last executing test programs: 1m6.577536346s ago: executing program 4 (id=896): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r0, 0x0, 0x0, 0x8048848) 1m2.010280987s ago: executing program 4 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sec\x00', &(0x7f0000000480)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0-CONFIG=disabled\n', 0x12) r1 = memfd_create(&(0x7f000000a3c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9\xa5\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xb0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\x00'/143, 0x0) execveat(r1, &(0x7f000000fbc0)='\x00', 0x0, 0x0, 0x1000) 1m1.777723754s ago: executing program 4 (id=909): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f00000000c0)='\x00'/19) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) close(0x4) 1m1.282506945s ago: executing program 2 (id=910): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000500)={0x0, 0xe0da, 0x10000, 0x2, 0x2bf}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000640)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x4, 0x0, 0x0) 1m1.200826618s ago: executing program 2 (id=911): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) 1m1.082922649s ago: executing program 2 (id=912): socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0xeafbff3, &(0x7f00000007c0)=[{&(0x7f0000000800)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000d6500010000000000000000000fff47b94ce5b470fe0b2bee51c9556c3677c77b822bf39a33b1d85c87694329860e40d091346c3d109f409e8ac81bc55bb9f8e77b927424734cf6121779213910f55a2f9bc254cabfa4b1e8098c64a6d718e0232d4d2e27926d29e4d29e757047980e522d38859f9c0e7fa2e2fc0b7b0047690a4c10af6b7de1a8a645c5f33a521609cde0c44e605d2dae61475eb3dd9672ff4e47a33d1231dc41f9b0b7b"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x28001, @rand_addr=' \x01\x00', 0x9}, 0xf) mkdir(&(0x7f00000001c0)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mount\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) 58.852340304s ago: executing program 4 (id=915): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) close(0x3) write(r0, &(0x7f00000005c0)='3', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x4a, 0x2, "7661be5dd364ee3ac73a65fe48192671da55098afeaec7e62daa7b7d9630c38e7f50b92cba855e4390179b3c32c0696438cef083fa03f88c57a668132de51acabd2572a16535"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000880)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000006c0)={'tunl0\x00', r2, 0x8000, 0x8, 0x0, 0x8, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @generic={0x88, 0x5, "3e6785"}]}}}}}) socket(0x10, 0x3, 0x0) 58.248169571s ago: executing program 2 (id=919): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 57.547123314s ago: executing program 4 (id=921): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000500)={0x0, 0xe0da, 0x10000, 0x2, 0x2bf}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000640)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x4, 0x0, 0x0) 57.399219859s ago: executing program 3 (id=922): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) 57.328123586s ago: executing program 3 (id=923): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x8000, 0x8, 0x6, 0xfffff7ed, 0x1, "00f2ff1701049b14c8d423dbb3ce00"}) dup3(r2, r0, 0x80000) read(r0, &(0x7f0000000600)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x0, 0x3, 0x303, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}) getpgid(r5) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000002c0)=0x9, 0x8, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000005c0)=[{0x2000000, 0x0, 0x0}], 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r6, 0x8927, &(0x7f0000000140)='veth0:') accept$unix(r4, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 55.802808331s ago: executing program 3 (id=928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000007c0)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000008c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000001840)=[0xffffffffffffffff, r0], 0x8, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0xb4}}, &(0x7f0000000980)={0x0, 0x28, 0x50}}, 0x400}]}) 55.697568221s ago: executing program 3 (id=929): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x40}, 0x20008000) 53.912307048s ago: executing program 2 (id=933): syz_open_procfs$namespace(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x9) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbc", 0x34) 53.727000907s ago: executing program 4 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x20a02, 0x4) write(r0, &(0x7f0000000180)='+p', 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_REMOVE(0xffffffffffffffff, 0xc138fd04, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000002dc0)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0x8, 0x6, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) 52.43448992s ago: executing program 3 (id=936): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 52.334833828s ago: executing program 3 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 51.836890909s ago: executing program 2 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x0, 0x9, 0x3, 0xd1ea, 0x7, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x6, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x4, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x6, 0xc28, 0x2, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x6, 0x80000000, 0xffff, 0x6, 0x5, 0x8000, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x80020200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000042, 0x2, 0x7, 0x7, 0x102, 0x4, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x3, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x7ffc, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x7, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x4, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0x30}, {0xe, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48d8}, 0x0) 46.184186398s ago: executing program 1 (id=949): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x40}, 0x20008000) 45.794920354s ago: executing program 1 (id=950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000008c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000001840)=[0xffffffffffffffff, r0], 0x8, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0xb4}}, &(0x7f0000000980)={0x0, 0x28, 0x50}}, 0x400}]}) 45.711927876s ago: executing program 1 (id=951): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000580)=0x3fa, 0x4) close(0x3) write(r1, &(0x7f00000005c0)='3', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x4a, 0x2, "7661be5dd364ee3ac73a65fe48192671da55098afeaec7e62daa7b7d9630c38e7f50b92cba855e4390179b3c32c0696438cef083fa03f88c57a668132de51acabd2572a16535"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000880)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write(r6, &(0x7f00000002c0)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) bind$rds(r6, &(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000006c0)={'tunl0\x00', r3, 0x8000, 0x8, 0x0, 0x8, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @generic={0x88, 0x5, "3e6785"}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5000000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43190300000000002800128008000100687372001c000280060005000b00000008000200", @ANYRES32=r8, @ANYBLOB="050007000100102423557604", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket(0x10, 0x3, 0x0) 44.7389202s ago: executing program 1 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 44.346408688s ago: executing program 1 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x6c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) 43.889707169s ago: executing program 1 (id=955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xffffffff, 0x4, 0x8, 0x6000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000ac0), 0x56) sendmsg$kcm(r6, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 37.816648299s ago: executing program 32 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x20a02, 0x4) write(r0, &(0x7f0000000180)='+p', 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_REMOVE(0xffffffffffffffff, 0xc138fd04, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000002dc0)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0x8, 0x6, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) 36.663115586s ago: executing program 33 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 36.230981513s ago: executing program 34 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x0, 0x9, 0x3, 0xd1ea, 0x7, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x6, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x4, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x6, 0xc28, 0x2, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x6, 0x80000000, 0xffff, 0x6, 0x5, 0x8000, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x80020200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000042, 0x2, 0x7, 0x7, 0x102, 0x4, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x3, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x7ffc, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x7, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x4, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0x30}, {0xe, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48d8}, 0x0) 27.441634184s ago: executing program 35 (id=955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xffffffff, 0x4, 0x8, 0x6000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000ac0), 0x56) sendmsg$kcm(r6, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 21.979669261s ago: executing program 0 (id=967): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000500)="94000000420001000200000000000000030100002a0000003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000300007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c00040001", 0x93, 0x0, 0x0, 0x0) 21.803339415s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='NULL', 0x4) 21.111300738s ago: executing program 0 (id=969): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001040000", @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 19.388369154s ago: executing program 0 (id=970): socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8001) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001fdc0)={0x0, 0x0, &(0x7f000001fe00)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000020580)={0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001fe80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x40000000, 0x1980000}], 0x0) 17.648524918s ago: executing program 0 (id=971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002a00)={0x1, &(0x7f0000002cc0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002d00), 0x6f5e, 0x2) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000280)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000002c0)=0x1, 0x4) 16.679255274s ago: executing program 0 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmsg$can_bcm(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001800)=""/46, 0x2e}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000001880)=""/31, 0x1f}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4}, 0x2000) 0s ago: executing program 36 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmsg$can_bcm(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001800)=""/46, 0x2e}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000001880)=""/31, 0x1f}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x4}, 0x2000) kernel console output (not intermixed with test programs): parsing attributes in process `syz.1.58'. [ 128.488702][ T5994] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.022777][ T6000] rxe_eth0 speed is unknown, defaulting to 1000 [ 130.422874][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.656354][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.659553][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.663086][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.663162][ T30] usb 2-1: SerialNumber: syz [ 130.886886][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 131.681788][ T6094] Zero length message leads to an empty skb [ 131.698301][ T30] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 131.985920][ T30] usb 2-1: USB disconnect, device number 2 [ 132.245569][ T30] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 133.462325][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.621081][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.623636][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.625539][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.625569][ T30] usb 2-1: SerialNumber: syz [ 134.166403][ T6152] Bluetooth: MGMT ver 1.23 [ 134.477211][ T30] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 134.750968][ T5711] usb 2-1: USB disconnect, device number 3 [ 134.778679][ T5711] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 134.808870][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 135.059048][ T6175] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 135.059073][ T6175] netlink: 17 bytes leftover after parsing attributes in process `syz.2.110'. [ 135.384867][ T6176] tipc: Started in network mode [ 135.384903][ T6176] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.389401][ T6176] tipc: New replicast peer: 172.20.20.187 [ 135.413479][ T6176] tipc: Enabled bearer , priority 10 [ 135.620664][ T6183] netlink: 64 bytes leftover after parsing attributes in process `syz.2.114'. [ 135.700386][ T5711] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.870944][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 135.871727][ T5711] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 135.924213][ T5711] usb 2-1: config 0 has no interfaces? [ 135.955586][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.955610][ T5711] usb 2-1: Product: syz [ 135.955626][ T5711] usb 2-1: Manufacturer: syz [ 135.955642][ T5711] usb 2-1: SerialNumber: syz [ 135.988454][ T5711] usb 2-1: config 0 descriptor?? [ 136.012468][ T1245] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.200460][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 136.202406][ T1245] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 136.229442][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 136.229473][ T1245] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.229518][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.229543][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.286122][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.286144][ T1245] usb 5-1: Product: syz [ 136.286160][ T1245] usb 5-1: Manufacturer: syz [ 136.286176][ T1245] usb 5-1: SerialNumber: syz [ 136.380591][ T1245] usb 5-1: config 0 descriptor?? [ 136.381939][ T6185] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 136.511148][ T5738] tipc: Node number set to 2886997162 [ 136.665116][ T1245] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 136.728621][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 136.766572][ T6199] FAULT_INJECTION: forcing a failure. [ 136.766572][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 136.767150][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.767178][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 136.767213][ T6199] Call Trace: [ 136.767224][ T6199] [ 136.767235][ T6199] dump_stack_lvl+0xe8/0x150 [ 136.767277][ T6199] should_fail_ex+0x46b/0x600 [ 136.767310][ T6199] should_failslab+0xa8/0x100 [ 136.767338][ T6199] ? __kernfs_new_node+0xe7/0xa70 [ 136.767378][ T6199] kmem_cache_alloc_noprof+0x99/0x680 [ 136.767416][ T6199] ? __kernfs_new_node+0xe7/0xa70 [ 136.767461][ T6199] __kernfs_new_node+0xe7/0xa70 [ 136.767499][ T6199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 136.767538][ T6199] ? __pfx___kernfs_new_node+0x10/0x10 [ 136.767573][ T6199] ? lock_acquire+0x115/0x350 [ 136.767607][ T6199] ? kernfs_root+0x1c/0x230 [ 136.767651][ T6199] ? kernfs_root+0x1c/0x230 [ 136.767685][ T6199] ? kernfs_root+0x1c/0x230 [ 136.767718][ T6199] ? kernfs_root+0x1c/0x230 [ 136.767757][ T6199] kernfs_new_node+0xeb/0x140 [ 136.767790][ T6199] __kernfs_create_file+0x4b/0x2e0 [ 136.767818][ T6199] sysfs_add_file_mode_ns+0x237/0x300 [ 136.767868][ T6199] internal_create_group+0x679/0x1180 [ 136.767917][ T6199] ? kobject_init_and_add+0x12b/0x1a0 [ 136.767946][ T6199] ? register_netdevice+0x1450/0x1ed0 [ 136.767983][ T6199] ? bond_newlink+0x48/0xd0 [ 136.768014][ T6199] ? __pfx_internal_create_group+0x10/0x10 [ 136.768044][ T6199] ? ____sys_sendmsg+0x565/0x870 [ 136.768075][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.768100][ T6199] ? kobject_uevent_env+0x378/0x9e0 [ 136.768134][ T6199] sysfs_create_groups+0x59/0x120 [ 136.768174][ T6199] net_rx_queue_update_kobjects+0x2a4/0x780 [ 136.768217][ T6199] netdev_register_kobject+0x23e/0x350 [ 136.768251][ T6199] register_netdevice+0x1450/0x1ed0 [ 136.768285][ T6199] ? alloc_netdev_mqs+0xd59/0x12c0 [ 136.768317][ T6199] ? __pfx_register_netdevice+0x10/0x10 [ 136.768372][ T6199] bond_newlink+0x48/0xd0 [ 136.768403][ T6199] ? __pfx_bond_newlink+0x10/0x10 [ 136.768437][ T6199] rtnl_newlink_create+0x305/0x7b0 [ 136.768480][ T6199] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 136.768529][ T6199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 136.768564][ T6199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 136.768598][ T6199] rtnl_newlink+0x166d/0x1c30 [ 136.768648][ T6199] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.768707][ T6199] ? __lock_acquire+0x747/0x2de0 [ 136.768748][ T6199] ? kasan_quarantine_put+0xbb/0x1f0 [ 136.768786][ T6199] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.768821][ T6199] ? nlmon_xmit+0xb0/0x100 [ 136.768842][ T6199] ? kmem_cache_free+0x187/0x6d0 [ 136.768873][ T6199] ? nlmon_xmit+0xb0/0x100 [ 136.768916][ T6199] ? __lock_acquire+0x747/0x2de0 [ 136.768957][ T6199] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.768998][ T6199] ? __dev_queue_xmit+0x2a0/0x3a70 [ 136.769022][ T6199] ? __dev_queue_xmit+0x1f26/0x3a70 [ 136.769044][ T6199] ? netlink_unicast+0x8de/0xac0 [ 136.769075][ T6199] ? netlink_sendmsg+0x884/0xba0 [ 136.769102][ T6199] ? lock_acquire+0x115/0x350 [ 136.769148][ T6199] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.769179][ T6199] rtnetlink_rcv_msg+0x802/0xc00 [ 136.769216][ T6199] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 136.769248][ T6199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.769278][ T6199] ? ref_tracker_free+0x668/0x820 [ 136.769311][ T6199] ? __pfx_ref_tracker_free+0x10/0x10 [ 136.769335][ T6199] ? __asan_memcpy+0x40/0x70 [ 136.769362][ T6199] ? __skb_clone+0x5c/0x6c0 [ 136.769401][ T6199] netlink_rcv_skb+0x226/0x4a0 [ 136.769427][ T6199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.769462][ T6199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.769502][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.769527][ T6199] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.769559][ T6199] netlink_unicast+0x90c/0xac0 [ 136.769608][ T6199] netlink_sendmsg+0x884/0xba0 [ 136.769636][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.769658][ T6199] ? __lock_acquire+0x747/0x2de0 [ 136.769697][ T6199] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 136.769738][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.769763][ T6199] sock_sendmsg_nosec+0x13a/0x180 [ 136.769794][ T6199] ____sys_sendmsg+0x565/0x870 [ 136.769839][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.769885][ T6199] ? import_iovec+0x73/0xa0 [ 136.769912][ T6199] ___sys_sendmsg+0x2a5/0x360 [ 136.769938][ T6199] ? __lock_acquire+0x747/0x2de0 [ 136.769968][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.770006][ T6199] ? futex_wait+0x2a2/0x390 [ 136.770060][ T6199] ? __fget_files+0x3a8/0x420 [ 136.770085][ T6199] ? __fget_files+0x2a/0x420 [ 136.770118][ T6199] __x64_sys_sendmsg+0x1b7/0x290 [ 136.770150][ T6199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.770199][ T6199] do_syscall_64+0x166/0x520 [ 136.770217][ T6199] ? trace_irq_disable+0x3b/0x140 [ 136.770244][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f ** 4 printk messages dropped ** [ 136.770344][ T6199] RSP: 002b:00007f0df68e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e ** 66 printk messages dropped ** ** 20 printk messages dropped ** ** 20 printk messages dropped ** ** 20 printk messages dropped ** ** 20 printk messages dropped ** ** 35 printk messages dropped ** ** 19 printk messages dropped ** ** 20 printk messages dropped ** ** 20 printk messages dropped ** ** 36 printk messages dropped ** ** 21 printk messages dropped ** ** 20 printk messages dropped ** ** 21 printk messages dropped ** ** 20 printk messages dropped ** ** 21 printk messages dropped ** ** 49 printk messages dropped ** ** 21 printk messages dropped ** ** 30 printk messages dropped ** ** 21 printk messages dropped ** ** 20 printk messages dropped ** ** 23 printk messages dropped ** ** 20 printk messages dropped ** ** 80 printk messages dropped ** ** 19 printk messages dropped ** ** 20 printk messages dropped ** ** 12 printk messages dropped ** [ 137.684582][ T6199] bond1 (unregistered): Released all slaves [ 138.204338][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.217962][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.922448][ T10] usb 2-1: USB disconnect, device number 4 [ 139.270598][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 140.183648][ T6220] FAULT_INJECTION: forcing a failure. [ 140.183648][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 140.183682][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.0.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.183709][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.183724][ T6220] Call Trace: [ 140.183734][ T6220] [ 140.183744][ T6220] dump_stack_lvl+0xe8/0x150 [ 140.183785][ T6220] should_fail_ex+0x46b/0x600 [ 140.183817][ T6220] should_failslab+0xa8/0x100 [ 140.183847][ T6220] __kmalloc_cache_noprof+0x9c/0x670 [ 140.183878][ T6220] ? ip6_setup_cork+0x6f1/0xfb0 [ 140.183903][ T6220] ? ip6_setup_cork+0x6f1/0xfb0 [ 140.183929][ T6220] ip6_setup_cork+0x6f1/0xfb0 [ 140.183960][ T6220] ip6_append_data+0x175/0x270 [ 140.183985][ T6220] ? __pfx_raw6_getfrag+0x10/0x10 [ 140.184015][ T6220] rawv6_sendmsg+0x1298/0x18c0 [ 140.184055][ T6220] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 140.184080][ T6220] ? irqentry_exit+0x2a0/0x9b0 [ 140.184110][ T6220] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 140.184140][ T6220] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 140.184173][ T6220] ? __lock_acquire+0x747/0x2de0 [ 140.184210][ T6220] ? sock_rps_record_flow+0x19/0x350 [ 140.184237][ T6220] ? inet_sendmsg+0x298/0x320 [ 140.184264][ T6220] ? __pfx_inet_sendmsg+0x10/0x10 [ 140.184287][ T6220] sock_sendmsg_nosec+0x10e/0x180 [ 140.184318][ T6220] ____sys_sendmsg+0x565/0x870 [ 140.184362][ T6220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.184406][ T6220] ? import_iovec+0x73/0xa0 [ 140.184448][ T6220] ___sys_sendmsg+0x2a5/0x360 [ 140.184481][ T6220] ? __lock_acquire+0x747/0x2de0 [ 140.184518][ T6220] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.184549][ T6220] ? __lock_acquire+0x747/0x2de0 [ 140.184595][ T6220] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.184665][ T6220] __sys_sendmmsg+0x279/0x4d0 [ 140.184705][ T6220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.184737][ T6220] ? do_futex+0x3e7/0x4e0 [ 140.184771][ T6220] ? __sys_connect+0x3b7/0x470 [ 140.184814][ T6220] ? rcu_is_watching+0x16/0xb0 [ 140.184845][ T6220] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.184893][ T6220] do_syscall_64+0x166/0x520 [ 140.184917][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.184941][ T6220] ? clear_bhb_loop+0x70/0xc0 [ 140.184970][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.184994][ T6220] RIP: 0033:0x7f756e8bf559 [ 140.185018][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.185038][ T6220] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.185064][ T6220] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 140.185083][ T6220] RDX: 040000000000027f RSI: 0000200000000340 RDI: 0000000000000004 [ 140.185100][ T6220] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 140.185117][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.185131][ T6220] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 140.185176][ T6220] [ 140.420094][ T6218] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.650292][ C0] net_ratelimit: 66 callbacks suppressed [ 142.734536][ T5592] Bluetooth: hci1: command 0x0405 tx timeout [ 143.611523][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 143.611537][ T5711] usb 5-1: USB disconnect, device number 3 [ 144.358578][ T36] audit: type=1800 audit(1792587736.629:2): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.136" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 144.381468][ T6257] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 144.381515][ T6257] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 144.381538][ T6257] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 146.070682][ T5599] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.220575][ T5599] usb 2-1: Using ep0 maxpacket: 32 [ 146.225247][ T5599] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 146.244894][ T5599] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 146.244937][ T5599] usb 2-1: can't read configurations, error -61 [ 146.402228][ T5599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.670314][ T5599] usb 2-1: Using ep0 maxpacket: 32 [ 146.676729][ T5599] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 146.699151][ T5599] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 146.699183][ T5599] usb 2-1: can't read configurations, error -61 [ 146.699736][ T5599] usb usb2-port1: attempt power cycle [ 147.102557][ T5599] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.121173][ T5599] usb 2-1: Using ep0 maxpacket: 32 [ 147.122062][ T5599] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 147.126521][ T5599] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.126558][ T5599] usb 2-1: can't read configurations, error -61 [ 147.422713][ T5599] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.442578][ T5599] usb 2-1: Using ep0 maxpacket: 32 [ 147.445023][ T5599] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 147.474294][ T5599] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.474331][ T5599] usb 2-1: can't read configurations, error -61 [ 147.505417][ T5599] usb usb2-port1: unable to enumerate USB device [ 147.792592][ C1] net_ratelimit: 66 callbacks suppressed [ 152.392113][ T5724] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.560410][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 152.568253][ T5724] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 152.583045][ T5724] usb 1-1: config index 0 descriptor too short (expected 12872, got 72) [ 152.583074][ T5724] usb 1-1: config 60 has too many interfaces: 211, using maximum allowed: 32 [ 152.583100][ T5724] usb 1-1: config 60 has an invalid descriptor of length 0, skipping remainder of the config [ 152.583139][ T5724] usb 1-1: config 60 has 0 interfaces, different from the descriptor's value: 211 [ 152.586932][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.586957][ T5724] usb 1-1: Product: syz [ 152.586974][ T5724] usb 1-1: Manufacturer: syz [ 152.586990][ T5724] usb 1-1: SerialNumber: syz [ 152.917570][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.927392][ C1] net_ratelimit: 165 callbacks suppressed [ 154.317606][ T6463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.217'. [ 154.552185][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.598288][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 154.646208][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.649702][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.649718][ T10] usb 5-1: SerialNumber: syz [ 155.149113][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 155.237875][ T5724] usb 1-1: USB disconnect, device number 3 [ 155.779636][ T10] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 156.028384][ T9] usb 5-1: USB disconnect, device number 4 [ 156.167422][ T9] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 157.046558][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 157.191413][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.230'. [ 158.148773][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 158.760940][ C1] net_ratelimit: 346 callbacks suppressed [ 159.028602][ T6536] warning: `syz.0.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.279469][ T6533] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.556262][ T6551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.244'. [ 160.088741][ T6553] syz.0.245 (6553) used greatest stack depth: 19376 bytes left [ 162.072279][ T36] audit: type=1326 audit(1792587754.379:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.4.247" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec3c9ef559 code=0x0 [ 163.734975][ T6618] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.770592][ C0] net_ratelimit: 131 callbacks suppressed [ 163.961332][ T6614] syz.3.263 (6614) used greatest stack depth: 16552 bytes left [ 164.799406][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 168.173677][ T5592] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 168.890531][ C0] net_ratelimit: 66 callbacks suppressed [ 169.013768][ T6672] ovs-dp0: entered promiscuous mode [ 169.019428][ T6678] lo speed is unknown, defaulting to 1000 [ 169.252585][ T6678] lo speed is unknown, defaulting to 1000 [ 169.287796][ T6678] FAULT_INJECTION: forcing a failure. [ 169.287796][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 169.287831][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.287860][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 169.287876][ T6678] Call Trace: [ 169.287886][ T6678] [ 169.287897][ T6678] dump_stack_lvl+0xe8/0x150 [ 169.287942][ T6678] should_fail_ex+0x46b/0x600 [ 169.287974][ T6678] should_failslab+0xa8/0x100 [ 169.288006][ T6678] __kmalloc_cache_noprof+0x9c/0x670 [ 169.288031][ T6678] ? device_add+0xb6/0xb80 [ 169.288058][ T6678] ? device_add+0xb6/0xb80 [ 169.288094][ T6678] device_add+0xb6/0xb80 [ 169.288127][ T6678] ib_register_device+0xd55/0x1080 [ 169.288163][ T6678] ? __pfx_ib_register_device+0x10/0x10 [ 169.288201][ T6678] siw_newlink+0x916/0xe00 [ 169.288252][ T6678] nldev_newlink+0x5be/0x650 [ 169.288295][ T6678] ? __pfx_nldev_newlink+0x10/0x10 [ 169.288437][ T6678] ? lock_acquire+0x115/0x350 [ 169.288488][ T6678] ? cap_capable+0x123/0x460 [ 169.288518][ T6678] ? security_capable+0x7e/0x2c0 [ 169.288555][ T6678] ? __pfx_nldev_newlink+0x10/0x10 [ 169.288596][ T6678] rdma_nl_rcv+0x6f6/0xa40 [ 169.288634][ T6678] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 169.288685][ T6678] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.288710][ T6678] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.288741][ T6678] netlink_unicast+0x90c/0xac0 [ 169.288798][ T6678] netlink_sendmsg+0x884/0xba0 [ 169.288823][ T6678] ? trace_sched_exit_tp+0x3a/0x130 [ 169.288861][ T6678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.288886][ T6678] ? __lock_acquire+0x747/0x2de0 [ 169.288924][ T6678] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 169.288964][ T6678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.288990][ T6678] sock_sendmsg_nosec+0x13a/0x180 [ 169.289019][ T6678] ____sys_sendmsg+0x565/0x870 [ 169.289065][ T6678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.289113][ T6678] ? import_iovec+0x73/0xa0 [ 169.289146][ T6678] ___sys_sendmsg+0x2a5/0x360 [ 169.289180][ T6678] ? __lock_acquire+0x747/0x2de0 [ 169.289220][ T6678] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.289272][ T6678] ? futex_wake+0x51e/0x600 [ 169.289339][ T6678] ? __fget_files+0x3a8/0x420 [ 169.289369][ T6678] ? __fget_files+0x2a/0x420 [ 169.289411][ T6678] __x64_sys_sendmsg+0x1b7/0x290 [ 169.289451][ T6678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.289512][ T6678] do_syscall_64+0x166/0x520 [ 169.289535][ T6678] ? trace_irq_disable+0x3b/0x140 [ 169.289571][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.289596][ T6678] ? clear_bhb_loop+0x70/0xc0 [ 169.289627][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.289651][ T6678] RIP: 0033:0x7f756e8bf559 [ 169.289674][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.289695][ T6678] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.289722][ T6678] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 169.289741][ T6678] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 169.289757][ T6678] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 169.289773][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.289787][ T6678] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 169.289825][ T6678] [ 169.361945][ T6678] siw: device registration error -12 [ 170.068971][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 171.623598][ T6742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 171.727564][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 171.917007][ T6748] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 171.918045][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.040563][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.103206][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.103371][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.104756][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.104953][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.264169][ T6748] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.719256][ T6778] netlink: 44 bytes leftover after parsing attributes in process `syz.3.320'. [ 172.940662][ T5593] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.094712][ T5593] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.099414][ T5593] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.169040][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.169063][ T5593] usb 2-1: SerialNumber: syz [ 174.008513][ T5593] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 174.011085][ C0] net_ratelimit: 69 callbacks suppressed [ 174.824528][ T5320] usb 2-1: USB disconnect, device number 9 [ 174.885095][ T5320] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 175.073559][ T6829] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 175.690751][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 175.820334][ T30] usb 4-1: device descriptor read/64, error -71 [ 175.905864][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.083857][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.210452][ T30] usb 4-1: device descriptor read/64, error -71 [ 176.313331][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 176.339924][ T30] usb usb4-port1: attempt power cycle [ 176.367202][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 176.476920][ T6870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.639946][ T6872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.720317][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.741982][ T30] usb 4-1: device descriptor read/8, error -71 [ 176.981473][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 177.003513][ T30] usb 4-1: device descriptor read/8, error -71 [ 177.111615][ T30] usb usb4-port1: unable to enumerate USB device [ 177.380525][ T5320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 177.543315][ T5320] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 177.548097][ T5320] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.549761][ T5320] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.586484][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.586501][ T5320] usb 3-1: Product: syz [ 177.586512][ T5320] usb 3-1: Manufacturer: syz [ 177.586524][ T5320] usb 3-1: SerialNumber: syz [ 177.690587][ T5320] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 177.700776][ T6880] ceph: No mds server is up or the cluster is laggy [ 177.975316][ T5320] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 178.205713][ T5320] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 179.130317][ C0] net_ratelimit: 118 callbacks suppressed [ 180.390565][ T5320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.540464][ T5320] usb 4-1: Using ep0 maxpacket: 16 [ 180.542391][ T5320] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 180.547334][ T5320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.547363][ T5320] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.585210][ T5320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.585235][ T5320] usb 4-1: Product: syz [ 180.585252][ T5320] usb 4-1: Manufacturer: syz [ 180.585269][ T5320] usb 4-1: SerialNumber: syz [ 180.642559][ T5320] usb 4-1: config 0 descriptor?? [ 182.113009][ T6884] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 182.384400][ T6884] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 182.386216][ T6884] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 182.428579][ T5711] usb 3-1: USB disconnect, device number 2 [ 182.516446][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 182.543521][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 182.545228][ T5711] ti_usb_3410_5052 3-1:2.0: device disconnected [ 182.631186][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.763429][ T9] usb 2-1: device descriptor read/64, error -71 [ 183.010731][ T6936] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 183.030305][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.170835][ T9] usb 2-1: device descriptor read/64, error -71 [ 183.325105][ T9] usb usb2-port1: attempt power cycle [ 183.380632][ T30] usb 4-1: USB disconnect, device number 6 [ 183.520340][ T6941] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 184.251516][ C1] net_ratelimit: 563 callbacks suppressed [ 184.902701][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.983236][ T9] usb 2-1: device descriptor read/8, error -71 [ 185.592538][ T6958] netlink: 128 bytes leftover after parsing attributes in process `syz.2.379'. [ 185.840472][ T5711] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.081871][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 186.082842][ T5711] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.087755][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.087780][ T5711] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.109536][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.109560][ T5711] usb 5-1: Product: syz [ 186.109576][ T5711] usb 5-1: Manufacturer: syz [ 186.109593][ T5711] usb 5-1: SerialNumber: syz [ 186.168866][ T5711] usb 5-1: config 0 descriptor?? [ 186.421548][ T6972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.295951][ C1] net_ratelimit: 351 callbacks suppressed [ 190.154017][ T30] usb 5-1: USB disconnect, device number 5 [ 191.574448][ T7035] syzkaller0: entered promiscuous mode [ 191.574477][ T7035] syzkaller0: entered allmulticast mode [ 192.079384][ T7040] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 192.145959][ T7045] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 192.145979][ T7045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.397'. [ 192.893317][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.905635][ T7040] bond0: (slave bond1): Enslaving as an active interface with an up link [ 193.242400][ T7048] netlink: 'syz.3.398': attribute type 15 has an invalid length. [ 193.242423][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 193.660387][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.820394][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 193.821193][ T5724] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 193.823618][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.823685][ T5724] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.839182][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.839246][ T5724] usb 2-1: Product: syz [ 193.839288][ T5724] usb 2-1: Manufacturer: syz [ 193.839331][ T5724] usb 2-1: SerialNumber: syz [ 194.002871][ T5724] usb 2-1: config 0 descriptor?? [ 194.330342][ C0] net_ratelimit: 94 callbacks suppressed [ 197.110440][ T5593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.144458][ T5320] usb 2-1: USB disconnect, device number 14 [ 197.234077][ T7082] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.410'. [ 197.298832][ T7077] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.410'. [ 197.321069][ T7081] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.410'. [ 197.351483][ T5593] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.357021][ T5593] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.358352][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.358369][ T5593] usb 4-1: SerialNumber: syz [ 197.401630][ T5599] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.550308][ T5599] usb 5-1: Using ep0 maxpacket: 16 [ 197.551087][ T5599] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 197.552492][ T5599] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.552509][ T5599] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.555271][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.555295][ T5599] usb 5-1: Product: syz [ 197.555313][ T5599] usb 5-1: Manufacturer: syz [ 197.555330][ T5599] usb 5-1: SerialNumber: syz [ 197.694683][ T5599] usb 5-1: config 0 descriptor?? [ 198.205969][ T5593] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 198.876190][ T9] usb 4-1: USB disconnect, device number 7 [ 199.008940][ T9] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 199.617577][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 199.621827][ C1] net_ratelimit: 66 callbacks suppressed [ 199.623122][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.623189][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.977465][ T7128] device-mapper: table: 248:7: multipath: invalid initial priority group (-EINVAL) [ 199.977488][ T7128] device-mapper: ioctl: error adding target to table [ 200.073661][ T5869] usb 5-1: USB disconnect, device number 6 [ 200.324988][ T7117] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 201.355623][ T7167] block nbd1: NBD_DISCONNECT [ 201.932969][ T7176] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.241697][ T7190] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 202.302991][ T7190] syz_tun: entered promiscuous mode [ 202.419889][ T7190] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 202.433390][ T57] bond0: (slave bond_slave_0): interface is now down [ 202.433416][ T57] bond0: (slave bond_slave_1): interface is now down [ 202.433433][ T57] bond0: (slave bridge0): interface is now down [ 202.433449][ T57] bond0: (slave syz_tun): interface is now down [ 202.452154][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.452228][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.452270][ T1064] bond0: (slave bridge0): interface is now down [ 202.452312][ T1064] bond0: (slave syz_tun): interface is now down [ 202.475562][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.475628][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.475658][ T1064] bond0: (slave bridge0): interface is now down [ 202.475675][ T1064] bond0: (slave syz_tun): interface is now down [ 202.507900][ T3309] bond0: (slave bond_slave_0): interface is now down [ 202.507966][ T3309] bond0: (slave bond_slave_1): interface is now down [ 202.508009][ T3309] bond0: (slave bridge0): interface is now down [ 202.508052][ T3309] bond0: (slave syz_tun): interface is now down [ 202.524961][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.525029][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.525072][ T1064] bond0: (slave bridge0): interface is now down [ 202.525116][ T1064] bond0: (slave syz_tun): interface is now down [ 202.557534][ T57] bond0: (slave bond_slave_0): interface is now down [ 202.557600][ T57] bond0: (slave bond_slave_1): interface is now down [ 202.557643][ T57] bond0: (slave bridge0): interface is now down [ 202.557688][ T57] bond0: (slave syz_tun): interface is now down [ 202.618027][ T3309] bond0: (slave bond_slave_0): interface is now down [ 202.618053][ T3309] bond0: (slave bond_slave_1): interface is now down [ 202.618073][ T3309] bond0: (slave bridge0): interface is now down [ 202.618083][ T3309] bond0: (slave syz_tun): interface is now down [ 202.638899][ T57] bond0: (slave bond_slave_0): interface is now down [ 202.638973][ T57] bond0: (slave bond_slave_1): interface is now down [ 202.639010][ T57] bond0: (slave bridge0): interface is now down [ 202.639054][ T57] bond0: (slave syz_tun): interface is now down [ 202.654923][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.654997][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.655041][ T1064] bond0: (slave bridge0): interface is now down [ 202.655076][ T1064] bond0: (slave syz_tun): interface is now down [ 202.671261][ T57] bond0: (slave bond_slave_0): interface is now down [ 202.671338][ T57] bond0: (slave bond_slave_1): interface is now down [ 202.671374][ T57] bond0: (slave bridge0): interface is now down [ 202.671417][ T57] bond0: (slave syz_tun): interface is now down [ 202.690528][ T3328] bond0: (slave bond_slave_0): interface is now down [ 202.690609][ T3328] bond0: (slave bond_slave_1): interface is now down [ 202.690661][ T3328] bond0: (slave bridge0): interface is now down [ 202.690704][ T3328] bond0: (slave syz_tun): interface is now down [ 202.710592][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.710646][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.710677][ T1064] bond0: (slave bridge0): interface is now down [ 202.710693][ T1064] bond0: (slave syz_tun): interface is now down [ 202.732149][ T3328] bond0: (slave bond_slave_0): interface is now down [ 202.732217][ T3328] bond0: (slave bond_slave_1): interface is now down [ 202.732259][ T3328] bond0: (slave bridge0): interface is now down [ 202.732302][ T3328] bond0: (slave syz_tun): interface is now down [ 202.752799][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.752876][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.752920][ T1064] bond0: (slave bridge0): interface is now down [ 202.752956][ T1064] bond0: (slave syz_tun): interface is now down [ 202.854700][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.854722][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.854734][ T1064] bond0: (slave bridge0): interface is now down [ 202.854745][ T1064] bond0: (slave syz_tun): interface is now down [ 202.870680][ T1064] bond0: (slave bond_slave_0): interface is now down [ 202.870737][ T1064] bond0: (slave bond_slave_1): interface is now down [ 202.870780][ T1064] bond0: (slave bridge0): interface is now down [ 202.870803][ T1064] bond0: (slave syz_tun): interface is now down [ 202.904015][ T3328] bond0: (slave bond_slave_0): interface is now down [ 202.904091][ T3328] bond0: (slave bond_slave_1): interface is now down [ 202.904135][ T3328] bond0: (slave bridge0): interface is now down [ 202.904174][ T3328] bond0: (slave syz_tun): interface is now down [ 202.920662][ T1488] bond0: (slave bond_slave_0): interface is now down [ 202.920727][ T1488] bond0: (slave bond_slave_1): interface is now down [ 202.920771][ T1488] bond0: (slave bridge0): interface is now down [ 202.920803][ T1488] bond0: (slave syz_tun): interface is now down [ 202.941181][ T3328] bond0: (slave bond_slave_0): interface is now down [ 202.941246][ T3328] bond0: (slave bond_slave_1): interface is now down [ 202.941287][ T3328] bond0: (slave bridge0): interface is now down [ 202.941322][ T3328] bond0: (slave syz_tun): interface is now down [ 202.969616][ T1431] bond0: (slave bond_slave_0): interface is now down [ 202.969642][ T1431] bond0: (slave bond_slave_1): interface is now down [ 202.969658][ T1431] bond0: (slave bridge0): interface is now down [ 202.969673][ T1431] bond0: (slave syz_tun): interface is now down [ 202.987439][ T3328] bond0: (slave bond_slave_0): interface is now down [ 202.987512][ T3328] bond0: (slave bond_slave_1): interface is now down [ 202.987557][ T3328] bond0: (slave bridge0): interface is now down [ 202.987599][ T3328] bond0: (slave syz_tun): interface is now down [ 203.013605][ T57] bond0: (slave bond_slave_0): interface is now down [ 203.013677][ T57] bond0: (slave bond_slave_1): interface is now down [ 203.013720][ T57] bond0: (slave bridge0): interface is now down [ 203.013756][ T57] bond0: (slave syz_tun): interface is now down [ 203.040677][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.040749][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.040795][ T690] bond0: (slave bridge0): interface is now down [ 203.040847][ T690] bond0: (slave syz_tun): interface is now down [ 203.063777][ T1488] bond0: (slave bond_slave_0): interface is now down [ 203.063845][ T1488] bond0: (slave bond_slave_1): interface is now down [ 203.063889][ T1488] bond0: (slave bridge0): interface is now down [ 203.063934][ T1488] bond0: (slave syz_tun): interface is now down [ 203.080583][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.080621][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.080653][ T3309] bond0: (slave bridge0): interface is now down [ 203.080731][ T3309] bond0: (slave syz_tun): interface is now down [ 203.101232][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.101302][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.101333][ T3328] bond0: (slave bridge0): interface is now down [ 203.101376][ T3328] bond0: (slave syz_tun): interface is now down [ 203.126620][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.126703][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.126748][ T3328] bond0: (slave bridge0): interface is now down [ 203.126791][ T3328] bond0: (slave syz_tun): interface is now down [ 203.142750][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.143184][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.143230][ T3328] bond0: (slave bridge0): interface is now down [ 203.143275][ T3328] bond0: (slave syz_tun): interface is now down [ 203.160462][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.160517][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.160561][ T3328] bond0: (slave bridge0): interface is now down [ 203.160577][ T3328] bond0: (slave syz_tun): interface is now down [ 203.182895][ T1064] bond0: (slave bond_slave_0): interface is now down [ 203.182970][ T1064] bond0: (slave bond_slave_1): interface is now down [ 203.183013][ T1064] bond0: (slave bridge0): interface is now down [ 203.183048][ T1064] bond0: (slave syz_tun): interface is now down [ 203.201926][ T1064] bond0: (slave bond_slave_0): interface is now down [ 203.201993][ T1064] bond0: (slave bond_slave_1): interface is now down [ 203.202037][ T1064] bond0: (slave bridge0): interface is now down [ 203.202080][ T1064] bond0: (slave syz_tun): interface is now down [ 203.220765][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.220830][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.220874][ T3309] bond0: (slave bridge0): interface is now down [ 203.220919][ T3309] bond0: (slave syz_tun): interface is now down [ 203.242602][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.242686][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.242722][ T3328] bond0: (slave bridge0): interface is now down [ 203.242786][ T3328] bond0: (slave syz_tun): interface is now down [ 203.265495][ T1488] bond0: (slave bond_slave_0): interface is now down [ 203.265525][ T1488] bond0: (slave bond_slave_1): interface is now down [ 203.265541][ T1488] bond0: (slave bridge0): interface is now down [ 203.265584][ T1488] bond0: (slave syz_tun): interface is now down [ 203.295705][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.296415][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.296469][ T3328] bond0: (slave bridge0): interface is now down [ 203.296505][ T3328] bond0: (slave syz_tun): interface is now down [ 203.352946][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.353014][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.353057][ T3309] bond0: (slave bridge0): interface is now down [ 203.353101][ T3309] bond0: (slave syz_tun): interface is now down [ 203.383389][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.383464][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.383508][ T3309] bond0: (slave bridge0): interface is now down [ 203.383551][ T3309] bond0: (slave syz_tun): interface is now down [ 203.407671][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.407747][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.407784][ T690] bond0: (slave bridge0): interface is now down [ 203.407820][ T690] bond0: (slave syz_tun): interface is now down [ 203.427973][ T1021] bond0: (slave bond_slave_0): interface is now down [ 203.428040][ T1021] bond0: (slave bond_slave_1): interface is now down [ 203.428085][ T1021] bond0: (slave bridge0): interface is now down [ 203.428129][ T1021] bond0: (slave syz_tun): interface is now down [ 203.444162][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.444235][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.444272][ T3328] bond0: (slave bridge0): interface is now down [ 203.444316][ T3328] bond0: (slave syz_tun): interface is now down [ 203.460704][ T1021] bond0: (slave bond_slave_0): interface is now down [ 203.460772][ T1021] bond0: (slave bond_slave_1): interface is now down [ 203.460814][ T1021] bond0: (slave bridge0): interface is now down [ 203.460858][ T1021] bond0: (slave syz_tun): interface is now down [ 203.483095][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.483164][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.483201][ T3309] bond0: (slave bridge0): interface is now down [ 203.483217][ T3309] bond0: (slave syz_tun): interface is now down [ 203.503759][ T1021] bond0: (slave bond_slave_0): interface is now down [ 203.503824][ T1021] bond0: (slave bond_slave_1): interface is now down [ 203.503877][ T1021] bond0: (slave bridge0): interface is now down [ 203.503919][ T1021] bond0: (slave syz_tun): interface is now down [ 203.523572][ T1021] bond0: (slave bond_slave_0): interface is now down [ 203.523637][ T1021] bond0: (slave bond_slave_1): interface is now down [ 203.523680][ T1021] bond0: (slave bridge0): interface is now down [ 203.523716][ T1021] bond0: (slave syz_tun): interface is now down [ 203.552777][ T1488] bond0: (slave bond_slave_0): interface is now down [ 203.552871][ T1488] bond0: (slave bond_slave_1): interface is now down [ 203.552915][ T1488] bond0: (slave bridge0): interface is now down [ 203.552958][ T1488] bond0: (slave syz_tun): interface is now down [ 203.579823][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.579898][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.579941][ T690] bond0: (slave bridge0): interface is now down [ 203.579977][ T690] bond0: (slave syz_tun): interface is now down [ 203.600733][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.600802][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.600846][ T3309] bond0: (slave bridge0): interface is now down [ 203.600890][ T3309] bond0: (slave syz_tun): interface is now down [ 203.671712][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.671735][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.671751][ T3328] bond0: (slave bridge0): interface is now down [ 203.671792][ T3328] bond0: (slave syz_tun): interface is now down [ 203.690549][ T13] bond0: (slave bond_slave_0): interface is now down [ 203.690626][ T13] bond0: (slave bond_slave_1): interface is now down [ 203.690663][ T13] bond0: (slave bridge0): interface is now down [ 203.690707][ T13] bond0: (slave syz_tun): interface is now down [ 203.721819][ T1064] bond0: (slave bond_slave_0): interface is now down [ 203.721884][ T1064] bond0: (slave bond_slave_1): interface is now down [ 203.721927][ T1064] bond0: (slave bridge0): interface is now down [ 203.721970][ T1064] bond0: (slave syz_tun): interface is now down [ 203.749318][ T1064] bond0: (slave bond_slave_0): interface is now down [ 203.768151][ T1064] bond0: (slave bond_slave_1): interface is now down [ 203.768219][ T1064] bond0: (slave bridge0): interface is now down [ 203.768263][ T1064] bond0: (slave syz_tun): interface is now down [ 203.780864][ T1064] bond0: (slave bond_slave_0): interface is now down [ 203.780935][ T1064] bond0: (slave bond_slave_1): interface is now down [ 203.780979][ T1064] bond0: (slave bridge0): interface is now down [ 203.781023][ T1064] bond0: (slave syz_tun): interface is now down [ 203.806034][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.806112][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.806155][ T690] bond0: (slave bridge0): interface is now down [ 203.806190][ T690] bond0: (slave syz_tun): interface is now down [ 203.820534][ T1488] bond0: (slave bond_slave_0): interface is now down [ 203.820640][ T1488] bond0: (slave bond_slave_1): interface is now down [ 203.820686][ T1488] bond0: (slave bridge0): interface is now down [ 203.820729][ T1488] bond0: (slave syz_tun): interface is now down [ 203.842101][ T3328] bond0: (slave bond_slave_0): interface is now down [ 203.842176][ T3328] bond0: (slave bond_slave_1): interface is now down [ 203.842223][ T3328] bond0: (slave bridge0): interface is now down [ 203.842272][ T3328] bond0: (slave syz_tun): interface is now down [ 203.865034][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.865100][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.865143][ T690] bond0: (slave bridge0): interface is now down [ 203.865186][ T690] bond0: (slave syz_tun): interface is now down [ 203.880652][ T57] bond0: (slave bond_slave_0): interface is now down [ 203.880729][ T57] bond0: (slave bond_slave_1): interface is now down [ 203.880773][ T57] bond0: (slave bridge0): interface is now down [ 203.880817][ T57] bond0: (slave syz_tun): interface is now down [ 203.900425][ T690] bond0: (slave bond_slave_0): interface is now down [ 203.900500][ T690] bond0: (slave bond_slave_1): interface is now down [ 203.900545][ T690] bond0: (slave bridge0): interface is now down [ 203.900588][ T690] bond0: (slave syz_tun): interface is now down [ 203.961851][ T3309] bond0: (slave bond_slave_0): interface is now down [ 203.961952][ T3309] bond0: (slave bond_slave_1): interface is now down [ 203.962002][ T3309] bond0: (slave bridge0): interface is now down [ 203.962039][ T3309] bond0: (slave syz_tun): interface is now down [ 203.980305][ T1431] bond0: (slave bond_slave_0): interface is now down [ 203.980330][ T1431] bond0: (slave bond_slave_1): interface is now down [ 203.980523][ T1431] bond0: (slave bridge0): interface is now down [ 203.980575][ T1431] bond0: (slave syz_tun): interface is now down [ 204.001970][ T1064] bond0: (slave bond_slave_0): interface is now down [ 204.002033][ T1064] bond0: (slave bond_slave_1): interface is now down [ 204.002078][ T1064] bond0: (slave bridge0): interface is now down [ 204.002120][ T1064] bond0: (slave syz_tun): interface is now down [ 204.027075][ T1021] bond0: (slave bond_slave_0): interface is now down [ 204.027156][ T1021] bond0: (slave bond_slave_1): interface is now down [ 204.027200][ T1021] bond0: (slave bridge0): interface is now down [ 204.027236][ T1021] bond0: (slave syz_tun): interface is now down [ 204.042162][ T1431] bond0: (slave bond_slave_0): interface is now down [ 204.042225][ T1431] bond0: (slave bond_slave_1): interface is now down [ 204.042277][ T1431] bond0: (slave bridge0): interface is now down [ 204.042314][ T1431] bond0: (slave syz_tun): interface is now down [ 204.060704][ T690] bond0: (slave bond_slave_0): interface is now down [ 204.060770][ T690] bond0: (slave bond_slave_1): interface is now down [ 204.060813][ T690] bond0: (slave bridge0): interface is now down [ 204.060859][ T690] bond0: (slave syz_tun): interface is now down [ 204.088634][ T57] bond0: (slave bond_slave_0): interface is now down [ 204.088709][ T57] bond0: (slave bond_slave_1): interface is now down [ 204.088752][ T57] bond0: (slave bridge0): interface is now down [ 204.088795][ T57] bond0: (slave syz_tun): interface is now down [ 204.145434][ T57] bond0: (slave bond_slave_0): interface is now down [ 204.145503][ T57] bond0: (slave bond_slave_1): interface is now down [ 204.145540][ T57] bond0: (slave bridge0): interface is now down [ 204.145585][ T57] bond0: (slave syz_tun): interface is now down [ 204.184041][ T1488] bond0: (slave bond_slave_0): interface is now down [ 204.184116][ T1488] bond0: (slave bond_slave_1): interface is now down [ 204.184153][ T1488] bond0: (slave bridge0): interface is now down [ 204.184196][ T1488] bond0: (slave syz_tun): interface is now down [ 204.210699][ T3328] bond0: (slave bond_slave_0): interface is now down [ 204.210730][ T3328] bond0: (slave bond_slave_1): interface is now down [ 204.210768][ T3328] bond0: (slave bridge0): interface is now down [ 204.210811][ T3328] bond0: (slave syz_tun): interface is now down [ 204.230911][ T1021] bond0: (slave bond_slave_0): interface is now down [ 204.230987][ T1021] bond0: (slave bond_slave_1): interface is now down [ 204.231032][ T1021] bond0: (slave bridge0): interface is now down [ 204.231075][ T1021] bond0: (slave syz_tun): interface is now down [ 204.264699][ T1431] bond0: (slave bond_slave_0): interface is now down [ 204.264768][ T1431] bond0: (slave bond_slave_1): interface is now down [ 204.264818][ T1431] bond0: (slave bridge0): interface is now down [ 204.264861][ T1431] bond0: (slave syz_tun): interface is now down [ 204.294831][ T3328] bond0: (slave bond_slave_0): interface is now down [ 204.294898][ T3328] bond0: (slave bond_slave_1): interface is now down [ 204.294944][ T3328] bond0: (slave bridge0): interface is now down [ 204.294987][ T3328] bond0: (slave syz_tun): interface is now down [ 204.365094][ T1021] bond0: (slave bond_slave_0): interface is now down [ 204.365169][ T1021] bond0: (slave bond_slave_1): interface is now down [ 204.365225][ T1021] bond0: (slave bridge0): interface is now down [ 204.365268][ T1021] bond0: (slave syz_tun): interface is now down [ 204.381315][ T1064] bond0: (slave bond_slave_0): interface is now down [ 204.381389][ T1064] bond0: (slave bond_slave_1): interface is now down [ 204.381432][ T1064] bond0: (slave bridge0): interface is now down [ 204.381475][ T1064] bond0: (slave syz_tun): interface is now down [ 204.401502][ T57] bond0: (slave bond_slave_0): interface is now down [ 204.401579][ T57] bond0: (slave bond_slave_1): interface is now down [ 204.401615][ T57] bond0: (slave bridge0): interface is now down [ 204.401658][ T57] bond0: (slave syz_tun): interface is now down [ 204.424517][ T3328] bond0: (slave bond_slave_0): interface is now down [ 204.424586][ T3328] bond0: (slave bond_slave_1): interface is now down [ 204.424629][ T3328] bond0: (slave bridge0): interface is now down [ 204.424672][ T3328] bond0: (slave syz_tun): interface is now down [ 204.464997][ T3328] bond0: (slave bond_slave_0): interface is now down [ 204.465068][ T3328] bond0: (slave bond_slave_1): interface is now down [ 204.465120][ T3328] bond0: (slave bridge0): interface is now down [ 204.465171][ T3328] bond0: (slave syz_tun): interface is now down [ 204.579583][ T3328] bond0: now running without any active interface! [ 204.639696][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 204.639869][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'. [ 204.970279][ C1] net_ratelimit: 83 callbacks suppressed [ 205.140992][ T5599] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.291426][ T5599] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.294608][ T5599] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.298285][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.298308][ T5599] usb 4-1: SerialNumber: syz [ 206.190401][ T1245] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 206.323129][ T7229] FAULT_INJECTION: forcing a failure. [ 206.323129][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 206.323177][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.323211][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.323226][ T7229] Call Trace: [ 206.323236][ T7229] [ 206.323248][ T7229] dump_stack_lvl+0xe8/0x150 [ 206.323291][ T7229] should_fail_ex+0x46b/0x600 [ 206.323325][ T7229] should_failslab+0xa8/0x100 [ 206.323357][ T7229] __kmalloc_cache_noprof+0x9c/0x670 [ 206.323381][ T7229] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 206.323405][ T7229] ? shrinker_alloc+0x59/0xbc0 [ 206.323434][ T7229] ? shrinker_alloc+0x59/0xbc0 [ 206.323473][ T7229] shrinker_alloc+0x59/0xbc0 [ 206.323507][ T7229] ? __rt_spin_lock_init+0x3e/0x50 [ 206.323552][ T7229] sget_fc+0xe8d/0x1a70 [ 206.323596][ T7229] ? __pfx_set_anon_super_fc+0x10/0x10 [ 206.323633][ T7229] ? __pfx_sget_fc+0x10/0x10 [ 206.323664][ T7229] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 206.323693][ T7229] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 206.323727][ T7229] ? __pfx_mqueue_fill_super+0x10/0x10 [ 206.323757][ T7229] get_tree_nodev+0x2a/0x150 [ 206.323794][ T7229] vfs_get_tree+0x92/0x2a0 [ 206.323832][ T7229] fc_mount_longterm+0x1c/0x100 [ 206.323861][ T7229] mq_init_ns+0x508/0x770 [ 206.323904][ T7229] copy_ipcs+0x45c/0x6c0 [ 206.323936][ T7229] create_new_namespaces+0x210/0x6b0 [ 206.323976][ T7229] ? security_capable+0x7e/0x2c0 [ 206.324014][ T7229] unshare_nsproxy_namespaces+0x149/0x190 [ 206.324053][ T7229] ksys_unshare+0x532/0x890 [ 206.324081][ T7229] ? __pfx_ksys_unshare+0x10/0x10 [ 206.324107][ T7229] ? rcu_is_watching+0x16/0xb0 [ 206.324146][ T7229] __x64_sys_unshare+0x38/0x50 [ 206.324179][ T7229] do_syscall_64+0x166/0x520 [ 206.324204][ T7229] ? trace_irq_disable+0x3b/0x140 [ 206.324239][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.324266][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 206.324298][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.324323][ T7229] RIP: 0033:0x7f756e8bf559 [ 206.324346][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.324367][ T7229] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 206.324394][ T7229] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 206.324414][ T7229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 206.324431][ T7229] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 206.324446][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.324491][ T7229] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 206.324530][ T7229] [ 206.326804][ T5599] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 206.350680][ T1245] usb 5-1: Using ep0 maxpacket: 16 [ 206.352915][ T1245] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 206.367957][ T1245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.368023][ T1245] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.389090][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.389157][ T1245] usb 5-1: Product: syz [ 206.389214][ T1245] usb 5-1: Manufacturer: syz [ 206.389270][ T1245] usb 5-1: SerialNumber: syz [ 206.929509][ T1245] usb 5-1: config 0 descriptor?? [ 207.322212][ T7229] FAULT_INJECTION: forcing a failure. [ 207.322212][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 207.322246][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.322275][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.322290][ T7229] Call Trace: [ 207.322301][ T7229] [ 207.322316][ T7229] dump_stack_lvl+0xe8/0x150 [ 207.322359][ T7229] should_fail_ex+0x46b/0x600 [ 207.322393][ T7229] should_failslab+0xa8/0x100 [ 207.322424][ T7229] __kmalloc_noprof+0xf6/0x790 [ 207.322465][ T7229] ? __register_sysctl_table+0x6f/0x1370 [ 207.322525][ T7229] ? __register_sysctl_table+0x6f/0x1370 [ 207.322572][ T7229] __register_sysctl_table+0x6f/0x1370 [ 207.322623][ T7229] ? register_net_sysctl_sz+0x2ba/0x3f0 [ 207.322663][ T7229] __devinet_sysctl_register+0x36d/0x470 [ 207.322712][ T7229] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 207.322766][ T7229] devinet_init_net+0x362/0x7c0 [ 207.322814][ T7229] ops_init+0x35d/0x5d0 [ 207.322859][ T7229] setup_net+0x118/0x350 [ 207.322892][ T7229] ? __pfx_setup_net+0x10/0x10 [ 207.322927][ T7229] ? __ns_common_init+0x2fc/0x4a0 [ 207.322970][ T7229] copy_net_ns+0x53b/0x780 [ 207.323007][ T7229] create_new_namespaces+0x3f0/0x6b0 [ 207.323045][ T7229] ? security_capable+0x7e/0x2c0 [ 207.323083][ T7229] unshare_nsproxy_namespaces+0x149/0x190 [ 207.323124][ T7229] ksys_unshare+0x532/0x890 [ 207.323152][ T7229] ? __pfx_ksys_unshare+0x10/0x10 [ 207.323179][ T7229] ? rcu_is_watching+0x16/0xb0 [ 207.323217][ T7229] __x64_sys_unshare+0x38/0x50 [ 207.323240][ T7229] do_syscall_64+0x166/0x520 [ 207.323263][ T7229] ? trace_irq_disable+0x3b/0x140 [ 207.323299][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.323325][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 207.323355][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.323380][ T7229] RIP: 0033:0x7f756e8bf559 [ 207.323403][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.323425][ T7229] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.323453][ T7229] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 207.323471][ T7229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 207.323488][ T7229] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 207.323504][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.323520][ T7229] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 207.323559][ T7229] [ 207.410473][ T30] usb 4-1: USB disconnect, device number 8 [ 207.427250][ T30] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 207.563664][ T999] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 207.797300][ T999] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 207.815244][ T999] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.818553][ T999] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.846399][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.846463][ T999] usb 3-1: Product: syz [ 207.846509][ T999] usb 3-1: Manufacturer: syz [ 207.846567][ T999] usb 3-1: SerialNumber: syz [ 208.189997][ T999] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 208.282946][ T999] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 208.439624][ T999] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 209.307023][ T5869] usb 5-1: USB disconnect, device number 7 [ 209.545384][ T7234] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 209.546838][ T7234] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 209.552283][ T7234] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 209.582016][ T7234] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 209.621410][ T5869] usb 3-1: USB disconnect, device number 3 [ 209.738012][ T5869] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 209.756829][ T5869] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 209.758327][ T5869] ti_usb_3410_5052 3-1:2.0: device disconnected [ 210.333413][ C1] net_ratelimit: 332 callbacks suppressed [ 210.384635][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 211.120009][ T1431] nvme nvme0: rdma_resolve_route failed (-110). [ 211.124526][ T7274] nvme nvme0: rdma connection establishment failed (-512) [ 211.231212][ T5592] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 212.253551][ T7310] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 212.642325][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 212.830461][ T5738] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.001465][ T5738] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 213.003454][ T5738] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.005032][ T5738] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.009674][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.009698][ T5738] usb 3-1: Product: syz [ 213.009715][ T5738] usb 3-1: Manufacturer: syz [ 213.009732][ T5738] usb 3-1: SerialNumber: syz [ 213.746488][ T999] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.334747][ T999] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 214.337433][ T999] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.365137][ T999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.365162][ T999] usb 2-1: Product: syz [ 214.365179][ T999] usb 2-1: Manufacturer: syz [ 214.365196][ T999] usb 2-1: SerialNumber: syz [ 214.394846][ T5738] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 214.541572][ T5738] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 214.742299][ T999] usb 2-1: USB disconnect, device number 15 [ 214.968155][ T5738] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 215.126836][ T7340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.514984][ T7348] netlink: 'syz.4.499': attribute type 49 has an invalid length. [ 215.610298][ C1] net_ratelimit: 85 callbacks suppressed [ 215.690689][ T7316] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 215.691141][ T7316] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 215.691186][ T7316] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 215.695054][ T7316] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 216.053867][ T5711] usb 3-1: USB disconnect, device number 4 [ 216.435049][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 216.603585][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 216.614202][ T5711] ti_usb_3410_5052 3-1:2.0: device disconnected [ 216.640366][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 217.721965][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 219.190650][ T7398] nvme nvme0: rdma connection establishment failed (-512) [ 219.227083][ T7412] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.369950][ T13] nvme nvme0: rdma_resolve_route failed (-110). [ 220.657424][ T5596] Bluetooth: hci2: link tx timeout [ 220.657438][ T5596] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.820398][ C1] net_ratelimit: 105 callbacks suppressed [ 220.838335][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 222.235162][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 222.239332][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 222.243641][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 223.974929][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 224.137713][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 224.746288][ T7495] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.544'. [ 224.747407][ T7492] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.544'. [ 225.850378][ C0] net_ratelimit: 78 callbacks suppressed [ 226.492164][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 226.784203][ T57] nvme nvme0: rdma_resolve_route failed (-110). [ 226.816402][ T7515] nvme nvme0: rdma connection establishment failed (-19) [ 227.188043][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 227.468993][ T7532] netlink: 75 bytes leftover after parsing attributes in process `syz.2.559'. [ 228.496181][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 228.622082][ T7568] binder: BINDER_SET_CONTEXT_MGR already set [ 228.622100][ T7568] binder: 7567:7568 ioctl 4018620d 200000000740 returned -16 [ 228.931309][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 229.089897][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.098864][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 229.101783][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.101811][ T5869] usb 4-1: SerialNumber: syz [ 229.177814][ T7584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.579354][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 229.745898][ T7598] binder: 7597:7598 ioctl c0306201 200000000680 returned -14 [ 229.784085][ T7598] binder: 7597:7598 ioctl c0306201 200000000780 returned -14 [ 230.110764][ T5869] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 230.156780][ T5869] usb 4-1: USB disconnect, device number 9 [ 230.972140][ T690] net_ratelimit: 173 callbacks suppressed [ 231.796883][ T7636] binder: 7635:7636 ioctl c0306201 200000000680 returned -14 [ 231.799921][ T7636] binder: 7635:7636 ioctl c0306201 200000000780 returned -14 [ 232.220346][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.281296][ T7649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.605'. [ 232.305560][ T7649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.605'. [ 232.381503][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.383668][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.385433][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.385458][ T5869] usb 1-1: SerialNumber: syz [ 233.199628][ T5869] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 233.326156][ T5738] usb 1-1: USB disconnect, device number 4 [ 233.347227][ T5738] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 234.910328][ T5738] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.061323][ T5738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.063399][ T5738] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.065874][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.065899][ T5738] usb 3-1: SerialNumber: syz [ 235.800059][ T5738] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 235.864780][ T7726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.960691][ T5738] usb 3-1: USB disconnect, device number 5 [ 236.019100][ T5738] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 236.100273][ C1] net_ratelimit: 134 callbacks suppressed [ 236.551057][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 236.607705][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 236.691640][ T7732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.855386][ T7734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.951685][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 238.880052][ T7771] binder: 7769:7771 ioctl c0306201 200000000680 returned -14 [ 238.892060][ T7771] binder: 7769:7771 ioctl c0306201 200000000780 returned -14 [ 241.033208][ T5593] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 241.035425][ T7811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.205455][ T5593] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.220308][ T5593] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.223752][ T3309] net_ratelimit: 145 callbacks suppressed [ 241.228823][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.228849][ T5593] usb 5-1: SerialNumber: syz [ 241.575465][ T7827] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 242.088374][ T5593] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 242.747799][ T5593] usb 5-1: USB disconnect, device number 8 [ 242.896525][ T5593] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 243.370440][ T3328] bond0: no route to arp_ip_target 192.168.1.12 and arp_validate is set [ 243.625013][ T7860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.195159][ T7886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.803860][ T86] IPVS: starting estimator thread 0... [ 244.910506][ T7904] IPVS: using max 7 ests per chain, 16800 per kthread [ 246.250269][ C1] net_ratelimit: 115 callbacks suppressed [ 246.635203][ T7944] FAULT_INJECTION: forcing a failure. [ 246.635203][ T7944] name failslab, interval 1, probability 0, space 0, times 0 [ 246.635244][ T7944] CPU: 1 UID: 0 PID: 7944 Comm: syz.0.711 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.635272][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.635293][ T7944] Call Trace: [ 246.635303][ T7944] [ 246.635314][ T7944] dump_stack_lvl+0xe8/0x150 [ 246.635357][ T7944] should_fail_ex+0x46b/0x600 [ 246.635391][ T7944] should_failslab+0xa8/0x100 [ 246.635422][ T7944] __kmalloc_cache_noprof+0x9c/0x670 [ 246.635448][ T7944] ? alloc_fs_context+0x66/0xd00 [ 246.635482][ T7944] ? alloc_fs_context+0x66/0xd00 [ 246.635526][ T7944] alloc_fs_context+0x66/0xd00 [ 246.635560][ T7944] ? __kasan_kmalloc+0x93/0xb0 [ 246.635594][ T7944] mq_init_ns+0x10d/0x770 [ 246.635635][ T7944] copy_ipcs+0x45c/0x6c0 [ 246.635674][ T7944] create_new_namespaces+0x210/0x6b0 [ 246.635713][ T7944] ? security_capable+0x7e/0x2c0 [ 246.635752][ T7944] unshare_nsproxy_namespaces+0x149/0x190 [ 246.635791][ T7944] ksys_unshare+0x532/0x890 [ 246.635818][ T7944] ? __pfx_ksys_unshare+0x10/0x10 [ 246.635844][ T7944] ? rcu_is_watching+0x16/0xb0 [ 246.635881][ T7944] __x64_sys_unshare+0x38/0x50 [ 246.635903][ T7944] do_syscall_64+0x166/0x520 [ 246.635934][ T7944] ? trace_irq_disable+0x3b/0x140 [ 246.635969][ T7944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.635995][ T7944] ? clear_bhb_loop+0x70/0xc0 [ 246.636026][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.636051][ T7944] RIP: 0033:0x7f756e8bf559 [ 246.636074][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.636095][ T7944] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 246.636127][ T7944] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 246.636146][ T7944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 246.636161][ T7944] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 246.636177][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.636193][ T7944] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 246.636231][ T7944] [ 246.922320][ T7945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 247.407699][ T7961] syz.1.716 uses obsolete (PF_INET,SOCK_PACKET) [ 247.551296][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 247.686605][ T3434] nvme nvme0: rdma_resolve_route failed (-110). [ 247.735569][ T7953] nvme nvme0: rdma connection establishment failed (-19) [ 248.069757][ T7973] netlink: 108 bytes leftover after parsing attributes in process `syz.2.719'. [ 248.252508][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 248.317182][ T7979] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 248.439900][ T7979] bond1 (unregistering): Released all slaves [ 248.600459][ T7985] FAULT_INJECTION: forcing a failure. [ 248.600459][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 248.600498][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.600527][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.600543][ T7985] Call Trace: [ 248.600553][ T7985] [ 248.600564][ T7985] dump_stack_lvl+0xe8/0x150 [ 248.600609][ T7985] should_fail_ex+0x46b/0x600 [ 248.600642][ T7985] should_failslab+0xa8/0x100 [ 248.600675][ T7985] __kmalloc_cache_noprof+0x9c/0x670 [ 248.600700][ T7985] ? alloc_fs_context+0x66/0xd00 [ 248.600736][ T7985] ? alloc_fs_context+0x66/0xd00 [ 248.600781][ T7985] alloc_fs_context+0x66/0xd00 [ 248.600817][ T7985] ? __kasan_kmalloc+0x93/0xb0 [ 248.600851][ T7985] mq_init_ns+0x10d/0x770 [ 248.600894][ T7985] copy_ipcs+0x45c/0x6c0 [ 248.600926][ T7985] create_new_namespaces+0x210/0x6b0 [ 248.600966][ T7985] ? security_capable+0x7e/0x2c0 [ 248.601004][ T7985] unshare_nsproxy_namespaces+0x149/0x190 [ 248.601045][ T7985] ksys_unshare+0x532/0x890 [ 248.601072][ T7985] ? __pfx_ksys_unshare+0x10/0x10 [ 248.601099][ T7985] ? rcu_is_watching+0x16/0xb0 [ 248.601137][ T7985] __x64_sys_unshare+0x38/0x50 [ 248.601160][ T7985] do_syscall_64+0x166/0x520 [ 248.601184][ T7985] ? trace_irq_disable+0x3b/0x140 [ 248.601220][ T7985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.601245][ T7985] ? clear_bhb_loop+0x70/0xc0 [ 248.601285][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.601310][ T7985] RIP: 0033:0x7f8f4d3bf559 [ 248.601334][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.601358][ T7985] RSP: 002b:00007f8f4b60e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.601385][ T7985] RAX: ffffffffffffffda RBX: 00007f8f4d645fa0 RCX: 00007f8f4d3bf559 [ 248.601404][ T7985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 248.601420][ T7985] RBP: 00007f8f4d456b20 R08: 0000000000000000 R09: 0000000000000000 [ 248.601437][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.601452][ T7985] R13: 00007f8f4d646038 R14: 00007f8f4d645fa0 R15: 00007ffc386bd828 [ 248.601491][ T7985] [ 249.404058][ T7994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.516614][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 249.589321][ T8010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.733'. [ 249.716208][ T1064] nvme nvme0: rdma_resolve_route failed (-110). [ 249.761842][ T8002] nvme nvme0: rdma connection establishment failed (-19) [ 250.914692][ T8040] netlink: 108 bytes leftover after parsing attributes in process `syz.3.744'. [ 250.942986][ T8038] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.290286][ C1] net_ratelimit: 127 callbacks suppressed [ 251.393437][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 251.625607][ T3309] nvme nvme0: rdma_resolve_route failed (-110). [ 251.643742][ T8046] nvme nvme0: rdma connection establishment failed (-19) [ 251.715839][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 251.864694][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 252.280565][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.757'. [ 253.780907][ T8087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.043311][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 254.151416][ T8101] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.767'. [ 254.153209][ T8100] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.767'. [ 254.339783][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 254.454815][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 254.598215][ T86] nvme nvme0: rdma_resolve_route failed (-110). [ 254.618990][ T8109] nvme nvme0: rdma connection establishment failed (-19) [ 255.175797][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 255.240348][ T999] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 255.279989][ T8133] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.779'. [ 255.300550][ T8132] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.779'. [ 255.392196][ T999] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 255.395137][ T999] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.397839][ T999] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.451885][ T999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.451909][ T999] usb 4-1: Product: syz [ 255.451926][ T999] usb 4-1: Manufacturer: syz [ 255.451944][ T999] usb 4-1: SerialNumber: syz [ 255.503175][ T999] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 255.548182][ T999] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 255.580371][ T999] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 255.824983][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 256.570382][ C0] net_ratelimit: 121 callbacks suppressed [ 256.908020][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.790'. [ 257.455888][ T8161] ceph: No mds server is up or the cluster is laggy [ 258.017681][ T5592] Bluetooth: hci1: command 0x0405 tx timeout [ 258.422079][ T8179] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 258.490756][ T8128] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 258.539941][ T5593] usb 4-1: USB disconnect, device number 10 [ 258.627038][ T5593] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 258.680596][ T5593] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 258.684021][ T5593] ti_usb_3410_5052 4-1:2.0: device disconnected [ 258.755542][ T8192] FAULT_INJECTION: forcing a failure. [ 258.755542][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 258.755578][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.0.800 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 258.755605][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 258.755621][ T8192] Call Trace: [ 258.755631][ T8192] [ 258.755643][ T8192] dump_stack_lvl+0xe8/0x150 [ 258.755688][ T8192] should_fail_ex+0x46b/0x600 [ 258.755716][ T8192] should_failslab+0xa8/0x100 [ 258.755742][ T8192] __kmalloc_cache_noprof+0x9c/0x670 [ 258.755762][ T8192] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 258.755782][ T8192] ? shrinker_alloc+0x59/0xbc0 [ 258.755806][ T8192] ? shrinker_alloc+0x59/0xbc0 [ 258.755837][ T8192] shrinker_alloc+0x59/0xbc0 [ 258.755864][ T8192] ? __rt_spin_lock_init+0x3e/0x50 [ 258.755902][ T8192] sget_fc+0xe8d/0x1a70 [ 258.755936][ T8192] ? __pfx_set_anon_super_fc+0x10/0x10 [ 258.755965][ T8192] ? __pfx_sget_fc+0x10/0x10 [ 258.755987][ T8192] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 258.756009][ T8192] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 258.756035][ T8192] ? __pfx_mqueue_fill_super+0x10/0x10 [ 258.756057][ T8192] get_tree_nodev+0x2a/0x150 [ 258.756085][ T8192] vfs_get_tree+0x92/0x2a0 [ 258.756115][ T8192] fc_mount_longterm+0x1c/0x100 [ 258.756138][ T8192] mq_init_ns+0x508/0x770 [ 258.756175][ T8192] copy_ipcs+0x45c/0x6c0 [ 258.756199][ T8192] create_new_namespaces+0x210/0x6b0 [ 258.756231][ T8192] ? security_capable+0x7e/0x2c0 [ 258.756262][ T8192] unshare_nsproxy_namespaces+0x149/0x190 [ 258.756293][ T8192] ksys_unshare+0x532/0x890 [ 258.756315][ T8192] ? __pfx_ksys_unshare+0x10/0x10 [ 258.756336][ T8192] ? rcu_is_watching+0x16/0xb0 [ 258.756366][ T8192] __x64_sys_unshare+0x38/0x50 [ 258.756384][ T8192] do_syscall_64+0x166/0x520 [ 258.756403][ T8192] ? trace_irq_disable+0x3b/0x140 [ 258.756430][ T8192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756449][ T8192] ? clear_bhb_loop+0x70/0xc0 [ 258.756473][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.756493][ T8192] RIP: 0033:0x7f756e8bf559 [ 258.756511][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.756529][ T8192] RSP: 002b:00007f756cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 258.756550][ T8192] RAX: ffffffffffffffda RBX: 00007f756eb45fa0 RCX: 00007f756e8bf559 [ 258.756565][ T8192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 258.756577][ T8192] RBP: 00007f756e956b20 R08: 0000000000000000 R09: 0000000000000000 [ 258.756589][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.756602][ T8192] R13: 00007f756eb46038 R14: 00007f756eb45fa0 R15: 00007ffcc35a5d28 [ 258.756632][ T8192] [ 259.160830][ T8196] __nla_validate_parse: 1 callbacks suppressed [ 259.160850][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 259.338037][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 259.534056][ T8210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.725857][ T8218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.965770][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 259.986675][ T8224] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 259.986975][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.987712][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.018571][ T3434] nvme nvme0: rdma_resolve_route failed (-110). [ 260.035449][ T8222] nvme nvme0: rdma connection establishment failed (-19) [ 260.050433][ T999] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 260.190415][ T999] usb 1-1: device descriptor read/64, error -71 [ 260.240618][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.240783][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.299449][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.299636][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.398553][ T8224] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 260.470441][ T999] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 260.600555][ T999] usb 1-1: device descriptor read/64, error -71 [ 260.711255][ T999] usb usb1-port1: attempt power cycle [ 260.838724][ T8238] rxe_eth0 speed is unknown, defaulting to 1000 [ 260.860520][ T5593] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 261.011414][ T5593] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 261.013924][ T5593] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.054123][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.054194][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.074282][ T999] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.096030][ T999] usb 1-1: device descriptor read/8, error -71 [ 261.098376][ T5593] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.122765][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.122789][ T5593] usb 2-1: Product: syz [ 261.122806][ T5593] usb 2-1: Manufacturer: syz [ 261.122824][ T5593] usb 2-1: SerialNumber: syz [ 261.187637][ T5593] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 261.213763][ T5593] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 261.247700][ T5593] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 261.340383][ T999] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 261.368436][ T999] usb 1-1: device descriptor read/8, error -71 [ 261.399982][ T8245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.481226][ T999] usb usb1-port1: unable to enumerate USB device [ 261.850283][ C1] net_ratelimit: 160 callbacks suppressed [ 261.882975][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 261.977757][ T8251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.251280][ T8252] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 262.339801][ T8252] bond1 (unregistering): Released all slaves [ 263.535508][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 263.539799][ T8270] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 263.557757][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.591333][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.656731][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.656901][ T8270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.678194][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.678386][ T8270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.712693][ T8270] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 264.126971][ T1507] nvme nvme0: rdma_resolve_route failed (-110). [ 264.142017][ T8273] nvme nvme0: rdma connection establishment failed (-19) [ 264.172995][ T8234] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 264.191072][ T999] usb 2-1: USB disconnect, device number 16 [ 264.237532][ T8279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.368003][ T999] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 264.546345][ T999] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 264.590952][ T999] ti_usb_3410_5052 2-1:2.0: device disconnected [ 265.386446][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 265.465516][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 265.837108][ T8304] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 265.898289][ T8304] bond1 (unregistering): Released all slaves [ 266.164012][ T8322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.213164][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 266.320479][ T8324] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 266.589532][ T57] nvme nvme0: rdma_resolve_route failed (-110). [ 266.603121][ T8309] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 266.630474][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.631111][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.806178][ T8319] nvme nvme0: rdma connection establishment failed (-512) [ 267.060256][ C1] net_ratelimit: 126 callbacks suppressed [ 267.090556][ T5593] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 267.210628][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 267.250311][ T5593] usb 4-1: Using ep0 maxpacket: 16 [ 267.256039][ T5593] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 267.268179][ T5593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.268205][ T5593] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.291942][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.293035][ T5593] usb 4-1: Product: syz [ 267.293055][ T5593] usb 4-1: Manufacturer: syz [ 267.293073][ T5593] usb 4-1: SerialNumber: syz [ 267.326028][ T5593] usb 4-1: config 0 descriptor?? [ 269.673546][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'. [ 269.825024][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 269.893174][ T8368] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 269.935773][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 270.012172][ T8368] bond3 (unregistering): Released all slaves [ 270.066019][ T30] usb 4-1: USB disconnect, device number 11 [ 270.402134][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 270.475899][ T8380] netlink: 'syz.3.863': attribute type 10 has an invalid length. [ 270.515378][ T8370] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 270.560315][ T5320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 270.603962][ T1021] nvme nvme0: rdma_resolve_route failed (-110). [ 270.706306][ T8375] nvme nvme0: rdma connection establishment failed (-19) [ 270.721950][ T5320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.723802][ T5320] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.726393][ T8370] bond3 (unregistering): Released all slaves [ 270.726547][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.726571][ T5320] usb 1-1: SerialNumber: syz [ 271.065430][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.066317][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.485247][ T5320] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 271.532042][ T8393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 271.700306][ T5320] usb 1-1: USB disconnect, device number 9 [ 271.751166][ T5320] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 271.906276][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.872'. [ 272.090304][ C0] net_ratelimit: 649 callbacks suppressed [ 272.199730][ T5605] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 272.733340][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 272.762642][ T8430] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 272.881645][ T1021] nvme nvme0: rdma_resolve_route failed (-110). [ 272.882923][ T5320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.909982][ T8426] nvme nvme0: rdma connection establishment failed (-19) [ 272.942109][ T5869] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 273.033126][ T5320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.037426][ T5320] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.046375][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.046441][ T5320] usb 5-1: SerialNumber: syz [ 273.090335][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 273.091302][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 273.097926][ T5869] usb 4-1: config index 0 descriptor too short (expected 12872, got 72) [ 273.098003][ T5869] usb 4-1: config 60 has too many interfaces: 211, using maximum allowed: 32 [ 273.098072][ T5869] usb 4-1: config 60 has an invalid descriptor of length 0, skipping remainder of the config [ 273.098171][ T5869] usb 4-1: config 60 has 0 interfaces, different from the descriptor's value: 211 [ 273.143450][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.143476][ T5869] usb 4-1: Product: syz [ 273.143493][ T5869] usb 4-1: Manufacturer: syz [ 273.143510][ T5869] usb 4-1: SerialNumber: syz [ 273.420039][ T8440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 273.942797][ T5320] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 273.980597][ T5738] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 274.134924][ T5738] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 274.136856][ T5738] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.140029][ T5738] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.239692][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.239717][ T5738] usb 2-1: Product: syz [ 274.239734][ T5738] usb 2-1: Manufacturer: syz [ 274.239751][ T5738] usb 2-1: SerialNumber: syz [ 274.316874][ T5320] usb 5-1: USB disconnect, device number 9 [ 274.431514][ T5738] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 274.568262][ T5320] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 274.736902][ T5738] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 274.772154][ T5738] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 275.580511][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 275.581232][ T5869] usb 4-1: USB disconnect, device number 12 [ 275.812122][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.816147][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.817793][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.817817][ T30] usb 1-1: SerialNumber: syz [ 275.930336][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 276.624017][ T30] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 276.811416][ T5320] usb 1-1: USB disconnect, device number 10 [ 276.847034][ T5320] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 277.125413][ T5869] usb 2-1: USB disconnect, device number 17 [ 277.197988][ T5869] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 277.254498][ T5869] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 277.270704][ T5869] ti_usb_3410_5052 2-1:2.0: device disconnected [ 277.300846][ C1] net_ratelimit: 117 callbacks suppressed [ 277.391500][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 277.395652][ T8494] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 277.556530][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 277.665524][ T8492] nvme nvme0: rdma connection establishment failed (-512) [ 277.833658][ T8501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.019319][ T8496] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 279.246366][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 279.975113][ T8496] bond3 (unregistering): Released all slaves [ 280.610428][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 280.761331][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.764796][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.766641][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.766665][ T9] usb 1-1: SerialNumber: syz [ 281.819692][ T8500] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 281.819740][ T8500] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 281.819765][ T8500] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 281.945678][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 281.966674][ T9] usb 1-1: USB disconnect, device number 11 [ 281.980897][ T9] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 282.258312][ T8526] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 282.306062][ T8528] process 'syz.4.907' launched '/dev/fd/4' with NULL argv: empty string added [ 282.570362][ C0] net_ratelimit: 128 callbacks suppressed [ 285.579821][ T8554] binder: 8553:8554 ioctl c0306201 200000000680 returned -14 [ 285.599966][ T8554] binder: 8553:8554 ioctl 4018620d 0 returned -22 [ 285.622613][ T8554] binder: 8553:8554 ioctl c0306201 200000000780 returned -14 [ 288.021689][ T8626] net_ratelimit: 100 callbacks suppressed [ 288.199421][ T8631] binder: 8630:8631 ioctl c0306201 200000000680 returned -14 [ 288.235210][ T8631] binder: 8630:8631 ioctl c0306201 2000000000c0 returned -22 [ 288.523074][ T8636] binder: 8635:8636 ioctl c0306201 200000000680 returned -14 [ 288.526242][ T8636] binder: 8635:8636 ioctl 4018620d 0 returned -22 [ 288.526407][ T8636] binder: 8635:8636 ioctl c0306201 200000000780 returned -14 [ 290.503777][ T8652] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 291.855099][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 291.857880][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 292.046652][ T8665] binder: 8664:8665 ioctl c0306201 200000000680 returned -14 [ 292.060367][ T8665] binder: 8664:8665 ioctl 4018620d 0 returned -22 [ 292.063444][ T8665] binder: 8664:8665 ioctl c0306201 200000000780 returned -14 [ 293.050575][ T12] net_ratelimit: 91 callbacks suppressed [ 293.810581][ T5320] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 293.962815][ T5320] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 293.964304][ T5320] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.965714][ T5320] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 293.969475][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.969499][ T5320] usb 2-1: Product: syz [ 293.969516][ T5320] usb 2-1: Manufacturer: syz [ 293.969533][ T5320] usb 2-1: SerialNumber: syz [ 294.125314][ T5320] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 294.203831][ T5320] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 294.213548][ T5320] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 297.373131][ T8685] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 297.418847][ T5320] usb 2-1: USB disconnect, device number 18 [ 297.542241][ T5320] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 297.601765][ T5320] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 297.634462][ T5320] ti_usb_3410_5052 2-1:2.0: device disconnected [ 298.090712][ T3329] net_ratelimit: 85 callbacks suppressed [ 298.474126][ T8699] binder: 8698:8699 ioctl c0306201 200000000680 returned -14 [ 298.477097][ T8699] binder: 8698:8699 ioctl c0306201 0 returned -14 [ 298.849362][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 298.948499][ T13] nvme nvme0: rdma_resolve_route failed (-110). [ 299.004897][ T8704] nvme nvme0: rdma connection establishment failed (-19) [ 299.430383][ T5320] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.590422][ T5320] usb 1-1: Using ep0 maxpacket: 16 [ 299.591260][ T5320] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 299.592705][ T5320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.592729][ T5320] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.595612][ T5320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.595635][ T5320] usb 1-1: Product: syz [ 299.595652][ T5320] usb 1-1: Manufacturer: syz [ 299.595670][ T5320] usb 1-1: SerialNumber: syz [ 299.658846][ T5320] usb 1-1: config 0 descriptor?? [ 302.474091][ T999] usb 1-1: USB disconnect, device number 12 [ 303.370326][ C1] net_ratelimit: 90 callbacks suppressed [ 307.334525][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.380835][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.504035][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.536794][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.538236][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.412093][ T1488] net_ratelimit: 64 callbacks suppressed [ 309.819497][ T5605] Bluetooth: hci5: command tx timeout [ 309.823288][ T5869] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 310.479340][ T5869] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 310.490319][ T5869] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.511478][ T5869] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.527100][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.552450][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.552472][ T5869] usb 1-1: Product: syz [ 310.552488][ T5869] usb 1-1: Manufacturer: syz [ 310.552504][ T5869] usb 1-1: SerialNumber: syz [ 310.616490][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.633185][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.650472][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.658228][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.978796][ T5869] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 311.132028][ T5869] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 311.282847][ T5869] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 311.696861][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.726717][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.728381][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.735141][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.738627][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.221305][ T5600] Bluetooth: hci5: command tx timeout [ 312.715773][ T30] usb 1-1: USB disconnect, device number 13 [ 313.050396][ T5592] Bluetooth: hci6: command tx timeout [ 313.473616][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 313.504921][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 313.506401][ T30] ti_usb_3410_5052 1-1:2.0: device disconnected [ 313.530247][ C0] net_ratelimit: 82 callbacks suppressed [ 314.251883][ T5592] Bluetooth: hci5: command tx timeout [ 314.340969][ T5592] Bluetooth: hci7: command tx timeout [ 315.497805][ T5592] Bluetooth: hci6: command tx timeout [ 316.411001][ T5592] Bluetooth: hci5: command tx timeout [ 316.411038][ T5592] Bluetooth: hci7: command tx timeout [ 317.620983][ T5605] Bluetooth: hci6: command tx timeout [ 318.591962][ T1488] net_ratelimit: 109 callbacks suppressed [ 318.653915][ T5605] Bluetooth: hci7: command tx timeout [ 319.734006][ T5592] Bluetooth: hci6: command tx timeout [ 320.790634][ T5592] Bluetooth: hci7: command tx timeout [ 321.607196][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.654945][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.685611][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.698377][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.711567][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.228990][ T8729] rxe_eth0 speed is unknown, defaulting to 1000 [ 322.518715][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.518791][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.626201][ C1] net_ratelimit: 85 callbacks suppressed [ 324.174508][ T5592] Bluetooth: hci0: command tx timeout [ 324.500821][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.969'. [ 324.507858][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.969'. [ 326.252368][ T5592] Bluetooth: hci0: command tx timeout [ 326.647306][ T8748] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.455724][ T5592] Bluetooth: hci0: command tx timeout [ 328.774148][ T48] net_ratelimit: 167 callbacks suppressed [ 330.719260][ T5592] Bluetooth: hci0: command tx timeout [ 334.137230][ T5720] net_ratelimit: 87 callbacks suppressed [ 336.472067][ T8742] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.144865][ T3329] net_ratelimit: 87 callbacks suppressed [ 344.160231][ T5707] net_ratelimit: 67 callbacks suppressed [ 348.194984][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.293673][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.310321][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.328918][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.352838][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.972703][ T8666] bond0: (slave syz_tun): Releasing backup interface [ 349.370391][ C0] net_ratelimit: 111 callbacks suppressed [ 350.432295][ T5605] Bluetooth: hci3: command tx timeout [ 352.490404][ T5605] Bluetooth: hci3: command tx timeout [ 352.957003][ T8772] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.599537][ T5605] Bluetooth: hci3: command tx timeout [ 354.970303][ C1] net_ratelimit: 88 callbacks suppressed [ 356.651946][ T5605] Bluetooth: hci3: command tx timeout [ 360.250323][ C1] net_ratelimit: 101 callbacks suppressed [ 360.569259][ T8823] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.649311][ T1507] net_ratelimit: 82 callbacks suppressed [ 367.486181][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.529390][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.545031][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.580734][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.584760][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.852589][ T5605] Bluetooth: hci4: command tx timeout [ 370.736212][ C1] net_ratelimit: 90 callbacks suppressed [ 371.689570][ T5592] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 371.741081][ T5592] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 371.758203][ T5592] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 371.783582][ T5592] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 371.787945][ T5592] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 371.931670][ T5592] Bluetooth: hci4: command tx timeout [ 372.549531][ T5592] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 372.598396][ T5592] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 372.610784][ T5592] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 372.638836][ T5592] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 372.668016][ T5592] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 374.051193][ T5605] Bluetooth: hci4: command tx timeout [ 374.387310][ T5592] Bluetooth: hci8: command tx timeout [ 375.259756][ T5605] Bluetooth: hci9: command tx timeout [ 375.847686][ T5720] net_ratelimit: 91 callbacks suppressed [ 376.350381][ T5605] Bluetooth: hci4: command tx timeout [ 376.681945][ T5605] Bluetooth: hci8: command tx timeout [ 377.442843][ T5605] Bluetooth: hci9: command tx timeout [ 378.946563][ T5592] Bluetooth: hci8: command tx timeout [ 379.462763][ T5605] Bluetooth: hci9: command tx timeout [ 380.238906][ T690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.795689][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.879037][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.890285][ C1] net_ratelimit: 93 callbacks suppressed [ 380.932738][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.971722][ T5592] Bluetooth: hci8: command tx timeout [ 381.065890][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.078243][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.540551][ T5605] Bluetooth: hci9: command tx timeout [ 383.450241][ T5605] Bluetooth: hci2: command tx timeout [ 383.943175][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.943250][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.830455][ T5605] Bluetooth: hci2: command tx timeout [ 386.073874][ T5722] net_ratelimit: 92 callbacks suppressed [ 387.970406][ T5605] Bluetooth: hci2: command tx timeout [ 390.035409][ T5605] Bluetooth: hci2: command tx timeout [ 391.210920][ C0] net_ratelimit: 67 callbacks suppressed [ 396.791801][ T3328] net_ratelimit: 94 callbacks suppressed [ 401.850187][ C1] net_ratelimit: 78 callbacks suppressed [ 404.772565][ T8846] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.947468][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.970499][ C1] net_ratelimit: 208 callbacks suppressed [ 406.996380][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.009563][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.027166][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.048971][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.637385][ T5605] Bluetooth: hci0: command tx timeout [ 410.231721][ T8859] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.880268][ T5592] Bluetooth: hci0: command tx timeout [ 412.010210][ C1] net_ratelimit: 119 callbacks suppressed [ 412.392957][ T8858] rxe_eth0 speed is unknown, defaulting to 1000 [ 413.930180][ T5592] Bluetooth: hci0: command tx timeout [ 415.875373][ T8873] rxe_eth0 speed is unknown, defaulting to 1000 [ 416.080312][ T5592] Bluetooth: hci0: command tx timeout [ 416.646026][ T8907] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.440328][ T149] net_ratelimit: 83 callbacks suppressed [ 422.591087][ C1] net_ratelimit: 81 callbacks suppressed [ 423.870752][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.870886][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.871162][ T8846] bridge_slave_0: entered allmulticast mode [ 423.910423][ T8846] bridge_slave_0: entered promiscuous mode [ 425.297979][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.298110][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.298787][ T8846] bridge_slave_1: entered allmulticast mode [ 425.343218][ T8846] bridge_slave_1: entered promiscuous mode [ 426.323154][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.598007][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.726616][ C1] net_ratelimit: 116 callbacks suppressed [ 428.006172][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.063046][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.069638][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.092430][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.095041][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.617266][ T5605] Bluetooth: hci3: command tx timeout [ 432.733079][ T5730] net_ratelimit: 84 callbacks suppressed [ 432.800384][ T5592] Bluetooth: hci3: command tx timeout [ 434.419884][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.462258][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.477568][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.480344][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.486436][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.810203][ T5592] Bluetooth: hci3: command tx timeout [ 436.872158][ T5592] Bluetooth: hci5: command tx timeout [ 436.890198][ T5592] Bluetooth: hci3: command tx timeout [ 437.133041][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.206800][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.222306][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.224907][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.246711][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 438.494410][ C0] net_ratelimit: 97 callbacks suppressed [ 439.378779][ T5592] Bluetooth: hci5: command tx timeout [ 439.450306][ T5592] Bluetooth: hci6: command tx timeout [ 441.450466][ T5592] Bluetooth: hci5: command tx timeout [ 441.702098][ T5592] Bluetooth: hci6: command tx timeout [ 443.540527][ T5592] Bluetooth: hci5: command tx timeout [ 443.547023][ T8935] net_ratelimit: 99 callbacks suppressed [ 444.470409][ T5592] Bluetooth: hci6: command tx timeout [ 445.461094][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.461162][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.663967][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 445.723653][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 445.730942][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 445.756236][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 445.757871][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.582013][ T5605] Bluetooth: hci6: command tx timeout [ 448.402870][ T5605] Bluetooth: hci7: command tx timeout [ 448.576874][ C0] net_ratelimit: 85 callbacks suppressed [ 450.161231][ T8935] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.964037][ T5605] Bluetooth: hci7: command tx timeout [ 452.974669][ T5605] Bluetooth: hci7: command tx timeout [ 453.716585][ T3329] net_ratelimit: 92 callbacks suppressed [ 455.051120][ T5605] Bluetooth: hci7: command tx timeout [ 458.837271][ T3374] net_ratelimit: 88 callbacks suppressed [ 463.934231][ C0] net_ratelimit: 98 callbacks suppressed [ 468.389444][ T5592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.434430][ T5592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.439241][ T5592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.441963][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.443161][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.052647][ T3434] net_ratelimit: 84 callbacks suppressed [ 470.576029][ T5605] Bluetooth: hci1: command tx timeout [ 472.723035][ T5605] Bluetooth: hci1: command tx timeout [ 472.916986][ T8958] rxe_eth0 speed is unknown, defaulting to 1000 [ 474.175200][ T8628] net_ratelimit: 132 callbacks suppressed [ 474.730276][ T5605] Bluetooth: hci1: command tx timeout [ 476.810202][ T5605] Bluetooth: hci1: command tx timeout [ 477.590688][ T8949] rxe_eth0 speed is unknown, defaulting to 1000 [ 479.530248][ C0] net_ratelimit: 136 callbacks suppressed [ 482.938267][ T8978] rxe_eth0 speed is unknown, defaulting to 1000 [ 484.379993][ T9001] rxe_eth0 speed is unknown, defaulting to 1000 [ 484.570291][ T86] net_ratelimit: 71 callbacks suppressed [ 486.838582][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.838806][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.839176][ T8935] bridge_slave_0: entered allmulticast mode [ 486.870816][ T8935] bridge_slave_0: entered promiscuous mode [ 487.103334][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.103508][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.103840][ T8935] bridge_slave_1: entered allmulticast mode [ 487.106926][ T8935] bridge_slave_1: entered promiscuous mode [ 489.620124][ T3329] net_ratelimit: 58 callbacks suppressed [ 489.964762][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.067364][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.078214][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.084771][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.088498][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.330235][ T5605] Bluetooth: hci0: command tx timeout [ 493.846973][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.892844][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.898069][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.950248][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.957654][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.426710][ T5592] Bluetooth: hci0: command tx timeout [ 494.742939][ T3374] net_ratelimit: 102 callbacks suppressed [ 496.519416][ T5592] Bluetooth: hci0: command tx timeout [ 496.609290][ T5605] Bluetooth: hci2: command tx timeout [ 498.168361][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.269531][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.282780][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.286728][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.327395][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.810150][ T5592] Bluetooth: hci2: command tx timeout [ 498.937624][ T5592] Bluetooth: hci0: command tx timeout [ 499.782323][ C0] net_ratelimit: 88 callbacks suppressed [ 500.676113][ T5592] Bluetooth: hci3: command tx timeout [ 500.913242][ T5592] Bluetooth: hci2: command tx timeout [ 501.441572][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.497945][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.515275][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.542222][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.545424][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.746362][ T5605] Bluetooth: hci3: command tx timeout [ 503.065860][ T5605] Bluetooth: hci2: command tx timeout [ 503.743428][ T5605] Bluetooth: hci4: command tx timeout [ 504.814436][ T5605] Bluetooth: hci3: command tx timeout [ 505.200158][ T5738] net_ratelimit: 102 callbacks suppressed [ 506.610097][ T5605] Bluetooth: hci4: command tx timeout [ 506.812810][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.812893][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.900577][ T5592] Bluetooth: hci3: command tx timeout [ 508.670096][ T5605] Bluetooth: hci4: command tx timeout [ 510.257554][ T1488] net_ratelimit: 102 callbacks suppressed [ 511.190941][ T5605] Bluetooth: hci4: command tx timeout [ 515.318920][ T5707] net_ratelimit: 66 callbacks suppressed [ 520.976289][ C1] net_ratelimit: 107 callbacks suppressed [ 525.270398][ T9032] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.020932][ T13] net_ratelimit: 107 callbacks suppressed [ 528.974679][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.115397][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.119816][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.161483][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.184071][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 530.429539][ T9050] rxe_eth0 speed is unknown, defaulting to 1000 [ 531.044609][ T5707] net_ratelimit: 130 callbacks suppressed [ 531.380602][ T5592] Bluetooth: hci5: command tx timeout [ 533.450129][ T5592] Bluetooth: hci5: command tx timeout [ 535.447718][ T9066] rxe_eth0 speed is unknown, defaulting to 1000 [ 535.580206][ T5592] Bluetooth: hci5: command tx timeout [ 536.256226][ T3434] net_ratelimit: 115 callbacks suppressed [ 537.612496][ T5592] Bluetooth: hci5: command tx timeout [ 541.157815][ T9059] rxe_eth0 speed is unknown, defaulting to 1000 [ 541.370465][ T149] net_ratelimit: 96 callbacks suppressed [ 543.909057][ T9100] rxe_eth0 speed is unknown, defaulting to 1000 [ 543.930465][ T38] INFO: task syz.1.955:8715 blocked for more than 143 seconds. [ 543.930486][ T38] Not tainted syzkaller #0 [ 543.930495][ T38] Blocked by coredump. [ 543.930501][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.930509][ T38] task:syz.1.955 state:D stack:24632 pid:8715 tgid:8715 ppid:5588 task_flags:0x40044c flags:0x00080003 [ 543.930638][ T38] Call Trace: [ 543.930645][ T38] [ 543.930657][ T38] __schedule+0x171d/0x56e0 [ 543.930710][ T38] ? __pfx___schedule+0x10/0x10 [ 543.930748][ T38] rt_mutex_schedule+0x76/0xf0 [ 543.930772][ T38] rt_mutex_slowlock_block+0x540/0x6a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.930806][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 543.930830][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 543.930853][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 543.930889][ T38] ? rcu_barrier+0x4c/0x530 [ 543.930913][ T38] ? rcu_barrier+0x4c/0x530 [ 543.930930][ T38] mutex_lock_nested+0x163/0x1d0 [ 543.930951][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.930977][ T38] rcu_barrier+0x4c/0x530 [ 543.931004][ T38] netdev_run_todo+0x2fc/0x1060 [ 543.931024][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 543.931046][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 543.931062][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.931089][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 543.931126][ T38] ? netdev_state_change+0x1bc/0x210 [ 543.931154][ T38] tun_chr_close+0x13f/0x1c0 [ 543.931174][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 543.931193][ T38] __fput+0x41a/0xa70 [ 543.931219][ T38] fput_close_sync+0x11f/0x240 [ 543.931240][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 543.931269][ T38] filp_close_sync+0x6e/0xa0 [ 543.931291][ T38] put_files_struct+0x233/0x3c0 [ 543.931320][ T38] do_exit+0x715/0x2340 [ 543.931339][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.931371][ T38] ? __pfx_do_exit+0x10/0x10 [ 543.931390][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.931419][ T38] ? rt_spin_unlock+0x159/0x200 [ 543.931443][ T38] do_group_exit+0x22d/0x2f0 [ 543.931462][ T38] ? rt_spin_unlock+0x165/0x200 [ 543.931486][ T38] get_signal+0x1216/0x12c0 [ 543.931527][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 543.931609][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.931662][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 543.931689][ T38] ? rcu_is_watching+0x16/0xb0 [ 543.931709][ T38] do_syscall_64+0x328/0x520 [ 543.931725][ T38] ? trace_irq_disable+0x3b/0x140 [ 543.931750][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.931862][ T1507] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 ** replaying previous printk message ** [ 543.931862][ T1507] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 543.931885][ T1507] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.931988][ T1507] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 543.932004][ T1507] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.932095][ T38] ? clear_bhb_loop+0x70/0xc0 [ 543.932120][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.932177][ T38] RIP: 0033:0x7f8f4d3bf559 [ 543.932193][ T38] RSP: 002b:00007ffc386bd988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 543.932211][ T38] RAX: 0000000000000000 RBX: 00007f8f4d647da0 RCX: 00007f8f4d3bf559 [ 543.932224][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 543.932235][ T38] RBP: 00007f8f4d647da0 R08: 00007f8f4d646128 R09: 0000000000000000 [ 543.932247][ T38] R10: 00000000005e8fc4 R11: 0000000000000246 R12: 00000000000496b8 [ 543.932258][ T38] R13: 00007f8f4d645fac R14: 0000000000049456 R15: 00007f8f4d645fa0 [ 543.932284][ T38] [ 543.932292][ T38] INFO: task syz-executor:8729 blocked for more than 143 seconds. [ 543.932305][ T38] Not tainted syzkaller #0 [ 543.932314][ T38] Blocked by coredump. [ 543.932319][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.932327][ T38] task:syz-executor state:D stack:19400 pid:8729 tgid:8729 ppid:1 task_flags:0x40054c flags:0x00080003 [ 543.932371][ T38] Call Trace: [ 543.932377][ T38] [ 543.932387][ T38] __schedule+0x171d/0x56e0 [ 543.932435][ T38] ? __pfx___schedule+0x10/0x10 [ 543.932472][ T38] rt_mutex_schedule+0x76/0xf0 [ 543.932495][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 543.932529][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 543.932552][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 543.932575][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 543.932618][ T38] ? rcu_barrier+0x4c/0x530 [ 543.932642][ T38] ? rcu_barrier+0x4c/0x530 [ 543.932659][ T38] mutex_lock_nested+0x163/0x1d0 [ 543.932680][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.932706][ T38] rcu_barrier+0x4c/0x530 [ 543.932733][ T38] netdev_run_todo+0x2fc/0x1060 [ 543.932752][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 543.932774][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 543.932790][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.932816][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 543.932850][ T38] ? netdev_state_change+0x1bc/0x210 [ 543.932877][ T38] tun_chr_close+0x13f/0x1c0 [ 543.932897][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 543.932916][ T38] __fput+0x41a/0xa70 [ 543.932942][ T38] fput_close_sync+0x11f/0x240 [ 543.932963][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 543.932991][ T38] filp_close_sync+0x6e/0xa0 [ 543.933013][ T38] put_files_struct+0x233/0x3c0 [ 543.933042][ T38] do_exit+0x715/0x2340 [ 543.933061][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.933093][ T38] ? __pfx_do_exit+0x10/0x10 [ 543.933112][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.933144][ T38] ? rt_spin_unlock+0x159/0x200 [ 543.933168][ T38] do_group_exit+0x22d/0x2f0 [ 543.933189][ T38] ? rt_spin_unlock+0x165/0x200 [ 543.933215][ T38] get_signal+0x1216/0x12c0 [ 543.933257][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 543.933289][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.933345][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 543.933371][ T38] ? rcu_is_watching+0x16/0xb0 [ 543.933393][ T38] do_syscall_64+0x328/0x520 [ 543.933409][ T38] ? trace_irq_disable+0x3b/0x140 [ 543.933433][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.933450][ T38] ? clear_bhb_loop+0x70/0xc0 [ 543.933471][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.933491][ T38] RIP: 0033:0x7f1ebaa5fd8e [ 543.933505][ T38] RSP: 002b:00007ffcf40995a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 543.933522][ T38] RAX: 000000000000004c RBX: 000055557ab4b500 RCX: 00007f1ebaa5fd8e [ 543.933535][ T38] RDX: 000000000000004c RSI: 00007f1ebb854670 RDI: 0000000000000003 [ 543.933546][ T38] RBP: 0000000000000001 R08: 00007ffcf4099624 R09: 000000000000000c [ 543.933557][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 543.933574][ T38] R13: 0000000000000000 R14: 00007f1ebb854670 R15: 0000000000000000 [ 543.933599][ T38] [ 543.933607][ T38] INFO: task syz-executor:8742 blocked for more than 143 seconds. [ 543.933651][ T38] Not tainted syzkaller #0 [ 543.933660][ T38] Blocked by coredump. [ 543.933665][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.933673][ T38] task:syz-executor state:D stack:21304 pid:8742 tgid:8742 ppid:1 task_flags:0x40054c flags:0x00080003 [ 543.933719][ T38] Call Trace: [ 543.933724][ T38] [ 543.933735][ T38] __schedule+0x171d/0x56e0 [ 543.933782][ T38] ? __pfx___schedule+0x10/0x10 [ 543.933819][ T38] rt_mutex_schedule+0x76/0xf0 [ 543.933842][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 543.933875][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 543.933899][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 543.933921][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 543.933958][ T38] ? rcu_barrier+0x4c/0x530 [ 543.933981][ T38] ? rcu_barrier+0x4c/0x530 [ 543.933999][ T38] mutex_lock_nested+0x163/0x1d0 [ 543.934019][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.934045][ T38] rcu_barrier+0x4c/0x530 [ 543.934071][ T38] netdev_run_todo+0x2fc/0x1060 [ 543.934093][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 543.934114][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 543.934130][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.934157][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 543.934190][ T38] ? netdev_state_change+0x1bc/0x210 [ 543.934217][ T38] tun_chr_close+0x13f/0x1c0 [ 543.934235][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 543.934254][ T38] __fput+0x41a/0xa70 [ 543.934282][ T38] fput_close_sync+0x11f/0x240 [ 543.934302][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 543.934331][ T38] filp_close_sync+0x6e/0xa0 [ 543.934354][ T38] put_files_struct+0x233/0x3c0 [ 543.934382][ T38] do_exit+0x715/0x2340 [ 543.934401][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.934432][ T38] ? __pfx_do_exit+0x10/0x10 [ 543.934451][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.934480][ T38] ? rt_spin_unlock+0x159/0x200 [ 543.934504][ T38] do_group_exit+0x22d/0x2f0 [ 543.934522][ T38] ? rt_spin_unlock+0x165/0x200 [ 543.934547][ T38] get_signal+0x1216/0x12c0 [ 543.934587][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 543.934625][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.934668][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 543.934693][ T38] ? rcu_is_watching+0x16/0xb0 [ 543.934713][ T38] do_syscall_64+0x328/0x520 [ 543.934729][ T38] ? trace_irq_disable+0x3b/0x140 [ 543.934753][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.934771][ T38] ? clear_bhb_loop+0x70/0xc0 [ 543.934792][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.934809][ T38] RIP: 0033:0x7fdb64c5fd8e [ 543.934823][ T38] RSP: 002b:00007ffc80df7568 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 543.934839][ T38] RAX: 000000000000004c RBX: 000055557bdca500 RCX: 00007fdb64c5fd8e [ 543.934852][ T38] RDX: 000000000000004c RSI: 00007fdb65a54670 RDI: 0000000000000003 [ 543.934863][ T38] RBP: 0000000000000001 R08: 00007ffc80df75e4 R09: 000000000000000c [ 543.934874][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 543.934884][ T38] R13: 0000000000000000 R14: 00007fdb65a54670 R15: 0000000000000000 [ 543.934909][ T38] [ 543.934917][ T38] INFO: task syz-executor:8748 blocked for more than 143 seconds. [ 543.934929][ T38] Not tainted syzkaller #0 [ 543.934937][ T38] Blocked by coredump. [ 543.934942][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.934950][ T38] task:syz-executor state:D stack:21624 pid:8748 tgid:8748 ppid:1 task_flags:0x40054c flags:0x00080003 [ 543.934995][ T38] Call Trace: [ 543.935000][ T38] [ 543.935010][ T38] __schedule+0x171d/0x56e0 [ 543.935057][ T38] ? __pfx___schedule+0x10/0x10 [ 543.935094][ T38] rt_mutex_schedule+0x76/0xf0 [ 543.935117][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 543.935150][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 543.938098][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 543.938148][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 543.938197][ T38] ? rcu_barrier+0x4c/0x530 [ 543.938232][ T38] ? rcu_barrier+0x4c/0x530 [ 543.938254][ T38] mutex_lock_nested+0x163/0x1d0 [ 543.938283][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.938318][ T38] rcu_barrier+0x4c/0x530 [ 543.938354][ T38] netdev_run_todo+0x2fc/0x1060 [ 543.938383][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 543.938411][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 543.938434][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 543.938470][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 543.938513][ T38] ? netdev_state_change+0x1bc/0x210 [ 543.938550][ T38] tun_chr_close+0x13f/0x1c0 [ 543.938577][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 543.938603][ T38] __fput+0x41a/0xa70 [ 543.938639][ T38] fput_close_sync+0x11f/0x240 [ 543.938667][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 543.938706][ T38] filp_close_sync+0x6e/0xa0 [ 543.938738][ T38] put_files_struct+0x233/0x3c0 [ 543.938775][ T38] do_exit+0x715/0x2340 [ 543.938803][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.938844][ T38] ? __pfx_do_exit+0x10/0x10 [ 543.938869][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.938910][ T38] ? rt_spin_unlock+0x159/0x200 [ 543.938942][ T38] do_group_exit+0x22d/0x2f0 [ 543.938967][ T38] ? rt_spin_unlock+0x165/0x200 [ 543.939000][ T38] get_signal+0x1216/0x12c0 [ 543.939058][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 543.939099][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.939166][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 543.939199][ T38] ? rcu_is_watching+0x16/0xb0 [ 543.939228][ T38] do_syscall_64+0x328/0x520 [ 543.939249][ T38] ? trace_irq_disable+0x3b/0x140 [ 543.939282][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.939307][ T38] ? clear_bhb_loop+0x70/0xc0 [ 543.939336][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.939361][ T38] RIP: 0033:0x7f9b237bfd8e [ 543.939382][ T38] RSP: 002b:00007fff2b152df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 543.939407][ T38] RAX: 0000000000000048 RBX: 00005555680f7500 RCX: 00007f9b237bfd8e [ 543.939423][ T38] RDX: 0000000000000048 RSI: 00007f9b245b4670 RDI: 0000000000000003 [ 543.939439][ T38] RBP: 0000000000000001 R08: 00007fff2b152e74 R09: 000000000000000c [ 543.939454][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 543.939469][ T38] R13: 0000000000000000 R14: 00007f9b245b4670 R15: 0000000000000000 [ 543.939504][ T38] [ 543.939582][ T38] [ 543.939582][ T38] Showing all locks held in the system: [ 543.939594][ T38] locks held by kworker/u8:0/12: 3, on CPU#1: [ 543.939612][ T38] #0: ffff8880326e9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 543.939681][ T38] #1: ffffc90000117c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 543.939745][ T38] #2: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 543.939801][ T38] locks held by rcuc/0/19: 4, on CPU#0: [ 543.939818][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 543.939882][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 543.939947][ T38] #2: ffffffff8f3c2020 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1700 [ 543.950899][ T1507] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 543.950997][ T1507] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.951317][ T1507] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 543.951390][ T1507] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.962697][ T1194] virtqueue callback for ffff8880298d3800 (ffffffff863462b0) [ 543.973703][ T3328] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 543.973829][ T3328] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.974171][ T3328] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 543.974244][ T3328] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.978878][ T9066] PM: Adding info for No Bus:sit0 [ 543.978971][ T9066] kobject: 'sit0' (ffff8880719408c0): kobject_uevent_env [ 543.979024][ T9066] kobject: 'sit0' (ffff8880719408c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 543.979193][ T9066] kobject: 'queues' (ffff88802adde890): kobject_add_internal: parent: 'sit0', set: '' [ 543.979438][ T9066] kobject: 'queues' (ffff88802adde890): kobject_uevent_env [ 543.979490][ T9066] kobject: 'queues' (ffff88802adde890): kobject_uevent_env: filter function caused the event to drop! [ 543.979702][ T9066] kobject: 'rx-0' (ffff88802d76f850): kobject_add_internal: parent: 'queues', set: 'queues' [ 543.985415][ T9066] kobject: 'rx-0' (ffff88802d76f850): kobject_uevent_env [ 543.985591][ T9066] kobject: 'rx-0' (ffff88802d76f850): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 543.986439][ T9066] kobject: 'tx-0' (ffff888042471020): kobject_add_internal: parent: 'queues', set: 'queues' [ 543.990725][ T1507] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 543.990807][ T1507] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.991099][ T1507] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 543.991168][ T1507] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 543.993800][ T9066] kobject: 'tx-0' (ffff888042471020): kobject_uevent_env [ 543.994002][ T9066] kobject: 'tx-0' (ffff888042471020): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 543.997270][ C1] No more buffers in queue [ 544.014567][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 544.014717][ C1] No more buffers in queue [ 544.023650][ T5574] eth0: xmit ffff88803d0599f0 42:01:0a:80:00:01 [ 544.023762][ T5574] Added buffer head 3 to ffff8880298d2e00 [ 544.023961][ T1195] virtqueue callback for ffff8880298d2e00 (ffffffff863463f0) [ 544.024531][ T1192] virtqueue callback for ffff8880298b7200 (ffffffff863462b0) [ 544.100122][ T149] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 544.100157][ T149] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.100496][ T149] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 544.100570][ T149] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.116521][ T5574] eth0: xmit ffff88806239a140 42:01:0a:80:00:01 [ 544.116621][ T5574] Added buffer head 16 to ffff8880298d2e00 [ 544.116786][ T1195] virtqueue callback for ffff8880298d2e00 (ffffffff863463f0) [ 544.149493][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 544.149734][ T38] locks held by rcuc/1/27: 6, on CPU#1: [ 544.149779][ T38] #0: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 544.149953][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 544.150541][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 544.150695][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 544.150852][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 544.150999][ T38] #5: ffff88801c7f0358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 544.151166][ T38] locks held by kworker/1:1/35: 3, last CPU#1: [ 544.151217][ T38] #0: ffff88813ff6b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.151390][ T38] #1: ffffc90000ac7c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.151887][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 544.152064][ T38] locks held by pr/ttyS0/37: 3, last CPU#0: [ 544.152126][ T38] #0: ffffffff8f29ba18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 544.152312][ T38] #1: ffffffff9b0bff58 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 544.152487][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.152661][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 544.152705][ T38] #0: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 544.152875][ T38] locks held by kworker/u8:5/149: 5, last CPU#1: [ 544.152920][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.153099][ T38] #1: ffffc9000418fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.153477][ T38] #2: ffff88803be52310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 544.153663][ T38] #3: ffff888061ef9120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 544.153816][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.153982][ T38] locks held by kworker/u8:6/690: 6, on CPU#1: [ 544.154027][ T38] #0: ffff88801bef0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.154530][ T38] #1: ffffc900058cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.154707][ T38] #2: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 544.155201][ T38] #3: ffff8880624a9160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 544.155377][ T38] #4: ffff88806251a310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 544.155499][ T38] #5: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.155686][ T38] locks held by kworker/u8:7/1021: 8, last CPU#0: [ 544.155731][ T38] #0: ffff8880336e6138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.155905][ T38] #1: ffffc90005b2fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.156082][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 544.156240][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 544.156394][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 544.156570][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 544.156649][ T38] #6: ffff88801c7f0358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 544.156710][ T38] #7: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.156773][ T38] locks held by kworker/u8:12/1507: 5, last CPU#1: [ 544.156790][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.156855][ T38] #1: ffffc90006b67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.156922][ T38] #2: ffff888022b3c310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 544.156981][ T38] #3: ffff888026adfd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 544.157037][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.157110][ T38] locks held by kworker/u8:14/3328: 6, last CPU#1: [ 544.157128][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.157193][ T38] #1: ffffc9000f97fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.157259][ T38] #2: ffff88803991a310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 544.157321][ T38] #3: ffff888062890120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 544.157377][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.157437][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 544.157499][ T38] locks held by kworker/u8:17/3434: 8, last CPU#1: [ 544.157517][ T38] #0: ffff8880202fe138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.157580][ T38] #1: ffffc9000f8cfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 544.157654][ T38] #2: ffff88801c6ae0e0 (&type->s_umount_key#44){.+.+}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 544.157722][ T38] #3: ffff8880b8534228 ((lock)#2){+.+.}-{3:3}, at: lru_add_drain+0x139/0x400 [ 544.157793][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.157853][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x540 [ 544.157918][ T38] #6: ffff88801c2a1270 (&lruvec->lru_lock){+.+.}-{3:3}, at: folio_lruvec_lock_irqsave+0x293/0x540 [ 544.157983][ T38] #7: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.158044][ T38] locks held by klogd/4943: 1, last CPU#1: [ 544.158062][ T38] #0: ffffffff8f3b4018 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4a8/0x610 [ 544.158132][ T38] locks held by getty/5342: 2, on CPU#1: [ 544.158149][ T38] #0: ffff8880369980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 544.158214][ T38] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 544.158274][ T38] locks held by syz-executor/5575: 4, last CPU#1: [ 544.158334][ T38] #0: ffff888040a044b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 544.158526][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 544.158695][ T38] #2: ffff88802acafad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3} [ 544.164232][ T1507] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 544.164330][ T1507] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.164686][ T1507] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 544.175729][ T38] , at: pte_offset_map_lock+0x13d/0x210 [ 544.175838][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 544.176065][ T38] locks held by syz.1.955/8715: 1, on CPU#0: [ 544.176127][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.176289][ T38] locks held by syz-executor/8729: 1, on CPU#1: [ 544.176333][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.176487][ T38] locks held by syz-executor/8742: 1, on CPU#1: [ 544.176536][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.176652][ T38] locks held by syz-executor/8748: 1, on CPU#1: [ 544.176704][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.176864][ T38] locks held by syz-executor/8772: 1, on CPU#1: [ 544.176908][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.177062][ T38] locks held by syz.0.972/8811: 1, on CPU#1: [ 544.177100][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.177195][ T38] locks held by syz-executor/8823: 1, on CPU#1: [ 544.177241][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.177398][ T38] locks held by syz-executor/8846: 1, on CPU#1: [ 544.177443][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.177604][ T38] locks held by syz-executor/8858: 1, on CPU#1: [ 544.177646][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.177807][ T38] locks held by syz-executor/8859: 1, on CPU#0: [ 544.177852][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.178032][ T38] locks held by syz-executor/8873: 1, on CPU#1: [ 544.178092][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.178238][ T38] locks held by syz-executor/8907: 1, on CPU#0: [ 544.184036][ T1507] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.192161][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.192404][ T38] locks held by syz-executor/8935: 1, on CPU#1: [ 544.192459][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.192578][ T38] locks held by syz-executor/8949: 1, on CPU#1: [ 544.192626][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.192856][ T38] locks held by syz-executor/8958: 1, on CPU#0: [ 544.192901][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.193048][ T38] locks held by syz-executor/8978: 1, on CPU#1: [ 544.193065][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.193235][ T38] locks held by syz-executor/9001: 1, on CPU#1: [ 544.193287][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 544.193445][ T38] locks held by syz-executor/9032: 2, on CPU#1: [ 544.193490][ T38] #0: ffffffff8ff353c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 544.193689][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 544.193849][ T38] locks held by syz-executor/9050: 2, on CPU#1: [ 544.193894][ T38] #0: ffffffff90d25930 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 544.194014][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 544.194214][ T38] locks held by syz-executor/9059: 2, on CPU#1: [ 544.201947][ T3328] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 544.202061][ T3328] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.202433][ T3328] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 544.202498][ T3328] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.209390][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 544.209502][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 544.209591][ T38] locks held by syz-executor/9066: 4, on CPU#1: [ 544.209647][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 544.209809][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 544.209952][ T38] #2: ffffffff8f50fb70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 544.210100][ T38] #3: ffff88801c7f0358 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xef/0x2a0 [ 544.210201][ T38] locks held by syz-executor/9100: 4, last CPU#1: [ 544.210252][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 544.210444][ T38] #1: ffffffff9051f660 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 544.210643][ T38] #2: ffffffff9051f8a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 544.210805][ T38] #3: ffff888038111208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 544.210981][ T38] [ 544.211002][ T38] ============================================= [ 544.211002][ T38] [ 544.211027][ T38] NMI backtrace for cpu 1 [ 544.211191][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 544.211217][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 544.211249][ T38] Call Trace: [ 544.211280][ T38] [ 544.211312][ T38] dump_stack_lvl+0xe8/0x150 [ 544.211413][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 544.211501][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.211578][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 544.211675][ T38] sys_info+0x135/0x170 [ 544.211742][ T38] watchdog+0xfd2/0x1030 [ 544.211853][ T38] ? watchdog+0x1c7/0x1030 [ 544.211971][ T38] kthread+0x38b/0x470 [ 544.212045][ T38] ? __pfx_watchdog+0x10/0x10 [ 544.212126][ T38] ? __pfx_kthread+0x10/0x10 [ 544.212199][ T38] ret_from_fork+0x514/0xb70 [ 544.212274][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 544.212340][ T38] ? __switch_to+0xc78/0x1410 [ 544.212432][ T38] ? __pfx_kthread+0x10/0x10 [ 544.212507][ T38] ret_from_fork_asm+0x1a/0x30 [ 544.212619][ T38] [ 544.212687][ T38] Sending NMI from CPU 1 to CPUs 0: [ 544.212746][ C0] NMI backtrace for cpu 0 [ 544.212761][ C0] CPU: 0 UID: 0 PID: 37 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 544.212782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 544.212794][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 544.212819][ C0] Code: e8 8e 1e 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f fb cf fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 544.212836][ C0] RSP: 0018:ffffc90000ae78b8 EFLAGS: 00000202 [ 544.212856][ C0] RAX: 1ffffffff3617f00 RBX: 00000000000003fd RCX: 0000000000000000 [ 544.212869][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 544.212881][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.212894][ C0] R10: dffffc0000000000 R11: ffffffff85643f70 R12: dffffc0000000000 [ 544.212908][ C0] R13: 0000000000000000 R14: ffffffff9b0bff80 R15: 0000000000000000 [ 544.213103][ C0] FS: 0000000000000000(0000) GS:ffff8881247ad000(0000) knlGS:0000000000000000 [ 544.213119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.213132][ C0] CR2: 00007f5df0a73585 CR3: 0000000058af4000 CR4: 00000000003526f0 [ 544.213149][ C0] Call Trace: [ 544.213156][ C0] [ 544.213165][ C0] wait_for_lsr+0x190/0x300 [ 544.213188][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 544.213219][ C0] serial8250_console_write+0xaa2/0x1220 [ 544.213244][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 544.213273][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 544.213311][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 544.213343][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 544.213384][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 544.213415][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 544.213442][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 544.213473][ C0] ? __kthread_parkme+0x71/0x1f0 [ 544.213502][ C0] ? __kthread_parkme+0x199/0x1f0 [ 544.213534][ C0] kthread+0x38b/0x470 [ 544.213553][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 544.213579][ C0] ? __pfx_kthread+0x10/0x10 [ 544.213599][ C0] ret_from_fork+0x514/0xb70 [ 544.213620][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 544.213639][ C0] ? __switch_to+0xc78/0x1410 [ 544.213667][ C0] ? __pfx_kthread+0x10/0x10 [ 544.213687][ C0] ret_from_fork_asm+0x1a/0x30 [ 544.213714][ C0] [ 544.222156][ T149] bond0: (slave bond_slave_0): bond_arp_send_all: target 192.168.1.12 [ 544.222189][ T149] bond0: (slave bond_slave_0): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.222311][ T149] bond0: (slave bond_slave_1): bond_arp_send_all: target 192.168.1.12 [ 544.222330][ T149] bond0: (slave bond_slave_1): arp 1 on slave: dst 192.168.1.12 src 0.0.0.0 [ 544.225613][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 544.228223][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 544.230965][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 544.233654][ T38] Call Trace: [ 547.280751][ T38] [ 547.283733][ T38] vpanic+0x56d/0xa60 [ 547.287760][ T38] ? __pfx___schedule+0x10/0x10 [ 547.292683][ T38] ? __pfx_vpanic+0x10/0x10 [ 547.297249][ T38] panic+0xc5/0xd0 [ 547.301024][ T38] ? __pfx_panic+0x10/0x10 [ 547.305483][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 547.311035][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 547.316463][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 547.322698][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 547.328920][ T38] watchdog+0x102b/0x1030 [ 547.333320][ T38] ? watchdog+0x1c7/0x1030 [ 547.337798][ T38] kthread+0x38b/0x470 [ 547.341921][ T38] ? __pfx_watchdog+0x10/0x10 [ 547.346647][ T38] ? __pfx_kthread+0x10/0x10 [ 547.351337][ T38] ret_from_fork+0x514/0xb70 [ 547.355982][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 547.361139][ T38] ? __switch_to+0xc78/0x1410 [ 547.365879][ T38] ? __pfx_kthread+0x10/0x10 [ 547.370527][ T38] ret_from_fork_asm+0x1a/0x30 [ 547.375354][ T38] [ 547.379508][ T38] Kernel Offset: disabled [ 547.383867][ T38] Rebooting in 86400 seconds..