last executing test programs: 30.170459385s ago: executing program 1 (id=289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x200000000000000) 26.224793496s ago: executing program 0 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800005507b1057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 25.021541295s ago: executing program 1 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 22.260439047s ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0xbffffffe, r0, 0xffffffff00000000}, 0x38) 21.219849925s ago: executing program 1 (id=293): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0xc9, 0x4) 17.668284493s ago: executing program 0 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000102030000000000000000360a0000023c0002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004000) 16.7558223s ago: executing program 1 (id=295): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13.238188747s ago: executing program 0 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800005507b1057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 12.286960865s ago: executing program 1 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 5.755419715s ago: executing program 0 (id=298): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 3.771440231s ago: executing program 1 (id=299): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x19fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=300): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0xa43c}, {r0, 0x4221}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r11, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000000000000000000000000000000000000009f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20"], 0x268}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r13, 0x952de000) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2c, 0x9, {0x7}, [@NDTA_NAME={0x7, 0x1, '{@\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x4, 0x0, 0x4}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x9}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14527' (ED25519) to the list of known hosts. syzkaller login: [ 546.180356][ T3217] cgroup: Unknown subsys name 'net' [ 547.062791][ T3217] cgroup: Unknown subsys name 'cpuset' [ 547.273178][ T3217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 636.675272][ T3217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 819.337795][ T3224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.709173][ T3224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.269607][ T3226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.484455][ T3226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.172727][ T3224] hsr_slave_0: entered promiscuous mode [ 834.227296][ T3224] hsr_slave_1: entered promiscuous mode [ 834.536392][ T3226] hsr_slave_0: entered promiscuous mode [ 834.577194][ T3226] hsr_slave_1: entered promiscuous mode [ 834.606585][ T3226] debugfs: 'hsr0' already exists in 'hsr' [ 834.609225][ T3226] Cannot create hsr debugfs directory [ 845.675711][ T3226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.807613][ T3226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.891430][ T3226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.123156][ T3226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.200580][ T3226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 846.370778][ T3226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.538352][ T3226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 846.681178][ T3226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.321334][ T3224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 849.450745][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.486338][ T3224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.659079][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.836218][ T3224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.989929][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.129269][ T3224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.367662][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.272056][ T3226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.012120][ T3224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.411104][ T3226] veth0_vlan: entered promiscuous mode [ 917.735073][ T3226] veth1_vlan: entered promiscuous mode [ 920.191975][ T3226] veth0_macvtap: entered promiscuous mode [ 921.480325][ T3226] veth1_macvtap: entered promiscuous mode [ 925.189486][ T3224] veth0_vlan: entered promiscuous mode [ 927.091622][ T26] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.176449][ T26] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.256402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.261677][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.934707][ T3224] veth1_vlan: entered promiscuous mode [ 936.090296][ T3224] veth0_macvtap: entered promiscuous mode [ 937.155804][ T3224] veth1_macvtap: entered promiscuous mode [ 940.861398][ T3226] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 941.898516][ T1383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.125857][ T1383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.357694][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.358534][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.562864][ T3850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 970.881685][ T820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 971.557264][ T820] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 971.558779][ T820] usb 1-1: too many configurations: 11, using maximum allowed: 8 [ 975.221720][ T820] usb 1-1: string descriptor 0 read error: -71 [ 975.245183][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.261706][ T820] usb 1-1: can't set config #1, error -71 [ 976.579367][ T820] usb 1-1: USB disconnect, device number 2 [ 989.398852][ T3873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 998.008808][ T3880] smc: net device lo applied user defined pnetid SYZ2 [ 998.062053][ T3880] smc: net device lo erased user defined pnetid SYZ2 [ 1005.680990][ T3886] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 1041.373161][ T3924] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 1117.450306][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 1121.578136][ T3221] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1121.867769][ T3221] usb 2-1: Using ep0 maxpacket: 32 [ 1122.228860][ T3221] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1122.422326][ T3221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.425629][ T3221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.429160][ T3221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.669447][ T3221] usb 2-1: config 0 descriptor?? [ 1123.491295][ T3221] hub 2-1:0.0: USB hub found [ 1125.792766][ T3221] hub 2-1:0.0: 1 port detected [ 1137.510443][ T3866] usb 2-1: USB disconnect, device number 2 [ 1190.499798][ T4056] macsec1: entered promiscuous mode [ 1190.558494][ T4056] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1190.756068][ T4056] macsec1: entered allmulticast mode [ 1190.756839][ T4056] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1191.009740][ T4056] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1191.379795][ T4056] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1196.097601][ T3220] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1198.211422][ T4067] ip_tables: iptables: counters copy to user failed while replacing table [ 1280.008818][ T4127] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 1281.823160][ T4142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.72'. [ 1284.967051][ T4129] bond1: (slave geneve2): making interface the new active one [ 1285.128035][ T4129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1285.159471][ T1383] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1285.170260][ T1383] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1285.181449][ T1383] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1285.187070][ T1383] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1290.890370][ T4127] Zero length message leads to an empty skb [ 1364.090194][ T4238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 1379.622643][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 1379.819763][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 1418.690143][ C0] vcan0: j1939_tp_rxtimer: 0xffffaf801a330800: rx timeout, send abort [ 1418.705946][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffffaf801a330800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1492.654196][ T4352] xt_TCPMSS: Only works on TCP SYN packets [ 1496.585603][ T4354] ip6gretap1: entered allmulticast mode [ 1559.709069][ T4423] xt_TCPMSS: Only works on TCP SYN packets [ 1561.960143][ T4427] ip6gretap1: entered allmulticast mode [ 1569.089820][ T4438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 1575.860996][ T4442] xt_TCPMSS: Only works on TCP SYN packets [ 1580.451609][ T4444] ip6gretap1: entered allmulticast mode [ 1598.587268][ T4460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 1606.027824][ T4464] xt_TCPMSS: Only works on TCP SYN packets [ 1608.770800][ T4467] ip6gretap1: entered allmulticast mode [ 1622.733955][ T4482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 1648.841362][ T4500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 1657.296380][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 1657.995939][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 1688.766734][ T4536] ip_tables: iptables: counters copy to user failed while replacing table [ 1693.468895][ T4540] xt_TCPMSS: Only works on TCP SYN packets [ 1702.225813][ T4545] ip6gretap1: entered allmulticast mode [ 1724.319576][ T4564] ip_tables: iptables: counters copy to user failed while replacing table [ 1728.142935][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 1728.150282][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 1728.185207][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 1728.185801][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 1728.373125][ T4568] xt_TCPMSS: Only works on TCP SYN packets [ 1730.141881][ T4571] ip6gretap1: entered allmulticast mode [ 1750.528975][ T4592] ip_tables: iptables: counters copy to user failed while replacing table [ 1753.768438][ T4595] xt_TCPMSS: Only works on TCP SYN packets [ 1755.209809][ T4599] ip6gretap1: entered allmulticast mode [ 1782.586560][ T4622] ip_tables: iptables: counters copy to user failed while replacing table [ 1789.525121][ T4627] xt_TCPMSS: Only works on TCP SYN packets [ 1791.231587][ T4629] ip6gretap1: entered allmulticast mode [ 1812.441777][ T4653] ip_tables: iptables: counters copy to user failed while replacing table [ 1827.570964][ T4664] xt_TCPMSS: Only works on TCP SYN packets [ 1830.546155][ T4667] ip6gretap1: entered allmulticast mode [ 1853.625652][ T4682] ip_tables: iptables: counters copy to user failed while replacing table [ 1879.004476][ T4696] ip_tables: iptables: counters copy to user failed while replacing table [ 1901.172744][ T4707] ip_tables: iptables: counters copy to user failed while replacing table [ 1917.605254][ T4720] ip_tables: iptables: counters copy to user failed while replacing table [ 1922.034609][ T4725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 1931.317414][ T4733] ip_tables: iptables: counters copy to user failed while replacing table [ 1936.282307][ T4737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 1955.025413][ T4749] ip_tables: iptables: counters copy to user failed while replacing table [ 1961.241386][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 1964.265006][ T4755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 1974.320827][ T4764] ip_tables: iptables: counters copy to user failed while replacing table [ 1979.769214][ T4770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 1980.023090][ T4768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 1992.791613][ T4780] ip_tables: iptables: counters copy to user failed while replacing table [ 1998.537397][ T4784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'. [ 2019.871900][ T4795] ip_tables: iptables: counters copy to user failed while replacing table [ 2029.104959][ T4799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'. [ 2044.602855][ T4809] ip_tables: iptables: counters copy to user failed while replacing table [ 2067.410813][ T4824] xt_TCPMSS: Only works on TCP SYN packets [ 2068.881758][ T4827] ip6gretap1: entered allmulticast mode [ 2114.538616][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 2114.539402][ T4876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 2139.878638][ T3842] ------------[ cut here ]------------ [ 2139.881782][ T3842] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2139.938907][ C0] WARNING: [] drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x370/0x520, CPU#0: kworker/0:4/3842 [ 2139.948510][ C0] Modules linked in: [ 2139.951999][ C0] CPU: 0 UID: 0 PID: 3842 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT [ 2139.955921][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2139.959129][ C0] Workqueue: events drm_fb_helper_damage_work [ 2139.963019][ C0] epc : drm_crtc_wait_one_vblank+0x370/0x520 [ 2139.966257][ C0] ra : drm_crtc_wait_one_vblank+0x370/0x520 [ 2139.969334][ C0] epc : ffffffff82227e00 ra : ffffffff82227e00 sp : ffff8f800a667790 [ 2139.972811][ C0] gp : ffffffff8a6d9c00 tp : ffffaf801b430000 t0 : ffffaf805cbbd4d0 [ 2139.976504][ C0] t1 : ffffffff8007e9b2 t2 : ffffaf805cbbd8a8 s0 : ffff8f800a6678b0 [ 2139.980117][ C0] s1 : ffffaf801a739000 a0 : ffffaf801b430008 a1 : ffffffff870279e0 [ 2139.983764][ C0] a2 : 0000000000000002 a3 : ffffffff8015b910 a4 : 0000000000000000 [ 2139.987350][ C0] a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000041b58ab3 [ 2139.990749][ C0] s2 : ffffffff873d0860 s3 : ffffaf801a8aa000 s4 : 1ffff1f0014ccef4 [ 2139.994281][ C0] s5 : 0000000000000000 s6 : ffffffff872b2780 s7 : 000000000001e81f [ 2139.997810][ C0] s8 : ffff8f800a6677d0 s9 : ffffaf8014b8a048 s10: ffffaf801a8aa398 [ 2140.001342][ C0] s11: 0000000000000013 t3 : ffffffff8828dcd0 t4 : fffff5ef0b97a0a1 [ 2140.004749][ C0] t5 : fffff5ef0b97a0a2 t6 : 0000000000000000 ssp : 0000000000000000 [ 2140.008364][ C0] status: 0000000200000120 badaddr: ffffffff82227e00 cause: 0000000000000003 [ 2140.012227][ C0] [] drm_crtc_wait_one_vblank+0x370/0x520 [ 2140.016034][ C0] [] drm_client_modeset_wait_for_vblank+0xe8/0x114 [ 2140.019915][ C0] [] drm_fb_helper_damage_work+0x28e/0x9c2 [ 2140.023493][ C0] [] process_one_work+0x9c6/0x22b2 [ 2140.026805][ C0] [] worker_thread+0x532/0xcaa [ 2140.029897][ C0] [] kthread+0x312/0x438 [ 2140.032932][ C0] [] ret_from_fork_kernel+0x94/0xe76 [ 2140.036177][ C0] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2140.041077][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2140.044885][ C0] CPU: 0 UID: 0 PID: 3842 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT [ 2140.048748][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2140.051276][ C0] Workqueue: events drm_fb_helper_damage_work [ 2140.054642][ C0] Call Trace: [ 2140.056410][ C0] [] dump_backtrace+0x2e/0x3c [ 2140.059590][ C0] [] show_stack+0x30/0x3c [ 2140.062490][ C0] [] dump_stack_lvl+0x114/0x1aa [ 2140.065490][ C0] [] dump_stack+0x1c/0x24 [ 2140.068358][ C0] [] vpanic+0x32e/0x762 [ 2140.071093][ C0] [] trace_suspend_resume+0x0/0x3f6 [ 2140.074140][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 2140.077434][ C0] [] __warn+0x218/0x61a [ 2140.080438][ C0] [] __report_bug+0x166/0x302 [ 2140.083645][ C0] [] report_bug+0xd8/0x28c [ 2140.086822][ C0] [] handle_break+0x13a/0x30c [ 2140.089931][ C0] [] do_trap_break+0x22e/0x458 [ 2140.093114][ C0] [] handle_exception+0x168/0x174 [ 2140.096446][ C0] [] drm_crtc_wait_one_vblank+0x370/0x520 [ 2140.099821][ C0] [] drm_client_modeset_wait_for_vblank+0xe8/0x114 [ 2140.103555][ C0] [] drm_fb_helper_damage_work+0x28e/0x9c2 [ 2140.107280][ C0] [] process_one_work+0x9c6/0x22b2 [ 2140.110632][ C0] [] worker_thread+0x532/0xcaa [ 2140.113777][ C0] [] kthread+0x312/0x438 [ 2140.116946][ C0] [] ret_from_fork_kernel+0x94/0xe76 [ 2140.120229][ C0] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2140.124116][ C0] SMP: stopping secondary CPUs [ 2140.411900][ C0] Rebooting in 86400 seconds..