last executing test programs: 7.877054029s ago: executing program 1 (id=23): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x180, 0x29, 0x36, {0x5e, 0x2c, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2e8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.817591876s ago: executing program 1 (id=28): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76bf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 6.329370539s ago: executing program 1 (id=30): syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 4.753037729s ago: executing program 1 (id=33): creat(0x0, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff", @ANYRES8, @ANYRESHEX], 0x0) 4.63795867s ago: executing program 2 (id=34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/48, 0x30) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) 4.340266442s ago: executing program 2 (id=37): r0 = socket$kcm(0x11, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x3) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x0, 0x10}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.10418518s ago: executing program 1 (id=40): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x1a, 0x11, 0x81, 0x8, 0x16c0, 0x5df, 0xc5a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x21, 0x6, 0x0, 0x3, 0x0, 0x0, 0x7}}]}}]}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "0400", "0725eade", '\'q6O', ["0000000000000600", "00b32e8072a0541953d08650", "fa0700f22b42a3023be516d1", "004acf819700"]}) 2.970976461s ago: executing program 0 (id=42): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x25d11c32db5cec7f, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xca0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7d, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xe, 0x8, {0x8, 0x31, "0bc34ee128f4"}}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0xb, 0x81, 0x2, 0xf, 0x4, 0x6}}}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x10}}) 2.055435816s ago: executing program 1 (id=43): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x5, "67deed2620"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002600)={0x34, &(0x7f0000002380)={0x0, 0x16, 0x4, "b34f2667"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 1.288876002s ago: executing program 0 (id=46): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_ENABLE={{0xfa}, 0x3}}}, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 1.196190682s ago: executing program 2 (id=47): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.163770463s ago: executing program 0 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x3, 0x2, 0x0, {0x0, 0xc35, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x4, 0xd}}]}, 0x48}}, 0x0) 1.088401953s ago: executing program 2 (id=49): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="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", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 932.147524ms ago: executing program 0 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 836.824105ms ago: executing program 0 (id=51): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x94, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="d95839027eb32eb1c65b6daef702bffeba43e38e69de94dc739a8754fcc2b526c12c960b8d45dbfd5d4dc786ca657615776d8dc8ce23be9db45aaad73898e3ee30bea15511a62ba20a0f1b59692bcccefe6c4be06244427d6660eff172d6ce257da6512894c8f2ec99edbd8eab84603c3a242fa5f75148502986f285549c2fee1f2ad82cdefb3bf90d1b7e1265e1521399943fee", 0x0, 0x101, 0x2, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 559.879016ms ago: executing program 3 (id=52): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 452.066337ms ago: executing program 3 (id=53): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x1a9) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 383.289997ms ago: executing program 3 (id=54): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x80047453, 0x0) 331.009348ms ago: executing program 2 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048e56e0573239361bd8f05c60ff304e7fee8a3221b00", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) 216.210238ms ago: executing program 3 (id=56): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) ioctl$FIONCLEX(r0, 0x5450) 215.967268ms ago: executing program 0 (id=57): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000ec0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, 0x0, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 138.172249ms ago: executing program 3 (id=58): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x840) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x48002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x325}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x0, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) 65.81486ms ago: executing program 3 (id=59): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000310000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/194) 0s ago: executing program 2 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. syzkaller login: [ 57.118956][ T5771] cgroup: Unknown subsys name 'net' [ 57.279177][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.702939][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.230213][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.239473][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.247385][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.255605][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.263525][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.270898][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.294754][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.303417][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.305242][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.311375][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.318300][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.335452][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.335740][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.343405][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.350745][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.357462][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.364686][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.371596][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.378168][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.386361][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.402617][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.406389][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.417689][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.425816][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.836592][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 60.886273][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 60.968407][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 61.031903][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 61.119515][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.126909][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.135344][ T5781] bridge_slave_0: entered allmulticast mode [ 61.142104][ T5781] bridge_slave_0: entered promiscuous mode [ 61.159080][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.167634][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.174955][ T5783] bridge_slave_0: entered allmulticast mode [ 61.181634][ T5783] bridge_slave_0: entered promiscuous mode [ 61.198287][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.205447][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.212760][ T5781] bridge_slave_1: entered allmulticast mode [ 61.219432][ T5781] bridge_slave_1: entered promiscuous mode [ 61.238017][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.245232][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.252357][ T5783] bridge_slave_1: entered allmulticast mode [ 61.259779][ T5783] bridge_slave_1: entered promiscuous mode [ 61.340075][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.352425][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.362224][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.369684][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.377828][ T5782] bridge_slave_0: entered allmulticast mode [ 61.384661][ T5782] bridge_slave_0: entered promiscuous mode [ 61.394187][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.406203][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.424672][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.431799][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.439223][ T5780] bridge_slave_0: entered allmulticast mode [ 61.446883][ T5780] bridge_slave_0: entered promiscuous mode [ 61.464035][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.471189][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.478767][ T5782] bridge_slave_1: entered allmulticast mode [ 61.485635][ T5782] bridge_slave_1: entered promiscuous mode [ 61.516070][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.523651][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.530794][ T5780] bridge_slave_1: entered allmulticast mode [ 61.537750][ T5780] bridge_slave_1: entered promiscuous mode [ 61.569045][ T5781] team0: Port device team_slave_0 added [ 61.598812][ T5783] team0: Port device team_slave_0 added [ 61.619267][ T5781] team0: Port device team_slave_1 added [ 61.627745][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.640165][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.651129][ T5783] team0: Port device team_slave_1 added [ 61.670336][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.681743][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.753232][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.760212][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.786457][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.809779][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.816807][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.843774][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.865253][ T5782] team0: Port device team_slave_0 added [ 61.872314][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.879580][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.905644][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.919753][ T5780] team0: Port device team_slave_0 added [ 61.928562][ T5780] team0: Port device team_slave_1 added [ 61.935041][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.941970][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.967977][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.987390][ T5782] team0: Port device team_slave_1 added [ 62.031109][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.038152][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.064606][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.108798][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.116032][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.142201][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.173832][ T5783] hsr_slave_0: entered promiscuous mode [ 62.180132][ T5783] hsr_slave_1: entered promiscuous mode [ 62.188045][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.195123][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.221118][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.234075][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.241030][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.267322][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.292343][ T5781] hsr_slave_0: entered promiscuous mode [ 62.298998][ T5781] hsr_slave_1: entered promiscuous mode [ 62.305089][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.313692][ T5781] Cannot create hsr debugfs directory [ 62.419422][ T5780] hsr_slave_0: entered promiscuous mode [ 62.426223][ T5780] hsr_slave_1: entered promiscuous mode [ 62.432991][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.440557][ T5780] Cannot create hsr debugfs directory [ 62.474174][ T5784] Bluetooth: hci3: command tx timeout [ 62.477805][ T5787] Bluetooth: hci2: command tx timeout [ 62.479978][ T51] Bluetooth: hci1: command tx timeout [ 62.485586][ T5787] Bluetooth: hci0: command tx timeout [ 62.512283][ T5782] hsr_slave_0: entered promiscuous mode [ 62.518543][ T5782] hsr_slave_1: entered promiscuous mode [ 62.525180][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.532800][ T5782] Cannot create hsr debugfs directory [ 62.797507][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.825658][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.847447][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.858272][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.926969][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.945540][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.958575][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.984575][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.046216][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.059569][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.070006][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.093414][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.196039][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.208764][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.219641][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.236984][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.244110][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.306195][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.347750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.355114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.396537][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.411359][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.431698][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.438830][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.474599][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.513955][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521070][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.535813][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.565405][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.572568][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.584330][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.636299][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.643483][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.659636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.666848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.755588][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.819454][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.848139][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.855342][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.915385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.922574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.011667][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.138351][ T5783] veth0_vlan: entered promiscuous mode [ 64.181775][ T5783] veth1_vlan: entered promiscuous mode [ 64.239636][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.261614][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.310425][ T5783] veth0_macvtap: entered promiscuous mode [ 64.345297][ T5783] veth1_macvtap: entered promiscuous mode [ 64.389199][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.414314][ T5781] veth0_vlan: entered promiscuous mode [ 64.427559][ T5780] veth0_vlan: entered promiscuous mode [ 64.440628][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.461603][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.471785][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.481714][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.491003][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.505068][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.512880][ T5781] veth1_vlan: entered promiscuous mode [ 64.526062][ T5780] veth1_vlan: entered promiscuous mode [ 64.553935][ T5787] Bluetooth: hci1: command tx timeout [ 64.555572][ T51] Bluetooth: hci3: command tx timeout [ 64.559361][ T5787] Bluetooth: hci2: command tx timeout [ 64.565086][ T5784] Bluetooth: hci0: command tx timeout [ 64.649073][ T5780] veth0_macvtap: entered promiscuous mode [ 64.667172][ T5781] veth0_macvtap: entered promiscuous mode [ 64.698422][ T5781] veth1_macvtap: entered promiscuous mode [ 64.704948][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.715603][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.719233][ T5780] veth1_macvtap: entered promiscuous mode [ 64.768933][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.780908][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.794550][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.808799][ T5782] veth0_vlan: entered promiscuous mode [ 64.816994][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.820956][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.830337][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.843214][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.843227][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.843241][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.854722][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.885289][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.895843][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.906823][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.924520][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.935715][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.945586][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.956464][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969143][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.982222][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.991375][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000502][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.009276][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.037559][ T5782] veth1_vlan: entered promiscuous mode [ 65.050969][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.060543][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.070345][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.079805][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.222952][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.231120][ T5867] syz.2.3[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 65.240287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.280903][ T5782] veth0_macvtap: entered promiscuous mode [ 65.328721][ T5782] veth1_macvtap: entered promiscuous mode [ 65.339493][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.359776][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.391454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.409289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.434444][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.449833][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.461379][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.477287][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.499195][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.510244][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.527802][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.557381][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.569545][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590149][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.617296][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.632577][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.652663][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.668714][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.697729][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.710321][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720945][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.733738][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.752703][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.761442][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.909280][ T5867] loop2: detected capacity change from 0 to 40427 [ 65.958385][ T5867] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 65.984623][ T5867] F2FS-fs (loop2): Image doesn't support compression [ 66.003376][ T5867] F2FS-fs (loop2): Image doesn't support compression [ 66.034180][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.042041][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.065748][ T5867] F2FS-fs (loop2): invalid crc value [ 66.083867][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.092245][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.099104][ T5867] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.150819][ T5871] bridge0: entered allmulticast mode [ 66.232357][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.233897][ T5867] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.291480][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.323015][ T27] audit: type=1800 audit(1762164068.467:2): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 66.431526][ T5783] syz-executor: attempt to access beyond end of device [ 66.431526][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.454599][ T5116] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.484586][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 66.632617][ T5784] Bluetooth: hci0: command tx timeout [ 66.638095][ T51] Bluetooth: hci3: command tx timeout [ 66.643711][ T5793] Bluetooth: hci2: command tx timeout [ 66.645860][ T5787] Bluetooth: hci1: command tx timeout [ 66.650562][ T5869] loop0: detected capacity change from 0 to 32768 [ 66.660511][ T5116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.672110][ T5869] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5869) [ 66.716733][ T5116] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 66.717816][ T5869] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 66.762772][ T5869] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 66.772749][ T5869] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 66.795335][ T5869] BTRFS info (device loop0): use lzo compression, level 0 [ 66.802616][ T5116] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.802645][ T5116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.829929][ T5116] usb 2-1: config 0 descriptor?? [ 66.843026][ T5869] BTRFS info (device loop0): using free space tree [ 66.877551][ T5116] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 67.022875][ T5869] BTRFS info (device loop0): enabling ssd optimizations [ 67.064152][ T5869] BTRFS info (device loop0): auto enabling async discard [ 67.176552][ T27] audit: type=1804 audit(1762164069.327:3): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 67.458774][ T5781] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 67.706257][ T5881] loop3: detected capacity change from 0 to 40427 [ 67.736960][ T5881] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 67.760579][ T5881] F2FS-fs (loop3): Image doesn't support compression [ 67.775236][ T5881] F2FS-fs (loop3): Image doesn't support compression [ 67.795854][ T5903] bridge_slave_1: left allmulticast mode [ 67.801729][ T5903] bridge_slave_1: left promiscuous mode [ 67.818594][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.826386][ T5881] F2FS-fs (loop3): invalid crc value [ 67.861889][ T5903] bridge_slave_0: left allmulticast mode [ 67.878253][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.902273][ T5903] bridge_slave_0: left promiscuous mode [ 67.930371][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.037631][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 68.065901][ T27] audit: type=1800 audit(1762164070.217:4): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 68.091106][ T5881] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 68.128234][ T5881] syz.3.6: attempt to access beyond end of device [ 68.128234][ T5881] loop3: rw=2049, sector=77824, nr_sectors = 160 limit=40427 [ 68.278646][ T5782] syz-executor: attempt to access beyond end of device [ 68.278646][ T5782] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.294361][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 68.397092][ T5900] loop2: detected capacity change from 0 to 32768 [ 68.669220][ T5902] loop0: detected capacity change from 0 to 32768 [ 68.694287][ T5902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7 (5902) [ 68.712673][ T5787] Bluetooth: hci0: command tx timeout [ 68.712694][ T5784] Bluetooth: hci1: command tx timeout [ 68.718163][ T5787] Bluetooth: hci3: command tx timeout [ 68.723581][ T51] Bluetooth: hci2: command tx timeout [ 68.769964][ T5902] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.827175][ T5902] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 68.870933][ T5902] BTRFS info (device loop0): using free space tree [ 69.023859][ T5902] BTRFS info (device loop0): enabling ssd optimizations [ 69.092628][ T5902] BTRFS info (device loop0): auto enabling async discard [ 69.242747][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.381409][ T5173] usb 2-1: USB disconnect, device number 2 [ 69.559734][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.709123][ T5910] loop2: detected capacity change from 0 to 40427 [ 69.769960][ T5910] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 69.835283][ T5910] F2FS-fs (loop2): invalid crc value [ 69.858726][ T5910] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.075915][ T5910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.114300][ T5928] loop3: detected capacity change from 0 to 32768 [ 70.149588][ T5928] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.8 (5928) [ 70.243965][ T5783] syz-executor: attempt to access beyond end of device [ 70.243965][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.259064][ T5928] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 70.297686][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 70.300599][ T5928] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 70.326064][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 70.382641][ T5928] BTRFS info (device loop3): enabling disk space caching [ 70.389761][ T5928] BTRFS info (device loop3): force clearing of disk cache [ 70.442552][ T5928] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 70.469051][ T5928] BTRFS info (device loop3): use zstd compression, level 3 [ 70.485463][ T5928] BTRFS info (device loop3): disk space caching is enabled [ 70.698494][ T5928] BTRFS info (device loop3): enabling ssd optimizations [ 70.737944][ T5928] BTRFS info (device loop3): auto enabling async discard [ 70.767913][ T5928] BTRFS info (device loop3): rebuilding free space tree [ 70.858492][ T5928] BTRFS info (device loop3): disabling free space tree [ 70.877909][ T5928] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.905252][ T5928] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.964764][ T5949] loop0: detected capacity change from 0 to 32768 [ 71.054981][ T5949] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 71.221520][ T5949] XFS (loop0): Ending clean mount [ 71.250191][ T5782] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 71.255461][ T5949] XFS (loop0): Quotacheck needed: Please wait. [ 71.351230][ T5949] XFS (loop0): Quotacheck: Done. [ 71.527845][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.534754][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.642816][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 71.945739][ T5969] loop1: detected capacity change from 0 to 32768 [ 71.984747][ T5969] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.14 (5969) [ 72.044330][ T5969] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 72.092813][ T5969] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 72.127484][ T5969] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 72.138363][ T5980] loop2: detected capacity change from 0 to 40427 [ 72.165527][ T5980] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x7ffff [ 72.168176][ T5969] BTRFS info (device loop1): use lzo compression, level 0 [ 72.192905][ T5980] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c [ 72.211463][ T5969] BTRFS info (device loop1): using free space tree [ 72.221309][ T5980] F2FS-fs (loop2): invalid crc value [ 72.260886][ T5980] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 72.309670][ T5980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.353263][ T5969] BTRFS info (device loop1): enabling ssd optimizations [ 72.360839][ T5969] BTRFS info (device loop1): auto enabling async discard [ 72.451313][ T5980] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 72.527222][ T5780] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 72.557844][ T5980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.617275][ T5980] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 72.664823][ T27] audit: type=1800 audit(1762164074.817:5): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=11 res=0 errno=0 [ 72.697572][ T6010] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 72.926660][ T5783] syz-executor: attempt to access beyond end of device [ 72.926660][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.970562][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 73.116335][ T5985] loop3: detected capacity change from 0 to 32768 [ 73.175241][ T5985] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 73.283520][ T5985] XFS (loop3): Ending clean mount [ 73.307183][ T5985] XFS (loop3): Quotacheck needed: Please wait. [ 73.397430][ T5985] XFS (loop3): Quotacheck: Done. [ 73.571977][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 75.451061][ T6058] loop3: detected capacity change from 0 to 128 [ 75.451684][ T6056] vlan2: entered allmulticast mode [ 75.477463][ T6056] bridge_slave_0: entered allmulticast mode [ 75.504882][ T6058] FAT-fs (loop3): Directory bread(block 414) failed [ 75.511783][ T6058] FAT-fs (loop3): Directory bread(block 415) failed [ 75.532698][ T6058] FAT-fs (loop3): Directory bread(block 416) failed [ 75.539351][ T6058] FAT-fs (loop3): Directory bread(block 417) failed [ 75.565549][ T6058] FAT-fs (loop3): Directory bread(block 418) failed [ 75.572208][ T6058] FAT-fs (loop3): Directory bread(block 419) failed [ 75.598528][ T6058] FAT-fs (loop3): Directory bread(block 420) failed [ 75.621900][ T6058] FAT-fs (loop3): Directory bread(block 421) failed [ 75.623491][ T6047] loop0: detected capacity change from 0 to 32768 [ 75.672196][ T6047] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (6047) [ 75.935491][ T6047] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 75.967024][ T6047] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 76.128212][ T6047] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 76.692289][ T6047] BTRFS info (device loop0): use lzo compression, level 0 [ 76.722832][ T6047] BTRFS info (device loop0): using free space tree [ 76.962673][ T6047] BTRFS info (device loop0): enabling ssd optimizations [ 76.969677][ T6047] BTRFS info (device loop0): auto enabling async discard [ 77.123114][ T6047] fs-verity: sha256 using implementation "sha256-avx2" [ 77.144728][ T6047] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 77.172382][ T6060] loop1: detected capacity change from 0 to 32768 [ 77.201949][ T6060] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.30 (6060) [ 77.464529][ T5797] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5797) [ 77.603528][ T5781] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 77.821024][ T5784] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 77.826070][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.956341][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.042637][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 78.052553][ T8] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 78.072012][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.092550][ T8] usb 2-1: Product: syz [ 78.096757][ T8] usb 2-1: Manufacturer: syz [ 78.101361][ T8] usb 2-1: SerialNumber: syz [ 78.117342][ T8] usb 2-1: config 0 descriptor?? [ 78.142747][ T5848] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.188243][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.199426][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.209728][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.223324][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.232411][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.246391][ T9] usb 4-1: config 0 descriptor?? [ 78.322697][ T5848] usb 3-1: device descriptor read/64, error -71 [ 78.467147][ T8] usb 2-1: USB disconnect, device number 3 [ 78.642945][ T5848] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.705012][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 78.753273][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 78.807056][ T5848] usb 3-1: device descriptor read/64, error -71 [ 78.942893][ T5848] usb usb3-port1: attempt power cycle [ 79.304518][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.329395][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.3.36) [ 79.382564][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.413330][ T5848] usb 3-1: device descriptor read/8, error -71 [ 79.422590][ T5785] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.494996][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 79.505973][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.516673][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 79.524373][ T9] usb 2-1: can't read configurations, error -71 [ 79.533788][ T23] usb 4-1: USB disconnect, device number 2 [ 79.604176][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.614725][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.627659][ T5785] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 79.636795][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.647286][ T5785] usb 1-1: config 0 descriptor?? [ 79.692644][ T5848] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.727235][ T5848] usb 3-1: device descriptor read/8, error -71 [ 79.852751][ T5848] usb usb3-port1: unable to enumerate USB device [ 80.067042][ T5785] holtek 0003:1241:5015.0002: unknown main item tag 0x3 [ 80.078244][ T5785] holtek 0003:1241:5015.0002: item fetching failed at offset 3/5 [ 80.094078][ T5785] holtek 0003:1241:5015.0002: parse failed [ 80.103042][ T5785] holtek: probe of 0003:1241:5015.0002 failed with error -22 [ 80.137698][ T6120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.145240][ T6120] IPv6: NLM_F_CREATE should be set when creating new route [ 80.152587][ T6120] IPv6: NLM_F_CREATE should be set when creating new route [ 80.159827][ T6120] IPv6: NLM_F_CREATE should be set when creating new route [ 80.265892][ T5785] usb 1-1: USB disconnect, device number 2 [ 80.412712][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.474738][ T5848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.592575][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 80.599263][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.607642][ T9] usb 2-1: config 0 has no interface number 0 [ 80.614235][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 80.624498][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.633592][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.642239][ T9] usb 2-1: Product: syz [ 80.646708][ T9] usb 2-1: Manufacturer: syz [ 80.651439][ T9] usb 2-1: SerialNumber: syz [ 80.657923][ T9] usb 2-1: config 0 descriptor?? [ 80.665513][ T9] smsc75xx v1.0.0 [ 80.676419][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.685170][ T5848] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 80.694299][ T5848] usb 4-1: config 1 has no interface number 1 [ 80.704753][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.713957][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.721968][ T5848] usb 4-1: Product: syz [ 80.726264][ T5848] usb 4-1: Manufacturer: syz [ 80.730916][ T5848] usb 4-1: SerialNumber: syz [ 80.921801][ T6126] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 80.930009][ T6126] netlink: 64 bytes leftover after parsing attributes in process `syz.2.47'. [ 80.952853][ T6126] block nbd0: not configured, cannot reconfigure [ 81.009411][ T5848] usb 4-1: 2:1 : unknown format tag 0x1000 is detected. processed as MPEG. [ 81.021896][ T5848] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 81.032824][ T5848] usb 4-1: 2:1: All rates were zero [ 81.046812][ T6130] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 81.074859][ T5848] usb 4-1: USB disconnect, device number 3 [ 81.124493][ T5775] udevd[5775]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 81.158633][ T5775] udevd[5775]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 81.284598][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 81.298214][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.760575][ T28] cfg80211: failed to load regulatory.db [ 81.893305][ T6142] syzkaller1: entered promiscuous mode [ 81.903625][ T6142] syzkaller1: entered allmulticast mode [ 82.146430][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.171442][ C1] ------------[ cut here ]------------ [ 82.177241][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 82.188111][ C1] WARNING: CPU: 1 PID: 6150 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 82.198194][ C1] Modules linked in: [ 82.202126][ C1] CPU: 1 PID: 6150 Comm: syz.3.59 Not tainted syzkaller #0 [ 82.209398][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.219500][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 82.225826][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 9f be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 55 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 82.245489][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 82.251598][ C1] RAX: 9d8df829a02d7c00 RBX: 000000000000000c RCX: ffff88802c5e8000 [ 82.259617][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 82.267636][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 82.275643][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000040 [ 82.283664][ C1] R13: dffffc0000000000 R14: ffff88807d27b358 R15: ffff888024084168 [ 82.291646][ C1] FS: 00007fd4e90d66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 82.300629][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.307268][ C1] CR2: 00007fd4e90b5d58 CR3: 0000000075116000 CR4: 00000000003506e0 [ 82.315298][ C1] Call Trace: [ 82.318599][ C1] [ 82.321482][ C1] rate_control_send_low+0x194/0x790 [ 82.326835][ C1] rate_control_get_rate+0x20b/0x5c0 [ 82.332162][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 82.338055][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 82.344099][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 82.349505][ C1] ? _local_bh_enable+0xa0/0xa0 [ 82.354446][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 82.360128][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 82.365328][ C1] ? read_lock_is_recursive+0x20/0x20 [ 82.366101][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.370721][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 82.370763][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 82.370788][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 82.396579][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 82.402070][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 82.402252][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.408902][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 82.408939][ C1] __iterate_interfaces+0x243/0x500 [ 82.408964][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 82.408989][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 82.409015][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 82.409038][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 82.439227][ T8] usb 1-1: Product: syz [ 82.441242][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 82.441275][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 82.450602][ T8] usb 1-1: Manufacturer: syz [ 82.454604][ C1] ? hw_scan_work+0xf40/0xf40 [ 82.454641][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 82.454661][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 82.454693][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 82.454719][ C1] handle_softirqs+0x280/0x820 [ 82.454742][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 82.454764][ C1] ? do_softirq+0x180/0x180 [ 82.454785][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 82.465146][ T8] usb 1-1: SerialNumber: syz [ 82.469348][ C1] __irq_exit_rcu+0xc7/0x190 [ 82.469375][ C1] ? irq_exit_rcu+0x20/0x20 [ 82.469400][ C1] irq_exit_rcu+0x9/0x20 [ 82.469416][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 82.538004][ C1] [ 82.540946][ C1] [ 82.543932][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.549933][ C1] RIP: 0010:kvm_sched_clock_read+0xc/0x20 [ 82.555729][ C1] Code: e2 f6 5c 48 c7 c7 00 20 a8 8a e8 5f 1a 00 00 65 c6 05 49 ee 94 75 00 eb 9b cc cc cc cc cc f3 0f 1e fa 65 48 8b 3d 24 bb 93 75 3f 00 00 00 48 2b 05 d8 76 0e 02 c3 cc cc cc cc cc cc cc f3 0f [ 82.575387][ C1] RSP: 0018:ffffc9000b8f71e8 EFLAGS: 00000282 [ 82.581480][ C1] RAX: ffffffff81e6025a RBX: dffffc0000000000 RCX: 0000000000080000 [ 82.589527][ C1] RDX: ffffc9000d7bc000 RSI: 000000000007ffff RDI: ffffffff8fc9d040 [ 82.597573][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff21b50a0 [ 82.605606][ C1] R10: dffffc0000000000 R11: fffffbfff21b50a1 R12: 0000000000000000 [ 82.613632][ C1] R13: 0000000000000001 R14: 0000000005c002e1 R15: ffff888018a1b550 [ 82.621625][ C1] ? __set_page_owner_handle+0x2a/0x3c0 [ 82.627260][ C1] local_clock_noinstr+0xc/0xd0 [ 82.632134][ C1] local_clock+0x10/0x20 [ 82.636443][ C1] __set_page_owner_handle+0x2f/0x3c0 [ 82.641848][ C1] ? page_ext_get+0x1e2/0x2b0 [ 82.646580][ C1] __set_page_owner+0x45/0x60 [ 82.651288][ C1] post_alloc_hook+0x1cd/0x210 [ 82.656116][ C1] get_page_from_freelist+0x195c/0x19f0 [ 82.661712][ C1] ? mark_lock+0x94/0x320 [ 82.666126][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 82.671534][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 82.676908][ C1] __alloc_pages+0x1e3/0x460 [ 82.681539][ C1] ? zone_statistics+0x170/0x170 [ 82.686583][ C1] ? alloc_pages+0x4dc/0x740 [ 82.691219][ C1] ? folio_add_lru+0x320/0xd50 [ 82.696056][ C1] folio_alloc+0x1e/0x30 [ 82.700329][ C1] filemap_alloc_folio+0xdf/0x470 [ 82.705443][ C1] ? filemap_add_folio+0x3c0/0x3c0 [ 82.710604][ C1] ? xa_load+0x2c0/0x2e0 [ 82.715259][ C1] ? xa_load+0x64/0x2e0 [ 82.719457][ C1] page_cache_ra_unbounded+0x17b/0x770 [ 82.725013][ C1] filemap_fault+0x541/0x15a0 [ 82.729724][ C1] ? mapping_seek_hole_data+0x1310/0x1310 [ 82.735516][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 82.740576][ C1] __do_fault+0x13b/0x4e0 [ 82.744962][ C1] ? handle_mm_fault+0x386a/0x4920 [ 82.750106][ C1] ? handle_mm_fault+0xd1/0x4920 [ 82.755097][ C1] handle_mm_fault+0x3886/0x4920 [ 82.760064][ C1] ? handle_mm_fault+0xd1/0x4920 [ 82.765069][ C1] ? numa_migrate_prep+0x350/0x350 [ 82.770212][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 82.775317][ C1] ? pmd_lock+0x60/0x60 [ 82.779513][ C1] __get_user_pages+0x5ea/0x1470 [ 82.784537][ C1] ? mtree_destroy+0x30/0x30 [ 82.789145][ C1] ? populate_vma_page_range+0x370/0x370 [ 82.794840][ C1] populate_vma_page_range+0x2b6/0x370 [ 82.800329][ C1] ? fixup_user_fault+0x710/0x710 [ 82.805422][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 82.811359][ C1] ? down_read+0x1ac/0x2e0 [ 82.815843][ C1] __mm_populate+0x24c/0x380 [ 82.820462][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 82.825740][ C1] ? up_write+0x1c3/0x410 [ 82.830097][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 82.834769][ C1] ? account_locked_vm+0x210/0x210 [ 82.839919][ C1] ksys_mmap_pgoff+0x520/0x700 [ 82.844762][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 82.849559][ C1] do_syscall_64+0x55/0xb0 [ 82.854032][ C1] ? clear_bhb_loop+0x40/0x90 [ 82.858731][ C1] ? clear_bhb_loop+0x40/0x90 [ 82.863476][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.869391][ C1] RIP: 0033:0x7fd4e818efc9 [ 82.873887][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.893556][ C1] RSP: 002b:00007fd4e90d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.901998][ C1] RAX: ffffffffffffffda RBX: 00007fd4e83e5fa0 RCX: 00007fd4e818efc9 [ 82.905126][ T8] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 82.910026][ C1] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 82.910045][ C1] RBP: 00007fd4e8211f91 R08: 0000000000000007 R09: 0000000000000000 [ 82.910061][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 82.910071][ C1] R13: 00007fd4e83e6038 R14: 00007fd4e83e5fa0 R15: 00007ffde8748c08 [ 82.910099][ C1] [ 82.956754][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.964048][ C1] CPU: 1 PID: 6150 Comm: syz.3.59 Not tainted syzkaller #0 [ 82.971265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.981339][ C1] Call Trace: [ 82.984633][ C1] [ 82.987512][ C1] dump_stack_lvl+0x16c/0x230 [ 82.992210][ C1] ? show_regs_print_info+0x20/0x20 [ 82.997430][ C1] ? load_image+0x3b0/0x3b0 [ 83.001968][ C1] panic+0x2c0/0x710 [ 83.005886][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 83.010430][ C1] __warn+0x2e0/0x470 [ 83.014436][ C1] ? __rate_control_send_low+0x635/0x880 [ 83.020100][ C1] ? __rate_control_send_low+0x635/0x880 [ 83.025732][ C1] report_bug+0x2be/0x4f0 [ 83.030087][ C1] ? __rate_control_send_low+0x635/0x880 [ 83.035737][ C1] ? __rate_control_send_low+0x635/0x880 [ 83.041385][ C1] ? __rate_control_send_low+0x637/0x880 [ 83.047021][ C1] handle_bug+0xcf/0x120 [ 83.051278][ C1] exc_invalid_op+0x1a/0x50 [ 83.055796][ C1] asm_exc_invalid_op+0x1a/0x20 [ 83.060650][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 83.066905][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 9f be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 55 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 83.086525][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 83.092591][ C1] RAX: 9d8df829a02d7c00 RBX: 000000000000000c RCX: ffff88802c5e8000 [ 83.100557][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 83.108514][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 83.116831][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000040 [ 83.124797][ C1] R13: dffffc0000000000 R14: ffff88807d27b358 R15: ffff888024084168 [ 83.132832][ C1] rate_control_send_low+0x194/0x790 [ 83.138113][ C1] rate_control_get_rate+0x20b/0x5c0 [ 83.143397][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 83.149196][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 83.155169][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 83.160535][ C1] ? _local_bh_enable+0xa0/0xa0 [ 83.165376][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 83.171009][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 83.176124][ C1] ? read_lock_is_recursive+0x20/0x20 [ 83.181494][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 83.187033][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 83.192584][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 83.198135][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 83.203593][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 83.210354][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 83.215895][ C1] __iterate_interfaces+0x243/0x500 [ 83.221085][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 83.227314][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 83.234505][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 83.240744][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 83.247760][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 83.252952][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 83.258141][ C1] ? hw_scan_work+0xf40/0xf40 [ 83.262815][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 83.267913][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 83.273976][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 83.279079][ C1] handle_softirqs+0x280/0x820 [ 83.283832][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 83.288584][ C1] ? do_softirq+0x180/0x180 [ 83.293076][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 83.298268][ C1] __irq_exit_rcu+0xc7/0x190 [ 83.302852][ C1] ? irq_exit_rcu+0x20/0x20 [ 83.307361][ C1] irq_exit_rcu+0x9/0x20 [ 83.311591][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 83.317223][ C1] [ 83.320142][ C1] [ 83.323067][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.329040][ C1] RIP: 0010:kvm_sched_clock_read+0xc/0x20 [ 83.334758][ C1] Code: e2 f6 5c 48 c7 c7 00 20 a8 8a e8 5f 1a 00 00 65 c6 05 49 ee 94 75 00 eb 9b cc cc cc cc cc f3 0f 1e fa 65 48 8b 3d 24 bb 93 75 3f 00 00 00 48 2b 05 d8 76 0e 02 c3 cc cc cc cc cc cc cc f3 0f [ 83.354353][ C1] RSP: 0018:ffffc9000b8f71e8 EFLAGS: 00000282 [ 83.360410][ C1] RAX: ffffffff81e6025a RBX: dffffc0000000000 RCX: 0000000000080000 [ 83.368369][ C1] RDX: ffffc9000d7bc000 RSI: 000000000007ffff RDI: ffffffff8fc9d040 [ 83.376330][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff21b50a0 [ 83.384288][ C1] R10: dffffc0000000000 R11: fffffbfff21b50a1 R12: 0000000000000000 [ 83.392250][ C1] R13: 0000000000000001 R14: 0000000005c002e1 R15: ffff888018a1b550 [ 83.400219][ C1] ? __set_page_owner_handle+0x2a/0x3c0 [ 83.405770][ C1] local_clock_noinstr+0xc/0xd0 [ 83.410607][ C1] local_clock+0x10/0x20 [ 83.414836][ C1] __set_page_owner_handle+0x2f/0x3c0 [ 83.420201][ C1] ? page_ext_get+0x1e2/0x2b0 [ 83.424869][ C1] __set_page_owner+0x45/0x60 [ 83.429540][ C1] post_alloc_hook+0x1cd/0x210 [ 83.434304][ C1] get_page_from_freelist+0x195c/0x19f0 [ 83.439855][ C1] ? mark_lock+0x94/0x320 [ 83.444179][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 83.449553][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 83.454838][ C1] __alloc_pages+0x1e3/0x460 [ 83.459434][ C1] ? zone_statistics+0x170/0x170 [ 83.464380][ C1] ? alloc_pages+0x4dc/0x740 [ 83.468965][ C1] ? folio_add_lru+0x320/0xd50 [ 83.473717][ C1] folio_alloc+0x1e/0x30 [ 83.477966][ C1] filemap_alloc_folio+0xdf/0x470 [ 83.482995][ C1] ? filemap_add_folio+0x3c0/0x3c0 [ 83.488102][ C1] ? xa_load+0x2c0/0x2e0 [ 83.492331][ C1] ? xa_load+0x64/0x2e0 [ 83.496480][ C1] page_cache_ra_unbounded+0x17b/0x770 [ 83.501954][ C1] filemap_fault+0x541/0x15a0 [ 83.506639][ C1] ? mapping_seek_hole_data+0x1310/0x1310 [ 83.512360][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 83.517398][ C1] __do_fault+0x13b/0x4e0 [ 83.521717][ C1] ? handle_mm_fault+0x386a/0x4920 [ 83.526827][ C1] ? handle_mm_fault+0xd1/0x4920 [ 83.531767][ C1] handle_mm_fault+0x3886/0x4920 [ 83.536702][ C1] ? handle_mm_fault+0xd1/0x4920 [ 83.541647][ C1] ? numa_migrate_prep+0x350/0x350 [ 83.546751][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 83.551773][ C1] ? pmd_lock+0x60/0x60 [ 83.555926][ C1] __get_user_pages+0x5ea/0x1470 [ 83.560869][ C1] ? mtree_destroy+0x30/0x30 [ 83.565451][ C1] ? populate_vma_page_range+0x370/0x370 [ 83.571084][ C1] populate_vma_page_range+0x2b6/0x370 [ 83.576545][ C1] ? fixup_user_fault+0x710/0x710 [ 83.581566][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 83.587469][ C1] ? down_read+0x1ac/0x2e0 [ 83.591881][ C1] __mm_populate+0x24c/0x380 [ 83.596462][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 83.601653][ C1] ? up_write+0x1c3/0x410 [ 83.605976][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 83.610561][ C1] ? account_locked_vm+0x210/0x210 [ 83.615673][ C1] ksys_mmap_pgoff+0x520/0x700 [ 83.620434][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 83.625195][ C1] do_syscall_64+0x55/0xb0 [ 83.629602][ C1] ? clear_bhb_loop+0x40/0x90 [ 83.634276][ C1] ? clear_bhb_loop+0x40/0x90 [ 83.638946][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.644826][ C1] RIP: 0033:0x7fd4e818efc9 [ 83.649228][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.668833][ C1] RSP: 002b:00007fd4e90d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.677236][ C1] RAX: ffffffffffffffda RBX: 00007fd4e83e5fa0 RCX: 00007fd4e818efc9 [ 83.685194][ C1] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 83.693150][ C1] RBP: 00007fd4e8211f91 R08: 0000000000000007 R09: 0000000000000000 [ 83.701110][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 83.709072][ C1] R13: 00007fd4e83e6038 R14: 00007fd4e83e5fa0 R15: 00007ffde8748c08 [ 83.717045][ C1] [ 83.720284][ C1] Kernel Offset: disabled [ 83.724636][ C1] Rebooting in 86400 seconds..