last executing test programs: 4.626444479s ago: executing program 0 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x8, 0x0, 0x0, 0xa83, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x33, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 4.215380468s ago: executing program 0 (id=65): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0xc5, 0xb6, 0x10, 0x456, 0xf000, 0xf37f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x25, 0xea}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.645063223s ago: executing program 2 (id=70): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0801c2", 0x3}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.364369455s ago: executing program 2 (id=72): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000800009c000040"]) 3.310821498s ago: executing program 3 (id=73): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[], 0x9) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="02c8"], 0xf) 3.195308298s ago: executing program 2 (id=74): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) 3.135998617s ago: executing program 3 (id=75): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x34}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24008440) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.025268797s ago: executing program 2 (id=76): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f00005ca000/0x2000)=nil, 0x2000, 0x1) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.912999217s ago: executing program 3 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.767038926s ago: executing program 2 (id=79): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002400), 0x0, 0x2b82) 2.684260242s ago: executing program 3 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14", 0x67}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 2.537156966s ago: executing program 1 (id=82): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) io_uring_setup(0x1a4a, &(0x7f00000002c0)={0x0, 0xc356, 0x0, 0xfffffffe, 0x348}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.475985778s ago: executing program 3 (id=83): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d40edce68510449"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2.475097289s ago: executing program 2 (id=84): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) 2.267016324s ago: executing program 0 (id=86): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f00000000c0)="8672"}) 2.236554879s ago: executing program 3 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="766572626f73652c6a6f75726e616c5f7472616e736163735d60b65f6e616d65732c6e6f7265636f766572792c636f6d7072657373696f6e3d6c7a342c657261737572655f636f64652c636f6de512657373696f6e3d7a7374642c696e6c696e655f646174612c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d677a69702c6e6f636f772c72772c736d61636b5e5b402c6673636f6e746578743d756e636f6e6669fe0a645f752c61707072616973652c6f626a5f726f6c653d2c6f626a5f757365723d2c00cceb99cf8efdbbc6ae4181a26bbff460c1c8ed816462d332da99e1c9d501b2f84418795039cb396aaead1ee4cfe08fdb8b98cafc2fc66729648fd8244e38a8ad980cdef833014e304f756960f2584bf7275e4b37d13a426eab66df74902a56a667b4922816529ad484fab6ab007b93cdced73d030400000000000000"], 0xff, 0x5978, &(0x7f0000002080)="$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") setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 1.972268582s ago: executing program 0 (id=89): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x33a77c20f21f5ff8}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 1.577006493s ago: executing program 4 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.514580292s ago: executing program 1 (id=91): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000480)={0x82e8, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x18) 1.236758004s ago: executing program 4 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.16193643s ago: executing program 1 (id=93): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[], 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 1.073735861s ago: executing program 4 (id=94): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwrite64(r1, &(0x7f0000000280)="11", 0x1, 0x8407) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 940.876927ms ago: executing program 1 (id=95): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 914.702133ms ago: executing program 0 (id=96): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) 893.429419ms ago: executing program 1 (id=97): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 632.307915ms ago: executing program 1 (id=98): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f00000003c0), 0x10, 0xc36, &(0x7f0000001cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) sendfile(r0, r1, 0x0, 0xfffe82) 495.565927ms ago: executing program 4 (id=99): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) 405.044614ms ago: executing program 0 (id=100): socket(0x18, 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x101202, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 144.352985ms ago: executing program 4 (id=101): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 4 (id=102): openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000f00)="9e"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 82.321592][ T5822] cgroup: Unknown subsys name 'net' [ 82.469122][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.477937][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.112657][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.138374][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.138847][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.153944][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.156139][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.165443][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.168587][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.184070][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.192049][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.199820][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.207964][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.216703][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.225070][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.232649][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.246964][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.258816][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.305201][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.317381][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.332689][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.336936][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.341228][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.355153][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.361000][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.371037][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.379747][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.387461][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.021883][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.036470][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.178742][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.210369][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 89.266449][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.382694][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.390209][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.400034][ T5837] bridge_slave_0: entered allmulticast mode [ 89.407484][ T5837] bridge_slave_0: entered promiscuous mode [ 89.471378][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.478756][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486524][ T5837] bridge_slave_1: entered allmulticast mode [ 89.493776][ T5837] bridge_slave_1: entered promiscuous mode [ 89.526176][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.533335][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.540621][ T5836] bridge_slave_0: entered allmulticast mode [ 89.548088][ T5836] bridge_slave_0: entered promiscuous mode [ 89.556345][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.563530][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.570981][ T5836] bridge_slave_1: entered allmulticast mode [ 89.578519][ T5836] bridge_slave_1: entered promiscuous mode [ 89.613461][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.620729][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.627968][ T5844] bridge_slave_0: entered allmulticast mode [ 89.635903][ T5844] bridge_slave_0: entered promiscuous mode [ 89.693093][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.706808][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.716478][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.723573][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.731180][ T5844] bridge_slave_1: entered allmulticast mode [ 89.738379][ T5844] bridge_slave_1: entered promiscuous mode [ 89.760532][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.767958][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.775194][ T5852] bridge_slave_0: entered allmulticast mode [ 89.782413][ T5852] bridge_slave_0: entered promiscuous mode [ 89.805740][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.852980][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.860553][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.867942][ T5852] bridge_slave_1: entered allmulticast mode [ 89.876089][ T5852] bridge_slave_1: entered promiscuous mode [ 89.885255][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.909740][ T5837] team0: Port device team_slave_0 added [ 89.969682][ T5837] team0: Port device team_slave_1 added [ 89.980423][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.989808][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.997684][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.004970][ T5850] bridge_slave_0: entered allmulticast mode [ 90.012214][ T5850] bridge_slave_0: entered promiscuous mode [ 90.050046][ T5836] team0: Port device team_slave_0 added [ 90.071570][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.081347][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.088741][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.096723][ T5850] bridge_slave_1: entered allmulticast mode [ 90.103909][ T5850] bridge_slave_1: entered promiscuous mode [ 90.113472][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.124504][ T5836] team0: Port device team_slave_1 added [ 90.177144][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.199308][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.206737][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.232681][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.315558][ T5842] Bluetooth: hci2: command tx timeout [ 90.322407][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.324960][ T5854] Bluetooth: hci4: command tx timeout [ 90.330236][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.361034][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.375297][ T5844] team0: Port device team_slave_0 added [ 90.384297][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.396525][ T5852] team0: Port device team_slave_0 added [ 90.403139][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.410410][ T5854] Bluetooth: hci0: command tx timeout [ 90.416127][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.442110][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.461725][ T5844] team0: Port device team_slave_1 added [ 90.484209][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.485539][ T5854] Bluetooth: hci3: command tx timeout [ 90.493574][ T5842] Bluetooth: hci1: command tx timeout [ 90.508553][ T5852] team0: Port device team_slave_1 added [ 90.515845][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.522813][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.549606][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.624511][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.631807][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.657821][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.720183][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.728395][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.754820][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.775410][ T5850] team0: Port device team_slave_0 added [ 90.782056][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.789380][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.815543][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.833174][ T5836] hsr_slave_0: entered promiscuous mode [ 90.840192][ T5836] hsr_slave_1: entered promiscuous mode [ 90.863049][ T5850] team0: Port device team_slave_1 added [ 90.886172][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.893237][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.919584][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.938113][ T5837] hsr_slave_0: entered promiscuous mode [ 90.944417][ T5837] hsr_slave_1: entered promiscuous mode [ 90.950936][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.958848][ T5837] Cannot create hsr debugfs directory [ 91.057723][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.064718][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.092157][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.143699][ T5852] hsr_slave_0: entered promiscuous mode [ 91.150268][ T5852] hsr_slave_1: entered promiscuous mode [ 91.157311][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.165051][ T5852] Cannot create hsr debugfs directory [ 91.175812][ T5844] hsr_slave_0: entered promiscuous mode [ 91.182207][ T5844] hsr_slave_1: entered promiscuous mode [ 91.188582][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.196546][ T5844] Cannot create hsr debugfs directory [ 91.202764][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.210108][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.239476][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.466849][ T5850] hsr_slave_0: entered promiscuous mode [ 91.473220][ T5850] hsr_slave_1: entered promiscuous mode [ 91.482520][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.490303][ T5850] Cannot create hsr debugfs directory [ 91.838047][ T978] cfg80211: failed to load regulatory.db [ 91.912403][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.933635][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.961745][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.992027][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.044585][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.060920][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.080115][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.090937][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.190738][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.204439][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.222175][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.258862][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.330496][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.351637][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.364209][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.393320][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.400176][ T5842] Bluetooth: hci4: command tx timeout [ 92.400432][ T5854] Bluetooth: hci2: command tx timeout [ 92.466479][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.474980][ T5854] Bluetooth: hci0: command tx timeout [ 92.535912][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.546698][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.555795][ T5854] Bluetooth: hci3: command tx timeout [ 92.565147][ T5854] Bluetooth: hci1: command tx timeout [ 92.579621][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.591047][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.613336][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.629227][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.636455][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.648652][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.679515][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.686703][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.720878][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.783335][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.790538][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.819326][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.840123][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.847312][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.946133][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.971022][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.978225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.017708][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.024982][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.051051][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.180964][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.226573][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.233762][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.283915][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.299890][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.307100][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.443216][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.484273][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.525466][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.532869][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.582489][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.589663][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.701089][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.722863][ T5837] veth0_vlan: entered promiscuous mode [ 93.753793][ T5837] veth1_vlan: entered promiscuous mode [ 93.766134][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.941692][ T5837] veth0_macvtap: entered promiscuous mode [ 93.970354][ T5837] veth1_macvtap: entered promiscuous mode [ 94.062659][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.111175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.143595][ T5852] veth0_vlan: entered promiscuous mode [ 94.169375][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180045][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189673][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.198707][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.237023][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.249529][ T5852] veth1_vlan: entered promiscuous mode [ 94.308729][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.410050][ T5852] veth0_macvtap: entered promiscuous mode [ 94.471451][ T5852] veth1_macvtap: entered promiscuous mode [ 94.479671][ T5854] Bluetooth: hci2: command tx timeout [ 94.485580][ T5854] Bluetooth: hci4: command tx timeout [ 94.493127][ T5836] veth0_vlan: entered promiscuous mode [ 94.501411][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.518916][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.540841][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.556123][ T5854] Bluetooth: hci0: command tx timeout [ 94.585462][ T5844] veth0_vlan: entered promiscuous mode [ 94.593008][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.610030][ T5836] veth1_vlan: entered promiscuous mode [ 94.629791][ T5850] veth0_vlan: entered promiscuous mode [ 94.635690][ T5854] Bluetooth: hci1: command tx timeout [ 94.635719][ T5842] Bluetooth: hci3: command tx timeout [ 94.648540][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.649212][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.665103][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.665154][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.665190][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.674110][ T5844] veth1_vlan: entered promiscuous mode [ 94.675626][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.721674][ T5850] veth1_vlan: entered promiscuous mode [ 94.761900][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.867328][ T5836] veth0_macvtap: entered promiscuous mode [ 94.903837][ T5836] veth1_macvtap: entered promiscuous mode [ 94.917035][ T5844] veth0_macvtap: entered promiscuous mode [ 94.994106][ T5844] veth1_macvtap: entered promiscuous mode [ 95.040534][ T5850] veth0_macvtap: entered promiscuous mode [ 95.066570][ T5850] veth1_macvtap: entered promiscuous mode [ 95.084215][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.093626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.107557][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.120260][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.150592][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.162206][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.176643][ T5930] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 95.251886][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.262546][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.272055][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281977][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.302231][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.312903][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.314721][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.329853][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339684][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.348748][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.359377][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380165][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.429791][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454846][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463671][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.476842][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.872296][ T5948] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 95.884465][ T5931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.893473][ T5931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.894855][ T5932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.926914][ T5931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.954007][ T5932] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 95.984579][ T5931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.003125][ T5932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.003656][ T5931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.051635][ T5932] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 96.073614][ T5931] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.101099][ T5931] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.111742][ T5932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.121362][ T5931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.132494][ T5932] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 96.143290][ T5931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.171917][ T5931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.182935][ T5931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.194130][ T5932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.202652][ T5932] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 96.220651][ T5931] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.242974][ T5931] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.253957][ T5932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.267461][ T5932] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 96.585924][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.593796][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.685515][ T5968] loop1: detected capacity change from 0 to 1024 [ 96.702625][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.775093][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.918972][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.959765][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.980018][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.024832][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.226048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.265343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.350018][ T5981] loop1: detected capacity change from 0 to 512 [ 97.361442][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.382752][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.563836][ T5981] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 98.165657][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.492958][ T5997] loop3: detected capacity change from 0 to 40427 [ 99.553939][ T6009] syz.4.17 (6009): drop_caches: 2 [ 99.579851][ T5997] F2FS-fs (loop3): invalid crc value [ 99.688789][ T6025] loop0: detected capacity change from 0 to 764 [ 99.704229][ T6027] input: syz1 as /devices/virtual/input/input5 [ 99.764024][ T6025] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 100.136670][ T5997] F2FS-fs (loop3): Start checkpoint disabled! [ 100.183449][ T5997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 100.393576][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 100.401666][ T5997] syz.3.15: attempt to access beyond end of device [ 100.401666][ T5997] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 100.417278][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 100.453007][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 100.462089][ T6059] loop2: detected capacity change from 0 to 128 [ 100.478240][ T5997] syz.3.15: attempt to access beyond end of device [ 100.478240][ T5997] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.520696][ T6059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.541299][ T5997] syz.3.15: attempt to access beyond end of device [ 100.541299][ T5997] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 100.577548][ T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.607395][ T6059] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.639185][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.654075][ T49] kworker/u8:3: attempt to access beyond end of device [ 100.654075][ T49] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 100.678921][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 100.678951][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.678962][ T49] Workqueue: writeback wb_workfn (flush-7:3) [ 100.679017][ T49] Call Trace: [ 100.679025][ T49] [ 100.679033][ T49] dump_stack_lvl+0x189/0x250 [ 100.679055][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.679070][ T49] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 100.679100][ T49] ? __pfx_queue_work_on+0x10/0x10 [ 100.679119][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.679147][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.679177][ T49] ? f2fs_hw_is_readonly+0x39b/0x470 [ 100.679204][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 100.679233][ T49] f2fs_write_end_io+0x495/0x810 [ 100.679257][ T49] ? blkg_put+0x22/0x240 [ 100.679294][ T49] __submit_merged_bio+0x27a/0x6a0 [ 100.679327][ T49] __submit_merged_write_cond+0x255/0x530 [ 100.679356][ T49] f2fs_write_data_pages+0x261d/0x3000 [ 100.679433][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.679474][ T49] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 100.679540][ T49] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 100.679579][ T49] ? trace_f2fs_writepages+0x7f/0x200 [ 100.679604][ T49] ? f2fs_write_node_pages+0x478/0x6e0 [ 100.679633][ T49] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 100.679671][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.679698][ T49] do_writepages+0x32b/0x550 [ 100.679735][ T49] ? reacquire_held_locks+0x127/0x1d0 [ 100.679753][ T49] ? writeback_sb_inodes+0x372/0x1000 [ 100.679792][ T49] __writeback_single_inode+0x145/0xff0 [ 100.679812][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 100.679839][ T49] writeback_sb_inodes+0x6b5/0x1000 [ 100.679897][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.679973][ T49] ? rcu_is_watching+0x15/0xb0 [ 100.680019][ T49] wb_writeback+0x43b/0xaf0 [ 100.680058][ T49] ? queue_io+0x391/0x590 [ 100.680092][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 100.680131][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.680167][ T49] wb_workfn+0x409/0xef0 [ 100.680209][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 100.680240][ T49] ? __lock_acquire+0xab9/0xd20 [ 100.680279][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 100.680315][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.680362][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 100.680390][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 100.680423][ T49] process_scheduled_works+0xae1/0x17b0 [ 100.680486][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.680537][ T49] worker_thread+0x8a0/0xda0 [ 100.680571][ T49] ? __kthread_parkme+0x7b/0x200 [ 100.680602][ T49] kthread+0x70e/0x8a0 [ 100.680629][ T49] ? __pfx_worker_thread+0x10/0x10 [ 100.680647][ T49] ? __pfx_kthread+0x10/0x10 [ 100.680672][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.680702][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.680721][ T49] ? __pfx_kthread+0x10/0x10 [ 100.680746][ T49] ret_from_fork+0x3fc/0x770 [ 100.680778][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 100.680814][ T49] ? __switch_to_asm+0x39/0x70 [ 100.680833][ T49] ? __switch_to_asm+0x33/0x70 [ 100.680852][ T49] ? __pfx_kthread+0x10/0x10 [ 100.680876][ T49] ret_from_fork_asm+0x1a/0x30 [ 100.680916][ T49] [ 100.681230][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.819904][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.821729][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 100.844402][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.855095][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 100.922129][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.116447][ T978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.125805][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.136434][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.145879][ T6051] ceph: No mds server is up or the cluster is laggy [ 101.221124][ T978] usb 2-1: config 0 descriptor?? [ 101.287694][ T6069] kvm: user requested TSC rate below hardware speed [ 101.648779][ T978] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 101.708592][ T978] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.795943][ T978] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.110622][ T6090] netlink: 96 bytes leftover after parsing attributes in process `syz.4.36'. [ 102.637518][ T6078] loop2: detected capacity change from 0 to 32768 [ 102.654388][ T5896] usb 2-1: USB disconnect, device number 2 [ 102.683497][ T6078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.33 (6078) [ 102.740927][ T6102] loop4: detected capacity change from 0 to 2048 [ 102.801808][ T6078] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.856386][ T6102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.882526][ T6078] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 102.935604][ T6078] BTRFS info (device loop2): disk space caching is enabled [ 102.984822][ T30] audit: type=1800 audit(1749019063.044:2): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.38" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 102.989779][ T6078] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 103.533651][ T6078] BTRFS info (device loop2): rebuilding free space tree [ 103.722959][ T6078] BTRFS info (device loop2): disabling free space tree [ 103.750403][ T6095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.787881][ T6078] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.825833][ T6130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.845122][ T6078] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.866750][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 104.604065][ T6147] loop1: detected capacity change from 0 to 2048 [ 104.617451][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.776209][ T6147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.813092][ T6147] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.899935][ T30] audit: type=1800 audit(1749019064.964:3): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.43" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 104.935528][ T6147] fs-verity: sha512 using implementation "sha512-avx2" [ 104.993377][ T30] audit: type=1326 audit(1749019065.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.3.47" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f437d38e969 code=0x0 [ 105.142755][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.273690][ T6164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.369529][ T6164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.549306][ T6174] loop0: detected capacity change from 0 to 2048 [ 105.572095][ T6174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.766700][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.901161][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 105.934560][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.964506][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.989124][ T5927] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 106.014401][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.026919][ T5927] usb 3-1: Product: syz [ 106.031209][ T5927] usb 3-1: Manufacturer: syz [ 106.039019][ T5927] usb 3-1: SerialNumber: syz [ 106.054579][ T5927] usb 3-1: config 0 descriptor?? [ 106.088810][ T5927] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 106.110007][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.124640][ T5927] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 106.161456][ T5927] usb 3-1: media controller created [ 106.339207][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.484719][ T6186] loop1: detected capacity change from 0 to 64 [ 106.696851][ T5927] DVB: Unable to find symbol tda10046_attach() [ 106.746643][ T5927] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 106.802306][ T5927] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 107.047422][ T6183] loop4: detected capacity change from 0 to 131072 [ 107.057864][ T6183] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 107.066125][ T6183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.076823][ T6183] F2FS-fs (loop4): invalid crc value [ 107.194515][ T6183] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.205703][ T6183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 107.247815][ T6183] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 107.670213][ T5927] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 107.704045][ T5927] usb 3-1: USB disconnect, device number 2 [ 107.736589][ T6207] loop1: detected capacity change from 0 to 4096 [ 107.772625][ T6210] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.63'. [ 107.915200][ T6211] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.964707][ T6206] syz.1.62: attempt to access beyond end of device [ 107.964707][ T6206] loop1: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 107.985052][ T30] audit: type=1800 audit(1749019068.024:5): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.62" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 108.354823][ T5927] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.556666][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 108.581480][ T5927] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 108.611024][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.669558][ T5927] usb 1-1: Product: syz [ 108.694930][ T5927] usb 1-1: Manufacturer: syz [ 108.699594][ T5927] usb 1-1: SerialNumber: syz [ 108.730727][ T5927] usb 1-1: config 0 descriptor?? [ 108.749354][ T5927] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 108.989000][ T6213] loop8: detected capacity change from 0 to 7 [ 109.017802][ T6213] Dev loop8: unable to read RDB block 7 [ 109.023647][ T6213] loop8: unable to read partition table [ 109.095140][ T6213] loop8: partition table beyond EOD, truncated [ 109.151123][ T6213] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 109.151123][ T6213] ) failed (rc=-5) [ 109.203905][ T5927] usb 1-1: USB disconnect, device number 2 [ 109.510814][ T6246] ======================================================= [ 109.510814][ T6246] WARNING: The mand mount option has been deprecated and [ 109.510814][ T6246] and is ignored by this kernel. Remove the mand [ 109.510814][ T6246] option from the mount to silence this warning. [ 109.510814][ T6246] ======================================================= [ 109.814884][ T6254] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI [ 109.925044][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 109.955121][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 110.264498][ T6266] loop3: detected capacity change from 0 to 32768 [ 110.342661][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.370931][ T6266] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 110.370931][ T6266] allowing incompatible features above 0.0: (unknown version) [ 110.370931][ T6266] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 110.414062][ T6266] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 110.422553][ T6266] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 110.431590][ T6266] bcachefs (loop3): Version upgrade required: [ 110.431590][ T6266] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 110.431590][ T6266] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 110.431590][ T6266] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 110.505822][ T6266] bcachefs (loop3): dropping and reconstructing all alloc info [ 110.533135][ T6266] bcachefs (loop3): btree node read error at btree dirents level 0/0 [ 110.533160][ T6266] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 110.533177][ T6266] loop3 node offset 0/24: incorrect min_key: got 0:0:7 should be POS_MIN [ 110.533189][ T6266] flagging btree dirents lost data [ 110.533199][ T6266] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 110.533212][ T6266] ret btree_node_read_validate_error [ 110.587525][ T6266] bcachefs (loop3): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 110.606643][ T6266] bcachefs (loop3): scan_for_btree_nodes... [ 110.683368][ T6266] bcachefs (loop3): btree node scan found 7 nodes after overwrites [ 110.698723][ T6266] done [ 110.701520][ T6266] bcachefs (loop3): check_topology... [ 110.701846][ T6266] bcachefs (loop3): btree root dirents unreadable, must recover from scan [ 110.716284][ T6266] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - SPOS_MAX [ 110.727066][ T6266] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:0:7 durability: 1 ptr: 0:41:0 gen 0 [ 110.746964][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 110.755956][ T6266] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - 0:0:6 [ 110.770450][ T6266] bcachefs (loop3): error in recovery: ENOMEMemergency read only at seq 10 [ 110.779159][ T6266] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM [ 110.787422][ T6266] bcachefs (loop3): shutting down [ 110.811417][ T6266] bcachefs (loop3): shutdown complete [ 110.856003][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.872628][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.881633][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 110.893914][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 110.906120][ T5927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.915580][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.982755][ T5927] hub 3-1:1.0: bad descriptor, ignoring hub [ 110.989732][ T5927] hub 3-1:1.0: probe with driver hub failed with error -5 [ 111.010709][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 111.020738][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 111.039868][ T5927] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 111.047357][ T5927] cdc_wdm 3-1:1.0: Unknown control protocol [ 111.188248][ T6285] loop4: detected capacity change from 0 to 512 [ 111.226724][ T6285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.318374][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.418450][ T6285] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.548174][ T6259] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 111.691955][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.715157][ T6298] loop1: detected capacity change from 0 to 2048 [ 111.743197][ T6298] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 111.837531][ T6298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.932889][ T30] audit: type=1800 audit(1749019071.994:6): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.98" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 112.069467][ T978] usb 3-1: USB disconnect, device number 3 [ 112.189800][ T6266] bcachefs: bch2_fs_get_tree() error: ENOMEM [ 112.198633][ T6266] Filesystem bcachefs get_tree() didn't set fc->root, returned 12 [ 112.207852][ T6266] ------------[ cut here ]------------ [ 112.213344][ T6266] kernel BUG at fs/super.c:1812! [ 112.218386][ T6266] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 112.224718][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.3.87 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 112.235668][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.245736][ T6266] RIP: 0010:vfs_get_tree+0x29f/0x2b0 [ 112.251042][ T6266] Code: 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 8b ee ff 48 8b 33 48 c7 c7 00 31 99 8b 44 89 f2 e8 d2 42 f2 fe 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 112.270662][ T6266] RSP: 0018:ffffc9000409fd58 EFLAGS: 00010246 [ 112.276767][ T6266] RAX: 000000000000003f RBX: ffffffff8e7829a0 RCX: d7fdaebf4cba4000 [ 112.284747][ T6266] RDX: ffffc9000d54c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 112.292728][ T6266] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 112.300699][ T6266] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: 1ffff11006a79796 [ 112.308684][ T6266] R13: dffffc0000000000 R14: 000000000000000c R15: 0000000000000000 [ 112.316660][ T6266] FS: 00007f437e2556c0(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 112.325596][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.332184][ T6266] CR2: 0000001b30a1aff8 CR3: 0000000023cae000 CR4: 00000000003526f0 [ 112.340161][ T6266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.348136][ T6266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.356111][ T6266] Call Trace: [ 112.359399][ T6266] [ 112.362335][ T6266] do_new_mount+0x24a/0xa40 [ 112.366854][ T6266] __se_sys_mount+0x317/0x410 [ 112.371552][ T6266] ? __pfx___se_sys_mount+0x10/0x10 [ 112.376756][ T6266] ? do_syscall_64+0xbe/0x3b0 [ 112.381440][ T6266] ? __x64_sys_mount+0x20/0xc0 [ 112.386219][ T6266] do_syscall_64+0xfa/0x3b0 [ 112.390725][ T6266] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.395930][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.401999][ T6266] ? clear_bhb_loop+0x60/0xb0 [ 112.406682][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.412577][ T6266] RIP: 0033:0x7f437d39010a [ 112.417127][ T6266] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.436925][ T6266] RSP: 002b:00007f437e254e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.445372][ T6266] RAX: ffffffffffffffda RBX: 00007f437e254ef0 RCX: 00007f437d39010a [ 112.453351][ T6266] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f437e254eb0 [ 112.461328][ T6266] RBP: 00002000000000c0 R08: 00007f437e254ef0 R09: 0000000000800000 [ 112.469306][ T6266] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 112.477298][ T6266] R13: 00007f437e254eb0 R14: 0000000000005978 R15: 00002000000003c0 [ 112.485299][ T6266] [ 112.488333][ T6266] Modules linked in: [ 112.492966][ T6266] ---[ end trace 0000000000000000 ]--- [ 112.499220][ T6266] RIP: 0010:vfs_get_tree+0x29f/0x2b0 [ 112.504549][ T6266] Code: 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 8b ee ff 48 8b 33 48 c7 c7 00 31 99 8b 44 89 f2 e8 d2 42 f2 fe 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 112.524283][ T6266] RSP: 0018:ffffc9000409fd58 EFLAGS: 00010246 [ 112.530455][ T6266] RAX: 000000000000003f RBX: ffffffff8e7829a0 RCX: d7fdaebf4cba4000 [ 112.538501][ T6266] RDX: ffffc9000d54c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 112.547115][ T6266] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 112.555169][ T6266] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: 1ffff11006a79796 [ 112.563169][ T6266] R13: dffffc0000000000 R14: 000000000000000c R15: 0000000000000000 [ 112.571199][ T6266] FS: 00007f437e2556c0(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 112.580208][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.586873][ T6266] CR2: 0000001b30a1aff8 CR3: 0000000023cae000 CR4: 00000000003526f0 [ 112.594937][ T6266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.602936][ T6266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.610984][ T6266] Kernel panic - not syncing: Fatal exception [ 112.617414][ T6266] Kernel Offset: disabled [ 112.621745][ T6266] Rebooting in 86400 seconds..