last executing test programs: 21.737277703s ago: executing program 0 (id=693): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) 21.431864365s ago: executing program 0 (id=696): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400e8b1327539fca44f5ce7"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 9.459598262s ago: executing program 0 (id=723): fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) 9.32272023s ago: executing program 2 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 9.321922278s ago: executing program 3 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syzkaller0\x00', 0x200}) 9.211669137s ago: executing program 0 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f0000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb8100"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) 9.043258238s ago: executing program 0 (id=731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 8.501755858s ago: executing program 2 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x10, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x2, 0x1, 0xf6, 0xfffffffc, 0x40, 0x8, 0x7, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 8.431633264s ago: executing program 3 (id=733): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000030a010400000000000000000500000a7c000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000005000048024000180000001006c61737400000000000002800000024000000000000000bb2800018005000100696d6d656469617465004ff7e85bf3634d4b010000"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x28000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r2) keyctl$invalidate(0x15, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x18c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.81130463s ago: executing program 3 (id=734): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400e8b1327539fca44f5ce7"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe8483"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 7.574685029s ago: executing program 4 (id=735): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2d022abd7000ffdbdf2516000000080003", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 5.909545361s ago: executing program 1 (id=737): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000280)='0', 0x1) 5.772064053s ago: executing program 1 (id=738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="14000180080001000000010005000300"], 0x2c}}, 0x0) 5.665758337s ago: executing program 1 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80), 0x0, 0x0, 0x0) 4.131858519s ago: executing program 1 (id=740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x22c, 0x24, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x4, 0x1e}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x54, 0x3, 0x8, 0x0, 0x2, 0xfffff776, 0x6}}, {0x10, 0x2, [0x6, 0x400, 0x9, 0x1, 0xde4f, 0x2e]}}, {{0x1c, 0x1, {0x5, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x8b}}, {0x4}}, {{0x1c, 0x1, {0x3a, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0xfffffff7, 0x2}}, {0x8, 0x2, [0x0, 0x9]}}, {{0x1c, 0x1, {0x7, 0x4, 0x5, 0x3, 0x0, 0x7f, 0x3460, 0x3}}, {0xa, 0x2, [0x2, 0x56f, 0x6]}}, {{0x1c, 0x1, {0x9, 0xd, 0x7, 0x697, 0x2, 0x8, 0xc864, 0x2}}, {0x8, 0x2, [0x40, 0x3]}}, {{0x1c, 0x1, {0x86, 0x4c, 0x10, 0x20, 0x1, 0x1, 0xffffffff}}, {0x4}}]}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x79, 0xfff9, 0xff, 0x1, 0x80000001, 0x2f, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x3, 0x9, 0x7fff, 0x1, 0x2, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x6, 0xb8a, 0x40]}}, {{0x1c, 0x1, {0x2, 0x0, 0x5, 0x3, 0x1, 0x5dc2, 0x821, 0x5}}, {0xe, 0x2, [0x16, 0xc7b9, 0x8, 0x6, 0x9]}}, {{0x1c, 0x1, {0x9, 0xd, 0x343, 0x1000, 0x0, 0x1, 0x6, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xf9, 0xd, 0x22, 0x7fffffff, 0x1, 0x6, 0x401, 0x2}}, {0x8, 0x2, [0x0, 0x8]}}]}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x8001, 0x2, 0x2, 0xfffffe01, 0x3}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbb}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x148, 0xe74, 0x8, 0x3fc, 0x10}}) 4.129637356s ago: executing program 3 (id=741): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 4.113559635s ago: executing program 4 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.042559057s ago: executing program 0 (id=743): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000c00)=0x14, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, 0x0, &(0x7f00000002c0)=""/187}, 0x20) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 4.022971712s ago: executing program 2 (id=744): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) 3.891377901s ago: executing program 2 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400282, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000007000000060000000900000010000200", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000000000000d5522d7000000000000000445fcd7c892fd8ed96192c426f24fee7f189a58b88ca9e65b16208872e4428af67f791baa8e907caa0d3fcc44c96b8d4dc23876ca1297bc5d92bde4823bf4f0b50015385062e85eda59fb8d6b7194674c80925c2ea7a05a231e9c866189fd749666a42ade8ce797025a1"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setrlimit(0xf, &(0x7f0000000100)={0xb}) iopl(0x3) read(r3, &(0x7f00000002c0)=""/153, 0x99) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) r7 = fsmount(r5, 0x1, 0x0) fchdir(r7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23080c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.227127397s ago: executing program 4 (id=746): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x95, 0x0, &(0x7f0000000480)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62c", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) 3.143057714s ago: executing program 1 (id=747): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000198000/0x1000)=nil, 0x1000, 0x1002, 0x28011, 0xffffffffffffffff, 0xffffffffffffc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 2.896836329s ago: executing program 3 (id=748): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x14, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 2.843038648s ago: executing program 4 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="14000180080001000000010005000300"], 0x2c}}, 0x0) 2.16633137s ago: executing program 2 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80), 0x0, 0x0, 0x0) 2.09263738s ago: executing program 4 (id=751): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x40, [0x6, 0xffffffe, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x7, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x404623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0x10, 0x3, 0x5, 0x8da8, 0x2e, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x40000001, 0x8000006f, 0x8, 0x407, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x72, 0x5], [0xa, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x7, 0x4, 0xe, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2001, 0x10000, 0x10400, 0x8001, 0x5, 0x3, 0x297, 0x5, 0x4, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x3, 0x4004, 0x800, 0x0, 0x6, 0x97, 0xfffffff9, 0x2, 0x0, 0x1000002, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x662, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0x4, 0x1f, 0x5, 0x4, 0x4008, 0xc, 0x7, 0x100009, 0x80, 0x5, 0x0, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x5, 0xfffffff9, 0x3, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x2, 0x3, 0xfffffffe, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x1, 0x3ff, 0x80000e, 0x4, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x8000, 0x7ffffdff, 0x7ff, 0x80, 0x0, 0x7d, 0x6, 0x5], [0x80108a, 0xfffb, 0x3, 0x3, 0x88, 0x80000001, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x9, 0x7f, 0x5, 0x8, 0x4, 0x4, 0x1, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x1, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa812, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x800027d8, 0x44, 0x409, 0x6, 0x10004, 0x4, 0xe, 0x4, 0xfffffff5, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x8, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x2, 0x101, 0xf, 0xf, 0xffff8001, 0x20006]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000000080)=[{0x0}], 0x1) 2.070614938s ago: executing program 1 (id=752): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2d022abd7000ffdbdf2516000000080003", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) 1.878923087s ago: executing program 2 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 66.376403ms ago: executing program 3 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x10, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x2, 0x1, 0xf6, 0xfffffffc, 0x40, 0x8, 0x7, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 0s ago: executing program 4 (id=755): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffef9, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x38, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='[', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x100000}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 74.971741][ T5601] cgroup: Unknown subsys name 'net' [ 75.081038][ T5601] cgroup: Unknown subsys name 'cpuset' [ 75.091339][ T5601] cgroup: Unknown subsys name 'rlimit' [ 75.300129][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.300202][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 76.509801][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.806483][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.816566][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.823734][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.824680][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.828063][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.830558][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.833135][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.833627][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.834371][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.834896][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.835272][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.837253][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.838659][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.839891][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.841314][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.842119][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.842457][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.845296][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.845652][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.847907][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.852333][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.854503][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.855330][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.857887][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.885552][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.689536][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.689671][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.690071][ T5612] bridge_slave_0: entered allmulticast mode [ 80.692761][ T5612] bridge_slave_0: entered promiscuous mode [ 80.725060][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.725279][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.725418][ T5612] bridge_slave_1: entered allmulticast mode [ 80.727418][ T5612] bridge_slave_1: entered promiscuous mode [ 80.834502][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.844690][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.844859][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.845007][ T5614] bridge_slave_0: entered allmulticast mode [ 80.846684][ T5614] bridge_slave_0: entered promiscuous mode [ 80.889051][ T52] Bluetooth: hci2: command tx timeout [ 80.889310][ T5625] Bluetooth: hci0: command tx timeout [ 80.891388][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.922893][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.923073][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.923237][ T5614] bridge_slave_1: entered allmulticast mode [ 80.925341][ T5614] bridge_slave_1: entered promiscuous mode [ 80.927317][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.927413][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.927633][ T5615] bridge_slave_0: entered allmulticast mode [ 80.930245][ T5615] bridge_slave_0: entered promiscuous mode [ 80.933036][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.933140][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.933516][ T5616] bridge_slave_0: entered allmulticast mode [ 80.935369][ T5616] bridge_slave_0: entered promiscuous mode [ 80.970038][ T52] Bluetooth: hci3: command tx timeout [ 80.970053][ T5625] Bluetooth: hci1: command tx timeout [ 80.970368][ T52] Bluetooth: hci4: command tx timeout [ 81.021923][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.022087][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.022250][ T5615] bridge_slave_1: entered allmulticast mode [ 81.024441][ T5615] bridge_slave_1: entered promiscuous mode [ 81.026618][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.026765][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.026884][ T5616] bridge_slave_1: entered allmulticast mode [ 81.030169][ T5616] bridge_slave_1: entered promiscuous mode [ 81.034793][ T5612] team0: Port device team_slave_0 added [ 81.055806][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.099144][ T5612] team0: Port device team_slave_1 added [ 81.105288][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.105437][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.105618][ T5613] bridge_slave_0: entered allmulticast mode [ 81.108354][ T5613] bridge_slave_0: entered promiscuous mode [ 81.111529][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.111626][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.114967][ T5613] bridge_slave_1: entered allmulticast mode [ 81.116781][ T5613] bridge_slave_1: entered promiscuous mode [ 81.121716][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.196806][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.205404][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.216595][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.232293][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.241953][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.269706][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.271351][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.271366][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.271385][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.304136][ T5614] team0: Port device team_slave_0 added [ 81.326027][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.326043][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.326063][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.356366][ T5613] team0: Port device team_slave_0 added [ 81.359796][ T5614] team0: Port device team_slave_1 added [ 81.363675][ T5616] team0: Port device team_slave_0 added [ 81.390862][ T5613] team0: Port device team_slave_1 added [ 81.407462][ T5616] team0: Port device team_slave_1 added [ 81.456852][ T5615] team0: Port device team_slave_0 added [ 81.462253][ T5615] team0: Port device team_slave_1 added [ 81.483303][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.483396][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.483416][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.484482][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.484493][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.484512][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.486993][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.487006][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.487026][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.536387][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.536406][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.536440][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.540161][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.540175][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.540196][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.562897][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.562911][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.562930][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.574219][ T5612] hsr_slave_0: entered promiscuous mode [ 81.575400][ T5612] hsr_slave_1: entered promiscuous mode [ 81.578093][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.578106][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.578127][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.585023][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.585038][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.585059][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.712781][ T5614] hsr_slave_0: entered promiscuous mode [ 81.713902][ T5614] hsr_slave_1: entered promiscuous mode [ 81.714732][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.714821][ T5614] Cannot create hsr debugfs directory [ 81.768736][ T5616] hsr_slave_0: entered promiscuous mode [ 81.772991][ T5616] hsr_slave_1: entered promiscuous mode [ 81.773763][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 81.773782][ T5616] Cannot create hsr debugfs directory [ 81.897427][ T5613] hsr_slave_0: entered promiscuous mode [ 81.899047][ T5613] hsr_slave_1: entered promiscuous mode [ 81.899753][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 81.899771][ T5613] Cannot create hsr debugfs directory [ 81.916762][ T5615] hsr_slave_0: entered promiscuous mode [ 81.918440][ T5615] hsr_slave_1: entered promiscuous mode [ 81.919197][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 81.919214][ T5615] Cannot create hsr debugfs directory [ 82.418520][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.432405][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.440947][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.451098][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.466112][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.477386][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.479140][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.492545][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.556838][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.567016][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.576367][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.587389][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.589173][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.600684][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.613018][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.623165][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.700438][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.713346][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.731474][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.742052][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.757359][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.770721][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.790567][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.800994][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.893907][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.904224][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.910910][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.916778][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.933338][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.943725][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.945532][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.954303][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.967820][ T5627] Bluetooth: hci0: command tx timeout [ 82.970728][ T5627] Bluetooth: hci2: command tx timeout [ 83.006247][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.047977][ T5627] Bluetooth: hci1: command tx timeout [ 83.047987][ T52] Bluetooth: hci3: command tx timeout [ 83.059440][ T5627] Bluetooth: hci4: command tx timeout [ 83.103909][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.109380][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.123374][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.124293][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.134842][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.152646][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.161851][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.177467][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.188474][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.201872][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.202021][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.234368][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.234462][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.249047][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.323846][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.335086][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.361209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.361307][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.384283][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.400590][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.400720][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.456523][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.481433][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.481620][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.526534][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.526665][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.532075][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.590007][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.590144][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.638710][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.638816][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.724102][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.867352][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.896358][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.897211][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.965138][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.965247][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.396558][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.627055][ T5612] veth0_vlan: entered promiscuous mode [ 84.662971][ T5612] veth1_vlan: entered promiscuous mode [ 84.773782][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.844489][ T5612] veth0_macvtap: entered promiscuous mode [ 84.883917][ T5612] veth1_macvtap: entered promiscuous mode [ 84.904142][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.011319][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.035370][ T5616] veth0_vlan: entered promiscuous mode [ 85.049302][ T5627] Bluetooth: hci0: command tx timeout [ 85.049350][ T5627] Bluetooth: hci2: command tx timeout [ 85.081612][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.119896][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.128123][ T52] Bluetooth: hci3: command tx timeout [ 85.128270][ T52] Bluetooth: hci4: command tx timeout [ 85.128308][ T52] Bluetooth: hci1: command tx timeout [ 85.165885][ T5616] veth1_vlan: entered promiscuous mode [ 85.220531][ T742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.220907][ T742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.389718][ T742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418880][ T5616] veth0_macvtap: entered promiscuous mode [ 85.430235][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452182][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.470688][ T5616] veth1_macvtap: entered promiscuous mode [ 85.472878][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.472899][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.538149][ T5615] veth0_vlan: entered promiscuous mode [ 85.586104][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.603189][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.603234][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.636662][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.669090][ T5615] veth1_vlan: entered promiscuous mode [ 85.712311][ T219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.777206][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.806017][ T5613] veth0_vlan: entered promiscuous mode [ 85.840162][ T5614] veth0_vlan: entered promiscuous mode [ 85.867842][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.867906][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.867958][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.921768][ T5613] veth1_vlan: entered promiscuous mode [ 86.033875][ T5614] veth1_vlan: entered promiscuous mode [ 86.054176][ T5615] veth0_macvtap: entered promiscuous mode [ 86.104412][ T5615] veth1_macvtap: entered promiscuous mode [ 86.130084][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.130142][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.191944][ T5613] veth0_macvtap: entered promiscuous mode [ 86.207295][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.207339][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.233404][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.242914][ T5613] veth1_macvtap: entered promiscuous mode [ 86.285746][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.305766][ T5614] veth0_macvtap: entered promiscuous mode [ 86.320475][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.347839][ T5614] veth1_macvtap: entered promiscuous mode [ 86.358221][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.364584][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.453602][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.484316][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.543527][ T10] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 86.567050][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.577517][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.593277][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.603056][ T10] usb 1-1: Product: syz [ 86.607715][ T10] usb 1-1: Manufacturer: syz [ 86.607757][ T10] usb 1-1: SerialNumber: syz [ 86.690133][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.690227][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.690953][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.691267][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707348][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.758673][ T742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758742][ T742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758792][ T742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758827][ T742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758862][ T742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.880210][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880253][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.934911][ T5816] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 86.943510][ T5816] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.038055][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.039031][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.039071][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.039101][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.043668][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.043688][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.127902][ T5627] Bluetooth: hci2: command tx timeout [ 87.127952][ T5627] Bluetooth: hci0: command tx timeout [ 87.184432][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.195936][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.220209][ T52] Bluetooth: hci1: command tx timeout [ 87.220244][ T5627] Bluetooth: hci4: command tx timeout [ 87.220259][ T52] Bluetooth: hci3: command tx timeout [ 87.296576][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.296631][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.316361][ T5824] bridge0: port 3(ipvlan2) entered blocking state [ 87.316541][ T5824] bridge0: port 3(ipvlan2) entered disabled state [ 87.316687][ T5824] ipvlan2: entered allmulticast mode [ 87.316712][ T5824] bridge0: entered allmulticast mode [ 87.321854][ T5824] ipvlan2: left allmulticast mode [ 87.321878][ T5824] bridge0: left allmulticast mode [ 87.424092][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.424138][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.686306][ T5831] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 87.804669][ T5837] ip_tables: iptables: counters copy to user failed while replacing table [ 87.965542][ T5843] Zero length message leads to an empty skb [ 87.976835][ T5843] No such timeout policy "syz0" [ 88.619830][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'. [ 89.078377][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 89.078864][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 89.137183][ T5758] usb 1-1: USB disconnect, device number 2 [ 89.181454][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 89.182576][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 89.451042][ T190] libceph: connect (1)[c::]:6789 error -101 [ 89.451423][ T190] libceph: mon0 (1)[c::]:6789 connect error [ 89.630146][ T5893] 9p: Bad value for 'rfdno' [ 89.718701][ T5873] ceph: No mds server is up or the cluster is laggy [ 90.134651][ T5887] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 90.166980][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.211296][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.406103][ T5916] syzkaller0: entered promiscuous mode [ 90.406134][ T5916] syzkaller0: entered allmulticast mode [ 90.410597][ T5916] syzkaller0: tun_net_xmit 14 [ 90.693419][ T5924] loop4: detected capacity change from 0 to 64 [ 90.772891][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031a44c00: rx timeout, send abort [ 90.773987][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031a44c00: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 90.957320][ T5924] hfs: get root inode failed [ 91.718559][ T5928] 9p: Bad value for 'rfdno' [ 91.880488][ T5934] openvswitch: netlink: Duplicate key (type 0). [ 91.913924][ T5931] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 91.913970][ T5931] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 91.914005][ T5931] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 91.939192][ T5931] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.952405][ T5936] syzkaller0: entered promiscuous mode [ 91.952428][ T5936] syzkaller0: entered allmulticast mode [ 91.972037][ T5931] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.472854][ T83] smbdirect: ib_dev[syz2] removed [ 92.590920][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 92.600087][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.627465][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.877834][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 93.183163][ T5959] 9p: Bad value for 'rfdno' [ 93.195446][ T5908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.361402][ T5964] openvswitch: netlink: Duplicate key (type 0). [ 93.913350][ T5984] overlayfs: missing 'lowerdir' [ 94.129067][ T5982] No control pipe specified [ 94.849679][ T5993] 9p: Bad value for 'rfdno' [ 95.069588][ T6002] openvswitch: netlink: Duplicate key (type 0). [ 95.355287][ T6006] syzkaller0: entered promiscuous mode [ 95.463068][ T6006] syzkaller0: entered allmulticast mode [ 95.592405][ T6017] overlayfs: missing 'lowerdir' [ 95.646684][ T6018] No control pipe specified [ 96.038332][ T2284] cfg80211: failed to load regulatory.db [ 96.429620][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 96.759146][ T6032] ======================================================= [ 96.759146][ T6032] WARNING: The mand mount option has been deprecated and [ 96.759146][ T6032] and is ignored by this kernel. Remove the mand [ 96.759146][ T6032] option from the mount to silence this warning. [ 96.759146][ T6032] ======================================================= [ 96.768493][ T5732] kernel read not supported for file /vcs (pid: 5732 comm: kworker/0:7) [ 96.816556][ T6034] openvswitch: netlink: Duplicate key (type 0). [ 97.032746][ T6037] warning: `syz.3.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.468847][ T6047] overlayfs: missing 'lowerdir' [ 97.524786][ T6048] No control pipe specified [ 98.902925][ T2284] kernel read not supported for file /vcs (pid: 2284 comm: kworker/0:3) [ 98.964662][ T6075] openvswitch: netlink: Duplicate key (type 0). [ 99.780567][ T6096] overlayfs: missing 'lowerdir' [ 99.836419][ T6097] No control pipe specified [ 100.214580][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 100.595729][ T6104] loop4: detected capacity change from 0 to 64 [ 100.755920][ T6104] hfs: get root inode failed [ 101.553967][ T6112] openvswitch: netlink: Duplicate key (type 0). [ 101.561722][ T2284] kernel read not supported for file /vcs (pid: 2284 comm: kworker/0:3) [ 101.686907][ T6118] loop4: detected capacity change from 0 to 512 [ 101.698782][ T6114] syzkaller0: entered promiscuous mode [ 101.698833][ T6114] syzkaller0: entered allmulticast mode [ 101.747426][ T6118] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.747479][ T6118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.930268][ T6118] EXT4-fs (loop4): 1 truncate cleaned up [ 101.980495][ T6118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.412394][ T6130] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.141363][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.212032][ T6146] openvswitch: netlink: Duplicate key (type 0). [ 103.250066][ T6152] syz.0.128 uses obsolete (PF_INET,SOCK_PACKET) [ 103.250984][ T1235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.571559][ T1235] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.576396][ T1235] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 103.576422][ T1235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.576462][ T1235] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.576480][ T1235] usb 4-1: config 1 has no interface number 1 [ 103.576520][ T1235] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.576553][ T1235] usb 4-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 103.582922][ T1235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.582947][ T1235] usb 4-1: Product: syz [ 103.582961][ T1235] usb 4-1: Manufacturer: syz [ 103.582973][ T1235] usb 4-1: SerialNumber: syz [ 103.981865][ T1235] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 103.982004][ T1235] usb 4-1: MIDIStreaming interface descriptor not found [ 104.403151][ T1235] usb 4-1: USB disconnect, device number 2 [ 104.858800][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.057344][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 105.057726][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 105.058210][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 105.058346][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 105.236590][ T6193] ceph: No mds server is up or the cluster is laggy [ 105.325971][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 105.326199][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 105.363939][ T6200] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.981484][ T6217] loop4: detected capacity change from 0 to 64 [ 106.027650][ T5745] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.096875][ T6217] hfs: get root inode failed [ 106.631509][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.631587][ T5745] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 106.700505][ T5745] usb 4-1: config 1 interface 0 has no altsetting 0 [ 106.703776][ T6200] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 106.707944][ T6200] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 106.722960][ T6200] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 106.723353][ T6200] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 106.723620][ T6200] kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 106.726925][ T6200] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 106.738612][ T6200] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 106.738829][ T6200] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 106.743972][ T6200] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 106.744333][ T6200] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 106.811736][ T5745] usb 4-1: string descriptor 0 read error: -22 [ 106.819255][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.300621][ T5745] usbhid 4-1:1.0: can't add hid device: -32 [ 107.300746][ T5745] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 109.570097][ T6212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.150'. [ 109.921083][ T5745] usb 4-1: USB disconnect, device number 3 [ 110.068469][ T31] audit: type=1800 audit(1786738100.602:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.160" name="pnp_string" dev="configfs" ino=10556 res=0 errno=0 [ 110.575175][ T6265] overlayfs: missing 'lowerdir' [ 110.631373][ T6266] No control pipe specified [ 111.034056][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 111.035153][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 113.186156][ T6304] netlink: 'syz.2.183': attribute type 2 has an invalid length. [ 116.337659][ T5745] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.513219][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 116.516535][ T5745] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 116.526837][ T5745] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.526868][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.526899][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.532561][ T5745] usb 4-1: config 0 descriptor?? [ 117.463375][ T6336] Mount JFS Failure: -5 [ 117.914564][ T5745] dragonrise 0003:0079:0011.0001: unknown main item tag 0x0 [ 117.914645][ T5745] dragonrise 0003:0079:0011.0001: unknown main item tag 0x2 [ 117.914693][ T5745] dragonrise 0003:0079:0011.0001: collection stack underflow [ 117.914728][ T5745] dragonrise 0003:0079:0011.0001: item 0 2 0 12 parsing failed [ 117.923608][ T5745] dragonrise 0003:0079:0011.0001: parse failed [ 117.923684][ T5745] dragonrise 0003:0079:0011.0001: probe with driver dragonrise failed with error -22 [ 118.117051][ T6340] loop2: detected capacity change from 0 to 256 [ 118.127447][ T6340] exfat: Deprecated parameter 'namecase' [ 118.378025][ T6340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 119.146749][ T5732] usb 4-1: USB disconnect, device number 4 [ 119.935497][ T6359] netlink: 'syz.3.204': attribute type 2 has an invalid length. [ 121.112214][ T6372] loop4: detected capacity change from 0 to 64 [ 121.296834][ T6372] hfs: get root inode failed [ 121.741414][ T190] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.949547][ T190] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 121.961527][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.961590][ T190] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.988727][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.997819][ T190] usb 2-1: Product: syz [ 121.997866][ T190] usb 2-1: Manufacturer: syz [ 121.997883][ T190] usb 2-1: SerialNumber: syz [ 122.030729][ T190] etas_es58x 2-1:1.0: Starting syz syz (Serial Number syz) [ 122.701480][ T6401] sch_fq: defrate 1 ignored. [ 122.727721][ T5819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.878662][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 122.879536][ T5819] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.880909][ T5819] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.880931][ T5819] usb 4-1: config 0 has no interface number 0 [ 122.880970][ T5819] usb 4-1: config 0 interface 184 has no altsetting 0 [ 122.883386][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.883460][ T5819] usb 4-1: Product: syz [ 122.883473][ T5819] usb 4-1: Manufacturer: syz [ 122.883486][ T5819] usb 4-1: SerialNumber: syz [ 122.900634][ T5819] usb 4-1: config 0 descriptor?? [ 123.529480][ T5819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 123.535348][ T5819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.957110][ T5819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 123.957191][ T5819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 123.957217][ T5819] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 123.957877][ T5819] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 123.977509][ T5819] usb 4-1: USB disconnect, device number 5 [ 124.219308][ T190] usb 2-1: USB disconnect, device number 2 [ 125.220311][ T6422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.231'. [ 126.094579][ T6435] loop2: detected capacity change from 0 to 256 [ 126.152308][ T6435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 126.247101][ T6437] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1635017058.1935636068.1702257004), cmd(2) [ 126.729562][ T6454] netlink: 'syz.0.243': attribute type 39 has an invalid length. [ 127.514998][ T6446] loop4: detected capacity change from 0 to 32768 [ 127.610726][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.248'. [ 127.792590][ T31] audit: type=1800 audit(1786738118.332:3): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 127.904479][ T6474] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1635017058.1935636068.1702257004), cmd(2) [ 128.172270][ T6480] xt_hashlimit: max too large, truncated to 1048576 [ 128.339602][ T6487] netlink: 44 bytes leftover after parsing attributes in process `syz.2.258'. [ 129.362144][ T5732] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.536460][ T6507] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1635017058.1935636068.1702257004), cmd(2) [ 129.623574][ T6512] capability: warning: `syz.4.265' uses 32-bit capabilities (legacy support in use) [ 130.058310][ T5732] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 130.059561][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.059610][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.071671][ T5732] usb 2-1: config 0 descriptor?? [ 130.075228][ T5732] pwc: Askey VC010 type 2 USB webcam detected. [ 130.253664][ T6519] xt_hashlimit: max too large, truncated to 1048576 [ 130.521461][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.273'. [ 130.610845][ T5732] pwc: recv_control_msg error -32 req 02 val 2b00 [ 130.612163][ T5732] pwc: recv_control_msg error -32 req 02 val 2700 [ 130.613521][ T5732] pwc: recv_control_msg error -32 req 02 val 2c00 [ 130.616369][ T5732] pwc: recv_control_msg error -32 req 04 val 1000 [ 130.618305][ T5732] pwc: recv_control_msg error -32 req 04 val 1300 [ 130.620521][ T5732] pwc: recv_control_msg error -32 req 04 val 1400 [ 131.320834][ T5732] pwc: recv_control_msg error -71 req 02 val 2100 [ 131.327826][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 131.339528][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 131.346435][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 131.353630][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 131.361346][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 131.377564][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 131.386163][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 131.394615][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 131.439292][ T5732] pwc: Registered as video103. [ 131.475585][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 131.519678][ T5732] usb 2-1: USB disconnect, device number 3 [ 131.535975][ T6541] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935636068.1702257004), cmd(2) [ 131.953347][ T6554] xt_hashlimit: max too large, truncated to 1048576 [ 133.560575][ T6577] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935636068.1702257004), cmd(2) [ 133.582352][ T6581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'. [ 133.913088][ T6593] xt_hashlimit: max too large, truncated to 1048576 [ 133.936047][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 134.951095][ T6616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935636068.1702257004), cmd(2) [ 135.711856][ T6628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.306'. [ 135.726673][ T6629] xt_hashlimit: max too large, truncated to 1048576 [ 136.172538][ T6642] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 136.172598][ T6642] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 136.172632][ T6642] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 136.203710][ T6642] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.414544][ T6655] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935605760.1702257004), cmd(2) [ 136.502356][ T12] smbdirect: ib_dev[syz2] removed [ 136.639402][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.323'. [ 136.746457][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.746560][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.797887][ T5732] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.332812][ T5732] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 137.344250][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.344319][ T5732] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.344340][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.344370][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.379848][ T5732] usb 1-1: config 0 descriptor?? [ 137.491909][ T5732] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 137.692069][ T6677] syzkaller0: entered promiscuous mode [ 137.692122][ T6677] syzkaller0: entered allmulticast mode [ 137.907985][ T6687] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935605760.1702257004), cmd(2) [ 137.982385][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'. [ 139.770416][ T5732] usb 1-1: USB disconnect, device number 3 [ 139.964172][ T6713] syzkaller0: entered promiscuous mode [ 139.972084][ T6713] syzkaller0: entered allmulticast mode [ 140.006767][ T6719] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1935605760.1702257004), cmd(2) [ 140.230170][ T6730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'. [ 140.454946][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 140.688018][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.716093][ T6754] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1929379840.1702257004), cmd(2) [ 140.839688][ T5819] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 140.850405][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.850468][ T5819] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.850490][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.850520][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.861934][ T5819] usb 3-1: config 0 descriptor?? [ 140.905839][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 141.386454][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 141.386605][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.414103][ T6780] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1929379840.1702257004), cmd(2) [ 141.475861][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.024578][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 142.046072][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 142.390482][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 142.432139][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 142.569352][ T6788] ceph: No mds server is up or the cluster is laggy [ 142.924716][ T6808] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 142.924774][ T6808] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 142.924810][ T6808] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 142.936589][ T6808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.016963][ T219] smbdirect: ib_dev[syz2] removed [ 143.117184][ T6814] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1929379840.1702257004), cmd(2) [ 143.505243][ T5732] usb 3-1: USB disconnect, device number 2 [ 143.596511][ T6830] Bluetooth: MGMT ver 1.23 [ 144.668327][ T6847] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 144.676206][ T5625] Bluetooth: hci1: link tx timeout [ 144.681260][ T5625] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.702743][ T5625] Bluetooth: hci1: link tx timeout [ 144.702814][ T5625] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.367814][ T5758] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.518455][ T5758] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 145.519740][ T5758] usb 5-1: config 0 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 145.519785][ T5758] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.519813][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.519847][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.526270][ T5758] usb 5-1: config 0 descriptor?? [ 145.543482][ T5758] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 145.882006][ T5625] Bluetooth: hci1: link tx timeout [ 145.882232][ T5625] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 145.882306][ T5625] Bluetooth: hci1: link tx timeout [ 145.882338][ T5625] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.727948][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 146.846333][ T6915] loop3: detected capacity change from 0 to 512 [ 146.859228][ T6915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.932589][ T6915] EXT4-fs (loop3): 1 truncate cleaned up [ 146.937135][ T6915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.011300][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.206817][ T25] usb 5-1: USB disconnect, device number 2 [ 148.870088][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 150.172043][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.320075][ T5819] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 150.322913][ T5819] usb 3-1: config 0 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 150.322941][ T5819] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.322965][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.322995][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.330108][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 150.343914][ T5819] usb 3-1: config 0 descriptor?? [ 150.357401][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 151.795431][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 151.820807][ T6989] loop4: detected capacity change from 0 to 1024 [ 151.830384][ T6989] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.870460][ T6989] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.451: lblock 2 mapped to illegal pblock 2 (length 1) [ 151.889269][ T6989] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.891540][ T6989] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 151.900776][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 151.900795][ C0] EXT4-fs (loop4): initial error at time 1786738142: ext4_map_blocks:790: inode 3: block 2 [ 151.900831][ C0] EXT4-fs (loop4): last error at time 1786738142: ext4_map_blocks:790: inode 3: block 2 [ 151.937219][ T6989] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.451: lblock 0 mapped to illegal pblock 48 (length 1) [ 151.953251][ T6989] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.955758][ T6989] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 151.987261][ T6989] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.451: Failed to acquire dquot type 0 [ 151.987657][ T6989] loop4: lost filesystem error report for type 5 error -117 [ 151.990602][ T6989] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 151.990630][ T6989] loop4: lost filesystem error report for type 5 error -117 [ 152.025832][ T6989] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.451: mark_inode_dirty error [ 152.025920][ T6989] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.026652][ T6989] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 152.026806][ T6989] EXT4-fs (loop4): 1 orphan inode deleted [ 152.067032][ T142] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.067067][ T142] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.075096][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.149640][ T142] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 152.149822][ T142] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 152.297136][ T6990] syzkaller0: entered promiscuous mode [ 152.306015][ T6990] syzkaller0: entered allmulticast mode [ 152.313709][ T7001] 8021q: VLANs not supported on ip6gre0 [ 152.321370][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.333957][ T5613] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 152.347590][ T5613] loop4: lost filesystem error report for type 5 error -117 [ 152.350610][ T5613] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 152.368429][ T5613] loop4: lost filesystem error report for type 5 error -117 [ 152.370770][ T5613] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 152.429269][ T5613] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 152.442270][ T5613] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 152.442352][ T5613] loop4: lost filesystem error report for type 5 error -117 [ 152.774422][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 152.957339][ T190] usb 3-1: USB disconnect, device number 3 [ 156.297280][ T7047] 8021q: VLANs not supported on ip6gre0 [ 158.592431][ T7076] syzkaller0: entered promiscuous mode [ 158.599386][ T7076] syzkaller0: entered allmulticast mode [ 158.931811][ T7082] syz.3.476 (7082): drop_caches: 2 [ 159.110417][ T5732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.277725][ T5732] usb 2-1: device descriptor read/64, error -71 [ 159.528024][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.670246][ T5732] usb 2-1: device descriptor read/64, error -71 [ 159.781993][ T5732] usb usb2-port1: attempt power cycle [ 159.891995][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 160.206202][ T5732] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.265429][ T5732] usb 2-1: device descriptor read/8, error -71 [ 160.508885][ T5732] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 160.540935][ T5732] usb 2-1: device descriptor read/8, error -71 [ 160.658155][ T5732] usb usb2-port1: unable to enumerate USB device [ 160.658942][ T7106] overlayfs: missing 'lowerdir' [ 161.782779][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 161.897727][ T5745] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.067738][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 162.068750][ T5745] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 162.070540][ T5745] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 162.070578][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.073158][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.073182][ T5745] usb 5-1: Product: syz [ 162.073196][ T5745] usb 5-1: Manufacturer: syz [ 162.073209][ T5745] usb 5-1: SerialNumber: syz [ 162.076225][ T5745] usb 5-1: config 0 descriptor?? [ 162.093359][ T5745] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.093399][ T5745] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 162.724908][ T5745] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.725534][ T5745] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 162.725917][ T5745] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 162.725932][ T5745] em28xx 5-1:0.0: No AC97 audio processor [ 162.768287][ T5745] usb 5-1: USB disconnect, device number 3 [ 162.773206][ T5745] em28xx 5-1:0.0: Disconnecting em28xx [ 162.810800][ T5745] em28xx: Freeing device [ 164.180577][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 164.180741][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.728951][ T7129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.100689][ T7152] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 165.334430][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 166.422342][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'. [ 169.755246][ T7196] loop1: detected capacity change from 0 to 262144 [ 169.886539][ T7196] BTRFS: device fsid f6a2c972-d317-4ba6-81c0-e8141f61b8ec devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.527 (7196) [ 169.937039][ T7196] BTRFS info (device loop1): first mount of filesystem f6a2c972-d317-4ba6-81c0-e8141f61b8ec [ 169.937289][ T7196] BTRFS info (device loop1): using sha256 checksum algorithm [ 170.528157][ T7196] BTRFS error (device loop1): open_ctree failed: -EINTR [ 172.233900][ T7239] netlink: 'syz.3.538': attribute type 2 has an invalid length. [ 172.418949][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 173.544904][ T7261] 8021q: VLANs not supported on ip6gre0 [ 174.840076][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 175.937289][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 176.047292][ T7296] netlink: 'syz.3.560': attribute type 2 has an invalid length. [ 177.419587][ T7319] syzkaller0: entered promiscuous mode [ 177.419638][ T7319] syzkaller0: entered allmulticast mode [ 181.010265][ T7359] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 181.060168][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 183.127960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.052278][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 185.277783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 185.397681][ T5732] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.571819][ T5732] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.582259][ T5732] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 185.582329][ T5732] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 185.582351][ T5732] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.582371][ T5732] usb 4-1: config 1 has no interface number 1 [ 185.582408][ T5732] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.582444][ T5732] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.052631][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.208282][ T5732] usb 4-1: can't set config #1, error -71 [ 187.254879][ T5732] usb 4-1: USB disconnect, device number 6 [ 188.518516][ T7441] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 189.533090][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 189.948066][ T5717] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.239627][ T7468] 8021q: VLANs not supported on ip6gre0 [ 190.268666][ T5717] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.366441][ T5717] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.375538][ T5717] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 190.375578][ T5717] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.375599][ T5717] usb 2-1: config 1 has no interface number 1 [ 190.375639][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 190.375662][ T5717] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.948576][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.956769][ T5717] usb 2-1: Product: syz [ 190.961139][ T5717] usb 2-1: Manufacturer: syz [ 190.965914][ T5717] usb 2-1: SerialNumber: syz [ 191.198170][ T5717] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 191.198231][ T5717] usb 2-1: MIDIStreaming interface descriptor not found [ 191.240946][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 191.661179][ T5717] usb 2-1: USB disconnect, device number 8 [ 191.834133][ T7488] syzkaller1: entered allmulticast mode [ 192.041712][ T7494] udevd[7494]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.133630][ T7501] 8021q: VLANs not supported on ip6gre0 [ 193.388346][ T7520] 9pnet_virtio: no channels available for device syz [ 193.563298][ T7530] 8021q: VLANs not supported on ip6gre0 [ 193.733590][ T7538] loop1: detected capacity change from 0 to 512 [ 193.753527][ T7538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.785114][ T7538] EXT4-fs (loop1): 1 truncate cleaned up [ 193.789723][ T7538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.446709][ T7558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.447078][ T7558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.596203][ T7558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.632181][ T7558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.632775][ T7558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.654115][ T7558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.685623][ T7558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.685760][ T7558] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.715376][ T7558] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.729620][ T7558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.729717][ T7558] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.751136][ T7558] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.762621][ T7558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.061746][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.098259][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'. [ 197.447829][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.567122][ T7599] syzkaller0: entered promiscuous mode [ 197.567166][ T7599] syzkaller0: entered allmulticast mode [ 197.688816][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.688893][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.767731][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.060324][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 198.189615][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.189732][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.501220][ T7614] overlayfs: missing 'lowerdir' [ 199.527931][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.769426][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.769485][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.855196][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.704642][ T7634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.673'. [ 201.607707][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.847892][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.855060][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.927648][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.748637][ T7662] netlink: 72 bytes leftover after parsing attributes in process `syz.2.684'. [ 203.187714][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.338433][ T25] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 203.352201][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.352255][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.352328][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.385104][ T25] usb 2-1: config 0 descriptor?? [ 203.542337][ T7686] overlayfs: missing 'lowerdir' [ 203.598655][ T7687] No control pipe specified [ 203.697853][ T5758] usb 2-1: USB disconnect, device number 9 [ 203.917205][ T7689] syzkaller0: entered promiscuous mode [ 203.917359][ T7689] syzkaller0: entered allmulticast mode [ 204.311974][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 204.517482][ T7709] overlayfs: missing 'lowerdir' [ 206.888827][ T7721] netlink: 72 bytes leftover after parsing attributes in process `syz.4.699'. [ 207.414547][ T7729] overlayfs: missing 'lowerdir' [ 207.415516][ T7729] No control pipe specified [ 209.138700][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 210.377805][ T5717] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 210.529918][ T5717] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 210.540386][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.550580][ T5717] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.559988][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.575396][ T5717] usb 5-1: config 0 descriptor?? [ 210.799204][ T5717] usb 5-1: USB disconnect, device number 4 [ 211.140342][ T7752] netlink: 72 bytes leftover after parsing attributes in process `syz.1.711'. [ 211.640794][ T7761] overlayfs: missing 'lowerdir' [ 211.708720][ T7762] No control pipe specified [ 213.568684][ T7766] program syz.1.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.211792][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.720'. [ 215.608846][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 216.433475][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.729'. [ 217.252367][ T7813] trusted_key: encrypted_key: insufficient parameters specified [ 217.552689][ T7805] syzkaller0: entered promiscuous mode [ 217.552731][ T7805] syzkaller0: entered allmulticast mode [ 217.967453][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.734'. [ 218.197712][ T7822] overlayfs: missing 'lowerdir' [ 218.793080][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 222.358577][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 223.113155][ T7865] loop3: detected capacity change from 0 to 256 [ 223.441662][ T7865] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 224.854928][ T7879] input: syz0 as /devices/virtual/input/input6 [ 225.516867][ T7872] ------------[ cut here ]------------ [ 225.516902][ T7872] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 225.516936][ T7872] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.0.743/7872 [ 225.538091][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 225.552565][ T7872] Modules linked in: [ 225.556576][ T7872] CPU: 0 UID: 0 PID: 7872 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(full) [ 225.565894][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.576136][ T7872] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 225.582142][ T7872] Code: 72 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 225.601923][ T7872] RSP: 0018:ffffc9000574fcf0 EFLAGS: 00010206 [ 225.608216][ T7872] RAX: 1ffffd1ffff80fad RBX: 0000607edaf0dc80 RCX: dffffc0000000000 [ 225.616230][ T7872] RDX: 0000000000000001 RSI: ffffffff8e462c05 RDI: 00000000ffffffff [ 225.625694][ T7872] RBP: ffffe8ffffc07c80 R08: ffffffff9079607f R09: 1ffffffff20f2c0f [ 225.633802][ T7872] R10: dffffc0000000000 R11: fffffbfff20f2c10 R12: ffff8880260ce000 [ 225.641888][ T7872] R13: 0000000000000000 R14: ffffe8ffffc07d68 R15: 1ffffffff1ce69de [ 225.649969][ T7872] FS: 00007f35e66426c0(0000) GS:ffff888124cfa000(0000) knlGS:0000000000000000 [ 225.659017][ T7872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.665634][ T7872] CR2: 00007ff7d8f3ebb1 CR3: 0000000021f64000 CR4: 00000000003526f0 [ 225.673725][ T7872] Call Trace: [ 225.677188][ T7872] [ 225.680280][ T7872] blk_mq_free_tag_set+0x617/0x780 [ 225.685561][ T7872] loop_remove+0x4e/0xc0 [ 225.690789][ T7872] loop_control_ioctl+0x4a6/0x5a0 [ 225.695861][ T7872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 225.701738][ T7872] ? __fget_files+0x2a/0x420 [ 225.706499][ T7872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.711622][ T7872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 225.717209][ T7872] __se_sys_ioctl+0xfc/0x170 [ 225.721977][ T7872] do_syscall_64+0x166/0x520 [ 225.727750][ T7872] ? trace_irq_disable+0x3b/0x140 [ 225.732884][ T7872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.739925][ T7872] ? clear_bhb_loop+0x70/0xc0 [ 225.744654][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.750758][ T7872] RIP: 0033:0x7f35e579e0d9 [ 225.755214][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.774960][ T7872] RSP: 002b:00007f35e6642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.783461][ T7872] RAX: ffffffffffffffda RBX: 00007f35e5a26180 RCX: 00007f35e579e0d9 [ 225.791541][ T7872] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003 [ 225.799615][ T7872] RBP: 00007f35e5835024 R08: 0000000000000000 R09: 0000000000000000 [ 225.807711][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.815718][ T7872] R13: 00007f35e5a26218 R14: 00007f35e5a26180 R15: 00007fffbf911038 [ 225.823816][ T7872] [ 225.826895][ T7872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.834208][ T7872] CPU: 0 UID: 0 PID: 7872 Comm: syz.0.743 Not tainted syzkaller #0 PREEMPT(full) [ 225.843426][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.853592][ T7872] Call Trace: [ 225.856898][ T7872] [ 225.859940][ T7872] vpanic+0x56d/0xa60 [ 225.864031][ T7872] ? __pfx__printk+0x10/0x10 [ 225.868649][ T7872] ? __pfx_vpanic+0x10/0x10 [ 225.873283][ T7872] ? is_bpf_text_address+0x292/0x2b0 [ 225.878692][ T7872] ? is_bpf_text_address+0x26/0x2b0 [ 225.883932][ T7872] panic+0xc5/0xd0 [ 225.887706][ T7872] ? __pfx_panic+0x10/0x10 [ 225.892178][ T7872] __warn+0x315/0x4c0 [ 225.896452][ T7872] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 225.901779][ T7872] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 225.907104][ T7872] __report_bug+0x276/0x570 [ 225.911750][ T7872] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 225.917073][ T7872] ? __pfx___report_bug+0x10/0x10 [ 225.922132][ T7872] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.927253][ T7872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.932752][ T7872] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 225.938126][ T7872] report_bug+0x16b/0x220 [ 225.942486][ T7872] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 225.947812][ T7872] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 225.953126][ T7872] handle_bug+0x9c/0x200 [ 225.957407][ T7872] exc_invalid_op+0x1a/0x50 [ 225.961944][ T7872] asm_exc_invalid_op+0x1a/0x20 [ 225.966823][ T7872] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 225.972751][ T7872] Code: 72 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 225.992378][ T7872] RSP: 0018:ffffc9000574fcf0 EFLAGS: 00010206 [ 225.998464][ T7872] RAX: 1ffffd1ffff80fad RBX: 0000607edaf0dc80 RCX: dffffc0000000000 [ 226.006476][ T7872] RDX: 0000000000000001 RSI: ffffffff8e462c05 RDI: 00000000ffffffff [ 226.014554][ T7872] RBP: ffffe8ffffc07c80 R08: ffffffff9079607f R09: 1ffffffff20f2c0f [ 226.022550][ T7872] R10: dffffc0000000000 R11: fffffbfff20f2c10 R12: ffff8880260ce000 [ 226.030543][ T7872] R13: 0000000000000000 R14: ffffe8ffffc07d68 R15: 1ffffffff1ce69de [ 226.038570][ T7872] blk_mq_free_tag_set+0x617/0x780 [ 226.043724][ T7872] loop_remove+0x4e/0xc0 [ 226.047990][ T7872] loop_control_ioctl+0x4a6/0x5a0 [ 226.053041][ T7872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 226.058626][ T7872] ? __fget_files+0x2a/0x420 [ 226.063241][ T7872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.068198][ T7872] ? __pfx_loop_control_ioctl+0x10/0x10 [ 226.073768][ T7872] __se_sys_ioctl+0xfc/0x170 [ 226.078387][ T7872] do_syscall_64+0x166/0x520 [ 226.083001][ T7872] ? trace_irq_disable+0x3b/0x140 [ 226.088042][ T7872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.094130][ T7872] ? clear_bhb_loop+0x70/0xc0 [ 226.098828][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.104751][ T7872] RIP: 0033:0x7f35e579e0d9 [ 226.109177][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.128795][ T7872] RSP: 002b:00007f35e6642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.137228][ T7872] RAX: ffffffffffffffda RBX: 00007f35e5a26180 RCX: 00007f35e579e0d9 [ 226.145219][ T7872] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000003 [ 226.153284][ T7872] RBP: 00007f35e5835024 R08: 0000000000000000 R09: 0000000000000000 [ 226.161275][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.169264][ T7872] R13: 00007f35e5a26218 R14: 00007f35e5a26180 R15: 00007fffbf911038 [ 226.177268][ T7872] [ 226.180784][ T7872] Kernel Offset: disabled [ 226.185133][ T7872] Rebooting in 86400 seconds..