last executing test programs: 18m45.166655425s ago: executing program 0 (id=404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 18m39.060147517s ago: executing program 0 (id=407): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = dup(r0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 18m33.746345663s ago: executing program 0 (id=409): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x22041, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x40000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000000c0)) r2 = dup(r0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000003c0)=0x10000) 18m30.250154431s ago: executing program 0 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') 18m26.891089085s ago: executing program 0 (id=413): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 18m24.588435437s ago: executing program 0 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 18m15.439460908s ago: executing program 32 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 11m29.508991174s ago: executing program 1 (id=514): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5b, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xd8b3, 0x8000, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7f, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xe, 0x2}}}}}]}}]}}, 0x0) io_uring_setup(0x354a, &(0x7f0000000140)={0x0, 0x400004, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 11m18.811063708s ago: executing program 1 (id=517): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004402, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 11m7.109731392s ago: executing program 1 (id=520): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10m54.396967018s ago: executing program 1 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) 10m50.242977316s ago: executing program 1 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99b5d48, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 10m47.589904447s ago: executing program 1 (id=526): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m40.672282786s ago: executing program 33 (id=526): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 50.209543605s ago: executing program 2 (id=665): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f0000000a00)="d51bea8a3a04d260ddb6a37b69751f4fc9b43c211d9dccf8de698ab41303e10068ea5deb65e3a8e78dce6207179f92118585938a4509c5fb36a6519358da1cffd32cec80da48998b2a98c0bbec29a972cb61bed21830a974b9e0303beea60607d728888c6ffbfc04446df912c9e5f02ddc1000c77480edb8a30e9badfe45fbfe26f1aeff4e9a6b61762060c40c99a293a8403760985ae64734abda01e8ede5a55d675385f6c3477a76fa39e9c4214f943d638ea03f71b9c191678e7519fb352d4055b4055985107dc10b2b6b9fc4fe45d8fbf03230c055255370089eb08e9f58ecdb24cf8c10cae443053f1ac8561c1978582c1e4a29315b7cc3af05f98a220d60e58686479f664c60972633472fb111d584b9936462af095f5c8d3e8a4874c61ad02ce53007cd66d834014fa8ec8e5728a0994332654728861b628c5fe798c9f4ef20707f67cbdde77fb1245c9e2604010fd7bfec7e62e3d7c5c9dd42363493d5c7c11c6e11d35a0cda192caceb59868b11371617df594be36ff2ef4729b1a154b936a467ccf5062b5f2d8512f0fcf5a7f1b4ee14d8a84b29818d3952bac0127c53725bc5a7d04eb21d7d0315d19af0767cd2cc5e1cef880efa3d6c748126b1a13c9b946a702da3b5bbc73d4038268ceb3f72f2b2655055917c7bef03805989a2021d584eb4cee5d35c869fb8e62f3c33c2dec68f0394a92d47a7703c39828a4b97a040f1eac15756f52217720632eb9b4c1985e56cf5f9191fea6494955b5d1588d5584dd775a63f33329d22a0d5c93538d9ee44e6785618e4427b5993de07d9ed20bd894bedc81b1a244abac867452ffe6761d813d9d0e91156f5a0bbbafc20eb9a11c4bedf40997a4033536186fe4711e8deba3b09b1c4968f2d2f8eecc270e8fc9dfac0c6e61a45770a8fd9ce415eb4fde150681a0602370f6129a93727e8437bad2dc82bad7df2865f2eefcf2193718f37ad63d2e3e93c7962fb2c8c743b258b8b6e1c892fe258c70f1bd87119fe0841c85b2133f5070c075165ae02c2a20310155829d0b25068c5833b364d7e9a3fc18d1ec7c675f1408889a61302cad962b6b334fb0390ad5d6e8d9d8b8ca48648d508d67e0aa466316c918ccec0eed937dfb1abab53bee56a3b12a73373414f52730bf5eab605458b8a28b3db3459f5ba0519a2fcc91648d1e22cc2f8c1a4590866ff0fcabb5b58fe0ad175ad5660060c6ae6bba76a8bca1f1dd5dcd6c72bb684ae013f603a6710449e2551cc8f81d97fff7373c83e9c26b9cb7cc727a0ce73f719e687a1e2e6c5e6371abee61562092b2f0241e94d027cd1d7f127a330264758c3e2790aafaa5ea14f258632f0dff9525d0e9a903b97adc77eb0968e02543557949d5ec92864490f055803a163825115202022a704a3e7f75431030603bbf9476bdc0a5e5430e0", 0x3f9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a", 0x41}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234", 0x2d}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x4, 0x0) 41.048675247s ago: executing program 2 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) 34.537929535s ago: executing program 2 (id=670): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 25.972412942s ago: executing program 3 (id=672): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x2, 0x2, 0x1, 0x3, 0x3, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x2, 0x2}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x0, 0x16dd, 0x2}}]}}}]}, 0x74}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 25.554722391s ago: executing program 2 (id=673): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x5b) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 21.374922545s ago: executing program 3 (id=674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.197268701s ago: executing program 2 (id=675): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) 15.587830747s ago: executing program 3 (id=676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031200e0ff14000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 11.239666617s ago: executing program 3 (id=677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) 7.164226771s ago: executing program 2 (id=678): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x11000000) 5.519136763s ago: executing program 3 (id=679): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 0s ago: executing program 3 (id=680): r0 = syz_io_uring_setup(0x24f9, &(0x7f0000002ec0)={0x0, 0x0, 0x10100, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r2 = memfd_secret(0x0) ftruncate(r2, 0x3) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x28, 0x0, @fd_index, 0x8, 0x0, 0x5, 0x0, 0x1}) io_uring_enter(r0, 0x22cd, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35039' (ED25519) to the list of known hosts. syzkaller login: [ 396.515040][ T3189] cgroup: Unknown subsys name 'net' [ 397.100629][ T3189] cgroup: Unknown subsys name 'cpuset' [ 397.214865][ T3189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 465.061898][ T3189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 554.662785][ T3201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.779445][ T3201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.375293][ T3199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.455607][ T3199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.327976][ T3201] hsr_slave_0: entered promiscuous mode [ 564.479958][ T3201] hsr_slave_1: entered promiscuous mode [ 566.208081][ T3199] hsr_slave_0: entered promiscuous mode [ 566.249296][ T3199] hsr_slave_1: entered promiscuous mode [ 566.273493][ T3199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.278452][ T3199] Cannot create hsr debugfs directory [ 572.623439][ T3201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.882434][ T3201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 573.072634][ T3201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 573.802836][ T3201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.954701][ T3199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.454748][ T3199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.791618][ T3199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.042357][ T3199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 586.640257][ T3201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.738724][ T3199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.367083][ T3199] veth0_vlan: entered promiscuous mode [ 618.863335][ T3199] veth1_vlan: entered promiscuous mode [ 619.283988][ T3201] veth0_vlan: entered promiscuous mode [ 619.691662][ T3201] veth1_vlan: entered promiscuous mode [ 620.623884][ T3199] veth0_macvtap: entered promiscuous mode [ 621.062520][ T3199] veth1_macvtap: entered promiscuous mode [ 622.079657][ T3201] veth0_macvtap: entered promiscuous mode [ 622.303644][ T3201] veth1_macvtap: entered promiscuous mode [ 623.504198][ T3199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.510841][ T3199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.512898][ T3199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.514888][ T3199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.149440][ T3201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.152160][ T3201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.154188][ T3201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.181334][ T3201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.984292][ T3199] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 644.506905][ T3917] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 669.193051][ T3948] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 700.792924][ T3980] block device autoloading is deprecated and will be removed. [ 713.752446][ T3991] process 'syz.0.35' launched './file2' with NULL argv: empty string added [ 727.949093][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 728.394260][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.409710][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.422194][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 728.438189][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.629726][ T24] usb 2-1: config 0 descriptor?? [ 730.201472][ T24] hid-generic 0003:04F3:0754.0001: failed to start in urb: -90 [ 730.334258][ T24] hid-generic 0003:04F3:0754.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.1-1/input0 [ 730.563175][ T24] usb 2-1: USB disconnect, device number 2 [ 754.864935][ T4058] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 790.047995][ T35] audit: type=1326 audit(788.840:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4093 comm="syz.1.67" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7fc00000 [ 838.204913][ T4166] mmap: syz.1.85 (4166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 858.697362][ T4185] IPv6: syztnl0: Disabled Multicast RS [ 892.702409][ T4232] syzkaller1: entered promiscuous mode [ 892.705148][ T4232] syzkaller1: entered allmulticast mode [ 906.008731][ T3262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 906.420454][ T3262] usb 1-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 906.422307][ T3262] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 43520, setting to 1024 [ 906.423927][ T3262] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 906.425314][ T3262] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 906.521078][ T3262] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.522560][ T3262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 906.523879][ T3262] usb 1-1: SerialNumber: syz [ 906.802097][ T3262] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 907.869718][ T3899] usb 1-1: USB disconnect, device number 2 [ 916.754192][ T4272] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 928.701104][ T4297] input input0: cannot allocate more than FF_MAX_EFFECTS effects [ 932.712541][ T4303] syzkaller1: entered promiscuous mode [ 932.714009][ T4303] syzkaller1: entered allmulticast mode [ 964.510021][ C1] vxcan1: j1939_tp_rxtimer: 0xffffaf801c20e000: rx timeout, send abort [ 964.530384][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffffaf801c20e000: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 966.448077][ T3839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 966.688516][ T3839] usb 2-1: Using ep0 maxpacket: 32 [ 966.754733][ T3839] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 966.762898][ T3839] usb 2-1: config 0 has no interface number 0 [ 967.068075][ T3839] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 967.070341][ T3839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.072197][ T3839] usb 2-1: Product: syz [ 967.073714][ T3839] usb 2-1: Manufacturer: syz [ 967.075245][ T3839] usb 2-1: SerialNumber: syz [ 967.203822][ T3839] usb 2-1: config 0 descriptor?? [ 967.371522][ T3839] smsc95xx v2.0.0 [ 969.741491][ T3839] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 969.744270][ T3839] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 969.789983][ T3839] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 969.833155][ T3839] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 970.251452][ T3839] usb 2-1: USB disconnect, device number 3 [ 975.124509][ T4362] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1004.595321][ T4391] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.158'. [ 1004.800987][ T4389] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.158'. [ 1012.651919][ T3839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1013.008931][ T3839] usb 2-1: Using ep0 maxpacket: 32 [ 1013.076837][ T3839] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1013.079116][ T3839] usb 2-1: config 0 has no interface number 0 [ 1013.164468][ T3839] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1013.168550][ T3839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.170413][ T3839] usb 2-1: Product: syz [ 1013.171971][ T3839] usb 2-1: Manufacturer: syz [ 1013.173480][ T3839] usb 2-1: SerialNumber: syz [ 1013.442100][ T3839] usb 2-1: config 0 descriptor?? [ 1013.965073][ T3839] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1014.957746][ T3839] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1015.104096][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.117071][ T3839] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1015.265244][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.991859][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1018.055549][ T24] usb 2-1: USB disconnect, device number 4 [ 1018.438077][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1018.633649][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1018.726867][ T24] quatech2 2-1:0.51: device disconnected [ 1036.139724][ T4446] random: crng reseeded on system resumption [ 1037.635735][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 1038.102537][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.120897][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.138604][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.571940][ T3262] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.850528][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1041.808572][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.327581][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1063.399166][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1066.402210][ T4479] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 1083.079715][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1083.569015][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.577289][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1083.580037][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1083.582302][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.901085][ T4490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1084.042660][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1085.640704][ T24] usb 1-1: USB disconnect, device number 3 [ 1090.922828][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1109.860762][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1110.307498][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.309173][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.310596][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.312037][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.491840][ T4551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1110.651378][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1112.289118][ T24] usb 2-1: USB disconnect, device number 5 [ 1145.968495][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1159.670351][ T4623] [U] [ 1159.672901][ T4623] [U] [ 1159.674714][ T4623] [U] [ 1159.676047][ T4623] [U] [ 1159.692130][ T4623] [U] [ 1159.693886][ T4623] [U] [ 1159.695120][ T4623] [U] [ 1159.696444][ T4623] [U] [ 1159.715344][ T4623] [U] [ 1159.717245][ T4623] [U] [ 1159.718619][ T4623] [U] [ 1159.719980][ T4623] [U] [ 1159.748198][ T4623] [U] [ 1159.750017][ T4623] [U] [ 1159.751301][ T4623] [U] [ 1159.752567][ T4623] [U] [ 1159.754711][ T4623] [U] [ 1159.756037][ T4623] [U] [ 1159.757332][ T4623] [U] [ 1159.758581][ T4623] [U] [ 1159.789205][ T4623] [U] [ 1159.790966][ T4623] [U] [ 1159.792319][ T4623] [U] [ 1159.793639][ T4623] [U] [ 1159.795990][ T4623] [U] [ 1159.797319][ T4623] [U] [ 1159.798578][ T4623] [U] [ 1159.799898][ T4623] [U] [ 1159.848633][ T4623] [U] [ 1159.850343][ T4623] [U] [ 1159.851647][ T4623] [U] [ 1159.852945][ T4623] [U] [ 1159.855221][ T4623] [U] [ 1159.856819][ T4623] [U] [ 1159.858293][ T4623] [U] [ 1159.859573][ T4623] [U] [ 1159.879294][ T4623] [U] [ 1159.880957][ T4623] [U] [ 1159.882255][ T4623] [U] [ 1159.883529][ T4623] [U] [ 1159.887258][ T4623] [U] [ 1159.888784][ T4623] [U] [ 1159.890051][ T4623] [U] [ 1159.891447][ T4623] [U] [ 1159.893076][ T4623] [U] [ 1159.894351][ T4623] [U] [ 1159.895585][ T4623] [U] [ 1159.896970][ T4623] [U] [ 1159.901716][ T4623] [U] [ 1159.903369][ T4623] [U] [ 1159.904666][ T4623] [U] [ 1159.906017][ T4623] [U] [ 1159.908749][ T4623] [U] [ 1159.910134][ T4623] [U] [ 1159.911606][ T4623] [U] [ 1159.912985][ T4623] [U] [ 1159.915081][ T4623] [U] [ 1159.916450][ T4623] [U] [ 1159.917839][ T4623] [U] [ 1159.919171][ T4623] [U] [ 1159.922566][ T4623] [U] [ 1159.924334][ T4623] [U] [ 1159.925732][ T4623] [U] [ 1159.927063][ T4623] [U] [ 1159.978594][ T4623] [U] [ 1159.980400][ T4623] [U] [ 1159.981742][ T4623] [U] [ 1159.983088][ T4623] [U] [ 1159.984614][ T4623] [U] [ 1159.985988][ T4623] [U] [ 1159.987361][ T4623] [U] [ 1159.988735][ T4623] [U] [ 1160.048364][ T4623] [U] [ 1160.050165][ T4623] [U] [ 1160.051579][ T4623] [U] [ 1160.053011][ T4623] [U] [ 1160.087986][ T4623] [U] [ 1160.089814][ T4623] [U] [ 1160.091181][ T4623] [U] [ 1160.092553][ T4623] [U] [ 1160.094869][ T4623] [U] [ 1160.096341][ T4623] [U] [ 1160.097677][ T4623] [U] [ 1160.099004][ T4623] [U] [ 1160.183101][ T4623] [U] [ 1160.184386][ T4623] [U] [ 1160.185616][ T4623] [U] [ 1160.186913][ T4623] [U] [ 1160.283013][ T4623] [U] [ 1160.284213][ T4623] [U] [ 1160.285079][ T4623] [U] [ 1160.286152][ T4623] [U] [ 1160.300522][ T4623] [U] [ 1160.301401][ T4623] [U] [ 1160.302757][ T4623] [U] [ 1160.304087][ T4623] [U] [ 1160.328001][ T4623] [U] [ 1160.329047][ T4623] [U] [ 1160.329876][ T4623] [U] [ 1160.330790][ T4623] [U] [ 1160.331655][ T4623] [U] [ 1160.332558][ T4623] [U] [ 1160.333342][ T4623] [U] [ 1160.334486][ T4623] [U] [ 1160.431181][ T4623] [U] [ 1160.432944][ T4623] [U] [ 1160.434749][ T4623] [U] [ 1160.436751][ T4623] [U] [ 1160.469861][ T4623] [U] [ 1160.471546][ T4623] [U] [ 1160.472851][ T4623] [U] [ 1160.474190][ T4623] [U] [ 1160.571017][ T4623] [U] [ 1160.572805][ T4623] [U] [ 1160.574111][ T4623] [U] [ 1160.576230][ T4623] [U] [ 1160.604242][ T4623] [U] [ 1160.605870][ T4623] [U] [ 1160.607237][ T4623] [U] [ 1160.608619][ T4623] [U] [ 1160.620165][ T4623] [U] [ 1160.621647][ T4623] [U] [ 1160.622894][ T4623] [U] [ 1160.624162][ T4623] [U] [ 1160.625621][ T4623] [U] [ 1160.627180][ T4623] [U] [ 1160.628550][ T4623] [U] [ 1161.145302][ T4620] [U] [ 1211.974764][ T4678] block nbd0: shutting down sockets [ 1220.304599][ T4352] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1220.712769][ T4352] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1220.728361][ T4352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1221.119585][ T4352] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1221.121774][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.123439][ T4352] usb 1-1: Product: syz [ 1221.139830][ T4352] usb 1-1: Manufacturer: syz [ 1221.141743][ T4352] usb 1-1: SerialNumber: syz [ 1221.364771][ T4352] usb 1-1: config 0 descriptor?? [ 1222.062717][ T4352] usb 1-1: selecting invalid altsetting 0 [ 1224.002635][ T4352] usb 1-1: USB disconnect, device number 4 [ 1238.014323][ T3899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1238.131655][ T3899] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1253.479038][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1279.591534][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 1283.123590][ T4787] ipvlan2: entered promiscuous mode [ 1293.218984][ T4802] netlink: 9 bytes leftover after parsing attributes in process `syz.0.270'. [ 1293.293373][ T4802] gretap0: entered promiscuous mode [ 1293.853225][ T4803] netlink: 5 bytes leftover after parsing attributes in process `syz.0.270'. [ 1293.961799][ T4803] 0ªî{X¹¦: renamed from gretap0 [ 1294.044623][ T4803] 0ªî{X¹¦: left promiscuous mode [ 1294.049834][ T4803] 0ªî{X¹¦: entered allmulticast mode [ 1294.172841][ T4803] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1320.211014][ T4830] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1348.957660][ T4936] input: syz0 as /devices/virtual/input/input1 [ 1364.399471][ T4972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1374.100187][ T4989] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1379.622533][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 1386.931636][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 1414.600416][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1415.049973][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1415.053965][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.076820][ T9] usb 1-1: Product: syz [ 1415.078746][ T9] usb 1-1: Manufacturer: syz [ 1415.081202][ T9] usb 1-1: SerialNumber: syz [ 1415.219943][ T9] usb 1-1: config 0 descriptor?? [ 1416.221908][ T9] usb 1-1: USB disconnect, device number 5 [ 1418.428827][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 1443.133093][ T5087] trusted_key: syz.0.343 sent an empty control message without MSG_MORE. [ 1458.452225][ T5106] netlink: 9 bytes leftover after parsing attributes in process `syz.1.351'. [ 1458.508642][ T5106] gretap0: entered promiscuous mode [ 1459.017233][ T5106] netlink: 5 bytes leftover after parsing attributes in process `syz.1.351'. [ 1459.165349][ T5106] 0ªî{X¹¦: renamed from gretap0 [ 1459.240537][ T5106] 0ªî{X¹¦: left promiscuous mode [ 1459.241906][ T5106] 0ªî{X¹¦: entered allmulticast mode [ 1459.284647][ T5106] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1468.523331][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1473.849250][ T5124] block nbd0: shutting down sockets [ 1474.618727][ T4951] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1474.968899][ T4951] usb 2-1: Using ep0 maxpacket: 16 [ 1475.064969][ T4951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.069432][ T4951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.071915][ T4951] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1475.073948][ T4951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.213945][ T4951] usb 2-1: config 0 descriptor?? [ 1477.330753][ T4951] letsketch 0003:6161:4D15.0003: Device info: á‘” [ 1477.830147][ T4951] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 1477.833336][ T4951] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71 [ 1478.070551][ T4951] usb 2-1: USB disconnect, device number 6 [ 1514.359161][ T5173] tun0: tun_chr_ioctl cmd 1074025675 [ 1514.377959][ T5173] tun0: persist enabled [ 1514.450886][ T5173] tun0: tun_chr_ioctl cmd 1074025675 [ 1514.453046][ T5173] tun0: persist disabled [ 1522.198686][ T5189] binder: 5188:5189 ioctl c0306201 200000000540 returned -22 [ 1546.218997][ T5217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 1546.602241][ T5217] Zero length message leads to an empty skb [ 1551.379086][ T4790] nci: nci_rx_work: unknown MT 0x1 [ 1595.942925][ T5285] tls_set_device_offload_rx: netdev not found [ 1611.391346][ T4790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.692821][ T4790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.592121][ T4790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.784795][ T4790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.848236][ T35] audit: type=1800 audit(1622.660:3): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.417" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1626.448544][ T4790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.649159][ T4790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.766872][ T4790] bond0 (unregistering): Released all slaves [ 1628.581644][ T4790] hsr_slave_0: left promiscuous mode [ 1628.894900][ T4790] hsr_slave_1: left promiscuous mode [ 1629.683812][ T4790] veth1_macvtap: left promiscuous mode [ 1629.712882][ T4790] veth0_macvtap: left promiscuous mode [ 1629.753498][ T4790] veth1_vlan: left promiscuous mode [ 1629.794405][ T4790] veth0_vlan: left promiscuous mode [ 1667.509607][ T4951] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1668.001036][ T4951] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.003749][ T4951] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1668.054903][ T4951] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1668.058100][ T4951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1668.059852][ T4951] usb 2-1: SerialNumber: syz [ 1669.049258][ T4951] usb 2-1: 0:2 : does not exist [ 1669.054870][ T4951] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 1669.958775][ T4951] usb 2-1: USB disconnect, device number 7 [ 1695.473257][ T5335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.631781][ T5335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.184897][ T5335] hsr_slave_0: entered promiscuous mode [ 1715.233870][ T5335] hsr_slave_1: entered promiscuous mode [ 1729.009942][ T5335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1729.279652][ T5335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1729.505092][ T5335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1729.819056][ T5335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1749.702665][ T5335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.272539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.003409][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 1775.594354][ T5799] capability: warning: `syz.1.442' uses deprecated v2 capabilities in a way that may be insecure [ 1798.601827][ T5829] netlink: 76 bytes leftover after parsing attributes in process `syz.1.446'. [ 1817.771516][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1817.923850][ T5335] veth0_vlan: entered promiscuous mode [ 1818.021503][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 1818.734784][ T5719] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1818.740615][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.742615][ T5719] usb 2-1: Product: syz [ 1818.747928][ T5719] usb 2-1: Manufacturer: syz [ 1818.749623][ T5719] usb 2-1: SerialNumber: syz [ 1818.786667][ T5335] veth1_vlan: entered promiscuous mode [ 1819.134262][ T5719] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1819.143081][ T5719] r8152-cfgselector 2-1: config 0 descriptor?? [ 1822.223898][ T5335] veth0_macvtap: entered promiscuous mode [ 1822.804684][ T5335] veth1_macvtap: entered promiscuous mode [ 1823.688414][ T5719] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 1825.304116][ T5335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.311577][ T5335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.313602][ T5335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.315567][ T5335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.132334][ T35] audit: type=1326 audit(1855.940:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1857.168963][ T35] audit: type=1326 audit(1855.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1857.447314][ T35] audit: type=1326 audit(1856.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=199 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1857.477317][ T35] audit: type=1326 audit(1856.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1857.493855][ T35] audit: type=1326 audit(1856.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1857.632226][ T35] audit: type=1326 audit(1856.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=269 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1859.689820][ T35] audit: type=1326 audit(1858.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1859.714837][ T35] audit: type=1326 audit(1858.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.1.458" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7ffc0000 [ 1866.371903][ T4951] syzkaller1: tun_net_xmit 90 [ 1866.589396][ T5893] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1866.592984][ T5893] syzkaller1: Linktype set failed because interface is up [ 1884.661368][ T35] audit: type=1326 audit(1883.490:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.2.466" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x7fc00000 [ 1885.884221][ T35] audit: type=1326 audit(1884.690:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.2.466" exe="/syz-executor" sig=0 arch=c00000f3 syscall=29 compat=0 ip=0xdb906 code=0x7fc00000 [ 1903.245308][ T5927] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1903.251279][ T5927] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1945.520434][ T5956] xt_hashlimit: size too large, truncated to 1048576 [ 1946.493831][ T5957] : renamed from bond0 (while UP) [ 1970.575569][ T5983] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 2000.917384][ T35] audit: type=1326 audit(1999.740:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.1.507" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 2004.136918][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.158317][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.518667][ T3262] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2027.818851][ T3262] usb 2-1: Using ep0 maxpacket: 8 [ 2028.651869][ T3262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2028.729815][ T3262] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2028.765693][ T3262] usb 2-1: can't read configurations, error -71 [ 2037.270800][ T6034] syz.2.516: vmalloc error: size 1853191303, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2037.295446][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.2.516 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 2037.296581][ T6034] Hardware name: riscv-virtio,qemu (DT) [ 2037.297192][ T6034] Call Trace: [ 2037.297579][ T6034] [] dump_backtrace+0x2e/0x3c [ 2037.298723][ T6034] [] show_stack+0x30/0x3c [ 2037.299166][ T6034] [] dump_stack_lvl+0x12e/0x1a6 [ 2037.299838][ T6034] [] dump_stack+0x1c/0x24 [ 2037.300451][ T6034] [] warn_alloc+0x170/0x292 [ 2037.301006][ T6034] [] __vmalloc_node_range_noprof+0xe62/0x11b0 [ 2037.301665][ T6034] [] __kvmalloc_node_noprof+0x46a/0x6ac [ 2037.302218][ T6034] [] drm_property_create_blob+0x66/0x2f0 [ 2037.302768][ T6034] [] drm_mode_createblob_ioctl+0x102/0x3de [ 2037.303336][ T6034] [] drm_ioctl_kernel+0x1dc/0x380 [ 2037.303992][ T6034] [] drm_ioctl+0x502/0xbc2 [ 2037.304551][ T6034] [] __riscv_sys_ioctl+0x180/0x1e4 [ 2037.305188][ T6034] [] syscall_handler+0x94/0x118 [ 2037.305737][ T6034] [] do_trap_ecall_u+0x396/0x530 [ 2037.306177][ T6034] [] handle_exception+0x146/0x152 [ 2037.370391][ T6034] Mem-Info: [ 2037.372319][ T6034] active_anon:2518 inactive_anon:0 isolated_anon:0 [ 2037.372319][ T6034] active_file:501 inactive_file:34992 isolated_file:0 [ 2037.372319][ T6034] unevictable:768 dirty:109 writeback:0 [ 2037.372319][ T6034] slab_reclaimable:2485 slab_unreclaimable:26324 [ 2037.372319][ T6034] mapped:12551 shmem:813 pagetables:866 [ 2037.372319][ T6034] sec_pagetables:0 bounce:0 [ 2037.372319][ T6034] kernel_misc_reclaimable:0 [ 2037.372319][ T6034] free:223756 free_pcp:6216 free_cma:52608 [ 2037.407816][ T6034] Node 0 active_anon:10072kB inactive_anon:0kB active_file:2004kB inactive_file:139968kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50204kB dirty:436kB writeback:0kB shmem:3252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6488kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2037.425729][ T6034] Node 0 DMA32 free:895024kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10072kB inactive_anon:0kB active_file:2004kB inactive_file:139968kB unevictable:3072kB writepending:436kB present:2097152kB managed:1431536kB mlocked:0kB bounce:0kB free_pcp:24768kB local_pcp:12076kB free_cma:210432kB [ 2037.453646][ T6034] lowmem_reserve[]: 0 0 0 [ 2037.481353][ T6034] Node 0 DMA32: 136*4kB (UM) 98*8kB (UME) 120*16kB (UME) 70*32kB (ME) 31*64kB (UM) 26*128kB (UME) 12*256kB (UME) 13*512kB (UMEC) 8*1024kB (UMC) 5*2048kB (UM) 209*4096kB (UMC) = 895024kB [ 2037.505205][ T6034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2037.546912][ T6034] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2037.549040][ T6034] 36306 total pagecache pages [ 2037.550401][ T6034] 0 pages in swap cache [ 2037.570129][ T6034] Free swap = 124996kB [ 2037.571453][ T6034] Total swap = 124996kB [ 2037.572918][ T6034] 524288 pages RAM [ 2037.574029][ T6034] 0 pages HighMem/MovableOnly [ 2037.575156][ T6034] 166404 pages reserved [ 2037.610552][ T6034] 52736 pages cma reserved [ 2063.033372][ T6052] ======================================================= [ 2063.033372][ T6052] WARNING: The mand mount option has been deprecated and [ 2063.033372][ T6052] and is ignored by this kernel. Remove the mand [ 2063.033372][ T6052] option from the mount to silence this warning. [ 2063.033372][ T6052] ======================================================= [ 2129.185017][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2129.354008][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2150.368260][ T6066] hsr_slave_0: entered promiscuous mode [ 2150.451311][ T6066] hsr_slave_1: entered promiscuous mode [ 2150.505020][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2150.509596][ T6066] Cannot create hsr debugfs directory [ 2163.200200][ T6066] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2163.675580][ T6066] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2163.903857][ T6066] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2164.462622][ T6066] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2183.982465][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2247.591822][ T6066] veth0_vlan: entered promiscuous mode [ 2248.526814][ T6066] veth1_vlan: entered promiscuous mode [ 2250.892211][ T6066] veth0_macvtap: entered promiscuous mode [ 2251.243505][ T6066] veth1_macvtap: entered promiscuous mode [ 2252.852354][ T6066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.853865][ T6066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.855002][ T6066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.882186][ T6066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.820806][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 2303.839947][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 2364.759328][ T6585] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2389.582252][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 2389.583781][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 2389.585209][ T6609] netlink: 'syz.2.593': attribute type 18 has an invalid length. [ 2408.360927][ T35] audit: type=1326 audit(2407.140:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.2.599" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 2412.038143][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2412.065341][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2420.919750][ T6635] hsr_slave_0: left promiscuous mode [ 2421.013332][ T6635] hsr_slave_1: left promiscuous mode [ 2460.421364][ T6665] gtp0: entered promiscuous mode [ 2460.423253][ T6665] gtp0: entered allmulticast mode [ 2461.911488][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 2462.632228][ T6670] vlan2: entered allmulticast mode [ 2462.641412][ T6670] dummy0: entered allmulticast mode [ 2469.607612][ T6676] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 2469.662083][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 2492.587511][ T6695] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2717.835728][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 2717.836503][ C0] Insufficient stack space to handle exception! [ 2717.838144][ C0] Task stack: [0xffff8f8000e30000..0xffff8f8000e38000] [ 2717.838997][ C0] Overflow stack: [0xffffaf806ed24070..0xffffaf806ed25070] [ 2717.840021][ C0] CPU: 0 UID: 0 PID: 6829 Comm: syz.3.680 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 2717.841275][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2717.842033][ C0] epc : check_preemption_disabled+0x2/0xda [ 2717.843027][ C0] ra : __this_cpu_preempt_check+0x16/0x1e [ 2717.844035][ C0] epc : ffffffff862ff326 ra : ffffffff862ff43a sp : ffff8f7fffffffc0 [ 2717.845002][ C0] gp : ffffffff89c7e9c0 tp : 0000000000000000 t0 : ffffaf806ed29260 [ 2717.845921][ C0] t1 : 0000000000000001 t2 : 6567727520746920 s0 : ffff8f8000000010 [ 2717.846929][ C0] s1 : 0000000000000001 a0 : ffffffff86b62260 a1 : ffffffff8685dce0 [ 2717.848058][ C0] a2 : fffffffff1f1f1f1 a3 : fffffffff3f3f3f3 a4 : 0000000000000000 [ 2717.848931][ C0] a5 : 0000000000000000 a6 : 00000000000f0000 a7 : ffffffff8041df90 [ 2717.849831][ C0] s2 : ffffaf801b808000 s3 : 0000000000011702 s4 : 000000010003b004 [ 2717.850725][ C0] s5 : 00000000000010c0 s6 : fffffffef1042838 s7 : ffff8f80000002a0 [ 2717.851586][ C0] s8 : ffffffff882141c0 s9 : ffffffff882141c0 s10: ffffffff910373c0 [ 2717.852463][ C0] s11: 1ffff1f00000004c t3 : 2fbca24600000000 t4 : 0000000000000000 [ 2717.853281][ C0] t5 : 0000000000000000 t6 : 0000000000000002 [ 2717.854015][ C0] status: 0000000200000100 badaddr: ffff8f7ffffffff0 cause: 000000000000000f [ 2717.855636][ C0] Kernel panic - not syncing: Kernel stack overflow [ 2717.857359][ C0] CPU: 0 UID: 0 PID: 6829 Comm: syz.3.680 Not tainted 6.16.0-rc1-syzkaller-g306e57988197 #0 PREEMPT [ 2717.860076][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2717.860850][ C0] Call Trace: [ 2717.861606][ C0] [] dump_backtrace+0x2e/0x3c [ 2717.862890][ C0] [] show_stack+0x30/0x3c [ 2717.863837][ C0] [] dump_stack_lvl+0x110/0x1a6 [ 2717.864866][ C0] [] dump_stack+0x1c/0x24 [ 2717.865906][ C0] [] panic+0x38c/0x86a [ 2717.866851][ C0] [] handle_bad_stack+0xd4/0x128 [ 2717.867879][ C0] [] __this_cpu_preempt_check+0x16/0x1e [ 2717.869648][ C0] SMP: stopping secondary CPUs [ 2717.872167][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:35:49 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff802d2a78 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff80250b00 sepc ffffffff8007856c vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 904c30000009e1d1 x0/zero 0000000000000000 x1/ra ffffffff81efb250 x2/sp ffff8f8004c57700 x3/gp ffffffff89c7e9c0 x4/tp ffffaf80190d3480 x5/t0 ffff8f8004c57800 x6/t1 ffffffffc86fd3b8 x7/t2 ffffffffe153ea4c x8/s0 ffff8f8004c575f0 x9/s1 ffff8f8004c575f0 x10/a0 0000000000000005 x11/a1 0000000000000000 x12/a2 0000000000000002 x13/a3 ffffffff8007856c x14/a4 0000000000000000 x15/a5 ffffaf80190d4480 x16/a6 0000000000000003 x17/a7 ffffffffdbe6214b x18/s2 ffffffff81efb70e x19/s3 0000000000000003 x20/s4 0000000000000000 x21/s5 dfffffff00000000 x22/s6 ffffffff81efb70e x23/s7 ffff8f8004c57710 x24/s8 dfffffff00000000 x25/s9 0000000000007fff x26/s10 ffffffff86324f84 x27/s11 ffffaf802b5c1000 x28/t3 000000000000001e x29/t4 ffff8f8004c57500 x30/t5 0000000077281e31 x31/t6 ffffaf802bce6006 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802fab80 mhartid 0000000000000001 mstatus 0000000a00000180 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000200 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff86324f84 vstvec 0000000000000000 mepc ffffffff8008eba2 sepc ffffffff862ff326 vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ffff8f7ffffffff0 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 905a5000000b721b x0/zero 0000000000000000 x1/ra ffffffff802fab7c x2/sp ffffaf806ed24ad0 x3/gp ffffffff89c7e9c0 x4/tp ffffaf801b808000 x5/t0 ffffaf806ed24914 x6/t1 fffff5ef0dda48d8 x7/t2 49552030203a5550 x8/s0 ffffaf806ed24b10 x9/s1 0000000000000000 x10/a0 ffffaf801b808008 x11/a1 0000000000000000 x12/a2 00000000000f0000 x13/a3 ffffffff802fab7c x14/a4 0000000000010000 x15/a5 ffffaf801b808000 x16/a6 00000000000f0000 x17/a7 ffffaf806ed246c7 x18/s2 0000000000000001 x19/s3 0000000200000100 x20/s4 0000000000011703 x21/s5 0000000000000000 x22/s6 1ffff5f00dda4964 x23/s7 ffffffff8778f740 x24/s8 ffffaf806ed24ce8 x25/s9 ffffffff80302e9e x26/s10 0000000000000001 x27/s11 1ffff1f00000004c x28/t3 3a5c9c5f00000000 x29/t4 fffff5ef0dda48d8 x30/t5 fffff5ef0dda48d9 x31/t6 ffffaf806ed246d8 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000