last executing test programs: 11m27.454101747s ago: executing program 0 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x74, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "4824bd91b8842ae0833fa2db69b49087"}, @mss={0x2, 0x4, 0x8}]}}}}}}}, 0x0) 11m23.02970943s ago: executing program 0 (id=216): prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r0, 0x80000000, 0x10}, 0xc) 11m16.654787569s ago: executing program 0 (id=218): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) 11m9.097691639s ago: executing program 0 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20008014) 11m4.531796029s ago: executing program 0 (id=220): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 10m58.587657303s ago: executing program 0 (id=222): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 10m10.582019201s ago: executing program 32 (id=222): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 1m4.689716935s ago: executing program 1 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom(r0, 0x0, 0x0, 0x8eee2385daec478c, 0x0, 0x0) 52.898337052s ago: executing program 1 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 41.830130937s ago: executing program 1 (id=315): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) 38.681455708s ago: executing program 2 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0xa, 0x0) 32.469063647s ago: executing program 2 (id=317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd25, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4048045}, 0x10) 31.432943148s ago: executing program 1 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 27.427239296s ago: executing program 2 (id=319): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) 19.093946075s ago: executing program 1 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 17.365073625s ago: executing program 2 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 7.525379264s ago: executing program 2 (id=322): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.80745914s ago: executing program 1 (id=323): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 0s ago: executing program 2 (id=324): r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8261' (ED25519) to the list of known hosts. syzkaller login: [ 429.696443][ T3191] cgroup: Unknown subsys name 'net' [ 430.383126][ T3191] cgroup: Unknown subsys name 'cpuset' [ 430.570431][ T3191] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 494.124084][ T3191] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 591.608731][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.139663][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.319921][ T3206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.967669][ T3206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.376740][ T3203] hsr_slave_0: entered promiscuous mode [ 601.455629][ T3203] hsr_slave_1: entered promiscuous mode [ 606.291510][ T3206] hsr_slave_0: entered promiscuous mode [ 606.318880][ T3206] hsr_slave_1: entered promiscuous mode [ 606.350684][ T3206] debugfs: 'hsr0' already exists in 'hsr' [ 606.353905][ T3206] Cannot create hsr debugfs directory [ 609.903671][ T3203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.375976][ T3203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.964629][ T3203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 611.344439][ T3203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.701278][ T3206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.882283][ T3206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.131461][ T3206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 617.349757][ T3206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.329471][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.725955][ T3206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.626191][ T3203] veth0_vlan: entered promiscuous mode [ 675.351295][ T3203] veth1_vlan: entered promiscuous mode [ 676.983704][ T3203] veth0_macvtap: entered promiscuous mode [ 677.201438][ T3203] veth1_macvtap: entered promiscuous mode [ 678.280792][ T3357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.333261][ T3357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.335751][ T3357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.356016][ T3357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.122402][ T3206] veth0_vlan: entered promiscuous mode [ 681.424495][ T3206] veth1_vlan: entered promiscuous mode [ 683.108233][ T3206] veth0_macvtap: entered promiscuous mode [ 683.412750][ T3206] veth1_macvtap: entered promiscuous mode [ 683.743659][ T3203] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 684.913619][ T3357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.950867][ T3357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.958266][ T3357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.959651][ T3357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.420850][ T31] audit: type=1326 audit(705.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 707.461146][ T31] audit: type=1326 audit(705.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.027988][ T31] audit: type=1326 audit(706.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.061897][ T31] audit: type=1326 audit(706.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.079781][ T31] audit: type=1326 audit(706.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.120771][ T31] audit: type=1326 audit(706.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.124427][ T31] audit: type=1326 audit(706.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.375609][ T31] audit: type=1326 audit(706.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.401493][ T31] audit: type=1326 audit(706.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x7ffc0000 [ 708.698940][ T31] audit: type=1326 audit(707.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3826 comm="syz.1.5" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdc02e code=0x7ffc0000 [ 773.935687][ T3878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 773.960911][ T3878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 773.963107][ T3878] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 773.964484][ T3878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 773.966331][ T3878] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 773.990511][ T3878] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 780.145267][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 780.145638][ T31] audit: type=1326 audit(778.700:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3889 comm="syz.0.31" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x0 [ 785.346554][ T3898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 801.484216][ T3912] netlink: 'syz.0.40': attribute type 6 has an invalid length. [ 819.619918][ T3927] Zero length message leads to an empty skb [ 836.514281][ T3939] netlink: 182 bytes leftover after parsing attributes in process `syz.0.52'. [ 877.393620][ T3816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 877.781868][ T3816] usb 1-1: Using ep0 maxpacket: 32 [ 877.910190][ T3816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 878.066580][ T3816] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 878.071323][ T3816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.073139][ T3816] usb 1-1: Product: syz [ 878.074596][ T3816] usb 1-1: Manufacturer: syz [ 878.075970][ T3816] usb 1-1: SerialNumber: syz [ 878.315813][ T3816] usb 1-1: config 0 descriptor?? [ 880.043726][ T3816] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 880.049956][ T3816] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 890.751934][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 894.806538][ T3816] usb 1-1: USB disconnect, device number 2 [ 914.474737][ T3998] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 914.493900][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 930.892538][ T4011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 941.795177][ T4017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 961.546148][ T4030] netlink: 'syz.0.89': attribute type 2 has an invalid length. [ 1048.870816][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 1048.893960][ T4095] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1074.360504][ T31] audit: type=1326 audit(1072.910:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4115 comm="syz.1.127" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x0 [ 1133.225241][ T4157] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1164.581811][ T4179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 1165.335000][ T4179] xfrm1: entered promiscuous mode [ 1165.372940][ T4179] xfrm1: entered allmulticast mode [ 1165.560822][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 1178.822920][ T4196] usb usb1: usbfs: process 4196 (syz.1.160) did not claim interface 9 before use [ 1206.829574][ T31] audit: type=1326 audit(1205.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4224 comm="syz.1.172" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdc02e code=0x0 [ 1216.253868][ T4234] pimreg: entered allmulticast mode [ 1235.508526][ T4257] Illegal XDP return value 8 on prog (id 18) dev N/A, expect packet loss! [ 1253.736166][ T4275] rdma_op ffffaf80191f31f0 conn xmit_rdma 0000000000000000 [ 1265.990497][ T4185] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1266.269143][ T4185] usb 1-1: Using ep0 maxpacket: 8 [ 1266.761149][ T4185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1266.764157][ T4185] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1266.765911][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.002984][ T4185] usb 1-1: config 0 descriptor?? [ 1270.163750][ T4185] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1270.752038][ T4185] usb 1-1: USB disconnect, device number 3 [ 1288.414304][ T4309] tmpfs: Too few inodes for current use [ 1330.068434][ T3816] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1330.406309][ T3816] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1330.411448][ T3816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.524134][ T3816] usb 2-1: config 0 descriptor?? [ 1330.641063][ T3816] cp210x 2-1:0.0: cp210x converter detected [ 1331.528976][ T4346] capability: warning: `syz.0.218' uses deprecated v2 capabilities in a way that may be insecure [ 1333.933116][ T3816] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1334.294852][ T3816] usb 2-1: USB disconnect, device number 2 [ 1335.053147][ T3816] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1335.654233][ T3816] cp210x 2-1:0.0: device disconnected [ 1352.884165][ T4374] ======================================================= [ 1352.884165][ T4374] WARNING: The mand mount option has been deprecated and [ 1352.884165][ T4374] and is ignored by this kernel. Remove the mand [ 1352.884165][ T4374] option from the mount to silence this warning. [ 1352.884165][ T4374] ======================================================= [ 1356.098676][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 1404.994291][ T976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.451168][ T976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.553910][ T976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.783747][ T976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.764376][ T976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.035739][ T976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.206941][ T976] bond0 (unregistering): Released all slaves [ 1427.745307][ T976] hsr_slave_0: left promiscuous mode [ 1427.868422][ T976] hsr_slave_1: left promiscuous mode [ 1429.036501][ T976] veth1_macvtap: left promiscuous mode [ 1429.061505][ T976] veth0_macvtap: left promiscuous mode [ 1429.080651][ T976] veth1_vlan: left promiscuous mode [ 1429.088371][ T976] veth0_vlan: left promiscuous mode [ 1503.235594][ T4398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.609699][ T4398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.042269][ T4398] hsr_slave_0: entered promiscuous mode [ 1523.143276][ T4398] hsr_slave_1: entered promiscuous mode [ 1532.875460][ T4398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1533.091939][ T4398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1533.218313][ T4398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1533.486005][ T4398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1549.956149][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.705490][ T4398] veth0_vlan: entered promiscuous mode [ 1611.339870][ T4398] veth1_vlan: entered promiscuous mode [ 1614.305378][ T4398] veth0_macvtap: entered promiscuous mode [ 1614.914342][ T4398] veth1_macvtap: entered promiscuous mode [ 1618.869364][ T976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.873561][ T976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.012540][ T976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.049319][ T976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.819868][ T4820] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.821706][ T4820] binder: 4819:4820 ioctl 40046207 0 returned -16 [ 1674.970818][ T3816] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 1732.901300][ T4857] smc: net device bond0 applied user defined pnetid SYZ0 [ 1746.691865][ T4864] process 'syz.1.270' launched '/dev/fd/3' with NULL argv: empty string added [ 1842.029139][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.105804][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.662661][ T4921] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1854.662661][ T4921] The task syz.2.291 (4921) triggered the difference, watch for misbehavior. [ 1871.610277][ T4927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'. [ 1898.404023][ T4937] veth0_to_team: entered promiscuous mode [ 1945.593685][ T4958] netlink: 64 bytes leftover after parsing attributes in process `syz.2.310'. [ 1945.652894][ T4958] netlink: 64 bytes leftover after parsing attributes in process `syz.2.310'. [ 2654.909625][ T33] INFO: task syz.1.323:4990 blocked for more than 436 seconds. [ 2654.911286][ T33] Not tainted syzkaller #0 [ 2654.912244][ T33] Blocked by coredump. [ 2654.912862][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2654.913995][ T33] task:syz.1.323 state:D stack:0 pid:4990 tgid:4987 ppid:3206 task_flags:0x40044c flags:0x00000002 [ 2654.915869][ T33] Call Trace: [ 2654.916675][ T33] [] __schedule+0x1042/0x4114 [ 2660.744392][ T33] [] schedule+0xc4/0x35e [ 2660.745687][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2663.290017][ T33] [] rwsem_down_read_slowpath+0x58c/0x9f4 [ 2663.292405][ T33] [] down_read+0xe4/0x460 [ 2663.294015][ T33] [] do_exit+0x6c2/0x28e4 [ 2663.295787][ T33] [] do_group_exit+0xd4/0x26c [ 2666.234719][ T33] [] get_signal+0x2076/0x22f8 [ 2672.944027][ T33] [] arch_do_signal_or_restart+0x738/0x1c4e [ 2672.945484][ T33] [] exit_to_user_mode_loop+0x8a/0x142 [ 2672.946465][ T33] [] do_trap_ecall_u+0x3f8/0x53a [ 2674.404240][ T33] [] handle_exception+0x15e/0x16a [ 2675.484582][ T33] [ 2675.484582][ T33] Showing all locks held in the system: [ 2675.486041][ T33] 1 lock held by kthreadd/2: [ 2677.226233][ T33] 1 lock held by khungtaskd/33: