb 3-1: SerialNumber: syz [ 1382.039929][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1382.067311][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 1382.086618][ T9] usb 3-1: selecting invalid altsetting 0 [ 1382.125606][ T9] usb 3-1: selecting invalid altsetting 0 [ 1382.147825][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1382.182666][ T9] usb 3-1: USB disconnect, device number 9 [ 1382.529984][ C1] net_ratelimit: 14335 callbacks suppressed [ 1382.530010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.548278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1382.560650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.573015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.585919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.599757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1382.612081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.624417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.637372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.649799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1384.035972][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24223'. [ 1384.075988][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24223'. [ 1384.120668][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24213'. [ 1384.132939][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24223'. [ 1384.174443][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24223'. [ 1384.619086][T28030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1384.791056][T28032] syzkaller1: entered promiscuous mode [ 1384.825570][T28032] syzkaller1: entered allmulticast mode [ 1387.238317][T28067] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24233'. [ 1387.314055][T28070] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24233'. [ 1387.540100][ C1] net_ratelimit: 12850 callbacks suppressed [ 1387.540124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1387.558406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1387.570748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1387.583713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1387.596625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1387.618472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1387.630786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1387.643166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1387.656060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1387.668356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1388.135653][T28078] netlink: 'syz.8.24236': attribute type 13 has an invalid length. [ 1390.169595][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1390.332531][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1390.343316][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1390.355714][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1390.368097][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1390.379762][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1390.392481][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1390.407551][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1390.418825][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.668070][ T9] usb 2-1: usb_control_msg returned -32 [ 1390.681216][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1390.967322][ T9] usb 2-1: USB disconnect, device number 115 [ 1391.641271][T28141] kvm: vcpu 1024: requested lapic timer restore with starting count register 0x390=4013106938 (32104855504 ns) > initial count (3341777952 ns). Using initial count to start timer. [ 1392.213545][T28152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24267'. [ 1392.274591][T28153] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24267'. [ 1392.417106][T28158] netlink: 'syz.2.24269': attribute type 11 has an invalid length. [ 1392.479362][T28160] loop6: detected capacity change from 0 to 2640 [ 1392.494340][ T5788] buffer_io_error: 432 callbacks suppressed [ 1392.494377][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.515655][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.526341][T28160] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.534796][T28160] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.549732][ C1] net_ratelimit: 12722 callbacks suppressed [ 1392.549750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1392.554744][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.556526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1392.587891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1392.600241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1392.603753][T28160] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.614151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1392.632930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1392.645279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1392.657623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1392.668290][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.671962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1392.689923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1392.697212][T28160] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.724840][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.736319][T28160] Buffer I/O error on dev loop6, logical block 0, async page read [ 1392.746227][T28160] ldm_validate_partition_table(): Disk read failed. [ 1392.756645][T28160] Dev loop6: unable to read RDB block 0 [ 1392.766364][T28160] loop6: unable to read partition table [ 1392.775417][T28160] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1393.075760][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24277'. [ 1393.109062][ T30] audit: type=1326 audit(1782082588.791:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1393.163734][ T30] audit: type=1326 audit(1782082588.791:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1393.211781][ T30] audit: type=1326 audit(1782082588.791:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1393.322898][ T30] audit: type=1326 audit(1782082588.791:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1393.400223][ T30] audit: type=1326 audit(1782082588.791:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1393.495286][ T30] audit: type=1326 audit(1782082588.841:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1393.631861][ T30] audit: type=1326 audit(1782082588.841:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1393.675534][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24277'. [ 1393.804253][ T30] audit: type=1326 audit(1782082588.841:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1393.947668][ T30] audit: type=1326 audit(1782082588.851:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1394.087153][ T30] audit: type=1326 audit(1782082588.851:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.8.24275" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1394.139788][T28188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24281'. [ 1394.158549][T28188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24281'. [ 1394.216565][T28191] misc userio: Invalid payload size [ 1394.223801][T28191] misc userio: Invalid payload size [ 1394.229238][T28191] misc userio: Invalid payload size [ 1394.617768][T28175] team1: entered promiscuous mode [ 1394.623506][T28175] team1: entered allmulticast mode [ 1394.669022][T28175] 8021q: adding VLAN 0 to HW filter on device team1 [ 1394.695761][T28180] team2: entered promiscuous mode [ 1394.703374][T28180] team2: entered allmulticast mode [ 1394.710835][T28180] 8021q: adding VLAN 0 to HW filter on device team2 [ 1394.924875][T28214] usb usb7: usbfs: process 28214 (syz.1.24292) did not claim interface 0 before use [ 1394.936226][T28214] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1395.186513][T28219] kvm: kvm [28218]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 1395.296077][T28223] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24297'. [ 1395.589496][ T5686] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1395.751643][ T5686] usb 1-1: Using ep0 maxpacket: 32 [ 1395.794413][ T5686] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1395.803051][ T5686] usb 1-1: config 0 has no interface number 0 [ 1395.817962][ T5686] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1395.828960][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.839620][ T5686] usb 1-1: Product: syz [ 1395.845481][ T5686] usb 1-1: Manufacturer: syz [ 1395.851082][ T5686] usb 1-1: SerialNumber: syz [ 1395.867828][ T5686] usb 1-1: config 0 descriptor?? [ 1396.259700][T28250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1396.332496][ T5686] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1396.349228][ T5686] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1396.524187][T28257] netlink: 'syz.2.24309': attribute type 1 has an invalid length. [ 1396.606265][T28257] bond5: entered promiscuous mode [ 1396.633261][T28257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1396.702102][T28261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1396.733040][T28261] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1396.757481][T28261] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1396.788608][T28261] bond5: (slave vti0): making interface the new active one [ 1396.798746][T28261] vti0: entered promiscuous mode [ 1396.807745][T28261] bond5: (slave vti0): Enslaving as an active interface with an up link [ 1397.217265][ T5686] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1397.228583][ T5686] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1397.260898][ T5686] usb 1-1: USB disconnect, device number 18 [ 1397.269354][T28274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24313'. [ 1397.559416][ C1] net_ratelimit: 12157 callbacks suppressed [ 1397.559437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1397.578460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1397.590812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1397.603170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1397.615495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1397.628509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1397.640933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1397.653367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1397.666353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1397.679209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1398.352850][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24322'. [ 1398.413383][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24322'. [ 1398.560682][T28309] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1398.570881][T28309] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1399.560665][T13500] Bluetooth: hci1: command 0x0406 tx timeout [ 1401.456289][T28362] syzkaller1: entered promiscuous mode [ 1401.478728][T28362] syzkaller1: entered allmulticast mode [ 1402.367286][T28394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24358'. [ 1402.381829][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24359'. [ 1402.569450][ C1] net_ratelimit: 13186 callbacks suppressed [ 1402.569478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1402.588553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1402.600981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1402.613450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1402.625857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1402.639002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1402.651411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1402.663858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1402.676320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1402.692757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1405.238818][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1405.238836][ T30] audit: type=1326 audit(1782082600.921:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.0.24371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3cc79ce59 code=0x0 [ 1405.574169][T28403] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 1406.568020][T25281] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.583656][T25281] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.604499][T25281] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 44609 - 0 [ 1406.641376][T25281] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.677381][T25281] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.693410][T25281] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 44609 - 0 [ 1406.702950][T25281] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.714723][T25281] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.726958][T25281] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 44609 - 0 [ 1406.741880][T25281] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1406.757025][T25281] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.771679][T25281] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 44609 - 0 [ 1407.579474][ C1] net_ratelimit: 10982 callbacks suppressed [ 1407.579495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1407.598060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1407.610424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1407.622849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1407.636369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1407.648710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1407.661103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1407.673525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1407.685973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1407.698430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1408.326265][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24385'. [ 1408.830854][T28497] kvm: apic: phys broadcast and lowest prio [ 1409.509688][T28514] kvm: user requested TSC rate below hardware speed [ 1409.543810][T28514] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1409.567766][T28514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1410.682924][T28550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24409'. [ 1411.308261][T28564] input: syz1 as /devices/virtual/input/input323 [ 1412.589405][ C1] net_ratelimit: 12833 callbacks suppressed [ 1412.589425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1412.607722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1412.620149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1412.632527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1412.644867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1412.657239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1412.669816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1412.683559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1412.695868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1412.708253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.876630][T28586] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24426'. [ 1416.237260][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24427'. [ 1416.286246][T28627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24441'. [ 1417.600393][ C1] net_ratelimit: 13158 callbacks suppressed [ 1417.600415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1417.618747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1417.631079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1417.643471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1417.655848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1417.668122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1417.680441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1417.692777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1417.708111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1417.720388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.300560][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24456'. [ 1418.314171][T28688] netlink: 68 bytes leftover after parsing attributes in process `syz.6.24456'. [ 1418.323765][T28688] netlink: 68 bytes leftover after parsing attributes in process `syz.6.24456'. [ 1419.506483][T28703] netlink: 'syz.6.24460': attribute type 1 has an invalid length. [ 1419.610441][T28703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1419.675679][T28705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.747957][T28705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.777795][T28705] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 1420.199555][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1420.373546][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1420.400549][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.423067][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.434820][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.442884][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.452697][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.465334][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.473361][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.493120][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.532377][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.556179][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.579132][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.596022][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.608220][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.618924][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.637149][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.649875][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.659028][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.671764][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.681117][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.706480][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.729506][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.747358][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1420.758462][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1420.771181][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.781648][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1420.791344][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1420.803079][ T9] usb 3-1: Product: syz [ 1420.809128][ T9] usb 3-1: Manufacturer: syz [ 1420.817077][ T9] usb 3-1: SerialNumber: syz [ 1420.828870][ T9] usb 3-1: config 0 descriptor?? [ 1420.839173][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1421.301648][T28736] syzkaller1: entered promiscuous mode [ 1421.307429][T28736] syzkaller1: entered allmulticast mode [ 1421.378976][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 1421.431492][ T9] usb 3-1: USB disconnect, device number 10 [ 1421.451961][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1422.609532][ C1] net_ratelimit: 12883 callbacks suppressed [ 1422.609555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1422.627917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1422.640373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1422.653931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1422.666319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1422.678643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1422.691022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1422.703396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1422.715743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1422.728096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1422.946607][ T3867] hid_parser_main: 4007 callbacks suppressed [ 1422.946630][ T3867] hid-generic 0000:0000:0000.0118: unknown main item tag 0x0 [ 1423.035285][ T3867] hid-generic 0000:0000:0000.0118: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1423.173686][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.187643][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.313158][T28793] xt_limit: Overflow, try lower: 65536/2147483648 [ 1425.238101][ T30] audit: type=1326 audit(1782082620.921:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28813 comm="syz.2.24501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34eb99ce59 code=0x0 [ 1426.171357][ T30] audit: type=1326 audit(1782082621.861:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28817 comm="syz.8.24503" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x0 [ 1426.280480][T28832] xt_hashlimit: size too large, truncated to 1048576 [ 1427.070642][T28849] xt_hashlimit: size too large, truncated to 1048576 [ 1427.619541][ C1] net_ratelimit: 13008 callbacks suppressed [ 1427.619564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1427.638783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.651071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1427.663472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1427.675849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1427.688178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1427.700922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1427.713297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1427.725661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1427.739099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1428.077814][T28870] binder: 28869:28870 ioctl c0306201 200000000640 returned -22 [ 1428.557613][T28881] [U]  [ 1428.567209][T28881] [U] K{‘ [ 1428.586293][T28881] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1428.605751][T28881] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1428.647168][T28881] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1428.675814][T28881] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1428.736997][T28881] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1428.772072][T28881] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1428.808285][T28881] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1428.832570][T28881] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 1428.968172][T28881] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 1428.979658][T28881] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1429.002151][T28881] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1429.006958][T28881] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1429.057940][T28881] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1429.077383][T28881] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1429.099002][T28881] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1429.144823][T28881] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1429.169718][T28881] [U] ¹ EC [ 1429.173224][T28881] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 1429.207669][T28880] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1431.123131][T28920] sctp: [Deprecated]: syz.2.24538 (pid 28920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.123131][T28920] Use struct sctp_sack_info instead [ 1431.612774][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24541'. [ 1431.658035][T28930] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1432.629925][ C1] net_ratelimit: 12487 callbacks suppressed [ 1432.629946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.648255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1432.660588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1432.672985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1432.685332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.697659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1432.710021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1432.722857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1432.736282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1432.748599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.057656][T28963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24556'. [ 1433.067553][T28963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24556'. [ 1433.097341][T28963] netlink: 6 bytes leftover after parsing attributes in process `syz.1.24556'. [ 1433.121031][T15521] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1433.299471][T15521] usb 3-1: Using ep0 maxpacket: 16 [ 1433.335815][T28957] syzkaller1: entered promiscuous mode [ 1433.349937][T28957] syzkaller1: entered allmulticast mode [ 1433.681157][T15521] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1433.712085][T15521] usb 3-1: no configurations [ 1433.721562][T15521] usb 3-1: can't read configurations, error -22 [ 1435.203646][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24578'. [ 1435.225094][T29027] erspan0: entered promiscuous mode [ 1435.231850][T29027] macvtap0: entered promiscuous mode [ 1435.249313][T29027] macvtap0: entered allmulticast mode [ 1435.259272][T29027] erspan0: entered allmulticast mode [ 1435.420542][T29028] erspan0: left allmulticast mode [ 1435.426052][T29028] erspan0: left promiscuous mode [ 1435.434680][T29028] macvtap0: left promiscuous mode [ 1435.441913][T29028] macvtap0: left allmulticast mode [ 1435.614381][T29037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.639488][ C1] net_ratelimit: 13349 callbacks suppressed [ 1437.639504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.658536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.670717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.683097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.695451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1437.707840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1437.720063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.732399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1437.744792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.758053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.304201][T29084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24600'. [ 1442.004432][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24617'. [ 1442.649415][ C1] net_ratelimit: 15062 callbacks suppressed [ 1442.649438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1442.668438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1442.680669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1442.692980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1442.705351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1442.717744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1442.730100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1442.742418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1442.756153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1442.769652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1444.076540][T29151] xt_hashlimit: size too large, truncated to 1048576 [ 1444.693742][ T30] audit: type=1326 audit(1782082640.381:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.2.24629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34eb99ce59 code=0x0 [ 1447.659429][ C1] net_ratelimit: 15004 callbacks suppressed [ 1447.659450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.677899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1447.690393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.704283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1447.716667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.729111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.741574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1447.753987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1447.766443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1447.778885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1447.828375][T29234] tipc: Started in network mode [ 1447.850785][T29234] tipc: Node identity ac1414aa, cluster identity 4711 [ 1447.875065][T29234] tipc: Enabled bearer , priority 10 [ 1449.009668][ T5737] tipc: Node number set to 2886997162 [ 1450.473691][T29273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1452.223660][T29292] vlan1: entered allmulticast mode [ 1452.300072][T29292] veth0_vlan: entered allmulticast mode [ 1452.669390][ C1] net_ratelimit: 13268 callbacks suppressed [ 1452.669409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1452.687750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.700076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1452.712457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1452.724875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1452.738563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1452.750884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1452.763210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1452.775706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1452.788051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1455.171817][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24699'. [ 1455.267656][ T30] audit: type=1326 audit(1782082650.951:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.343441][ T30] audit: type=1326 audit(1782082650.951:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.468374][ T30] audit: type=1326 audit(1782082650.951:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.568245][ T9] hid-generic 0000:0000:0000.0119: unknown main item tag 0x0 [ 1455.601748][ T30] audit: type=1326 audit(1782082650.951:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.641804][ T9] hid-generic 0000:0000:0000.0119: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1455.734248][ T30] audit: type=1326 audit(1782082650.951:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.828417][ T30] audit: type=1326 audit(1782082651.001:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1455.995955][ T30] audit: type=1326 audit(1782082651.001:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5b59ce59 code=0x7ffc0000 [ 1456.070448][ T30] audit: type=1326 audit(1782082651.001:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1456.174754][ T30] audit: type=1326 audit(1782082651.001:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1456.272045][ T30] audit: type=1326 audit(1782082651.011:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.8.24701" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5b55d68e code=0x7ffc0000 [ 1456.578805][T29372] kvm: emulating exchange as write [ 1457.125002][T29378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.24711'. [ 1457.680619][ C1] net_ratelimit: 12139 callbacks suppressed [ 1457.680644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.698888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1457.711224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1457.723654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1457.736035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.748373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1457.760770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1457.773182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1457.787658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1457.800087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1460.388313][T29427] loop5: detected capacity change from 0 to 7 [ 1460.400150][T29427] Dev loop5: unable to read RDB block 7 [ 1460.407575][T29427] loop5: AHDI p2 [ 1460.412384][T29427] loop5: partition table partially beyond EOD, truncated [ 1460.795008][T29440] bridge_slave_1: left allmulticast mode [ 1460.802095][T29440] bridge_slave_1: left promiscuous mode [ 1460.808114][T29440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.916266][T29440] bond0: (slave bond_slave_0): Releasing backup interface [ 1461.030377][ T5737] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1461.146796][T29440] team0: Port device team_slave_1 removed [ 1461.190890][ T5737] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1461.203440][ T5737] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1461.216100][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1461.226389][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1461.239599][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1461.255552][ T5737] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1461.268376][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1461.279187][ T5737] usb 3-1: Product: syz [ 1461.283764][ T5737] usb 3-1: Manufacturer: syz [ 1461.313369][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 1461.321558][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 1461.328371][ T5737] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1461.344063][ T5737] cdc_wdm 3-1:1.0: Unknown control protocol [ 1461.383928][T29440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.551721][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1461.551740][ T30] audit: type=1326 audit(1782082657.241:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29450 comm="syz.8.24741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a5b59ce59 code=0x0 [ 1461.606086][T29440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.901101][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 1462.048807][T18495] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1462.102419][ T9] usb 3-1: USB disconnect, device number 13 [ 1462.284517][T18495] usb 2-1: Using ep0 maxpacket: 16 [ 1462.362666][T18495] usb 2-1: config 0 has no interfaces? [ 1462.423921][T29467] loop6: detected capacity change from 0 to 2640 [ 1462.438941][ T5788] buffer_io_error: 11 callbacks suppressed [ 1462.438962][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1462.459139][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1462.468005][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1462.479338][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1462.495022][ T5788] Buffer I/O error on dev loop6, logical block 0, async page read [ 1462.534112][T18495] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1462.549765][T18495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.581658][T18495] usb 2-1: Product: syz [ 1462.614902][T18495] usb 2-1: Manufacturer: syz [ 1462.642488][T18495] usb 2-1: SerialNumber: syz [ 1462.679993][T18495] usb 2-1: config 0 descriptor?? [ 1462.689392][ C1] net_ratelimit: 13384 callbacks suppressed [ 1462.689412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1462.707684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1462.720036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1462.732382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.744670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1462.756978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1462.769408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1462.782760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1462.795097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1462.807463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.107459][T29477] xt_hashlimit: size too large, truncated to 1048576 [ 1463.362804][T29454] syzkaller1: entered promiscuous mode [ 1463.370042][T29454] syzkaller1: entered allmulticast mode [ 1463.515581][ T9] usb 2-1: USB disconnect, device number 116 [ 1464.464320][T29518] dlm: non-version read from control device 16 [ 1464.479881][T29518] dlm: non-version read from control device 16 [ 1464.493049][T29518] dlm: non-version read from control device 16 [ 1464.503150][T29518] dlm: non-version read from control device 16 [ 1465.629243][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24765'. [ 1465.811233][ T3867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1465.924755][T29544] input: syz1 as /devices/virtual/input/input324 [ 1466.098557][ T3867] usb 3-1: Using ep0 maxpacket: 16 [ 1466.110018][T13500] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.405302][ T3867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1466.447465][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24771'. [ 1466.459781][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24771'. [ 1466.487654][ T3867] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1466.504947][ T3867] usb 3-1: config 13 has no interface number 0 [ 1466.520409][ T3867] usb 3-1: config 13 interface 50 altsetting 158 bulk endpoint 0x8 has invalid maxpacket 16 [ 1466.546383][ T3867] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1466.762479][ T3867] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1466.780865][ T3867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.805132][ T3867] usb 3-1: Product: syz [ 1466.825077][ T3867] usb 3-1: Manufacturer: syz [ 1466.846106][ T3867] usb 3-1: SerialNumber: syz [ 1466.854401][T29562] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1466.899264][T29536] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1466.919087][T29564] netlink: 'syz.0.24774': attribute type 1 has an invalid length. [ 1466.945136][T29564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1467.039085][T29564] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1467.109132][T29570] wg0: Caught tx_queue_len zero misconfig [ 1467.138648][T29536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.200139][T29536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.249882][T29536] netlink: 240 bytes leftover after parsing attributes in process `syz.2.24763'. [ 1467.464175][ T3867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1467.546415][T29577] gretap1: entered promiscuous mode [ 1467.552419][ T3867] usb 3-1: MIDIStreaming interface descriptor not found [ 1467.699455][ C1] net_ratelimit: 11251 callbacks suppressed [ 1467.699476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1467.717896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1467.731911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1467.744331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1467.756719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1467.769710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1467.783121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1467.795584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1467.808022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1467.820582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.267860][ T3867] usb 3-1: USB disconnect, device number 14 [ 1470.715608][T29598] netlink: 'syz.6.24788': attribute type 10 has an invalid length. [ 1470.819250][T29598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1470.865979][T29598] team0: Port device netdevsim1 added [ 1472.493305][T29622] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24796'. [ 1472.709807][ C1] net_ratelimit: 9915 callbacks suppressed [ 1472.709831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1472.727964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1472.740355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1472.752720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1472.765340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1472.778543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1472.790821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1472.803155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1472.815530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1472.828523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1472.977153][T29645] netlink: 'syz.2.24804': attribute type 10 has an invalid length. [ 1473.028352][T29648] netlink: 'syz.2.24804': attribute type 10 has an invalid length. [ 1473.158692][T29645] team0: Device dummy0 is of different type [ 1473.292935][T29648] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1473.317592][T29655] batadv_slave_1: entered promiscuous mode [ 1473.604034][T29653] batadv_slave_1: left promiscuous mode [ 1474.893537][ T30] audit: type=1326 audit(1782082670.581:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb99ce59 code=0x7ffc0000 [ 1475.027997][ T30] audit: type=1326 audit(1782082670.581:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb99ce59 code=0x7ffc0000 [ 1475.178225][ T30] audit: type=1326 audit(1782082670.611:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb99ce59 code=0x7ffc0000 [ 1475.265498][ T30] audit: type=1326 audit(1782082670.611:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34eb99ce59 code=0x7ffc0000 [ 1475.347503][T29694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24819'. [ 1475.426736][ T30] audit: type=1326 audit(1782082670.631:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f34eb99ce59 code=0x7ffc0000 [ 1475.559077][T29694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24819'. [ 1475.568590][T25277] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.598663][ T30] audit: type=1326 audit(1782082670.671:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f34eb95d68e code=0x7ffc0000 [ 1475.629962][ T3288] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.677565][ T3288] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.758098][ T30] audit: type=1326 audit(1782082670.671:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f34eb95d68e code=0x7ffc0000 [ 1475.862230][ T3288] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.925961][ T30] audit: type=1326 audit(1782082670.671:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f34eb95d68e code=0x7ffc0000 [ 1475.993984][ T30] audit: type=1326 audit(1782082670.681:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f34eb95d68e code=0x7ffc0000 [ 1476.112986][ T30] audit: type=1326 audit(1782082670.681:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29681 comm="syz.2.24817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f34eb95d68e code=0x7ffc0000 [ 1477.719578][ C1] net_ratelimit: 11796 callbacks suppressed [ 1477.719599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.737815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1477.750163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.762509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.775193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.787893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1477.800966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1477.813292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.825759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1477.838119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1478.120769][T29733] syzkaller1: entered promiscuous mode [ 1478.132343][T29733] syzkaller1: entered allmulticast mode [ 1478.649103][T29752] netlink: 'syz.1.24842': attribute type 1 has an invalid length. [ 1478.692422][T29752] bond0: (slave geneve5): making interface the new active one [ 1478.700753][T29752] bond0: (slave geneve5): Enslaving as an active interface with an up link [ 1478.783182][T25277] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1478.795419][T25277] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1478.809699][T25277] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1478.829656][T25277] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1479.128137][T29759] lo: Caught tx_queue_len zero misconfig [ 1479.268642][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24850'. [ 1480.255360][T29795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24849'. [ 1480.972950][T29802] kvm: kvm [29801]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1480.999085][T29802] kvm: kvm [29801]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1481.619001][T29821] netlink: 76 bytes leftover after parsing attributes in process `syz.8.24869'. [ 1481.835656][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1481.835676][ T30] audit: type=1326 audit(1782082677.521:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29824 comm="syz.6.24871" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f850639ce59 code=0x0 [ 1482.191895][T29828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.24872'. [ 1482.730095][ C1] net_ratelimit: 12925 callbacks suppressed [ 1482.730115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1482.748398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1482.760746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1482.773144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1482.786110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1482.798432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1482.810796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1482.823299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1482.835669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1482.847962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1484.498339][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24887'. [ 1484.517485][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.528678][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.563409][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24887'. [ 1484.572854][T25257] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.612921][T25257] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.648849][T25257] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.681768][T25257] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.740040][ C1] net_ratelimit: 13202 callbacks suppressed [ 1487.740061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1487.758396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1487.770817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1487.783356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1487.796377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1487.808698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1487.821047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:73:df:29:ac:cc, vlan:0) [ 1487.833593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1487.846078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1487.858453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1488.659518][ T5686] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1488.809780][ T5686] usb 1-1: Using ep0 maxpacket: 8 [ 1488.819009][ T5686] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1488.828863][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.837712][ T5686] usb 1-1: Product: syz [ 1488.842418][ T5686] usb 1-1: Manufacturer: syz [ 1488.847081][ T5686] usb 1-1: SerialNumber: syz [ 1488.858859][ T5686] usb 1-1: config 0 descriptor?? [ 1489.077686][ T5686] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1490.403360][ T5686] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1490.424353][ T5686] usb 1-1: USB disconnect, device number 19 [ 1491.403272][T29957] netlink: 36 bytes leftover after parsing attributes in process `syz.6.24920'. [ 1491.431961][T29957] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1491.439396][T29957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.446879][T29957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.616387][T29967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1491.781498][T29978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.789529][T29978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.800705][T29978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.820492][T29978] bridge_slave_1: entered promiscuous mode [ 1491.836208][T29978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1491.846787][T29978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1491.862606][T29978] veth1_macvtap: left promiscuous mode [ 1491.869131][T29978] veth0_macvtap: left promiscuous mode [ 1491.883691][T29978] veth0_macvtap: entered promiscuous mode [ 1491.891231][T29978] veth1_macvtap: entered promiscuous mode [ 1491.903166][T29978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.501815][T30016] netlink: 45 bytes leftover after parsing attributes in process `syz.1.24944'. [ 1493.554405][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24944'. [ 1495.767273][T30027] netlink: 'syz.8.24948': attribute type 1 has an invalid length. [ 1507.064558][T13500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1507.072219][T13500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1507.080419][T13500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1507.088165][T13500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1507.098278][T13500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1507.650870][T13500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1507.658204][T13500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1507.665960][T13500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1507.674047][T13500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1507.682448][T13500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1508.598338][T13500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1508.607347][T13500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1508.615630][T13500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1508.624805][T13500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1508.633943][T13500] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1509.149637][T16233] Bluetooth: hci5: command tx timeout [ 1509.709567][T16233] Bluetooth: hci6: command tx timeout [ 1510.043659][T13500] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1510.051166][T13500] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1510.058561][T13500] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1510.066537][T13500] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1510.074080][T13500] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1510.669571][T16233] Bluetooth: hci7: command tx timeout [ 1510.699958][T20155] kworker/1:14 (20155) used greatest stack depth: 16984 bytes left [ 1511.040319][T13500] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1511.047703][T13500] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1511.055826][T13500] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1511.063981][T13500] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1511.073503][T13500] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1511.229526][T16233] Bluetooth: hci5: command tx timeout [ 1511.789689][T16233] Bluetooth: hci6: command tx timeout [ 1512.109461][T16233] Bluetooth: hci8: command tx timeout [ 1512.749442][T16233] Bluetooth: hci7: command tx timeout [ 1513.149575][T16233] Bluetooth: hci9: command tx timeout [ 1513.309632][T16233] Bluetooth: hci5: command tx timeout [ 1513.869593][T16233] Bluetooth: hci6: command tx timeout [ 1514.189521][T16233] Bluetooth: hci8: command tx timeout [ 1514.829735][T16233] Bluetooth: hci7: command tx timeout [ 1515.240454][T16233] Bluetooth: hci9: command tx timeout [ 1515.389587][T16233] Bluetooth: hci5: command tx timeout [ 1515.949534][T16233] Bluetooth: hci6: command tx timeout [ 1516.269529][T16233] Bluetooth: hci8: command tx timeout [ 1516.909490][T16233] Bluetooth: hci7: command tx timeout [ 1517.309651][T16233] Bluetooth: hci9: command tx timeout [ 1518.359684][T16233] Bluetooth: hci8: command tx timeout [ 1519.389508][T16233] Bluetooth: hci9: command tx timeout [ 1520.349978][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1545.950981][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.957353][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1567.090881][T13500] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1567.099065][T13500] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1567.106839][T13500] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1567.115891][T13500] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1567.123541][T13500] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1567.594243][T16233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1567.601754][T16233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1567.609179][T16233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1567.617125][T16233] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1567.625983][T16233] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1568.593415][T13500] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1568.601026][T13500] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1568.608393][T13500] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1568.617071][T13500] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1568.624843][T13500] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1569.149745][T13500] Bluetooth: hci10: command tx timeout [ 1569.709544][T13500] Bluetooth: hci11: command tx timeout [ 1570.094043][T16233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1570.101475][T16233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1570.109070][T16233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1570.117211][T16233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1570.125109][T16233] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1570.669567][T16233] Bluetooth: hci12: command tx timeout [ 1571.095156][T13500] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1571.102683][T13500] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1571.110360][T13500] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1571.118288][T13500] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1571.126017][T13500] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1571.239407][T16233] Bluetooth: hci10: command tx timeout [ 1571.789888][T16233] Bluetooth: hci11: command tx timeout [ 1572.189877][T16233] Bluetooth: hci13: command tx timeout [ 1572.749908][T16233] Bluetooth: hci12: command tx timeout [ 1573.150054][T16233] Bluetooth: hci14: command tx timeout [ 1573.309676][T16233] Bluetooth: hci10: command tx timeout [ 1573.869897][T16233] Bluetooth: hci11: command tx timeout [ 1574.269745][T16233] Bluetooth: hci13: command tx timeout [ 1574.829419][T16233] Bluetooth: hci12: command tx timeout [ 1575.229507][T16233] Bluetooth: hci14: command tx timeout [ 1575.389737][T16233] Bluetooth: hci10: command tx timeout [ 1575.949461][T16233] Bluetooth: hci11: command tx timeout [ 1576.349834][T16233] Bluetooth: hci13: command tx timeout [ 1576.670108][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1576.909653][T16233] Bluetooth: hci12: command tx timeout [ 1577.309625][T16233] Bluetooth: hci14: command tx timeout [ 1578.429955][T16233] Bluetooth: hci13: command tx timeout [ 1579.389968][T16233] Bluetooth: hci14: command tx timeout [ 1607.390711][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.397289][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1622.749712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1627.172441][T13500] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1627.180465][T13500] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1627.188345][T13500] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1627.196302][T13500] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1627.204184][T13500] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1627.676200][T16233] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1627.683682][T16233] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1627.691292][T16233] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1627.699185][T16233] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1627.707059][T16233] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1628.678619][T26748] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1628.686661][T26748] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1628.694408][T26748] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1628.702438][T26748] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1628.710136][T26748] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1629.229413][T26748] Bluetooth: hci15: command tx timeout [ 1629.789524][T26748] Bluetooth: hci16: command tx timeout [ 1629.949690][T26748] Bluetooth: hci6: command 0x0406 tx timeout [ 1629.955795][T30079] Bluetooth: hci5: command 0x0406 tx timeout [ 1630.171889][T16233] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1630.179805][T16233] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1630.187220][T16233] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1630.195407][T16233] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1630.203471][T16233] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1630.749709][T13500] Bluetooth: hci17: command tx timeout [ 1631.173523][T16233] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1631.181470][T16233] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1631.188842][T16233] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1631.197192][T16233] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1631.205556][T16233] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1631.309499][T13500] Bluetooth: hci15: command tx timeout [ 1631.869496][T13500] Bluetooth: hci16: command tx timeout [ 1632.279513][T13500] Bluetooth: hci18: command tx timeout [ 1632.829823][T13500] Bluetooth: hci17: command tx timeout [ 1633.239491][T30090] Bluetooth: hci19: command tx timeout [ 1633.399474][T30090] Bluetooth: hci15: command tx timeout [ 1633.949503][T30090] Bluetooth: hci16: command tx timeout [ 1634.349491][T30090] Bluetooth: hci18: command tx timeout [ 1634.909659][T30090] Bluetooth: hci17: command tx timeout [ 1635.079498][T13500] Bluetooth: hci8: command 0x0406 tx timeout [ 1635.079703][T30090] Bluetooth: hci7: command 0x0406 tx timeout [ 1635.085755][T13500] Bluetooth: hci9: command 0x0406 tx timeout [ 1635.319521][T16233] Bluetooth: hci19: command tx timeout [ 1635.469400][T16233] Bluetooth: hci15: command tx timeout [ 1636.029580][T16233] Bluetooth: hci16: command tx timeout [ 1636.429427][T16233] Bluetooth: hci18: command tx timeout [ 1636.999699][T16233] Bluetooth: hci17: command tx timeout [ 1637.389817][T16233] Bluetooth: hci19: command tx timeout [ 1638.509620][T16233] Bluetooth: hci18: command tx timeout [ 1639.469539][T16233] Bluetooth: hci19: command tx timeout [ 1640.669611][ T31] INFO: task kworker/u8:8:3288 blocked for more than 143 seconds. [ 1640.677528][ T31] Tainted: G L syzkaller #0 [ 1640.684173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1640.693144][ T31] task:kworker/u8:8 state:D stack:21656 pid:3288 tgid:3288 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1640.705262][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1640.712796][ T31] Call Trace: [ 1640.716119][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1640.719054][ T31] __schedule+0x17d9/0x56c0 [ 1640.724310][ T31] ? trace_irq_enable+0x3b/0x140 [ 1640.729927][ T31] ? irqentry_exit+0x218/0x8f0 [ 1640.734758][ T31] ? trace_irq_disable+0x3b/0x140 [ 1640.739942][ T31] ? __pfx___schedule+0x10/0x10 [ 1640.744860][ T31] ? rcu_is_watching+0x15/0xb0 [ 1640.750037][ T31] ? rcu_is_watching+0x15/0xb0 [ 1640.754972][ T31] ? lock_release+0x4b/0x3c0 [ 1640.759960][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1640.765447][ T31] schedule+0x164/0x360 [ 1640.770079][ T31] schedule_preempt_disabled+0x13/0x30 [ 1640.775729][ T31] __mutex_lock+0x7bf/0x1550 [ 1640.780988][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1640.785818][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1640.792744][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1640.798064][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.803326][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1640.808760][ T31] ? rcu_is_watching+0x15/0xb0 [ 1640.814159][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1640.820145][ T31] ? rcu_is_watching+0x15/0xb0 [ 1640.824967][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1640.831106][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 1640.837233][ T31] ? rcu_is_watching+0x15/0xb0 [ 1640.842546][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1640.848562][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1640.854385][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1640.860644][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1640.866012][ T31] ? assign_work+0x3cf/0x5d0 [ 1640.871330][ T31] worker_thread+0xa47/0xfb0 [ 1640.875995][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1640.881291][ T31] kthread+0x388/0x470 [ 1640.885425][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1640.890911][ T31] ? __pfx_kthread+0x10/0x10 [ 1640.895735][ T31] ret_from_fork+0x514/0xb70 [ 1640.901275][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1640.906452][ T31] ? __switch_to+0xc89/0x1420 [ 1640.911481][ T31] ? __pfx_kthread+0x10/0x10 [ 1640.916133][ T31] ret_from_fork_asm+0x1a/0x30 [ 1640.921114][ T31] [ 1640.924437][ T31] INFO: task kworker/1:15:3867 blocked for more than 143 seconds. [ 1640.948445][ T31] Tainted: G L syzkaller #0 [ 1640.971449][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1640.993006][ T31] task:kworker/1:15 state:D stack:15992 pid:3867 tgid:3867 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1641.006235][ T31] Workqueue: events netdev_rx_mode_work [ 1641.012058][ T31] Call Trace: [ 1641.015362][ T31] [ 1641.018303][ T31] __schedule+0x17d9/0x56c0 [ 1641.022972][ T31] ? ip6_output+0x11e/0x540 [ 1641.027528][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.032693][ T31] ? __pfx___schedule+0x10/0x10 [ 1641.037602][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.042780][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.047601][ T31] ? lock_release+0x4b/0x3c0 [ 1641.052293][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.057088][ T31] ? schedule+0x90/0x360 [ 1641.061542][ T31] ? trace_irq_enable+0x3b/0x140 [ 1641.066531][ T31] schedule+0x164/0x360 [ 1641.071166][ T31] schedule_preempt_disabled+0x13/0x30 [ 1641.076688][ T31] __mutex_lock+0x7bf/0x1550 [ 1641.081515][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1641.086348][ T31] ? netdev_rx_mode_work+0x18/0x3c0 [ 1641.091635][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1641.096683][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1641.102178][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.107962][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.112866][ T31] ? lock_acquire+0x5f/0x350 [ 1641.117532][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.123402][ T31] netdev_rx_mode_work+0x18/0x3c0 [ 1641.128478][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.134310][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1641.140022][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1641.146069][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.151596][ T31] ? assign_work+0x3cf/0x5d0 [ 1641.156232][ T31] worker_thread+0xa47/0xfb0 [ 1641.160968][ T31] kthread+0x388/0x470 [ 1641.165080][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1641.170251][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.175069][ T31] ret_from_fork+0x514/0xb70 [ 1641.179782][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1641.184949][ T31] ? __switch_to+0xc89/0x1420 [ 1641.189689][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.194305][ T31] ret_from_fork_asm+0x1a/0x30 [ 1641.199105][ T31] [ 1641.202328][ T31] INFO: task kworker/u8:12:25257 blocked for more than 143 seconds. [ 1641.211446][ T31] Tainted: G L syzkaller #0 [ 1641.217965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1641.226855][ T31] task:kworker/u8:12 state:D stack:22616 pid:25257 tgid:25257 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1641.239098][ T31] Workqueue: events_unbound linkwatch_event [ 1641.247128][ T31] Call Trace: [ 1641.250551][ T31] [ 1641.253541][ T31] __schedule+0x17d9/0x56c0 [ 1641.258100][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.263431][ T31] ? debug_object_activate+0xb7/0x410 [ 1641.268890][ T31] ? __pfx___schedule+0x10/0x10 [ 1641.273910][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.278822][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.283814][ T31] ? lock_release+0x4b/0x3c0 [ 1641.288464][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1641.293711][ T31] schedule+0x164/0x360 [ 1641.297943][ T31] schedule_preempt_disabled+0x13/0x30 [ 1641.303471][ T31] __mutex_lock+0x7bf/0x1550 [ 1641.308110][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1641.313137][ T31] ? linkwatch_event+0xe/0x60 [ 1641.317891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1641.323023][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.329395][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.334193][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.338983][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.344784][ T31] linkwatch_event+0xe/0x60 [ 1641.349368][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1641.354997][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1641.361092][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.366180][ T31] ? assign_work+0x3cf/0x5d0 [ 1641.370992][ T31] worker_thread+0xa47/0xfb0 [ 1641.375713][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1641.380988][ T31] kthread+0x388/0x470 [ 1641.385126][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1641.390346][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.394967][ T31] ret_from_fork+0x514/0xb70 [ 1641.399667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1641.404827][ T31] ? __switch_to+0xc89/0x1420 [ 1641.409581][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.414196][ T31] ret_from_fork_asm+0x1a/0x30 [ 1641.418987][ T31] [ 1641.422182][ T31] INFO: task kworker/u8:45:25293 blocked for more than 144 seconds. [ 1641.430241][ T31] Tainted: G L syzkaller #0 [ 1641.436773][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1641.445566][ T31] task:kworker/u8:45 state:D stack:24152 pid:25293 tgid:25293 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1641.457671][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1641.463742][ T31] Call Trace: [ 1641.467043][ T31] [ 1641.470024][ T31] __schedule+0x17d9/0x56c0 [ 1641.474574][ T31] ? deref_stack_reg+0x18e/0x220 [ 1641.480052][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1641.485220][ T31] ? unwind_next_frame+0x1baf/0x2550 [ 1641.490648][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1641.495624][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1641.500807][ T31] ? arch_stack_walk+0x11b/0x150 [ 1641.505802][ T31] ? __pfx___schedule+0x10/0x10 [ 1641.510749][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.515548][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.520391][ T31] ? lock_release+0x4b/0x3c0 [ 1641.525040][ T31] ? wq_worker_sleeping+0x66/0x250 [ 1641.530254][ T31] schedule+0x164/0x360 [ 1641.534453][ T31] schedule_preempt_disabled+0x13/0x30 [ 1641.539995][ T31] __mutex_lock+0x7bf/0x1550 [ 1641.544616][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1641.549655][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 1641.554900][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1641.559985][ T31] ? __perf_event_task_sched_in+0x189b/0x1a90 [ 1641.566181][ T31] ? perf_cgroup_switch+0xe6/0x920 [ 1641.571403][ T31] ? sched_clock+0x3f/0x60 [ 1641.575851][ T31] ? __perf_event_task_sched_in+0xf7/0x1a90 [ 1641.582015][ T31] addrconf_dad_work+0x116/0x15c0 [ 1641.587079][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1641.592720][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1641.598223][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.603044][ T31] ? lock_acquire+0x5f/0x350 [ 1641.607674][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.612512][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1641.618264][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1641.623942][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1641.630117][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1641.635587][ T31] ? assign_work+0x3cf/0x5d0 [ 1641.640491][ T31] worker_thread+0xa47/0xfb0 [ 1641.645180][ T31] kthread+0x388/0x470 [ 1641.649350][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1641.654505][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.659126][ T31] ret_from_fork+0x514/0xb70 [ 1641.663783][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1641.668946][ T31] ? __switch_to+0xc89/0x1420 [ 1641.673725][ T31] ? __pfx_kthread+0x10/0x10 [ 1641.678373][ T31] ret_from_fork_asm+0x1a/0x30 [ 1641.683216][ T31] [ 1641.686488][ T31] INFO: task syz.0.24930:29977 blocked for more than 144 seconds. [ 1641.694571][ T31] Tainted: G L syzkaller #0 [ 1641.701356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1641.710210][ T31] task:syz.0.24930 state:D stack:24752 pid:29977 tgid:29977 ppid:13504 task_flags:0x400040 flags:0x00080002 [ 1641.722261][ T31] Call Trace: [ 1641.725566][ T31] [ 1641.728505][ T31] __schedule+0x17d9/0x56c0 [ 1641.733104][ T31] ? kasan_save_stack+0x3e/0x60 [ 1641.738049][ T31] ? kasan_record_aux_stack+0xbd/0xd0 [ 1641.743501][ T31] ? __se_sys_close_range+0x3d3/0x900 [ 1641.748961][ T31] ? __pfx___schedule+0x10/0x10 [ 1641.753911][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.758740][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.763567][ T31] ? lock_release+0x4b/0x3c0 [ 1641.768625][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.773465][ T31] schedule+0x164/0x360 [ 1641.777672][ T31] schedule_preempt_disabled+0x13/0x30 [ 1641.783269][ T31] __mutex_lock+0x7bf/0x1550 [ 1641.788081][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1641.793023][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1641.797861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1641.802953][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1641.808103][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1641.813312][ T31] ? fasync_remove_entry+0x18c/0x1c0 [ 1641.818653][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1641.824729][ T31] tun_chr_close+0x3e/0x1c0 [ 1641.829344][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1641.834490][ T31] __fput+0x418/0xa50 [ 1641.838491][ T31] task_work_run+0x1d9/0x270 [ 1641.843147][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1641.848286][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.853301][ T31] exit_to_user_mode_loop+0x1fa/0x730 [ 1641.858702][ T31] ? rcu_is_watching+0x15/0xb0 [ 1641.863529][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.870067][ T31] do_syscall_64+0x353/0x580 [ 1641.876400][ T31] ? trace_irq_disable+0x3b/0x140 [ 1641.881514][ T31] ? clear_bhb_loop+0x40/0x90 [ 1641.886222][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.892411][ T31] RIP: 0033:0x7fb3cc79ce59 [ 1641.896860][ T31] RSP: 002b:00007fb3ccb3fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1641.905389][ T31] RAX: 0000000000000000 RBX: 00007fb3cca17da0 RCX: 00007fb3cc79ce59 [ 1641.913453][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1641.921747][ T31] RBP: 00007fb3cca17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1641.929843][ T31] R10: 00007fb3cca17cb0 R11: 0000000000000246 R12: 000000000016c5f8 [ 1641.937842][ T31] R13: 00007fb3cca1609c R14: 000000000016c325 R15: 00007fb3cca16090 [ 1641.945897][ T31] [ 1641.948993][ T31] INFO: task syz.0.24930:29978 blocked for more than 144 seconds. [ 1641.956955][ T31] Tainted: G L syzkaller #0 [ 1641.963530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1641.972318][ T31] task:syz.0.24930 state:D stack:22256 pid:29978 tgid:29977 ppid:13504 task_flags:0x400140 flags:0x00080002 [ 1641.984337][ T31] Call Trace: [ 1641.987624][ T31] [ 1641.990628][ T31] __schedule+0x17d9/0x56c0 [ 1641.995473][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.000327][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.005130][ T31] ? irqentry_exit+0x218/0x8f0 [ 1642.009978][ T31] ? trace_irq_disable+0x3b/0x140 [ 1642.015055][ T31] ? __pfx___schedule+0x10/0x10 [ 1642.020035][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.024829][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.032106][ T31] ? lock_release+0x4b/0x3c0 [ 1642.036746][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.041569][ T31] schedule+0x164/0x360 [ 1642.045763][ T31] schedule_preempt_disabled+0x13/0x30 [ 1642.051285][ T31] __mutex_lock+0x7bf/0x1550 [ 1642.055907][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1642.060789][ T31] ? __ethtool_get_link_ksettings+0x109/0x250 [ 1642.067016][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1642.072143][ T31] ? igmp_group_added+0x238/0x910 [ 1642.077255][ T31] ? igmpv3_del_delrec+0x204/0x710 [ 1642.082431][ T31] __ethtool_get_link_ksettings+0x109/0x250 [ 1642.088390][ T31] bond_netdev_event+0x643/0xf80 [ 1642.093699][ T31] ? __pfx_bond_netdev_event+0x10/0x10 [ 1642.099209][ T31] ? __pfx_inetdev_event+0x10/0x10 [ 1642.104421][ T31] ? ipmr_device_event+0x1f6/0x220 [ 1642.109874][ T31] notifier_call_chain+0x1a5/0x3d0 [ 1642.115045][ T31] __dev_notify_flags+0x1aa/0x310 [ 1642.120221][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 1642.125794][ T31] ? __dev_change_flags+0x5f1/0x820 [ 1642.131081][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 1642.136655][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 1642.142486][ T31] netif_change_flags+0xde/0x1b0 [ 1642.147456][ T31] dev_change_flags+0x128/0x260 [ 1642.152395][ T31] vlan_device_event+0x1b4e/0x1f00 [ 1642.157612][ T31] ? packet_notifier+0xf1b/0xf70 [ 1642.162609][ T31] ? br_device_event+0x282/0x9c0 [ 1642.167575][ T31] ? __pfx_phonet_device_notify+0x10/0x10 [ 1642.173366][ T31] ? __pfx_vlan_device_event+0x10/0x10 [ 1642.178855][ T31] ? bcm_notifier+0xa9/0x890 [ 1642.183589][ T31] ? raw_notifier+0x9d/0x7d0 [ 1642.188232][ T31] ? cgw_notifier+0x314/0x380 [ 1642.193037][ T31] notifier_call_chain+0x1a5/0x3d0 [ 1642.198393][ T31] __dev_notify_flags+0x1aa/0x310 [ 1642.203525][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 1642.209105][ T31] ? __dev_change_flags+0x5f1/0x820 [ 1642.214575][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 1642.220208][ T31] ? do_setlink+0x3c9f/0x4670 [ 1642.224894][ T31] netif_change_flags+0xde/0x1b0 [ 1642.229881][ T31] do_setlink+0xdd6/0x4670 [ 1642.234343][ T31] ? __pfx_do_setlink+0x10/0x10 [ 1642.239223][ T31] ? stack_trace_save+0xa9/0x100 [ 1642.244267][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1642.249943][ T31] ? __mutex_trylock_common+0x15f/0x270 [ 1642.255551][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1642.261504][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.266302][ T31] ? trace_contention_end+0x3d/0x140 [ 1642.271787][ T31] ? __mutex_lock+0x30d/0x1550 [ 1642.276598][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1642.281427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1642.286482][ T31] ? ns_capable+0x89/0xe0 [ 1642.290902][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1642.296745][ T31] rtnl_newlink+0x148e/0x1bd0 [ 1642.301743][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.306565][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.311649][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1642.316826][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1642.322019][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.326826][ T31] ? sched_balance_rq+0x20b7/0x7020 [ 1642.332189][ T31] ? __asan_memcpy+0x40/0x70 [ 1642.336843][ T31] ? sched_balance_rq+0x6511/0x7020 [ 1642.342139][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1642.347280][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.352257][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1642.357504][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.362524][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.367343][ T31] ? lock_release+0x4b/0x3c0 [ 1642.372038][ T31] ? lock_release+0x4b/0x3c0 [ 1642.376673][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 1642.382314][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1642.387630][ T31] ? kernel_text_address+0xa5/0xe0 [ 1642.392965][ T31] ? __kernel_text_address+0xd/0x30 [ 1642.398357][ T31] ? unwind_get_return_address+0x4d/0x90 [ 1642.404275][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1642.410931][ T31] ? arch_stack_walk+0xfb/0x150 [ 1642.415843][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1642.421605][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.426430][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.431557][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.436365][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.441531][ T31] ? lock_release+0x4b/0x3c0 [ 1642.446177][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1642.451219][ T31] ? security_capable+0x7e/0x2c0 [ 1642.456245][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.461401][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1642.466390][ T31] ? kasan_save_track+0x3e/0x80 [ 1642.471311][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1642.476452][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.482281][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1642.487333][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.492263][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1642.497162][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.502847][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1642.508471][ T31] ? net_generic+0x1e/0x240 [ 1642.513402][ T31] ? net_generic+0x1e/0x240 [ 1642.517995][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1642.523361][ T31] netlink_unicast+0x7bb/0x940 [ 1642.528158][ T31] netlink_sendmsg+0x813/0xb40 [ 1642.533040][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.538358][ T31] ? futex_unqueue+0x22/0x240 [ 1642.543422][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1642.549990][ T31] ? lock_release+0x4b/0x3c0 [ 1642.554608][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.559957][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1642.565162][ T31] ____sys_sendmsg+0x54e/0x850 [ 1642.570288][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1642.575618][ T31] ? lock_release+0x4b/0x3c0 [ 1642.580280][ T31] ? import_iovec+0x73/0xa0 [ 1642.584926][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1642.589740][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1642.595212][ T31] ? futex_wait+0x2a2/0x390 [ 1642.600100][ T31] ? __fget_files+0x2a/0x420 [ 1642.604733][ T31] ? __fget_files+0x3a2/0x420 [ 1642.609782][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1642.614767][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1642.620346][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.625140][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.631599][ T31] do_syscall_64+0x174/0x580 [ 1642.636252][ T31] ? trace_irq_disable+0x3b/0x140 [ 1642.641348][ T31] ? clear_bhb_loop+0x40/0x90 [ 1642.646062][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.652054][ T31] RIP: 0033:0x7fb3cc79ce59 [ 1642.656501][ T31] RSP: 002b:00007fb3cd5f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1642.665274][ T31] RAX: ffffffffffffffda RBX: 00007fb3cca15fa0 RCX: 00007fb3cc79ce59 [ 1642.673383][ T31] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1642.681432][ T31] RBP: 00007fb3cc832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1642.689760][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.697775][ T31] R13: 00007fb3cca16038 R14: 00007fb3cca15fa0 R15: 00007fb3ccb3fa48 [ 1642.705833][ T31] [ 1642.709148][ T31] INFO: task syz.2.24932:29985 blocked for more than 145 seconds. [ 1642.717146][ T31] Tainted: G L syzkaller #0 [ 1642.723901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1642.732627][ T31] task:syz.2.24932 state:D stack:28792 pid:29985 tgid:29984 ppid:1083 task_flags:0x400040 flags:0x00080002 [ 1642.744615][ T31] Call Trace: [ 1642.747897][ T31] [ 1642.751169][ T31] __schedule+0x17d9/0x56c0 [ 1642.755727][ T31] ? __pfx___schedule+0x10/0x10 [ 1642.760646][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.765450][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.770279][ T31] ? lock_release+0x4b/0x3c0 [ 1642.774904][ T31] ? rcu_is_watching+0x15/0xb0 [ 1642.780019][ T31] schedule+0x164/0x360 [ 1642.784197][ T31] schedule_preempt_disabled+0x13/0x30 [ 1642.789721][ T31] __mutex_lock+0x7bf/0x1550 [ 1642.794345][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1642.799109][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1642.804206][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1642.809275][ T31] ? lock_release+0x4b/0x3c0 [ 1642.814509][ T31] ? __might_fault+0xaf/0x130 [ 1642.819229][ T31] ? __might_fault+0xcb/0x130 [ 1642.823996][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1642.828900][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1642.834425][ T31] ? __fget_files+0x2a/0x420 [ 1642.839092][ T31] ? __fget_files+0x3a2/0x420 [ 1642.844149][ T31] ? __fget_files+0x2a/0x420 [ 1642.848768][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1642.853794][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1642.858943][ T31] __se_sys_ioctl+0xfc/0x170 [ 1642.863588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.869947][ T31] do_syscall_64+0x174/0x580 [ 1642.874548][ T31] ? trace_irq_disable+0x3b/0x140 [ 1642.879638][ T31] ? clear_bhb_loop+0x40/0x90 [ 1642.884344][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.890295][ T31] RIP: 0033:0x7f34eb99ce59 [ 1642.894751][ T31] RSP: 002b:00007f34ec8b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1642.903497][ T31] RAX: ffffffffffffffda RBX: 00007f34ebc15fa0 RCX: 00007f34eb99ce59 [ 1642.911539][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 1642.919863][ T31] RBP: 00007f34eba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1642.927885][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.936197][ T31] R13: 00007f34ebc16038 R14: 00007f34ebc15fa0 R15: 00007f34ebd3fa48 [ 1642.944236][ T31] [ 1642.947293][ T31] INFO: task syz.2.24932:29986 blocked for more than 145 seconds. [ 1642.955179][ T31] Tainted: G L syzkaller #0 [ 1642.962019][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1642.971213][ T31] task:syz.2.24932 state:D stack:28216 pid:29986 tgid:29984 ppid:1083 task_flags:0x400140 flags:0x00080002 [ 1642.983346][ T31] Call Trace: [ 1642.986666][ T31] [ 1642.989779][ T31] __schedule+0x17d9/0x56c0 [ 1642.994336][ T31] ? sched_balance_rq+0x6511/0x7020 [ 1642.999665][ T31] ? __pfx___schedule+0x10/0x10 [ 1643.004565][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.009448][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.014240][ T31] ? lock_release+0x4b/0x3c0 [ 1643.019014][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.024134][ T31] schedule+0x164/0x360 [ 1643.028380][ T31] schedule_preempt_disabled+0x13/0x30 [ 1643.034254][ T31] __mutex_lock+0x7bf/0x1550 [ 1643.038899][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1643.043851][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 1643.049033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1643.054337][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1643.059597][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.064502][ T31] ? lock_release+0x4b/0x3c0 [ 1643.069101][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1643.076106][ T31] ? security_capable+0x7e/0x2c0 [ 1643.081279][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 1643.086277][ T31] ? kasan_save_track+0x3e/0x80 [ 1643.091230][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1643.096381][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.101922][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 1643.106890][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.111727][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1643.116520][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.122222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1643.127594][ T31] ? net_generic+0x1e/0x240 [ 1643.132498][ T31] ? net_generic+0x1e/0x240 [ 1643.137060][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1643.142454][ T31] netlink_unicast+0x7bb/0x940 [ 1643.147271][ T31] netlink_sendmsg+0x813/0xb40 [ 1643.152181][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.157512][ T31] ? futex_unqueue+0x22/0x240 [ 1643.162657][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1643.169129][ T31] ? lock_release+0x4b/0x3c0 [ 1643.173818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.179138][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1643.184344][ T31] ____sys_sendmsg+0x54e/0x850 [ 1643.189249][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1643.194998][ T31] ? lock_release+0x4b/0x3c0 [ 1643.199690][ T31] ? import_iovec+0x73/0xa0 [ 1643.204245][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1643.208966][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.214246][ T31] ? futex_wait+0x2a2/0x390 [ 1643.218806][ T31] ? __fget_files+0x2a/0x420 [ 1643.223920][ T31] ? __fget_files+0x3a2/0x420 [ 1643.228654][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1643.233976][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1643.239520][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.244319][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.250722][ T31] do_syscall_64+0x174/0x580 [ 1643.255362][ T31] ? trace_irq_disable+0x3b/0x140 [ 1643.260453][ T31] ? clear_bhb_loop+0x40/0x90 [ 1643.265163][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.271112][ T31] RIP: 0033:0x7f34eb99ce59 [ 1643.275551][ T31] RSP: 002b:00007f34ec891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.284327][ T31] RAX: ffffffffffffffda RBX: 00007f34ebc16090 RCX: 00007f34eb99ce59 [ 1643.292357][ T31] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1643.300391][ T31] RBP: 00007f34eba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1643.308372][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.316848][ T31] R13: 00007f34ebc16128 R14: 00007f34ebc16090 R15: 00007f34ebd3fa48 [ 1643.325201][ T31] [ 1643.328298][ T31] INFO: task syz.1.24944:30015 blocked for more than 146 seconds. [ 1643.336171][ T31] Tainted: G L syzkaller #0 [ 1643.343798][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1643.352525][ T31] task:syz.1.24944 state:D stack:28888 pid:30015 tgid:30014 ppid:5647 task_flags:0x400140 flags:0x00080002 [ 1643.364524][ T31] Call Trace: [ 1643.367809][ T31] [ 1643.371057][ T31] __schedule+0x17d9/0x56c0 [ 1643.375602][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1643.381050][ T31] ? stack_depot_save_flags+0x33/0x800 [ 1643.386659][ T31] ? __pfx___schedule+0x10/0x10 [ 1643.391568][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.396372][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.401499][ T31] ? lock_release+0x4b/0x3c0 [ 1643.406121][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.410965][ T31] schedule+0x164/0x360 [ 1643.415161][ T31] schedule_preempt_disabled+0x13/0x30 [ 1643.420689][ T31] __mutex_lock+0x7bf/0x1550 [ 1643.425580][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1643.430699][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1643.436939][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1643.442095][ T31] ? lock_release+0x4b/0x3c0 [ 1643.446712][ T31] ? net_generic+0x1e/0x240 [ 1643.451279][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 1643.457321][ T31] ops_init+0x35d/0x5d0 [ 1643.461855][ T31] setup_net+0x118/0x350 [ 1643.466219][ T31] ? __pfx_setup_net+0x10/0x10 [ 1643.471084][ T31] ? preinit_net+0x492/0x7b0 [ 1643.475724][ T31] copy_net_ns+0x4f9/0x720 [ 1643.480223][ T31] create_new_namespaces+0x3f0/0x6b0 [ 1643.485549][ T31] ? security_capable+0x7e/0x2c0 [ 1643.490864][ T31] unshare_nsproxy_namespaces+0x149/0x190 [ 1643.496640][ T31] ksys_unshare+0x57d/0xa00 [ 1643.501221][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1643.506269][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 1643.511182][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.515980][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.522372][ T31] __x64_sys_unshare+0x38/0x50 [ 1643.527406][ T31] do_syscall_64+0x174/0x580 [ 1643.532278][ T31] ? trace_irq_disable+0x3b/0x140 [ 1643.537372][ T31] ? clear_bhb_loop+0x40/0x90 [ 1643.542196][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.548124][ T31] RIP: 0033:0x7f1c8819ce59 [ 1643.553005][ T31] RSP: 002b:00007f1c88faa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1643.561495][ T31] RAX: ffffffffffffffda RBX: 00007f1c88415fa0 RCX: 00007f1c8819ce59 [ 1643.569517][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1643.577518][ T31] RBP: 00007f1c88232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1643.585893][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.593937][ T31] R13: 00007f1c88416038 R14: 00007f1c88415fa0 R15: 00007f1c8853fa48 [ 1643.601968][ T31] [ 1643.605023][ T31] INFO: task syz.1.24944:30016 blocked for more than 146 seconds. [ 1643.613393][ T31] Tainted: G L syzkaller #0 [ 1643.620518][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1643.629834][ T31] task:syz.1.24944 state:D stack:26168 pid:30016 tgid:30014 ppid:5647 task_flags:0x400140 flags:0x00080002 [ 1643.642164][ T31] Call Trace: [ 1643.645467][ T31] [ 1643.648400][ T31] __schedule+0x17d9/0x56c0 [ 1643.653032][ T31] ? __nla_validate_parse+0x2534/0x2d50 [ 1643.658712][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 1643.663717][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1643.668609][ T31] ? __pfx___schedule+0x10/0x10 [ 1643.673803][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.678597][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.683442][ T31] ? lock_release+0x4b/0x3c0 [ 1643.688115][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.692962][ T31] schedule+0x164/0x360 [ 1643.697157][ T31] schedule_preempt_disabled+0x13/0x30 [ 1643.702954][ T31] __mutex_lock+0x7bf/0x1550 [ 1643.707558][ T31] ? trace_irq_enable+0x3b/0x140 [ 1643.712632][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1643.717448][ T31] ? inet_rtm_newroute+0x12b/0x250 [ 1643.722713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1643.727787][ T31] inet_rtm_newroute+0x12b/0x250 [ 1643.733355][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 1643.738694][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1643.743885][ T31] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1643.749429][ T31] ? lock_release+0x4b/0x3c0 [ 1643.754054][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1643.758740][ T31] ? security_capable+0x7e/0x2c0 [ 1643.764134][ T31] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1643.769685][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1643.774637][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1643.779805][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.785296][ T31] ? ref_tracker_free+0x689/0x830 [ 1643.790656][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1643.796120][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1643.800950][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.806439][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1643.811800][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1643.817045][ T31] netlink_unicast+0x7bb/0x940 [ 1643.822202][ T31] netlink_sendmsg+0x813/0xb40 [ 1643.827014][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.832383][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1643.839059][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.844429][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1643.849854][ T31] ____sys_sendmsg+0x54e/0x850 [ 1643.854666][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1643.860041][ T31] ? lock_release+0x4b/0x3c0 [ 1643.864659][ T31] ? import_iovec+0x73/0xa0 [ 1643.869176][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1643.874038][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.879573][ T31] ? futex_wake+0x51b/0x5f0 [ 1643.884110][ T31] ? __fget_files+0x2a/0x420 [ 1643.888711][ T31] ? __fget_files+0x3a2/0x420 [ 1643.893464][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1643.898446][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1643.903978][ T31] ? rcu_is_watching+0x15/0xb0 [ 1643.908774][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.915168][ T31] do_syscall_64+0x174/0x580 [ 1643.919819][ T31] ? trace_irq_disable+0x3b/0x140 [ 1643.924884][ T31] ? clear_bhb_loop+0x40/0x90 [ 1643.929604][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.935536][ T31] RIP: 0033:0x7f1c8819ce59 [ 1643.940439][ T31] RSP: 002b:00007f1c88f89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.948891][ T31] RAX: ffffffffffffffda RBX: 00007f1c88416090 RCX: 00007f1c8819ce59 [ 1643.956929][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1643.964965][ T31] RBP: 00007f1c88232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1643.973297][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.981335][ T31] R13: 00007f1c88416128 R14: 00007f1c88416090 R15: 00007f1c8853fa48 [ 1643.989361][ T31] [ 1643.992405][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1644.001791][ T31] INFO: task syz.1.24944:30017 blocked for more than 146 seconds. [ 1644.010215][ T31] Tainted: G L syzkaller #0 [ 1644.016750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1644.025490][ T31] task:syz.1.24944 state:D stack:26216 pid:30017 tgid:30014 ppid:5647 task_flags:0x400140 flags:0x00080002 [ 1644.037698][ T31] Call Trace: [ 1644.041308][ T31] [ 1644.044285][ T31] __schedule+0x17d9/0x56c0 [ 1644.048830][ T31] ? __kmalloc_noprof+0x358/0x750 [ 1644.053923][ T31] ? rtnetlink_rcv_msg+0x802/0xc00 [ 1644.059062][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 1644.064196][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1644.069379][ T31] ? do_syscall_64+0x174/0x580 [ 1644.074169][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.080290][ T31] ? __pfx___schedule+0x10/0x10 [ 1644.085178][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.090250][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.095024][ T31] ? lock_release+0x4b/0x3c0 [ 1644.099688][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.104484][ T31] schedule+0x164/0x360 [ 1644.108661][ T31] schedule_preempt_disabled+0x13/0x30 [ 1644.114180][ T31] __mutex_lock+0x7bf/0x1550 [ 1644.118808][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1644.123936][ T31] ? fib_newrule+0x486/0xf10 [ 1644.128760][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1644.133858][ T31] ? fib_nl2rule+0x13f1/0x1a40 [ 1644.138660][ T31] ? __pfx_fib_nl2rule+0x10/0x10 [ 1644.143865][ T31] ? __nla_parse+0x40/0x60 [ 1644.148328][ T31] fib_newrule+0x486/0xf10 [ 1644.153098][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 1644.158421][ T31] ? __pfx_fib_newrule+0x10/0x10 [ 1644.163463][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1644.168647][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.173503][ T31] ? __pfx_fib_nl_newrule+0x10/0x10 [ 1644.178763][ T31] ? lock_release+0x4b/0x3c0 [ 1644.183666][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1644.188356][ T31] ? security_capable+0x7e/0x2c0 [ 1644.193370][ T31] ? __pfx_fib_nl_newrule+0x10/0x10 [ 1644.198601][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1644.203592][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1644.208727][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1644.214544][ T31] ? ref_tracker_free+0x689/0x830 [ 1644.219653][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1644.225063][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1644.229867][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1644.235350][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1644.240998][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1644.246545][ T31] netlink_unicast+0x7bb/0x940 [ 1644.251399][ T31] netlink_sendmsg+0x813/0xb40 [ 1644.256225][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.261555][ T31] ? futex_unqueue+0x22/0x240 [ 1644.266260][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1644.273239][ T31] ? lock_release+0x4b/0x3c0 [ 1644.277847][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.283206][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1644.288266][ T31] ____sys_sendmsg+0x54e/0x850 [ 1644.293087][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1644.298407][ T31] ? lock_release+0x4b/0x3c0 [ 1644.303332][ T31] ? import_iovec+0x73/0xa0 [ 1644.307864][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1644.312614][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1644.317846][ T31] ? futex_wait+0x2a2/0x390 [ 1644.322515][ T31] ? __fget_files+0x2a/0x420 [ 1644.327180][ T31] ? __fget_files+0x3a2/0x420 [ 1644.332203][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1644.337155][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1644.342680][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.347691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.353934][ T31] do_syscall_64+0x174/0x580 [ 1644.358589][ T31] ? trace_irq_disable+0x3b/0x140 [ 1644.364016][ T31] ? clear_bhb_loop+0x40/0x90 [ 1644.368712][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.374662][ T31] RIP: 0033:0x7f1c8819ce59 [ 1644.379107][ T31] RSP: 002b:00007f1c863f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.387582][ T31] RAX: ffffffffffffffda RBX: 00007f1c88416180 RCX: 00007f1c8819ce59 [ 1644.395820][ T31] RDX: 0000000000044004 RSI: 0000200000000400 RDI: 0000000000000003 [ 1644.403888][ T31] RBP: 00007f1c88232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1644.411947][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1644.420226][ T31] R13: 00007f1c88416218 R14: 00007f1c88416180 R15: 00007f1c8853fa48 [ 1644.428235][ T31] [ 1644.431351][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1644.440431][ T31] INFO: task syz.6.24946:30022 blocked for more than 147 seconds. [ 1644.448263][ T31] Tainted: G L syzkaller #0 [ 1644.455338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1644.464071][ T31] task:syz.6.24946 state:D stack:26960 pid:30022 tgid:30021 ppid:26750 task_flags:0x400140 flags:0x00080002 [ 1644.476058][ T31] Call Trace: [ 1644.479676][ T31] [ 1644.482658][ T31] __schedule+0x17d9/0x56c0 [ 1644.487221][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1644.492433][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.497251][ T31] ? nla_get_range_unsigned+0x288/0x4a0 [ 1644.502890][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 1644.508482][ T31] ? __pfx___schedule+0x10/0x10 [ 1644.513744][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.518553][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.523400][ T31] ? lock_release+0x4b/0x3c0 [ 1644.528063][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.532983][ T31] schedule+0x164/0x360 [ 1644.537179][ T31] schedule_preempt_disabled+0x13/0x30 [ 1644.542964][ T31] __mutex_lock+0x7bf/0x1550 [ 1644.547573][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1644.552666][ T31] ? wg_set_device_doit+0x170/0x2120 [ 1644.558094][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1644.563176][ T31] ? dev_get_by_name+0x21/0x200 [ 1644.568058][ T31] ? lock_release+0x4b/0x3c0 [ 1644.573005][ T31] ? dev_get_by_name+0x21/0x200 [ 1644.577872][ T31] ? dev_get_by_name+0x21/0x200 [ 1644.582800][ T31] ? lookup_interface+0x2a4/0x2f0 [ 1644.587856][ T31] wg_set_device_doit+0x170/0x2120 [ 1644.593151][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1644.598925][ T31] ? __pfx_wg_set_device_doit+0x10/0x10 [ 1644.604848][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.609686][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1644.614322][ T31] ? __nla_parse+0x40/0x60 [ 1644.618772][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1644.625161][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1644.631860][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1644.637440][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1644.643645][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1644.648368][ T31] ? security_capable+0x7e/0x2c0 [ 1644.653679][ T31] genl_rcv_msg+0x614/0x7a0 [ 1644.658255][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1644.663680][ T31] ? ref_tracker_free+0x689/0x830 [ 1644.668795][ T31] ? __pfx_wg_set_device_doit+0x10/0x10 [ 1644.674741][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1644.680479][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1644.685315][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1644.690740][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1644.696052][ T31] ? down_read+0x2be/0x330 [ 1644.700543][ T31] genl_rcv+0x28/0x40 [ 1644.704584][ T31] netlink_unicast+0x7bb/0x940 [ 1644.709424][ T31] netlink_sendmsg+0x813/0xb40 [ 1644.714244][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.719947][ T31] ? futex_unqueue+0x22/0x240 [ 1644.724694][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1644.731195][ T31] ? lock_release+0x4b/0x3c0 [ 1644.735841][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.741213][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1644.746284][ T31] ____sys_sendmsg+0x54e/0x850 [ 1644.751457][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1644.757041][ T31] ? lock_release+0x4b/0x3c0 [ 1644.761757][ T31] ? import_iovec+0x73/0xa0 [ 1644.766311][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1644.771058][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1644.776338][ T31] ? futex_wait+0x2a2/0x390 [ 1644.781255][ T31] ? __fget_files+0x2a/0x420 [ 1644.785882][ T31] ? __fget_files+0x3a2/0x420 [ 1644.790638][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1644.795623][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1644.801160][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.805967][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.812443][ T31] do_syscall_64+0x174/0x580 [ 1644.817079][ T31] ? trace_irq_disable+0x3b/0x140 [ 1644.822193][ T31] ? clear_bhb_loop+0x40/0x90 [ 1644.826913][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.832916][ T31] RIP: 0033:0x7f850639ce59 [ 1644.837414][ T31] RSP: 002b:00007f85071b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.846268][ T31] RAX: ffffffffffffffda RBX: 00007f8506615fa0 RCX: 00007f850639ce59 [ 1644.854320][ T31] RDX: 00000000000008d0 RSI: 0000200000000200 RDI: 0000000000000005 [ 1644.862683][ T31] RBP: 00007f8506432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1644.871106][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1644.879115][ T31] R13: 00007f8506616038 R14: 00007f8506615fa0 R15: 00007f850673fa48 [ 1644.887178][ T31] [ 1644.890247][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1644.899656][ T31] INFO: task syz.8.24948:30027 blocked for more than 147 seconds. [ 1644.907498][ T31] Tainted: G L syzkaller #0 [ 1644.914132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1644.922876][ T31] task:syz.8.24948 state:D stack:25480 pid:30027 tgid:30026 ppid:24342 task_flags:0x400140 flags:0x00080002 [ 1644.935204][ T31] Call Trace: [ 1644.938504][ T31] [ 1644.941512][ T31] __schedule+0x17d9/0x56c0 [ 1644.946072][ T31] ? _printk+0xdd/0x130 [ 1644.950331][ T31] ? __pfx__printk+0x10/0x10 [ 1644.954971][ T31] ? __pfx___schedule+0x10/0x10 [ 1644.960219][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.965279][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.970144][ T31] ? lock_release+0x4b/0x3c0 [ 1644.974772][ T31] ? rcu_is_watching+0x15/0xb0 [ 1644.979620][ T31] schedule+0x164/0x360 [ 1644.983842][ T31] schedule_preempt_disabled+0x13/0x30 [ 1644.989707][ T31] __mutex_lock+0x7bf/0x1550 [ 1644.994357][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1644.999177][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1645.004054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1645.009126][ T31] ? ns_capable+0x89/0xe0 [ 1645.013532][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1645.019328][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 1645.023974][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 1645.029724][ T31] ? netlink_unicast+0x77f/0x940 [ 1645.034770][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.039866][ T31] ? do_syscall_64+0x174/0x580 [ 1645.044656][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.050904][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.055720][ T31] ? trace_irq_enable+0x3b/0x140 [ 1645.061248][ T31] ? nlmon_xmit+0xb0/0x100 [ 1645.066102][ T31] ? kmem_cache_free+0x182/0x650 [ 1645.071172][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 1645.076526][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.081704][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.086853][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.091977][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.097114][ T31] ? trace_irq_enable+0x3b/0x140 [ 1645.102110][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.107253][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.112432][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 1645.117766][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.123257][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.128345][ T31] ? lock_release+0x4b/0x3c0 [ 1645.133025][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1645.137736][ T31] ? security_capable+0x7e/0x2c0 [ 1645.142773][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.147831][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1645.153194][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1645.158366][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.164076][ T31] ? ref_tracker_free+0x689/0x830 [ 1645.169330][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1645.174776][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1645.179945][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.185488][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.190848][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1645.196080][ T31] netlink_unicast+0x7bb/0x940 [ 1645.200904][ T31] netlink_sendmsg+0x813/0xb40 [ 1645.205703][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.211396][ T31] ? futex_unqueue+0x22/0x240 [ 1645.216091][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1645.222563][ T31] ? lock_release+0x4b/0x3c0 [ 1645.227182][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.232544][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1645.237604][ T31] ____sys_sendmsg+0x54e/0x850 [ 1645.242746][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.248080][ T31] ? lock_release+0x4b/0x3c0 [ 1645.252760][ T31] ? import_iovec+0x73/0xa0 [ 1645.257305][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1645.262045][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.267305][ T31] ? futex_wait+0x2a2/0x390 [ 1645.272392][ T31] ? __fget_files+0x2a/0x420 [ 1645.277038][ T31] ? __fget_files+0x3a2/0x420 [ 1645.281784][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1645.286770][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.292296][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.297094][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.303478][ T31] do_syscall_64+0x174/0x580 [ 1645.308157][ T31] ? trace_irq_disable+0x3b/0x140 [ 1645.313585][ T31] ? clear_bhb_loop+0x40/0x90 [ 1645.318287][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.324243][ T31] RIP: 0033:0x7f5a5b59ce59 [ 1645.328686][ T31] RSP: 002b:00007f5a597f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.337427][ T31] RAX: ffffffffffffffda RBX: 00007f5a5b815fa0 RCX: 00007f5a5b59ce59 [ 1645.345474][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1645.353537][ T31] RBP: 00007f5a5b632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1645.361893][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.369945][ T31] R13: 00007f5a5b816038 R14: 00007f5a5b815fa0 R15: 00007f5a5b93fa48 [ 1645.378255][ T31] [ 1645.381354][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1645.390831][ T31] INFO: task syz.8.24948:30028 blocked for more than 148 seconds. [ 1645.398683][ T31] Tainted: G L syzkaller #0 [ 1645.405349][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1645.414090][ T31] task:syz.8.24948 state:D stack:26936 pid:30028 tgid:30026 ppid:24342 task_flags:0x400140 flags:0x00080002 [ 1645.426496][ T31] Call Trace: [ 1645.429838][ T31] [ 1645.432806][ T31] __schedule+0x17d9/0x56c0 [ 1645.437333][ T31] ? stack_trace_save+0xa9/0x100 [ 1645.442343][ T31] ? stack_depot_save_flags+0x33/0x800 [ 1645.447847][ T31] ? __pfx___schedule+0x10/0x10 [ 1645.453048][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.457832][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.462654][ T31] ? lock_release+0x4b/0x3c0 [ 1645.467270][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.472120][ T31] schedule+0x164/0x360 [ 1645.476599][ T31] schedule_preempt_disabled+0x13/0x30 [ 1645.482477][ T31] __mutex_lock+0x7bf/0x1550 [ 1645.487196][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1645.492089][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 1645.496884][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1645.501964][ T31] ? ns_capable+0x89/0xe0 [ 1645.506333][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 1645.512403][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 1645.517016][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 1645.522363][ T31] ? netlink_unicast+0x77f/0x940 [ 1645.527336][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.532433][ T31] ? do_syscall_64+0x174/0x580 [ 1645.537232][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.543658][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.548468][ T31] ? trace_irq_enable+0x3b/0x140 [ 1645.553507][ T31] ? nlmon_xmit+0xb0/0x100 [ 1645.557965][ T31] ? kmem_cache_free+0x182/0x650 [ 1645.563024][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 1645.568344][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.573785][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.579170][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.584017][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.589164][ T31] ? trace_irq_enable+0x3b/0x140 [ 1645.594166][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.599660][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.604829][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 1645.610183][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 1645.615335][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.620452][ T31] ? lock_release+0x4b/0x3c0 [ 1645.625073][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1645.630148][ T31] ? security_capable+0x7e/0x2c0 [ 1645.635122][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1645.640241][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1645.645211][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1645.650421][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.655905][ T31] ? ref_tracker_free+0x689/0x830 [ 1645.661285][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1645.666689][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1645.671534][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1645.677031][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.682680][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1645.687928][ T31] netlink_unicast+0x7bb/0x940 [ 1645.693099][ T31] netlink_sendmsg+0x813/0xb40 [ 1645.697929][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.703308][ T31] ? kasan_save_free_info+0x40/0x50 [ 1645.708545][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1645.715299][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.721029][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1645.726113][ T31] ____sys_sendmsg+0x54e/0x850 [ 1645.730952][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.736294][ T31] ? lock_release+0x4b/0x3c0 [ 1645.740961][ T31] ? import_iovec+0x73/0xa0 [ 1645.745506][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1645.750511][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.755838][ T31] ? kfree+0x1c5/0x640 [ 1645.759987][ T31] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1645.765747][ T31] ? __fget_files+0x2a/0x420 [ 1645.770409][ T31] ? __fget_files+0x3a2/0x420 [ 1645.775158][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1645.780719][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.786224][ T31] ? kfree+0x4d/0x640 [ 1645.790278][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 1645.795174][ T31] ? rcu_is_watching+0x15/0xb0 [ 1645.799994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.806093][ T31] do_syscall_64+0x174/0x580 [ 1645.811054][ T31] ? trace_irq_disable+0x3b/0x140 [ 1645.816123][ T31] ? clear_bhb_loop+0x40/0x90 [ 1645.820862][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.826784][ T31] RIP: 0033:0x7f5a5b59ce59 [ 1645.831255][ T31] RSP: 002b:00007f5a597d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.840071][ T31] RAX: ffffffffffffffda RBX: 00007f5a5b816090 RCX: 00007f5a5b59ce59 [ 1645.848086][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1645.856125][ T31] RBP: 00007f5a5b632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1645.864200][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.872584][ T31] R13: 00007f5a5b816128 R14: 00007f5a5b816090 R15: 00007f5a5b93fa48 [ 1645.880647][ T31] [ 1645.883901][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1645.893039][ T31] INFO: lockdep is turned off. [ 1645.897821][ T31] NMI backtrace for cpu 1 [ 1645.897838][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.897859][ T31] Tainted: [L]=SOFTLOCKUP [ 1645.897865][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1645.897874][ T31] Call Trace: [ 1645.897880][ T31] [ 1645.897887][ T31] dump_stack_lvl+0xe8/0x150 [ 1645.897908][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1645.897998][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1645.898016][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1645.898038][ T31] sys_info+0x135/0x170 [ 1645.898055][ T31] watchdog+0xfd7/0x1030 [ 1645.898081][ T31] ? watchdog+0x1c7/0x1030 [ 1645.898104][ T31] kthread+0x388/0x470 [ 1645.898120][ T31] ? __pfx_watchdog+0x10/0x10 [ 1645.898141][ T31] ? __pfx_kthread+0x10/0x10 [ 1645.898156][ T31] ret_from_fork+0x514/0xb70 [ 1645.898173][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1645.898189][ T31] ? __switch_to+0xc89/0x1420 [ 1645.898212][ T31] ? __pfx_kthread+0x10/0x10 [ 1645.898227][ T31] ret_from_fork_asm+0x1a/0x30 [ 1645.898251][ T31] [ 1645.898257][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1646.015203][ C0] NMI backtrace for cpu 0 [ 1646.015224][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.015249][ C0] Tainted: [L]=SOFTLOCKUP [ 1646.015256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1646.015267][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1646.015302][ C0] Code: 9c 7a 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 08 1b 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1646.015343][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 1646.015360][ C0] RAX: ffff888125253000 RBX: ffffffff819a72e0 RCX: 0000000080000001 [ 1646.015374][ C0] RDX: 0000000000000001 RSI: ffffffff8c295480 RDI: ffffffff819a72e0 [ 1646.015387][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1646.015400][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1646.015413][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 1646.015427][ C0] FS: 0000000000000000(0000) GS:ffff888125253000(0000) knlGS:0000000000000000 [ 1646.015443][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1646.015456][ C0] CR2: 00007fd48b747e20 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1646.015472][ C0] Call Trace: [ 1646.015481][ C0] [ 1646.015488][ C0] default_idle+0x9/0x20 [ 1646.015507][ C0] default_idle_call+0x72/0xb0 [ 1646.015527][ C0] do_idle+0x2e0/0x540 [ 1646.015545][ C0] ? __pfx_do_idle+0x10/0x10 [ 1646.015566][ C0] cpu_startup_entry+0x43/0x60 [ 1646.015582][ C0] rest_init+0x2de/0x300 [ 1646.015604][ C0] start_kernel+0x38a/0x3e0 [ 1646.015691][ C0] x86_64_start_reservations+0x24/0x30 [ 1646.015752][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1646.015775][ C0] common_startup_64+0x13e/0x157 [ 1646.015808][ C0] [ 1646.198842][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1646.205722][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.216425][ T31] Tainted: [L]=SOFTLOCKUP [ 1646.220765][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1646.230833][ T31] Call Trace: [ 1646.234131][ T31] [ 1646.237077][ T31] vpanic+0x56c/0xa60 [ 1646.241089][ T31] ? __pfx___schedule+0x10/0x10 [ 1646.245970][ T31] ? __pfx_vpanic+0x10/0x10 [ 1646.250493][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1646.256684][ T31] panic+0xc5/0xd0 [ 1646.260427][ T31] ? __pfx_panic+0x10/0x10 [ 1646.264862][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1646.270348][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1646.275781][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1646.281965][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1646.288142][ T31] watchdog+0x1030/0x1030 [ 1646.292506][ T31] ? watchdog+0x1c7/0x1030 [ 1646.296951][ T31] kthread+0x388/0x470 [ 1646.301038][ T31] ? __pfx_watchdog+0x10/0x10 [ 1646.305739][ T31] ? __pfx_kthread+0x10/0x10 [ 1646.310347][ T31] ret_from_fork+0x514/0xb70 [ 1646.314962][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1646.320092][ T31] ? __switch_to+0xc89/0x1420 [ 1646.324818][ T31] ? __pfx_kthread+0x10/0x10 [ 1646.329444][ T31] ret_from_fork_asm+0x1a/0x30 [ 1646.334237][ T31] [ 1646.337854][ T31] Kernel Offset: disabled [ 1646.342183][ T31] Rebooting in 86400 seconds..