last executing test programs: 4m8.443424643s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) r5 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 3m44.396303944s ago: executing program 1 (id=208): unshare(0x22020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 3m25.903638416s ago: executing program 1 (id=210): r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r5}, 0xc) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r5, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2m52.554669317s ago: executing program 1 (id=212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4) 2m28.977070618s ago: executing program 1 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4fc}]}}]}, 0x40}}, 0x0) 2m7.047748088s ago: executing program 0 (id=216): r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r5}, 0xc) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r5, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2m3.958725474s ago: executing program 1 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) r5 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 1m39.154016456s ago: executing program 0 (id=218): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e60, 0x2, @mcast1, 0x6}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x40) 1m31.13725282s ago: executing program 0 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) r3 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 1m23.154818031s ago: executing program 0 (id=220): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x7fffffff, 0x80001}) 1m17.237288285s ago: executing program 32 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4040000) r5 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 1m6.908943933s ago: executing program 0 (id=222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) 49.718258299s ago: executing program 0 (id=223): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r2) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xc3, 0x40, 0x0, @local, @local, 0x8000, 0x8, 0x2, 0x401}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x1, 0x20, 0x10001, 0x3, {{0x5, 0x4, 0x3, 0x28, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x400, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000940)=0x5) write$cgroup_int(r9, &(0x7f0000000040)=0xfe8e, 0x12) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="a48deb25", @ANYRES16, @ANYBLOB="9f1a2abd7000fcdbdf2512000000080039000800000008002b000000000008000b0008000000050037000100000005002a000000000008002b000100000405002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000840}, 0x20000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x89}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8008010}, 0x4000) 0s ago: executing program 33 (id=223): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r2) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xc3, 0x40, 0x0, @local, @local, 0x8000, 0x8, 0x2, 0x401}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x1, 0x20, 0x10001, 0x3, {{0x5, 0x4, 0x3, 0x28, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x400, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000940)=0x5) write$cgroup_int(r9, &(0x7f0000000040)=0xfe8e, 0x12) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="a48deb25", @ANYRES16, @ANYBLOB="9f1a2abd7000fcdbdf2512000000080039000800000008002b000000000008000b0008000000050037000100000005002a000000000008002b000100000405002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000840}, 0x20000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x89}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8008010}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:23447' (ED25519) to the list of known hosts. syzkaller login: [ 501.072053][ T3191] cgroup: Unknown subsys name 'net' [ 501.820861][ T3191] cgroup: Unknown subsys name 'cpuset' [ 501.946864][ T3191] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 578.644761][ T3191] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 696.725532][ T3203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.903526][ T3203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.213681][ T3204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.373460][ T3204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.317095][ T3203] hsr_slave_0: entered promiscuous mode [ 711.365507][ T3203] hsr_slave_1: entered promiscuous mode [ 716.944870][ T3204] hsr_slave_0: entered promiscuous mode [ 717.015780][ T3204] hsr_slave_1: entered promiscuous mode [ 717.051636][ T3204] debugfs: 'hsr0' already exists in 'hsr' [ 717.055162][ T3204] Cannot create hsr debugfs directory [ 726.723026][ T3203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.254671][ T3203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 728.264300][ T3203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 728.497073][ T3203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 730.901538][ T3204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.095842][ T3204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.314727][ T3204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.352554][ T3204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.870540][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.303586][ T3203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.292871][ T3204] veth0_vlan: entered promiscuous mode [ 811.641870][ T3204] veth1_vlan: entered promiscuous mode [ 813.376052][ T3203] veth0_vlan: entered promiscuous mode [ 814.710839][ T3203] veth1_vlan: entered promiscuous mode [ 815.639991][ T3204] veth0_macvtap: entered promiscuous mode [ 816.421360][ T3204] veth1_macvtap: entered promiscuous mode [ 818.646883][ T3203] veth0_macvtap: entered promiscuous mode [ 819.845932][ T3203] veth1_macvtap: entered promiscuous mode [ 821.181627][ T3467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.224484][ T3467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.227235][ T3467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.275334][ T3467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.348639][ T18] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.352219][ T18] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.452015][ T18] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.454678][ T18] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.583548][ T3204] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 840.112782][ T3827] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 847.335436][ T3832] capability: warning: `syz.0.4' uses 32-bit capabilities (legacy support in use) [ 876.547437][ T3854] Zero length message leads to an empty skb [ 882.742659][ T3858] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 921.045305][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 921.581133][ T10] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 921.583144][ T10] usb 1-1: config 0 has no interface number 0 [ 921.585271][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 921.586716][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.265289][ T10] usb 1-1: config 0 descriptor?? [ 922.705528][ T10] cp210x 1-1:0.99: cp210x converter detected [ 923.903695][ T10] cp210x 1-1:0.99: failed to get vendor val 0x000e size 3: -71 [ 924.300094][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 924.475386][ T10] usb 1-1: USB disconnect, device number 2 [ 924.901398][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 924.986491][ T10] cp210x 1-1:0.99: device disconnected [ 957.517024][ T3921] netlink: 388 bytes leftover after parsing attributes in process `syz.0.32'. [ 964.310931][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 964.603384][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 964.752770][ T25] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.755098][ T25] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.757216][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 964.783535][ T25] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 964.785348][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.085993][ T25] usb 2-1: config 0 descriptor?? [ 967.512987][ T25] hid-alps 0003:044E:121E.0001: unknown main item tag 0x0 [ 967.515172][ T25] hid-alps 0003:044E:121E.0001: unknown main item tag 0x0 [ 967.516824][ T25] hid-alps 0003:044E:121E.0001: unknown main item tag 0x0 [ 967.730246][ T25] hid-alps 0003:044E:121E.0001: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.1-1/input0 [ 968.142040][ T25] usb 2-1: USB disconnect, device number 2 [ 973.815909][ T3951] Illegal XDP return value 494600192 on prog (id 3) dev N/A, expect packet loss! [ 988.273485][ T3959] block nbd0: server does not support multiple connections per device. [ 988.312228][ T3959] block nbd0: shutting down sockets [ 994.974370][ T3969] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 1027.460810][ T3819] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1027.885903][ T3819] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1027.897138][ T3819] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1027.906226][ T3819] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1027.926208][ T3819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.209016][ T3819] usb 1-1: config 0 descriptor?? [ 1031.215236][ T3819] hid-rmi 0003:17EF:6085.0002: unknown global tag 0xe [ 1031.238963][ T3819] hid-rmi 0003:17EF:6085.0002: item 0 0 1 14 parsing failed [ 1031.334331][ T3819] hid-rmi 0003:17EF:6085.0002: parse failed [ 1031.386975][ T3819] hid-rmi 0003:17EF:6085.0002: probe with driver hid-rmi failed with error -22 [ 1031.526436][ T3819] usb 1-1: USB disconnect, device number 3 [ 1046.722563][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 1053.146144][ T3821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1053.394381][ T3821] usb 2-1: Using ep0 maxpacket: 16 [ 1053.492349][ T3821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.495303][ T3821] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1053.497402][ T3821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.686244][ T3821] usb 2-1: config 0 descriptor?? [ 1055.366245][ T3821] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1056.044269][ T3821] usb 2-1: USB disconnect, device number 3 [ 1078.410811][ T3813] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1078.649669][ T3813] usb 2-1: Using ep0 maxpacket: 8 [ 1079.102240][ T3813] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1079.104859][ T3813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.106209][ T3813] usb 2-1: Product: syz [ 1079.107029][ T3813] usb 2-1: Manufacturer: syz [ 1079.135596][ T3813] usb 2-1: SerialNumber: syz [ 1079.365523][ T3813] usb 2-1: config 0 descriptor?? [ 1079.712910][ T3813] cdc_ether 2-1:0.0: skipping garbage [ 1079.714510][ T3813] usb 2-1: bad CDC descriptors [ 1079.791906][ T3813] usb 2-1: unsupported MDLM descriptors [ 1079.830855][ T3813] cdc_acm 2-1:0.0: skipping garbage [ 1080.213028][ T3813] usb 2-1: USB disconnect, device number 4 [ 1097.625075][ T4086] netlink: 388 bytes leftover after parsing attributes in process `syz.0.71'. [ 1106.198478][ C0] hrtimer: interrupt took 1397400 ns [ 1111.704195][ T4095] block nbd0: server does not support multiple connections per device. [ 1111.721432][ T4095] block nbd0: shutting down sockets [ 1124.832606][ T4108] netlink: 388 bytes leftover after parsing attributes in process `syz.1.77'. [ 1130.777108][ T4115] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1140.387045][ T4127] block nbd0: server does not support multiple connections per device. [ 1140.449633][ T4127] block nbd0: shutting down sockets [ 1176.174596][ T4148] block nbd0: server does not support multiple connections per device. [ 1176.202110][ T4148] block nbd0: shutting down sockets [ 1190.803136][ T3819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1191.275359][ T3819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.289897][ T3819] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1191.294123][ T3819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.444846][ T3819] usb 1-1: config 0 descriptor?? [ 1193.440710][ T3819] usb 1-1: USB disconnect, device number 4 [ 1203.626165][ T4183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.93'. [ 1203.672657][ T4183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.93'. [ 1209.395287][ T4188] block nbd0: server does not support multiple connections per device. [ 1209.423675][ T4188] block nbd0: shutting down sockets [ 1219.585829][ T4202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.96'. [ 1235.602002][ T4213] block nbd0: server does not support multiple connections per device. [ 1235.774890][ T4213] block nbd0: shutting down sockets [ 1247.614110][ T4225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.103'. [ 1255.335724][ T32] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1255.681957][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.684313][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.756475][ T32] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1255.760388][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1255.762204][ T32] usb 1-1: SerialNumber: syz [ 1256.354285][ T32] usb 1-1: 0:2 : does not exist [ 1258.449106][ T32] usb 1-1: USB disconnect, device number 5 [ 1259.732380][ T4237] netlink: 388 bytes leftover after parsing attributes in process `syz.1.106'. [ 1287.123960][ T4274] netlink: 388 bytes leftover after parsing attributes in process `syz.0.112'. [ 1318.512239][ T4300] netlink: 388 bytes leftover after parsing attributes in process `syz.1.120'. [ 1331.604614][ T4311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1343.961921][ T4321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1360.162746][ T4332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1366.972535][ T4336] netlink: 388 bytes leftover after parsing attributes in process `syz.1.131'. [ 1375.199074][ T67] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.503389][ T4348] netlink: 104 bytes leftover after parsing attributes in process `syz.1.135'. [ 1391.304724][ T4355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1411.204482][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1411.497117][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1412.102959][ T25] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1412.105247][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.107263][ T25] usb 2-1: config 0 has no interface number 0 [ 1412.142424][ T25] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1412.144901][ T25] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1412.166954][ T25] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1412.199408][ T25] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1412.202501][ T25] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1412.204831][ T25] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1412.234539][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1412.236911][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.565650][ T25] usb 2-1: config 0 descriptor?? [ 1412.675042][ T4365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1413.236236][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1417.636858][ T25] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 1418.073216][ T25] usb 2-1: USB disconnect, device number 5 [ 1451.647236][ T4414] netlink: 'syz.1.150': attribute type 15 has an invalid length. [ 1476.074910][ T4428] block nbd0: server does not support multiple connections per device. [ 1476.105549][ T4428] block nbd0: shutting down sockets [ 1508.872075][ T4450] block nbd0: server does not support multiple connections per device. [ 1508.925047][ T4450] block nbd0: shutting down sockets [ 1518.054222][ T4456] netlink: 388 bytes leftover after parsing attributes in process `syz.0.162'. [ 1533.760782][ T4239] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1534.036327][ T4239] usb 1-1: Using ep0 maxpacket: 32 [ 1534.251690][ T4239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.254137][ T4239] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.256616][ T4239] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1534.284508][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.986038][ T4239] usb 1-1: config 0 descriptor?? [ 1538.771803][ T3199] usb 1-1: USB disconnect, device number 6 [ 1540.862024][ T4478] netlink: 'syz.1.166': attribute type 58 has an invalid length. [ 1597.627109][ T4512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1624.640953][ T4531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1635.876244][ T4537] input: syz1 as /devices/virtual/input/input0 [ 1647.494489][ T4550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1668.933717][ T4569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.189'. [ 1670.423408][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 1676.283690][ T4575] block nbd0: server does not support multiple connections per device. [ 1676.393406][ T4575] block nbd0: shutting down sockets [ 1707.525008][ T4600] block nbd0: server does not support multiple connections per device. [ 1707.605434][ T4600] block nbd0: shutting down sockets [ 1723.993855][ T4614] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1750.074741][ T4626] block nbd0: shutting down sockets [ 1818.955404][ T4655] block nbd0: server does not support multiple connections per device. [ 1821.435735][ T4655] block nbd0: shutting down sockets [ 1897.025892][ T4680] block nbd0: server does not support multiple connections per device. [ 1897.265835][ T4680] block nbd0: shutting down sockets [ 2099.110495][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.155877][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.403616][ T3467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.908716][ T3467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.525155][ T3467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.006697][ T4694] hsr_slave_0: entered promiscuous mode [ 2195.146824][ T4694] hsr_slave_1: entered promiscuous mode [ 2195.206686][ T4694] debugfs: 'hsr0' already exists in 'hsr' [ 2195.223632][ T4694] Cannot create hsr debugfs directory [ 2241.684065][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2243.033800][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2243.496838][ T3467] bond0 (unregistering): Released all slaves [ 2611.371616][ T3467] hsr_slave_0: left promiscuous mode [ 2611.639695][ T3467] hsr_slave_1: left promiscuous mode [ 2612.901741][ T3467] veth1_macvtap: left promiscuous mode [ 2612.909408][ T3467] veth0_macvtap: left promiscuous mode [ 2613.024659][ T3467] veth1_vlan: left promiscuous mode [ 2613.096799][ T3467] veth0_vlan: left promiscuous mode [ 2691.106202][ T33] INFO: task dhcpcd:3059 blocked for more than 430 seconds. [ 2691.179415][ T33] Not tainted syzkaller #0 [ 2691.181871][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2691.183903][ T33] task:dhcpcd state:D stack:0 pid:3059 tgid:3059 ppid:3058 task_flags:0x400140 flags:0x00000000 [ 2691.221365][ T33] Call Trace: [ 2691.222621][ T33] [] __schedule+0x102c/0x451e [ 2691.223769][ T33] [] schedule+0xc4/0x35e [ 2691.224755][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2691.225909][ T33] [] __mutex_lock+0x8aa/0x19b4 SYZFAIL: failed to recv rpc [ 2691.274997][ T33] [] mutex_lock_nested+0x14/0x1c [ 2691.276656][ T33] [] rtnl_dumpit+0x1a2/0x1f6 [ 2691.301519][ T33] [] netlink_dump+0x4ca/0x114e [ 2691.302642][ T33] [] netlink_recvmsg+0x6f8/0x8e6 [ 2691.303589][ T33] [] sock_recvmsg+0xd6/0x142 [ 2691.304741][ T33] [] ____sys_recvmsg+0x22c/0x8f4 [ 2691.305878][ T33] [] ___sys_recvmsg+0x112/0x19e [ 2691.307021][ T33] [] __sys_recvmsg+0x186/0x244 [ 2691.348392][ T33] [] __riscv_sys_recvmsg+0x70/0xa2 [ 2691.350150][ T33] [] syscall_handler+0x94/0x118 [ 2691.351549][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2691.352938][ T33] [] handle_exception+0x146/0x152 [ 2691.355036][ T33] INFO: task kworker/u8:1:3300 blocked for more than 430 seconds. [ 2691.356259][ T33] Not tainted syzkaller #0 [ 2691.357275][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2691.411655][ T33] task:kworker/u8:1 state:D stack:0 pid:3300 tgid:3300 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2691.414205][ T33] Workqueue: ipv6_addrconf addrconf_verify_work [ 2691.416061][ T33] Call Trace: [ 2691.416907][ T33] [] __schedule+0x102c/0x451e [ 2691.469099][ T33] [] schedule+0xc4/0x35e [ 2691.471196][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2691.472933][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2691.474552][ T33] [] mutex_lock_nested+0x14/0x1c [ 2691.475841][ T33] [] rtnl_lock+0x22/0x2a [ 2691.530657][ T33] [] addrconf_verify_work+0x1c/0x3c [ 2691.533136][ T33] [] process_one_work+0x96a/0x1f3a [ 2691.535127][ T33] [] worker_thread+0x5ce/0xde8 [ 2691.537004][ T33] [] kthread+0x39e/0x7d8 [ 2691.613765][ T33] [] ret_from_fork_kernel+0x2a/0xc78 [ 2691.616110][ T33] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2691.670242][ T33] INFO: task syz-executor:4694 blocked for more than 430 seconds. [ 2691.671586][ T33] Not tainted syzkaller #0 [ 2691.672330][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2691.673352][ T33] task:syz-executor state:D stack:0 pid:4694 tgid:4694 ppid:1 task_flags:0x400140 flags:0x00000002 [ 2691.674825][ T33] Call Trace: [ 2691.675626][ T33] [] __schedule+0x102c/0x451e [ 2691.749059][ T33] [] schedule+0xc4/0x35e [ 2691.751233][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2691.753061][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2691.754850][ T33] [] mutex_lock_nested+0x14/0x1c [ 2691.756637][ T33] [] rtnl_newlink+0x64c/0x1dc4 [ 2691.849527][ T33] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 2691.851981][ T33] [] netlink_rcv_skb+0x206/0x3be [ 2691.853893][ T33] [] rtnetlink_rcv+0x26/0x30 [ 2691.855764][ T33] [] netlink_unicast+0x544/0x88a [ 2691.960670][ T33] [] netlink_sendmsg+0x854/0xdcc [ 2691.962150][ T33] [] __sock_sendmsg+0xcc/0x162 [ 2691.963382][ T33] [] __sys_sendto+0x27a/0x34e [ 2691.964641][ T33] [] __riscv_sys_sendto+0xc0/0x158 [ 2691.965979][ T33] [] syscall_handler+0x94/0x118 [ 2691.967219][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2691.989939][ T33] [] handle_exception+0x146/0x152 [ 2691.991681][ T33] INFO: task syz-executor:4753 blocked for more than 430 seconds. [ 2691.992703][ T33] Not tainted syzkaller #0 [ 2691.994141][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2691.995241][ T33] task:syz-executor state:D stack:0 pid:4753 tgid:4753 ppid:1 task_flags:0x400140 flags:0x00000002 [ 2691.997001][ T33] Call Trace: [ 2692.018837][ T33] [] __schedule+0x102c/0x451e [ 2692.020193][ T33] [] schedule+0xc4/0x35e [ 2692.021172][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2692.022457][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2692.023441][ T33] [] mutex_lock_nested+0x14/0x1c [ 2692.024464][ T33] [] rtnl_newlink+0x64c/0x1dc4 [ 2692.025657][ T33] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 2692.081584][ T33] [] netlink_rcv_skb+0x206/0x3be [ 2692.082925][ T33] [] rtnetlink_rcv+0x26/0x30 [ 2692.083951][ T33] [] netlink_unicast+0x544/0x88a [ 2692.085093][ T33] [] netlink_sendmsg+0x854/0xdcc [ 2692.086150][ T33] [] __sock_sendmsg+0xcc/0x162 [ 2692.087101][ T33] [] __sys_sendto+0x27a/0x34e [ 2692.118312][ T33] [] __riscv_sys_sendto+0xc0/0x158 [ 2692.119693][ T33] [] syscall_handler+0x94/0x118 [ 2692.120875][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2692.122281][ T33] [] handle_exception+0x146/0x152 [ 2692.123844][ T33] [ 2692.123844][ T33] Showing all locks held in the system: [ 2692.124960][ T33] 3 locks held by kworker/u8:2/18: [ 2692.126066][ T33] 4 locks held by ksoftirqd/1/24: [ 2692.127400][ T33] 3 locks held by kworker/1:1/32: [ 2692.219254][ T33] 1 lock held by khungtaskd/33: [ 2692.220193][ T33] #0: ffffffff889e1320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 2692.223582][ T33] 2 locks held by dhcpcd/3059: [ 2692.224324][ T33] #0: ffffaf8013bcd6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xd9c/0x114e [ 2692.269589][ T33] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x1a2/0x1f6 [ 2692.272617][ T33] 2 locks held by getty/3162: [ 2692.273542][ T33] #0: ffffaf80197960a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 2692.276293][ T33] #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12ea [ 2692.352132][ T33] 2 locks held by syz-executor/3191: [ 2692.353117][ T33] 3 locks held by kworker/u8:1/3300: [ 2692.354035][ T33] #0: ffffaf801e007948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 2692.356764][ T33] #1: ffff8f8009957b70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 2692.403952][ T33] #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2692.429720][ T33] 5 locks held by kworker/u8:7/3467: [ 2692.430767][ T33] 2 locks held by kworker/1:4/3818: [ 2692.431859][ T33] 2 locks held by kworker/1:2/4239: [ 2692.433173][ T33] 2 locks held by kworker/1:7/4423: [ 2692.434092][ T33] 3 locks held by kworker/u8:0/4640: [ 2692.434881][ T33] #0: ffffaf8012289948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 2692.510250][ T33] #1: ffff8f80041e7b70 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 2692.517552][ T33] #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2692.606423][ T33] 4 locks held by kworker/1:10/4648: [ 2692.661868][ T33] 2 locks held by kworker/1:12/4668: [ 2692.664299][ T33] 1 lock held by syz.1.217/4678: [ 2692.666021][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2692.705563][ T33] 2 locks held by syz-executor/4694: [ 2692.707072][ T33] #0: ffffffff8963f4a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xea/0x31c [ 2692.807216][ T33] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 [ 2692.864818][ T33] 1 lock held by syz-executor/4753: [ 2692.866732][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 [ 2692.970270][ T33] 1 lock held by syz-executor/5057: [ 2692.972172][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2692.994889][ T33] 1 lock held by syz-executor/5065: [ 2692.996829][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2693.123016][ T33] [ 2693.124254][ T33] ============================================= [ 2693.124254][ T33] [ 2693.126772][ T33] NMI backtrace for cpu 0 [ 2693.127740][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2693.128429][ T33] Hardware name: riscv-virtio,qemu (DT) [ 2693.128816][ T33] Call Trace: [ 2693.129032][ T33] [] dump_backtrace+0x2e/0x3c [ 2693.129799][ T33] [] show_stack+0x30/0x3c [ 2693.130305][ T33] [] dump_stack_lvl+0x12a/0x1a2 [ 2693.131048][ T33] [] dump_stack+0x1c/0x24 [ 2693.131780][ T33] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 2693.132424][ T33] [] nmi_trigger_cpumask_backtrace+0x2b6/0x45a [ 2693.133087][ T33] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 2693.133857][ T33] [] sys_info+0x20c/0x252 [ 2693.134570][ T33] [] watchdog+0xa70/0x11ec [ 2693.135123][ T33] [] kthread+0x39e/0x7d8 [ 2693.135665][ T33] [] ret_from_fork_kernel+0x2a/0xc78 [ 2693.136200][ T33] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2693.154482][ T33] Sending NMI from CPU 0 to CPUs 1: [ 2693.157410][ C1] NMI backtrace for cpu 1 [ 2693.157802][ C1] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT [ 2693.158203][ C1] Hardware name: riscv-virtio,qemu (DT) [ 2693.158420][ C1] Workqueue: events iterate_cleanup_work [ 2693.158997][ C1] epc : __local_bh_enable_ip+0x392/0x5ee [ 2693.159568][ C1] ra : __local_bh_enable_ip+0x38e/0x5ee [ 2693.160110][ C1] epc : ffffffff8016b9d2 ra : ffffffff8016b9ce sp : ffff8f8000016af0 [ 2693.160463][ C1] gp : ffffffff8a2fec60 tp : ffffaf8013ed3500 t0 : ffff8f8000016ec8 [ 2693.160795][ C1] t1 : 0000000000000098 t2 : fffffffff2f20000 s0 : ffff8f8000016b40 [ 2693.161335][ C1] s1 : 0000000000000102 a0 : 0000000000000001 a1 : ffffffff8820a170 [ 2693.161689][ C1] a2 : 0000000000000003 a3 : 0000000000000101 a4 : 0000000000000001 [ 2693.162056][ C1] a5 : 0000000000102de0 a6 : 0000000000f00000 a7 : 0000000000000000 [ 2693.162370][ C1] s2 : ffffaf8013ed3500 s3 : ffffffff85d045d4 s4 : 0000000000000001 [ 2693.162702][ C1] s5 : ffffffff916cd6a0 s6 : 1ffff5f0027da6a1 s7 : ffffffff8a340820 [ 2693.163025][ C1] s8 : ffff8f8000016d80 s9 : dfffffff00000000 s10: ffff8f8000016d20 [ 2693.163365][ C1] s11: ffffaf8030073100 t3 : 1ffff5f006289603 t4 : ffffaf801f912128 [ 2693.163671][ C1] t5 : ffffffff87ad8ae8 t6 : 0000000000000002 [ 2693.163964][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 2693.164307][ C1] [] __local_bh_enable_ip+0x392/0x5ee [ 2693.164918][ C1] [] ipt_do_table+0xe9a/0x1cb4 [ 2693.165345][ C1] [] nf_hook_slow+0xb8/0x1ec [ 2693.165705][ C1] [] __ip_local_out+0x496/0xbd6 [ 2693.166051][ C1] [] ip_local_out+0x2e/0x1a8 [ 2693.166447][ C1] [] synproxy_send_tcp.isra.0+0x428/0x636 [ 2693.166939][ C1] [] synproxy_send_client_synack+0x6cc/0x94e [ 2693.167368][ C1] [] nft_synproxy_do_eval+0x858/0xab8 [ 2693.167823][ C1] [] nft_synproxy_eval+0x28/0x4e [ 2693.168293][ C1] [] nft_do_chain+0x328/0x1598 [ 2693.168718][ C1] [] nft_do_chain_inet+0x180/0x34c [ 2693.169109][ C1] [] nf_hook_slow+0xb8/0x1ec [ 2693.169468][ C1] [] ip_local_deliver+0x2ea/0x568 [ 2693.169943][ C1] [] ip_rcv_finish+0x1b0/0x2d2 [ 2693.170266][ C1] [] ip_rcv+0xd6/0x44e [ 2693.170541][ C1] [] __netif_receive_skb_one_core+0x106/0x16e [ 2693.171024][ C1] [] __netif_receive_skb+0x2c/0x144 [ 2693.171373][ C1] [] process_backlog+0x4ec/0x1caa [ 2693.171860][ C1] [] __napi_poll.constprop.0+0xa4/0x4b6 [ 2693.172450][ C1] [] net_rx_action+0xa42/0xe36 [ 2693.173025][ C1] [] handle_softirqs+0x4b6/0x1336 [ 2693.173504][ C1] [] __do_softirq+0x12/0x1a [ 2693.174022][ C1] [] ___do_softirq+0x18/0x20 [ 2693.174456][ C1] [] call_on_irq_stack+0x32/0x40 [ 2713.493075][ T33] INFO: task dhcpcd:3059 blocked for more than 452 seconds. [ 2713.495256][ T33] Not tainted syzkaller #0 [ 2713.496649][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2713.511212][ T33] task:dhcpcd state:D stack:0 pid:3059 tgid:3059 ppid:3058 task_flags:0x400140 flags:0x00000000 [ 2713.514170][ T33] Call Trace: [ 2713.515400][ T33] [] __schedule+0x102c/0x451e [ 2713.517279][ T33] [] schedule+0xc4/0x35e [ 2713.549611][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2713.551887][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2713.553574][ T33] [] mutex_lock_nested+0x14/0x1c [ 2713.555245][ T33] [] rtnl_dumpit+0x1a2/0x1f6 [ 2713.556932][ T33] [] netlink_dump+0x4ca/0x114e [ 2713.583306][ T33] [] netlink_recvmsg+0x6f8/0x8e6 [ 2713.585273][ T33] [] sock_recvmsg+0xd6/0x142 [ 2713.587065][ T33] [] ____sys_recvmsg+0x22c/0x8f4 [ 2713.612654][ T33] [] ___sys_recvmsg+0x112/0x19e [ 2713.614579][ T33] [] __sys_recvmsg+0x186/0x244 [ 2713.616347][ T33] [] __riscv_sys_recvmsg+0x70/0xa2 [ 2713.651542][ T33] [] syscall_handler+0x94/0x118 [ 2713.653713][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2713.655502][ T33] [] handle_exception+0x146/0x152 [ 2713.670341][ T33] INFO: task kworker/u8:1:3300 blocked for more than 452 seconds. [ 2713.672232][ T33] Not tainted syzkaller #0 [ 2713.673518][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2713.675041][ T33] task:kworker/u8:1 state:D stack:0 pid:3300 tgid:3300 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2713.700596][ T33] Workqueue: ipv6_addrconf addrconf_verify_work [ 2713.703357][ T33] Call Trace: [ 2713.704560][ T33] [] __schedule+0x102c/0x451e [ 2713.706260][ T33] [] schedule+0xc4/0x35e [ 2713.718665][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2713.720770][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2713.722481][ T33] [] mutex_lock_nested+0x14/0x1c [ 2713.724109][ T33] [] rtnl_lock+0x22/0x2a [ 2713.726540][ T33] [] addrconf_verify_work+0x1c/0x3c [ 2713.765715][ T33] [] process_one_work+0x96a/0x1f3a [ 2713.790120][ T33] [] worker_thread+0x5ce/0xde8 [ 2713.792963][ T33] [] kthread+0x39e/0x7d8 [ 2713.794745][ T33] [] ret_from_fork_kernel+0x2a/0xc78 [ 2713.796449][ T33] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2713.831435][ T33] INFO: task syz-executor:4694 blocked for more than 452 seconds. [ 2713.833397][ T33] Not tainted syzkaller #0 [ 2713.834768][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2713.836204][ T33] task:syz-executor state:D stack:0 pid:4694 tgid:4694 ppid:1 task_flags:0x400140 flags:0x00000002 [ 2713.860655][ T33] Call Trace: [ 2713.862309][ T33] [] __schedule+0x102c/0x451e [ 2713.864112][ T33] [] schedule+0xc4/0x35e [ 2713.865730][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2713.867465][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2713.880128][ T33] [] mutex_lock_nested+0x14/0x1c [ 2713.882058][ T33] [] rtnl_newlink+0x64c/0x1dc4 [ 2713.883867][ T33] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 2713.885757][ T33] [] netlink_rcv_skb+0x206/0x3be [ 2713.887601][ T33] [] rtnetlink_rcv+0x26/0x30 [ 2713.902064][ T33] [] netlink_unicast+0x544/0x88a [ 2713.903908][ T33] [] netlink_sendmsg+0x854/0xdcc [ 2713.905682][ T33] [] __sock_sendmsg+0xcc/0x162 [ 2713.907456][ T33] [] __sys_sendto+0x27a/0x34e [ 2713.920407][ T33] [] __riscv_sys_sendto+0xc0/0x158 [ 2713.922364][ T33] [] syscall_handler+0x94/0x118 [ 2713.924120][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2713.926759][ T33] [] handle_exception+0x146/0x152 [ 2713.948440][ T33] INFO: task syz-executor:4753 blocked for more than 452 seconds. [ 2713.949780][ T33] Not tainted syzkaller #0 [ 2713.950781][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2713.951835][ T33] task:syz-executor state:D stack:0 pid:4753 tgid:4753 ppid:1 task_flags:0x400140 flags:0x00000002 [ 2713.953622][ T33] Call Trace: [ 2713.954394][ T33] [] __schedule+0x102c/0x451e [ 2713.955530][ T33] [] schedule+0xc4/0x35e [ 2713.956588][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2713.990741][ T33] [] __mutex_lock+0x8aa/0x19b4 [ 2713.993023][ T33] [] mutex_lock_nested+0x14/0x1c [ 2713.994338][ T33] [] rtnl_newlink+0x64c/0x1dc4 [ 2713.995553][ T33] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 2713.996780][ T33] [] netlink_rcv_skb+0x206/0x3be [ 2714.018291][ T33] [] rtnetlink_rcv+0x26/0x30 [ 2714.019751][ T33] [] netlink_unicast+0x544/0x88a [ 2714.020949][ T33] [] netlink_sendmsg+0x854/0xdcc [ 2714.022177][ T33] [] __sock_sendmsg+0xcc/0x162 [ 2714.023446][ T33] [] __sys_sendto+0x27a/0x34e [ 2714.024720][ T33] [] __riscv_sys_sendto+0xc0/0x158 [ 2714.026488][ T33] [] syscall_handler+0x94/0x118 [ 2714.049887][ T33] [] do_trap_ecall_u+0x3d8/0x56c [ 2714.052136][ T33] [] handle_exception+0x146/0x152 [ 2714.054429][ T33] [ 2714.054429][ T33] Showing all locks held in the system: [ 2714.055925][ T33] 5 locks held by kworker/1:1/32: [ 2714.057326][ T33] 1 lock held by khungtaskd/33: [ 2714.063588][ T33] #0: ffffffff889e1320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 2714.084917][ T33] 1 lock held by klogd/3015: [ 2714.086673][ T33] 2 locks held by dhcpcd/3059: [ 2714.100189][ T33] #0: ffffaf8013bcd6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xd9c/0x114e [ 2714.105355][ T33] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x1a2/0x1f6 [ 2714.132603][ T33] 2 locks held by getty/3162: [ 2714.134036][ T33] #0: ffffaf80197960a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 2714.159278][ T33] #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12ea [ 2714.164422][ T33] 3 locks held by kworker/u8:1/3300: [ 2714.165863][ T33] #0: ffffaf801e007948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 2714.224105][ T33] #1: ffff8f8009957b70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 2714.263376][ T33] #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.278637][ T33] 6 locks held by kworker/u8:7/3467: [ 2714.280291][ T33] #0: ffffaf8012aa3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 2714.285238][ T33] #1: ffff8f8009be7b70 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 2714.303365][ T33] #2: ffffffff89ec48b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xcc/0x82c [ 2714.329389][ T33] #3: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.334502][ T33] #4: ffffaf801c78cd18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xcb4/0x2504 [ 2714.362169][ T33] #5: ffffffff889f17f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x26a/0x37e [ 2714.395660][ T33] 2 locks held by kworker/1:4/3818: [ 2714.413160][ T33] 3 locks held by kworker/u8:5/4340: [ 2714.414965][ T33] 2 locks held by kworker/1:7/4423: [ 2714.416404][ T33] 3 locks held by kworker/u8:0/4640: [ 2714.440161][ T33] #0: ffffaf8012289948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x848/0x1f3a [ 2714.446972][ T33] #1: ffff8f80041e7b70 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x870/0x1f3a [ 2714.486668][ T33] #2: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.535087][ T33] 5 locks held by kworker/1:10/4648: [ 2714.536534][ T33] 2 locks held by kworker/1:12/4668: [ 2714.560034][ T33] 1 lock held by syz.1.217/4678: [ 2714.561833][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.566512][ T33] 2 locks held by syz-executor/4694: [ 2714.589111][ T33] #0: ffffffff8963f4a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0xea/0x31c [ 2714.596302][ T33] #1: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 [ 2714.703432][ T33] 1 lock held by syz-executor/4753: [ 2714.704869][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x64c/0x1dc4 [ 2714.736873][ T33] 1 lock held by syz-executor/5057: [ 2714.770198][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.776241][ T33] 1 lock held by syz-executor/5065: [ 2714.814677][ T33] #0: ffffffff89edbc28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x22/0x2a [ 2714.834079][ T33] 2 locks held by kworker/1:13/5068: [ 2714.835728][ T33] [ 2714.836847][ T33] ============================================= [ 2714.836847][ T33] [ 2714.864046][ T33] NMI backtrace for cpu 0 [ 2714.864469][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 2714.865027][ T33] Hardware name: riscv-virtio,qemu (DT) [ 2714.865267][ T33] Call Trace: [ 2714.865453][ T33] [] dump_backtrace+0x2e/0x3c [ 2714.866417][ T33] [] show_stack+0x30/0x3c [ 2714.867006][ T33] [] dump_stack_lvl+0x12a/0x1a2 [ 2714.867822][ T33] [] dump_stack+0x1c/0x24 [ 2714.868507][ T33] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 2714.869145][ T33] [] nmi_trigger_cpumask_backtrace+0x2b6/0x45a [ 2714.869841][ T33] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 2714.870601][ T33] [] sys_info+0x20c/0x252 [ 2714.871268][ T33] [] watchdog+0xa70/0x11ec [ 2714.871817][ T33] [] kthread+0x39e/0x7d8 [ 2714.872330][ T33] [] ret_from_fork_kernel+0x2a/0xc78 [ 2714.872861][ T33] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2714.888151][ T33] Sending NMI from CPU 0 to CPUs 1: [ 2714.890252][ C1] NMI backtrace for cpu 1 [ 2714.890615][ C1] CPU: 1 UID: 0 PID: 4423 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT [ 2714.891186][ C1] Hardware name: riscv-virtio,qemu (DT) [ 2714.891461][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 2714.892264][ C1] epc : mod_node_page_state+0x28/0x6a [ 2714.892777][ C1] ra : mod_node_page_state+0x58/0x6a [ 2714.893294][ C1] epc : ffffffff80946b24 ra : ffffffff80946b54 sp : ffff8f8000016c70 [ 2714.893633][ C1] gp : ffffffff8a2fec60 tp : ffffaf801c240000 t0 : ffff8f8000016520 [ 2714.893971][ C1] t1 : fffff1af001867ab t2 : 1ffff1f000002d40 s0 : ffff8f8000016ca0 [ 2714.894297][ C1] s1 : 0000000000000002 a0 : 0000000000000001 a1 : ffffffff8820a170 [ 2714.894603][ C1] a2 : 0000000000000003 a3 : 0000000000000101 a4 : 0000000000000001 [ 2714.894889][ C1] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffff8d8000c33d5b [ 2714.895181][ C1] s2 : ffffaf807ffeee80 s3 : 0000000000000006 s4 : 0000000000004000 [ 2714.895482][ C1] s5 : 0000000000000002 s6 : 0000000000150000 s7 : 0000000000000002 [ 2714.895789][ C1] s8 : ffffffff915345a0 s9 : ffffffff916cd6a0 s10: ffffaf8014a97b40 [ 2714.896130][ C1] s11: 0000000000000000 t3 : 81987a7b00000000 t4 : fffff1af001867ab [ 2714.896435][ C1] t5 : fffff1af001867ac t6 : 0000000000000002 [ 2714.896699][ C1] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 2714.897061][ C1] [] mod_node_page_state+0x28/0x6a [ 2714.897775][ C1] [] new_slab+0x138/0x438 [ 2714.898490][ C1] [] ___slab_alloc+0xda6/0x1a3c [ 2714.899171][ C1] [] __slab_alloc.constprop.0+0x72/0x118 [ 2714.899921][ C1] [] kmem_cache_alloc_node_noprof+0x320/0x834 [ 2714.900669][ C1] [] kmalloc_reserve+0x1a6/0x2be [ 2714.901288][ C1] [] __alloc_skb+0x1c4/0x4ea [ 2714.901916][ C1] [] synproxy_send_client_synack+0x1ae/0x94e [ 2714.902679][ C1] [] nft_synproxy_do_eval+0x858/0xab8 [ 2714.903458][ C1] [] nft_synproxy_eval+0x28/0x4e [ 2714.904185][ C1] [] nft_do_chain+0x328/0x1598 [ 2714.904897][ C1] [] nft_do_chain_inet+0x180/0x34c [ 2714.905601][ C1] [] nf_hook_slow+0xb8/0x1ec [ 2714.906144][ C1] [] ip_local_deliver+0x2ea/0x568 [ 2714.906678][ C1] [] ip_rcv_finish+0x1b0/0x2d2 [ 2714.907308][ C1] [] ip_rcv+0xd6/0x44e [ 2714.907822][ C1] [] __netif_receive_skb_one_core+0x106/0x16e [ 2714.908492][ C1] [] __netif_receive_skb+0x2c/0x144 [ 2714.909119][ C1] [] process_backlog+0x4ec/0x1caa [ 2714.909771][ C1] [] __napi_poll.constprop.0+0xa4/0x4b6 [ 2714.910407][ C1] [] net_rx_action+0xa42/0xe36 [ 2714.911021][ C1] [] handle_softirqs+0x4b6/0x1336 [ 2714.911763][ C1] [] __do_softirq+0x12/0x1a [ 2714.912422][ C1] [] ___do_softirq+0x18/0x20 [ 2714.912960][ C1] [] call_on_irq_stack+0x32/0x40