last executing test programs: 21.052655319s ago: executing program 3 (id=203): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7fffffff, 0x80000100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000200)={0xea, "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"}) 18.015490809s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="240000003a0007010000fbffffffffff027c0000040000000c000180"], 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 12.153350182s ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) 11.971393947s ago: executing program 1 (id=215): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "042817c644f84e53"}}}}, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9.053002433s ago: executing program 1 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000040), 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 8.987618935s ago: executing program 0 (id=219): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) set_mempolicy(0x3, &(0x7f0000000100)=0xfffffffffffffff7, 0x9) r5 = socket(0x10, 0x80002, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000080)={0x0, 0xfff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.986942621s ago: executing program 1 (id=220): mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.894760363s ago: executing program 2 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24048f0d, 0x0, 0x0) 6.726249794s ago: executing program 2 (id=222): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) listen(0xffffffffffffffff, 0x5) ioctl$SIOCSIFHWADDR(r3, 0x8923, 0x0) 6.288006135s ago: executing program 1 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x3b38, 0x7, 0x8000000, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.287234125s ago: executing program 3 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) chdir(&(0x7f0000000140)='./file0\x00') 5.511669486s ago: executing program 2 (id=225): syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x309100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.223561463s ago: executing program 2 (id=226): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa216ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x4c060) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 4.422059964s ago: executing program 0 (id=227): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001040)=@assoc_value={r5}, 0x8) 3.299103263s ago: executing program 0 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() pipe2(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.298941494s ago: executing program 3 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000040), 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 3.221386225s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc50e}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x33}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 3.183390776s ago: executing program 3 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xda) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1", 0x1c}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) set_mempolicy(0x4000, 0x0, 0x400000000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x60, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2.362973638s ago: executing program 2 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 2.300168289s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.455678531s ago: executing program 1 (id=234): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_RMID(r2, 0x0) 1.348949454s ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.320084845s ago: executing program 0 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xebf1}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="181a7c00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 0s ago: executing program 0 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 65.278133][ T5756] cgroup: Unknown subsys name 'net' [ 65.407347][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.784746][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.227474][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.236330][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.244564][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.261992][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.269669][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.277009][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.277593][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.293058][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.298429][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.301169][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.309401][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.314679][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.321739][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.328527][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.341808][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.351235][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.358860][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.366559][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.379692][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.387903][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.395523][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.405622][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.424791][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.434992][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.822823][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 68.855367][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.940345][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 68.953646][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 69.006331][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.014091][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.021630][ T5771] bridge_slave_0: entered allmulticast mode [ 69.028353][ T5771] bridge_slave_0: entered promiscuous mode [ 69.066896][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.074309][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.083430][ T5771] bridge_slave_1: entered allmulticast mode [ 69.090081][ T5771] bridge_slave_1: entered promiscuous mode [ 69.143389][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.150549][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.157921][ T5769] bridge_slave_0: entered allmulticast mode [ 69.164550][ T5769] bridge_slave_0: entered promiscuous mode [ 69.183850][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.195961][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.205239][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.212795][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.219892][ T5769] bridge_slave_1: entered allmulticast mode [ 69.226687][ T5769] bridge_slave_1: entered promiscuous mode [ 69.295725][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.303938][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.311158][ T5768] bridge_slave_0: entered allmulticast mode [ 69.318051][ T5768] bridge_slave_0: entered promiscuous mode [ 69.338776][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.361105][ T5771] team0: Port device team_slave_0 added [ 69.367696][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.375204][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.382381][ T5768] bridge_slave_1: entered allmulticast mode [ 69.389000][ T5768] bridge_slave_1: entered promiscuous mode [ 69.397886][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.407242][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.415794][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.423023][ T5770] bridge_slave_0: entered allmulticast mode [ 69.429965][ T5770] bridge_slave_0: entered promiscuous mode [ 69.439186][ T5771] team0: Port device team_slave_1 added [ 69.473465][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.482693][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.489780][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.497772][ T5770] bridge_slave_1: entered allmulticast mode [ 69.504642][ T5770] bridge_slave_1: entered promiscuous mode [ 69.541922][ T5769] team0: Port device team_slave_0 added [ 69.549630][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.568632][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.575958][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.604491][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.617134][ T5769] team0: Port device team_slave_1 added [ 69.653796][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.660751][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.686754][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.716604][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.732537][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.739486][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.765639][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.781166][ T5768] team0: Port device team_slave_0 added [ 69.789311][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.808056][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.815366][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.841685][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.859722][ T5768] team0: Port device team_slave_1 added [ 69.887055][ T5770] team0: Port device team_slave_0 added [ 69.895548][ T5770] team0: Port device team_slave_1 added [ 69.967957][ T5769] hsr_slave_0: entered promiscuous mode [ 69.974186][ T5769] hsr_slave_1: entered promiscuous mode [ 69.993062][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.000008][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.026042][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.037992][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.047533][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.073823][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.089850][ T5771] hsr_slave_0: entered promiscuous mode [ 70.098607][ T5771] hsr_slave_1: entered promiscuous mode [ 70.105126][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.113434][ T5771] Cannot create hsr debugfs directory [ 70.127304][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.134570][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.160605][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.174422][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.181470][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207649][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.378084][ T5768] hsr_slave_0: entered promiscuous mode [ 70.383957][ T51] Bluetooth: hci1: command tx timeout [ 70.389867][ T5768] hsr_slave_1: entered promiscuous mode [ 70.396089][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.403898][ T5768] Cannot create hsr debugfs directory [ 70.430385][ T5770] hsr_slave_0: entered promiscuous mode [ 70.437020][ T5770] hsr_slave_1: entered promiscuous mode [ 70.443392][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.450931][ T5770] Cannot create hsr debugfs directory [ 70.461786][ T5084] Bluetooth: hci0: command tx timeout [ 70.467359][ T51] Bluetooth: hci3: command tx timeout [ 70.541372][ T51] Bluetooth: hci2: command tx timeout [ 70.718726][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.733570][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.744187][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.759395][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.817623][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.827746][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.839087][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.848372][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.949882][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.959760][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.970233][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.007152][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.063091][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.073162][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.093313][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.117809][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.151712][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.167102][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.208900][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.236381][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.257318][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.264618][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.290365][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.297458][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.319845][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.326999][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.336288][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.343391][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.372141][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.426846][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440630][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.442760][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.470977][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.527994][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.535183][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.565574][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.572826][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.590328][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.636883][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.644049][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.685200][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.692350][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.824641][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.965220][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.013308][ T5771] veth0_vlan: entered promiscuous mode [ 72.062873][ T5771] veth1_vlan: entered promiscuous mode [ 72.166329][ T5769] veth0_vlan: entered promiscuous mode [ 72.185299][ T5771] veth0_macvtap: entered promiscuous mode [ 72.202403][ T5771] veth1_macvtap: entered promiscuous mode [ 72.217106][ T5769] veth1_vlan: entered promiscuous mode [ 72.254250][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.281024][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.296828][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.309998][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.321622][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.330463][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.340445][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.349236][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.369400][ T5769] veth0_macvtap: entered promiscuous mode [ 72.390650][ T5769] veth1_macvtap: entered promiscuous mode [ 72.434282][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.445000][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.458794][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.462383][ T51] Bluetooth: hci1: command tx timeout [ 72.470127][ T5768] veth0_vlan: entered promiscuous mode [ 72.497753][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.508395][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.519673][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.534184][ T5768] veth1_vlan: entered promiscuous mode [ 72.542247][ T51] Bluetooth: hci3: command tx timeout [ 72.547676][ T51] Bluetooth: hci0: command tx timeout [ 72.599865][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.615989][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.621723][ T51] Bluetooth: hci2: command tx timeout [ 72.627140][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.639356][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.664827][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675856][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.699801][ T5770] veth0_vlan: entered promiscuous mode [ 72.733932][ T5770] veth1_vlan: entered promiscuous mode [ 72.749157][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.758201][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.783450][ T5768] veth0_macvtap: entered promiscuous mode [ 72.819131][ T5768] veth1_macvtap: entered promiscuous mode [ 72.885832][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.898552][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.908657][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.920074][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.932038][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.959148][ T5770] veth0_macvtap: entered promiscuous mode [ 72.980946][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.996748][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.007273][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.018217][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.030570][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.040384][ T5770] veth1_macvtap: entered promiscuous mode [ 73.058510][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.090293][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.130647][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.146626][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.156817][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.170165][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.245294][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.246427][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.264592][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.265337][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.275512][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.293214][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.336750][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.460561][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.566632][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.937146][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.949299][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.965164][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.975908][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.988155][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.002586][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.033421][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.073899][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.084579][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095100][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.107614][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.286035][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.331020][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.396898][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.429512][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.446776][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.463527][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.518777][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.544627][ T51] Bluetooth: hci1: command tx timeout [ 74.550109][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.622529][ T51] Bluetooth: hci0: command tx timeout [ 74.623819][ T5084] Bluetooth: hci3: command tx timeout [ 74.701334][ T5084] Bluetooth: hci2: command tx timeout [ 75.439555][ T5859] tipc: Started in network mode [ 75.459446][ T5859] tipc: Node identity 7f000001, cluster identity 4711 [ 75.501242][ T5859] tipc: Enabled bearer , priority 10 [ 75.559875][ T5859] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8'. [ 75.643036][ T5859] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 75.691073][ T5859] tipc: Enabled bearer , priority 10 [ 76.621744][ T5084] Bluetooth: hci1: command tx timeout [ 76.711341][ T5084] Bluetooth: hci0: command tx timeout [ 76.718233][ T5084] Bluetooth: hci3: command tx timeout [ 76.725226][ T23] tipc: Node number set to 2130706433 [ 76.781847][ T51] Bluetooth: hci2: command tx timeout [ 76.846088][ T5874] syz.1.11[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.002548][ T5874] loop1: detected capacity change from 0 to 64 [ 78.631702][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.992084][ T5892] Zero length message leads to an empty skb [ 79.994291][ T5905] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 80.301083][ T5909] loop3: detected capacity change from 0 to 256 [ 82.005371][ T5915] loop3: detected capacity change from 0 to 512 [ 82.063314][ T5917] loop0: detected capacity change from 0 to 1024 [ 82.073412][ T5915] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.098274][ T5917] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 82.128512][ T5915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.141375][ T5917] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.234193][ T5915] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.21: invalid indirect mapped block 9 (level 0) [ 82.316084][ T5915] EXT4-fs (loop3): 1 truncate cleaned up [ 82.328456][ T5915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.626888][ T5922] netlink: 'syz.1.23': attribute type 13 has an invalid length. [ 82.650344][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.726958][ T5924] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 83.051291][ T5861] syz.2.3 (5861): drop_caches: 1 [ 83.051381][ T5856] syz.2.3 (5856): drop_caches: 1 [ 83.115605][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.224500][ T5917] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.0.22: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 83.663752][ T5933] NILFS (nullb0): couldn't find nilfs on the device [ 84.253130][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.471514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.726929][ T1208] cfg80211: failed to load regulatory.db [ 87.817797][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 87.850228][ T5964] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.047677][ T5966] process 'syz.0.37' launched './file1' with NULL argv: empty string added [ 88.553184][ T5979] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 88.575955][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.577094][ T5979] ref_ctr increment failed for inode: 0x4c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078ab0980 [ 88.723625][ T5989] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 88.744151][ T5989] ref_ctr decrement failed for inode: 0x4c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078ab0980 [ 89.805406][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 89.841368][ T27] audit: type=1800 audit(1786056425.558:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.35" name="bus" dev="ramfs" ino=7847 res=0 errno=0 [ 92.137258][ T6017] comedi comedi2: board detection failed [ 92.591525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 93.064306][ T6020] loop2: detected capacity change from 0 to 1024 [ 93.095677][ T5807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.232800][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.254894][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.299452][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.317342][ T6022] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.321312][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.341897][ T6022] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.351282][ T5807] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 93.370228][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.377644][ T6021] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.397814][ T5807] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 93.418367][ T6021] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.431525][ T5807] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 93.454530][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.491437][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.531348][ T6021] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.538812][ T6021] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.577247][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.589599][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.614446][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.623922][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.640542][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.650704][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.689962][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.709104][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.790178][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.797792][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.830869][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.209192][ T6020] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.649218][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 94.770466][ T6032] syzkaller0: entered promiscuous mode [ 94.776340][ T6032] syzkaller0: entered allmulticast mode [ 94.790807][ T6032] tipc: Started in network mode [ 94.796197][ T6032] tipc: Node identity 3296081bb9fe, cluster identity 4711 [ 94.812052][ T6032] tipc: Enabled bearer , priority 0 [ 94.857951][ T6030] tipc: Resetting bearer [ 94.931002][ T6030] tipc: Disabling bearer [ 95.660592][ T789] usb 4-1: USB disconnect, device number 2 [ 95.712432][ T789] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 95.772261][ T789] spcp8x5 4-1:1.0: device disconnected [ 95.892919][ T6039] syzkaller0: entered promiscuous mode [ 95.898422][ T6039] syzkaller0: entered allmulticast mode [ 97.843519][ T6057] syzkaller0: entered promiscuous mode [ 97.849028][ T6057] syzkaller0: entered allmulticast mode [ 99.579940][ T6076] loop1: detected capacity change from 0 to 256 [ 99.593650][ T6076] ======================================================= [ 99.593650][ T6076] WARNING: The mand mount option has been deprecated and [ 99.593650][ T6076] and is ignored by this kernel. Remove the mand [ 99.593650][ T6076] option from the mount to silence this warning. [ 99.593650][ T6076] ======================================================= [ 99.723647][ T6076] FAT-fs (loop1): Directory bread(block 64) failed [ 99.730541][ T6076] FAT-fs (loop1): Directory bread(block 65) failed [ 99.737604][ T6076] FAT-fs (loop1): Directory bread(block 66) failed [ 99.744371][ T6076] FAT-fs (loop1): Directory bread(block 67) failed [ 99.751343][ T6076] FAT-fs (loop1): Directory bread(block 68) failed [ 99.757960][ T6076] FAT-fs (loop1): Directory bread(block 69) failed [ 99.765446][ T6076] FAT-fs (loop1): Directory bread(block 70) failed [ 99.772176][ T6076] FAT-fs (loop1): Directory bread(block 71) failed [ 99.779104][ T6076] FAT-fs (loop1): Directory bread(block 72) failed [ 99.785753][ T6076] FAT-fs (loop1): Directory bread(block 73) failed [ 99.829205][ T6076] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.434534][ T6084] loop3: detected capacity change from 0 to 128 [ 101.526019][ T6084] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.639053][ T6084] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.069682][ T6081] loop1: detected capacity change from 0 to 32768 [ 102.089476][ T6097] loop0: detected capacity change from 0 to 512 [ 102.100397][ T6097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.151097][ T6081] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 102.166288][ T6097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.199831][ T6097] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.306145][ T27] audit: type=1800 audit(1786056438.048:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.72" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 102.347453][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.447825][ T6081] XFS (loop1): Ending clean mount [ 102.849423][ T5768] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 103.772878][ T6118] syzkaller0: entered promiscuous mode [ 103.778388][ T6118] syzkaller0: entered allmulticast mode [ 104.087686][ T6122] loop1: detected capacity change from 0 to 2048 [ 104.440611][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.114008][ T6130] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 105.177266][ T6130] bond1 (unregistering): Released all slaves [ 105.326673][ T6139] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 106.189711][ T6144] Bluetooth: MGMT ver 1.22 [ 106.469018][ T6147] syzkaller0: entered promiscuous mode [ 106.491281][ T6147] syzkaller0: entered allmulticast mode [ 106.501528][ T2911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.868330][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.001629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.049116][ T6147] tipc: Enabled bearer , priority 0 [ 107.141259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.201856][ T6146] tipc: Resetting bearer [ 107.292333][ T6146] tipc: Disabling bearer [ 108.869332][ T6179] SET target dimension over the limit! [ 109.212536][ T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.412989][ T6181] syzkaller0: entered promiscuous mode [ 109.418498][ T6181] syzkaller0: entered allmulticast mode [ 109.609595][ T789] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 109.628846][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.637123][ T6185] syzkaller0: entered promiscuous mode [ 109.641223][ T789] usb 4-1: Product: syz [ 109.651221][ T789] usb 4-1: Manufacturer: syz [ 109.651979][ T6185] syzkaller0: entered allmulticast mode [ 109.655819][ T789] usb 4-1: SerialNumber: syz [ 111.499952][ T789] rtl8150 4-1:1.0: couldn't reset the device [ 111.516844][ T789] rtl8150: probe of 4-1:1.0 failed with error -5 [ 111.773272][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.781903][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.156624][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.191462][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.447304][ T6165] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.457377][ T6165] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.466677][ T6165] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.475769][ T6165] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.585864][ T5827] usb 4-1: USB disconnect, device number 3 [ 112.594765][ T6165] syz.3.89 (6165) used greatest stack depth: 20840 bytes left [ 112.652869][ T6199] tipc: Enabling of bearer rejected, failed to enable media [ 112.674771][ T6209] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 112.684494][ T6209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.719348][ T6211] veth3: entered allmulticast mode [ 113.001442][ T6228] syzkaller0: entered promiscuous mode [ 113.006959][ T6228] syzkaller0: entered allmulticast mode [ 114.471678][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 116.261171][ C0] sched: RT throttling activated [ 118.298053][ T6258] kvm_intel: kvm [6256]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf7ff [ 118.599600][ T6271] xt_l2tp: invalid flags combination: 0 [ 118.618960][ T6273] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 118.760783][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.878502][ T6277] bond1: (slave syz_tun): making interface the new active one [ 118.889592][ T6277] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 118.908987][ T6280] bond1: entered promiscuous mode [ 118.919830][ T6280] syz_tun: entered promiscuous mode [ 118.931422][ T6280] bond1: entered allmulticast mode [ 118.951019][ T6280] syz_tun: entered allmulticast mode [ 121.692129][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.701033][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.710447][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.719373][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.728666][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.737600][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.746945][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.755845][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.765204][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.774102][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 123.311368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.507485][ T6323] loop2: detected capacity change from 0 to 512 [ 123.592139][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.614138][ T6323] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.685338][ T6323] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 123.699414][ T6323] xt_hashlimit: max too large, truncated to 1048576 [ 123.934510][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.765034][ T6335] tipc: Enabled bearer , priority 0 [ 124.773650][ T6335] syzkaller0: entered promiscuous mode [ 124.779228][ T6335] syzkaller0: entered allmulticast mode [ 125.223288][ T6335] tipc: Resetting bearer [ 125.368393][ T6334] tipc: Resetting bearer [ 125.594810][ T6334] tipc: Disabling bearer [ 126.340637][ T6350] loop1: detected capacity change from 0 to 256 [ 126.439502][ T6350] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.450804][ T6350] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 126.516908][ T6350] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.535200][ T6350] exFAT-fs (loop1): failed to load alloc-bitmap [ 126.541951][ T6350] exFAT-fs (loop1): failed to recognize exfat type [ 127.101811][ T6339] veth3: entered allmulticast mode [ 127.134968][ T6339] bond1: (slave veth3): Enslaving as an active interface with an up link [ 127.264673][ T6356] loop0: detected capacity change from 0 to 1024 [ 128.431311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.848598][ T6356] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 128.879284][ T6356] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.135: lblock 2 mapped to illegal pblock 2 (length 1) [ 128.898858][ T6356] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 128.911320][ T6356] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.135: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.344443][ T6356] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 129.702069][ T6356] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.135: Failed to acquire dquot type 0 [ 129.785055][ T6356] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 129.887876][ T6356] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.135: mark_inode_dirty error [ 129.947013][ T6356] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.957966][ T6356] EXT4-fs (loop0): 1 orphan inode deleted [ 129.971074][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.987508][ T72] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.160619][ T72] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 130.204937][ T6375] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.213438][ T72] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 130.249869][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.260766][ T5769] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.278183][ T6369] kvm: pic: non byte read [ 130.286053][ T6369] kvm: pic: level sensitive irq not supported [ 130.286215][ T6369] kvm: pic: non byte read [ 130.301403][ T6369] kvm: pic: level sensitive irq not supported [ 130.301465][ T6369] kvm: pic: non byte read [ 130.313466][ T5769] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 130.340878][ T6377] atomic_op ffff888025a0d198 conn xmit_atomic 0000000000000000 [ 130.441988][ T5769] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 130.834563][ T6369] kvm: pic: level sensitive irq not supported [ 130.834637][ T6369] kvm: pic: non byte read [ 130.891765][ T6369] kvm: pic: level sensitive irq not supported [ 130.891843][ T6369] kvm: pic: non byte read [ 130.902767][ T6369] kvm: pic: level sensitive irq not supported [ 130.902833][ T6369] kvm: pic: non byte read [ 130.944857][ T6369] kvm: pic: level sensitive irq not supported [ 130.944942][ T6369] kvm: pic: non byte read [ 131.072907][ T6381] UHID_CREATE from different security context by process 119 (syz.2.142), this is not allowed. [ 131.073836][ T6379] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 131.243972][ T6383] __nla_validate_parse: 136 callbacks suppressed [ 131.243987][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'. [ 131.332541][ T6383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.212536][ T6379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.240100][ T6379] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.275157][ T6379] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.314965][ T6379] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.352266][ T6379] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.364790][ T6379] bond2: (slave geneve2): making interface the new active one [ 132.373506][ T6390] loop3: detected capacity change from 0 to 4096 [ 132.373806][ T6379] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 132.464430][ T6379] syz.0.141 (6379) used greatest stack depth: 20184 bytes left [ 132.582322][ T6390] EXT4-fs: Ignoring removed i_version option [ 132.588357][ T6390] EXT4-fs: Ignoring removed oldalloc option [ 132.628323][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 132.658535][ T6390] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.676283][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 132.687018][ T6390] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 132.743465][ T6404] vlan2: entered allmulticast mode [ 132.748619][ T6404] bridge1: entered allmulticast mode [ 132.760212][ T6400] bridge1: port 1(erspan0) entered blocking state [ 132.783630][ T6400] bridge1: port 1(erspan0) entered disabled state [ 132.790212][ T6400] erspan0: entered allmulticast mode [ 132.797265][ T6400] erspan0: entered promiscuous mode [ 132.806243][ T6400] bridge1: port 1(erspan0) entered blocking state [ 132.812879][ T6400] bridge1: port 1(erspan0) entered forwarding state [ 132.865312][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875957][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911612][ T6403] veth3: entered allmulticast mode [ 132.929794][ T6403] bond1: (slave veth3): Enslaving as an active interface with an up link [ 132.982453][ T6407] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 133.140364][ T6417] loop0: detected capacity change from 0 to 256 [ 133.275819][ T6417] FAT-fs (loop0): Directory bread(block 64) failed [ 133.282576][ T6417] FAT-fs (loop0): Directory bread(block 65) failed [ 133.289531][ T6417] FAT-fs (loop0): Directory bread(block 66) failed [ 133.296337][ T6417] FAT-fs (loop0): Directory bread(block 67) failed [ 133.303414][ T6417] FAT-fs (loop0): Directory bread(block 68) failed [ 133.310007][ T6417] FAT-fs (loop0): Directory bread(block 69) failed [ 133.317046][ T6417] FAT-fs (loop0): Directory bread(block 70) failed [ 133.323737][ T6417] FAT-fs (loop0): Directory bread(block 71) failed [ 133.330643][ T6417] FAT-fs (loop0): Directory bread(block 72) failed [ 133.337278][ T6417] FAT-fs (loop0): Directory bread(block 73) failed [ 133.379765][ T6417] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.996322][ T6407] bridge1: entered promiscuous mode [ 134.041792][ T6407] bond1: (slave bridge1): making interface the new active one [ 134.057481][ T6407] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 134.080346][ T6414] bridge2: entered promiscuous mode [ 134.088586][ T6414] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 140.330320][ T6464] netlink: 232 bytes leftover after parsing attributes in process `syz.1.162'. [ 140.422935][ T6464] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.162'. [ 140.485062][ T6463] tipc: Enabled bearer , priority 0 [ 140.507439][ T6461] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.162'. [ 140.552682][ T6467] syzkaller0: entered promiscuous mode [ 140.576920][ T6467] syzkaller0: entered allmulticast mode [ 140.810226][ T6467] tipc: Resetting bearer [ 140.855623][ T6458] tipc: Resetting bearer [ 140.884556][ T6458] tipc: Disabling bearer [ 140.898759][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 142.087969][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.021489][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 146.283637][ T28] usb 2-1: device descriptor read/all, error -71 [ 146.454879][ T6495] syz.0.170 (6495) used greatest stack depth: 17896 bytes left [ 148.911295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.063236][ T6581] loop3: detected capacity change from 0 to 8 [ 157.847959][ T6621] netlink: 'syz.3.187': attribute type 9 has an invalid length. [ 157.855749][ T6621] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.187'. [ 158.190458][ T6623] loop1: detected capacity change from 0 to 8 [ 160.667024][ T6645] loop3: detected capacity change from 0 to 256 [ 160.799956][ T6645] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.810745][ T6645] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 160.888758][ T6645] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 160.908236][ T6645] exFAT-fs (loop3): failed to load alloc-bitmap [ 160.914961][ T6645] exFAT-fs (loop3): failed to recognize exfat type [ 164.042992][ T6668] loop0: detected capacity change from 0 to 8 [ 166.365630][ T27] audit: type=1326 audit(1786056502.108:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 166.522362][ T27] audit: type=1326 audit(1786056502.108:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 166.773069][ T27] audit: type=1326 audit(1786056502.108:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 166.796846][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.458293][ T27] audit: type=1326 audit(1786056502.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 167.768767][ T27] audit: type=1326 audit(1786056502.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 167.931372][ T27] audit: type=1326 audit(1786056502.108:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 169.195195][ T27] audit: type=1326 audit(1786056502.108:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 169.267602][ T27] audit: type=1326 audit(1786056502.108:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 169.321224][ T27] audit: type=1326 audit(1786056502.128:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 169.342762][ T6685] tipc: Started in network mode [ 169.361249][ T27] audit: type=1326 audit(1786056502.238:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551879e0d9 code=0x7ffc0000 [ 169.361321][ T6685] tipc: Node identity 16c789b1f79, cluster identity 4711 [ 169.461748][ T6685] tipc: Enabled bearer , priority 0 [ 169.491891][ T6686] syzkaller0: entered promiscuous mode [ 169.521221][ T6686] syzkaller0: entered allmulticast mode [ 169.571889][ T6685] tipc: Resetting bearer [ 169.596176][ T6684] tipc: Resetting bearer [ 169.652184][ T6684] tipc: Disabling bearer [ 169.770175][ T6689] loop2: detected capacity change from 0 to 512 [ 169.802736][ T6689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 169.831595][ T6689] System zones: 1-12 [ 169.845764][ T6689] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.210: corrupted in-inode xattr: e_value size too large [ 169.896447][ T6689] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.210: couldn't read orphan inode 15 (err -117) [ 169.962906][ T6689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.988395][ T6693] loop1: detected capacity change from 0 to 1024 [ 170.340219][ T6695] loop3: detected capacity change from 0 to 40427 [ 170.366166][ T6695] F2FS-fs (loop3): invalid crc value [ 170.378669][ T6695] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.049003][ T6695] F2FS-fs (loop3): Start checkpoint disabled! [ 171.112842][ T6700] dns_resolver: Unsupported server list version (6) [ 171.164274][ T6695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.685237][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.765265][ T6703] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 171.774858][ T6705] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 172.072412][ T6703] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.328372][ T12] kworker/u4:1: attempt to access beyond end of device [ 172.328372][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 172.356401][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.377114][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.549278][ T6714] loop2: detected capacity change from 0 to 8 [ 175.524148][ T6732] loop2: detected capacity change from 0 to 256 [ 175.727804][ T6732] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.738543][ T6732] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 175.777626][ T6732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.802887][ T6732] exFAT-fs (loop2): failed to load alloc-bitmap [ 175.809529][ T6732] exFAT-fs (loop2): failed to recognize exfat type [ 176.233120][ T5761] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.886191][ T6753] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.895765][ T6753] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.904721][ T6753] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.913802][ T6753] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.080452][ T6757] kvm: kvm [6755]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff9300000860 [ 180.280233][ T6757] kvm: kvm [6755]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfeb800000078 [ 180.347323][ T6757] kvm: kvm [6755]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfdeb000008b2 [ 181.304773][ T6779] netlink: 'syz.0.228': attribute type 9 has an invalid length. [ 181.312523][ T6779] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.228'. [ 182.059380][ T6783] netlink: 184 bytes leftover after parsing attributes in process `syz.3.231'. [ 182.068926][ T6783] bond0: entered allmulticast mode [ 182.074422][ T6783] bond_slave_0: entered allmulticast mode [ 182.080173][ T6783] bond_slave_1: entered allmulticast mode [ 183.131345][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 183.472264][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.619798][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.647492][ T8] usb 1-1: Dual-Role OTG device on HNP port [ 183.678381][ T8] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 184.250381][ T6807] Illegal XDP return value 4294967283 on prog (id 20) dev N/A, expect packet loss! [ 184.267207][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.448429][ C0] ------------[ cut here ]------------ [ 184.454239][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 184.461149][ C0] WARNING: CPU: 0 PID: 6783 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 184.471150][ C0] Modules linked in: [ 184.475046][ C0] CPU: 0 PID: 6783 Comm: syz.3.231 Not tainted syzkaller #0 [ 184.482330][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.492379][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 184.497752][ C0] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 184.517369][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 184.523433][ C0] RAX: 6dc29b6fc0cc7900 RBX: ffff888140fec0e0 RCX: ffff88802dab5a00 [ 184.531396][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 184.539355][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 184.547317][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 184.555282][ C0] R13: ffff888140fec10d R14: ffff888140fec0e8 R15: ffff88803056ffba [ 184.563243][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.572159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.578731][ C0] CR2: 00007f551955da08 CR3: 0000000061ffc000 CR4: 00000000003506f0 [ 184.586696][ C0] Call Trace: [ 184.589966][ C0] [ 184.592803][ C0] hidg_set_alt+0x12a/0xa10 [ 184.597305][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 184.602674][ C0] set_config+0x735/0xff0 [ 184.607007][ C0] composite_setup+0x1df4/0x33a0 [ 184.611949][ C0] configfs_composite_setup+0xc7/0x100 [ 184.617406][ C0] dummy_timer+0x1324/0x34e0 [ 184.622005][ C0] ? mark_lock+0x94/0x320 [ 184.626331][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 184.631346][ C0] ? lock_chain_count+0x20/0x20 [ 184.636196][ C0] ? dummy_free_streams+0x520/0x520 [ 184.641390][ C0] ? dummy_free_streams+0x520/0x520 [ 184.646584][ C0] __hrtimer_run_queues+0x525/0xc10 [ 184.651789][ C0] ? hrtimer_interrupt+0x980/0x980 [ 184.656895][ C0] ? read_tsc+0x9/0x20 [ 184.660961][ C0] hrtimer_run_softirq+0x177/0x290 [ 184.666070][ C0] handle_softirqs+0x27d/0x820 [ 184.670826][ C0] ? read_tsc+0x9/0x20 [ 184.674884][ C0] ? ktime_get+0x24b/0x280 [ 184.679291][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 184.684047][ C0] ? do_softirq+0x1a0/0x1a0 [ 184.688546][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 184.693741][ C0] __irq_exit_rcu+0xd3/0x190 [ 184.698321][ C0] ? irq_exit_rcu+0x20/0x20 [ 184.702824][ C0] irq_exit_rcu+0x9/0x20 [ 184.707060][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 184.712691][ C0] [ 184.715612][ C0] [ 184.718533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.724504][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 184.730302][ C0] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 184.749894][ C0] RSP: 0018:ffffc900033bf100 EFLAGS: 00000286 [ 184.755951][ C0] RAX: 6dc29b6fc0cc7900 RBX: 0000000000000000 RCX: 6dc29b6fc0cc7900 [ 184.763913][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 184.771876][ C0] RBP: ffffc900033bf150 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 184.779835][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff88802dab5a00 [ 184.787796][ C0] R13: ffff8880b8e3cfc8 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 184.795775][ C0] __schedule+0x15b6/0x4660 [ 184.800288][ C0] ? asan.module_dtor+0x20/0x20 [ 184.805131][ C0] ? mark_lock+0x94/0x320 [ 184.809452][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.815430][ C0] ? preempt_schedule+0xc0/0xd0 [ 184.820272][ C0] preempt_schedule_common+0x82/0xc0 [ 184.825552][ C0] preempt_schedule+0xc0/0xd0 [ 184.830220][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 184.835846][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 184.840864][ C0] preempt_schedule_thunk+0x1a/0x30 [ 184.846069][ C0] _raw_spin_unlock+0x3a/0x40 [ 184.850741][ C0] unmap_page_range+0x287b/0x32f0 [ 184.855781][ C0] ? copy_page_range+0x3700/0x3700 [ 184.860899][ C0] unmap_vmas+0x286/0x3f0 [ 184.865227][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 184.870423][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 184.875440][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 184.880817][ C0] exit_mmap+0x238/0xb90 [ 184.885055][ C0] ? exit_aio+0x33a/0x3e0 [ 184.889381][ C0] ? vm_brk+0x30/0x30 [ 184.893371][ C0] ? uprobe_clear_state+0x278/0x290 [ 184.898568][ C0] __mmput+0x118/0x3a0 [ 184.902634][ C0] exit_mm+0x23f/0x340 [ 184.906699][ C0] ? sysctl_delayacct+0x220/0x220 [ 184.911712][ C0] ? do_exit+0x2530/0x2530 [ 184.916125][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 184.920969][ C0] do_exit+0x909/0x2530 [ 184.925126][ C0] ? put_task_struct+0xc0/0xc0 [ 184.929886][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.935859][ C0] ? get_signal+0x100e/0x1390 [ 184.940526][ C0] ? lock_chain_count+0x20/0x20 [ 184.945368][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 184.950390][ C0] do_group_exit+0x22d/0x2f0 [ 184.954975][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 184.960172][ C0] get_signal+0x12a6/0x1390 [ 184.964681][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 184.970226][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 184.976106][ C0] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 184.982166][ C0] ? get_sigframe_size+0x20/0x20 [ 184.987111][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 184.992568][ C0] exit_to_user_mode_loop+0x70/0x110 [ 184.997848][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 185.003388][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 185.008841][ C0] do_syscall_64+0x61/0xb0 [ 185.013244][ C0] ? clear_bhb_loop+0x40/0x90 [ 185.017911][ C0] ? clear_bhb_loop+0x40/0x90 [ 185.022580][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.028463][ C0] RIP: 0033:0x7fa7a7f9e0d9 [ 185.032878][ C0] Code: Unable to access opcode bytes at 0x7fa7a7f9e0af. [ 185.039880][ C0] RSP: 002b:00007fa7a8d980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.048283][ C0] RAX: fffffffffffffe00 RBX: 00007fa7a8225fa8 RCX: 00007fa7a7f9e0d9 [ 185.056243][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7a8225fa8 [ 185.064202][ C0] RBP: 00007fa7a8225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.072165][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.080124][ C0] R13: 00007fa7a8226038 R14: 00007ffe88a2fa40 R15: 00007ffe88a2fb28 [ 185.088093][ C0] [ 185.091102][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.098367][ C0] CPU: 0 PID: 6783 Comm: syz.3.231 Not tainted syzkaller #0 [ 185.105637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.115675][ C0] Call Trace: [ 185.118943][ C0] [ 185.121775][ C0] dump_stack_lvl+0x18c/0x250 [ 185.126442][ C0] ? show_regs_print_info+0x20/0x20 [ 185.131628][ C0] ? load_image+0x420/0x420 [ 185.136131][ C0] panic+0x2ca/0x720 [ 185.140020][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 185.144530][ C0] __warn+0x2e0/0x470 [ 185.148505][ C0] ? usb_ep_enable+0x263/0x440 [ 185.153263][ C0] ? usb_ep_enable+0x263/0x440 [ 185.158015][ C0] report_bug+0x2be/0x4f0 [ 185.162342][ C0] ? usb_ep_enable+0x263/0x440 [ 185.167095][ C0] ? usb_ep_enable+0x263/0x440 [ 185.171846][ C0] ? usb_ep_enable+0x265/0x440 [ 185.176597][ C0] handle_bug+0xcf/0x120 [ 185.180827][ C0] exc_invalid_op+0x1a/0x50 [ 185.185320][ C0] asm_exc_invalid_op+0x1a/0x20 [ 185.190158][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 185.195520][ C0] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 185.215114][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 185.221170][ C0] RAX: 6dc29b6fc0cc7900 RBX: ffff888140fec0e0 RCX: ffff88802dab5a00 [ 185.229131][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 185.237084][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 185.245045][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 185.253002][ C0] R13: ffff888140fec10d R14: ffff888140fec0e8 R15: ffff88803056ffba [ 185.260976][ C0] hidg_set_alt+0x12a/0xa10 [ 185.265477][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 185.270843][ C0] set_config+0x735/0xff0 [ 185.275173][ C0] composite_setup+0x1df4/0x33a0 [ 185.280111][ C0] configfs_composite_setup+0xc7/0x100 [ 185.285560][ C0] dummy_timer+0x1324/0x34e0 [ 185.290156][ C0] ? mark_lock+0x94/0x320 [ 185.294477][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 185.299488][ C0] ? lock_chain_count+0x20/0x20 [ 185.304336][ C0] ? dummy_free_streams+0x520/0x520 [ 185.309534][ C0] ? dummy_free_streams+0x520/0x520 [ 185.314722][ C0] __hrtimer_run_queues+0x525/0xc10 [ 185.319919][ C0] ? hrtimer_interrupt+0x980/0x980 [ 185.325022][ C0] ? read_tsc+0x9/0x20 [ 185.329085][ C0] hrtimer_run_softirq+0x177/0x290 [ 185.334186][ C0] handle_softirqs+0x27d/0x820 [ 185.338935][ C0] ? read_tsc+0x9/0x20 [ 185.342990][ C0] ? ktime_get+0x24b/0x280 [ 185.347398][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 185.352151][ C0] ? do_softirq+0x1a0/0x1a0 [ 185.356645][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 185.361835][ C0] __irq_exit_rcu+0xd3/0x190 [ 185.366412][ C0] ? irq_exit_rcu+0x20/0x20 [ 185.370910][ C0] irq_exit_rcu+0x9/0x20 [ 185.375138][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 185.380764][ C0] [ 185.383682][ C0] [ 185.386602][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.392569][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 185.398362][ C0] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 185.417953][ C0] RSP: 0018:ffffc900033bf100 EFLAGS: 00000286 [ 185.424013][ C0] RAX: 6dc29b6fc0cc7900 RBX: 0000000000000000 RCX: 6dc29b6fc0cc7900 [ 185.431972][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 185.439929][ C0] RBP: ffffc900033bf150 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 185.447886][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff88802dab5a00 [ 185.455844][ C0] R13: ffff8880b8e3cfc8 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 185.463818][ C0] __schedule+0x15b6/0x4660 [ 185.468331][ C0] ? asan.module_dtor+0x20/0x20 [ 185.473170][ C0] ? mark_lock+0x94/0x320 [ 185.477494][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 185.483470][ C0] ? preempt_schedule+0xc0/0xd0 [ 185.488313][ C0] preempt_schedule_common+0x82/0xc0 [ 185.493592][ C0] preempt_schedule+0xc0/0xd0 [ 185.498257][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 185.503881][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 185.508898][ C0] preempt_schedule_thunk+0x1a/0x30 [ 185.514095][ C0] _raw_spin_unlock+0x3a/0x40 [ 185.518768][ C0] unmap_page_range+0x287b/0x32f0 [ 185.523805][ C0] ? copy_page_range+0x3700/0x3700 [ 185.528916][ C0] unmap_vmas+0x286/0x3f0 [ 185.533242][ C0] ? unmap_page_range+0x32f0/0x32f0 [ 185.538433][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 185.543450][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 185.548819][ C0] exit_mmap+0x238/0xb90 [ 185.553054][ C0] ? exit_aio+0x33a/0x3e0 [ 185.557374][ C0] ? vm_brk+0x30/0x30 [ 185.561361][ C0] ? uprobe_clear_state+0x278/0x290 [ 185.566553][ C0] __mmput+0x118/0x3a0 [ 185.570612][ C0] exit_mm+0x23f/0x340 [ 185.574674][ C0] ? sysctl_delayacct+0x220/0x220 [ 185.579687][ C0] ? do_exit+0x2530/0x2530 [ 185.584098][ C0] ? tty_audit_exit+0x14d/0x1f0 [ 185.588940][ C0] do_exit+0x909/0x2530 [ 185.593095][ C0] ? put_task_struct+0xc0/0xc0 [ 185.597855][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 185.603823][ C0] ? get_signal+0x100e/0x1390 [ 185.608485][ C0] ? lock_chain_count+0x20/0x20 [ 185.613328][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 185.618346][ C0] do_group_exit+0x22d/0x2f0 [ 185.622931][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 185.628122][ C0] get_signal+0x12a6/0x1390 [ 185.632626][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 185.638167][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 185.644050][ C0] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 185.650105][ C0] ? get_sigframe_size+0x20/0x20 [ 185.655048][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 185.660503][ C0] exit_to_user_mode_loop+0x70/0x110 [ 185.665779][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 185.671318][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 185.676769][ C0] do_syscall_64+0x61/0xb0 [ 185.681175][ C0] ? clear_bhb_loop+0x40/0x90 [ 185.685848][ C0] ? clear_bhb_loop+0x40/0x90 [ 185.690513][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.696397][ C0] RIP: 0033:0x7fa7a7f9e0d9 [ 185.700799][ C0] Code: Unable to access opcode bytes at 0x7fa7a7f9e0af. [ 185.707798][ C0] RSP: 002b:00007fa7a8d980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.716205][ C0] RAX: fffffffffffffe00 RBX: 00007fa7a8225fa8 RCX: 00007fa7a7f9e0d9 [ 185.724162][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7a8225fa8 [ 185.732118][ C0] RBP: 00007fa7a8225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.740077][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.748035][ C0] R13: 00007fa7a8226038 R14: 00007ffe88a2fa40 R15: 00007ffe88a2fb28 [ 185.756009][ C0] [ 185.759136][ C0] Kernel Offset: disabled [ 185.763513][ C0] Rebooting in 86400 seconds..