last executing test programs: 9.076236824s ago: executing program 0 (id=269): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='nfs=nostale_ro,uni_xlate=1,uni_xlate=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=1,nonumtail=0,iocharset=cpush,\x00'], 0x1, 0x28d, &(0x7f0000000240)="$eJzs3cFLG1kcB/BfTNZEYUkOC7LLwmbZy55EXfawp1UWF5YNtLTk0J4qNdJirKAg1IN6k/ZvaP+F9throYfSa/+BUii20Iv25KGQkk6iiU2jsYbU8vkc9PHy+zov42OcGZmXaz8vLc4vry7s7e1ELpeKzHRE7KeiEEORjsRWAADfkv1aLXZriVPEh/owJACgz/Zrf92NOPXffwDgHOpw/X9wTZ/aOui7OJjRAQD98EX3/939B4Bz6fKVq//PlEqzl4rFXMTS9lp5rZx8T16fWYibUY1KTEQ+3jf/U5CcLdS//vtfaXaiWPe6ELmlzUZ+c62cbs9PRj4KnfOTxUSUW/PfxWgj/2I0KjEV+fihc36qY344fv+tZfvjkY/n12M5qjEf9WySz0bExmSx+M+F0mG+fl5Tzn6sAwAAAAAAAAAAAAAAAAAAAACAfhgvNuUaPe3r94wfFhTa19dJqlvXBxrpuj7Q0fV5MvFTZnDvGwAAAAAAAAAAAAAAAAAAAL4mq7fXF+eq1cpKt8atZw+e7GSTwFy1+dT+camOjVQj3Ftq+6TFf598PN//+ure0Zcysb6Y7X3/nG3j8S8D2GhlJTK9pJ7u3Pjxj9WxPz9XE5nWnjv16dJWU59IHX5y5ix3+FDLFH2bjxg+7aTt3njYbEy/+6SmOZkqKyOD+J22NsbuT8892nj5ptGTjmNSXQ4atfTZH4gAAAAAAAAAAAAAAAAAAICWx60HPRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJzDz//vtZGNtp5cW83wwQZ2awN9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPchAAD//26KiX0=") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000005c0)={0x1, 'veth1_to_bond\x00', {}, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@mpls_newroute={0xfffffffffffffff0, 0x18, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x10, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x9, 0x500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r4, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e00000021400"], 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="600055a800001400090500d5d004000000000000", @ANYRES32=r7, @ANYBLOB="1400060000000000000000f0000000000000000008000200ac1414aa080001006401010208000400e00000021400030076657468315f746f5f626f6e640000000800010000000000"], 0x60}}, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000006540)={[0x100000001]}, 0x8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000240)={0x7ff, 0x12f, 0xfffffffe}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000240)='batadv_slave_1\x00'}) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x44, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, 0x592243c4f6d942ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fedbdf2544000000080003003e733e270e5a8d89fefffec13ce595fd2934f5b8c18f5ecc67056443d5abc879875356784f3f1fe2c8d5dba67a3c00"/78, @ANYRES32=0x0, @ANYBLOB="08000d00fbffffff0500180114000000050018011c0000000800a000ed65000008009f00030000000800a100b905000008002201a800000008009f00030000001f002400ecec1b851649486c81128b80011ca4091289163085a48536c8b03000"], 0x7c}}, 0x4010) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.039146956s ago: executing program 2 (id=273): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) write$sndseq(r0, 0x0, 0x0) 7.42346882s ago: executing program 0 (id=276): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf250200000000000000060007000400"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 7.245601512s ago: executing program 2 (id=277): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002600)=""/4090, 0xffa}], 0x1, 0x3ff, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfe, 0x0, 0xfc, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x249, [0xffffffff, 0x89ef]}}) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@empty, 0x0, 0x4, 0x4e22, 0x0, 0x2}, {0x0, 0x79, 0x3, 0x0, 0xfffffffffffffffe, 0x9}, {0x0, 0x0, 0x0, 0x9}, 0x2e61, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x1}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket(0xf, 0x3, 0x402) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 6.69368396s ago: executing program 3 (id=278): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_connect$uac1(0x0, 0xb5, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x26, &(0x7f0000000840)={0x5, 0xf, 0x26, 0x4, [@generic={0x3, 0x10, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x3, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0xfa, 0x1, 0x7, 0x80}]}, 0x2, [{0x33, &(0x7f0000000040)=@string={0x33, 0x3, "4b92f2ba1d9b087db552942cbcfd44689be988fe3c3ab8769a6386cd9fe5dcd5893556ba08302ecc57308f168717c7f8a9"}}, {0x7, 0x0}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x18, 0xaa, 0x6d, 0x20, 0xeef, 0x1, 0xe253, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x1, 0x10, 0xdc, 0x55, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2d, 0x83, 0x57, 0x20, 0xbda, 0x5088, 0xd380, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x3, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x1, 0x0, 0x77, 0x92, 0xe2, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000300)=ANY=[], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.384028455s ago: executing program 0 (id=279): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000840)=r5) 5.793357921s ago: executing program 2 (id=280): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000380)={0x6c, 0x11, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x400, [0x5, 0x5, 0x81, 0x728d, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0xf}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x5000, [0xe579]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x80, 0x7, [0xe67]}}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x9d}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xfff}, @pad1]}, 0x98) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000, 0x380000, @loopback, 0x9}, 0x1c) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x8}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "5feb70635ea4fc5aaf2b712e5f31114fdbb99c9ea6fa098eaac6e3f02c6b414804ec12f78b6a56d5bba40fe1edc9cf4287f72ebb90318e7896078196c45a3d4c0fe06b30df1c49874f9bfc6ce2e4c2017b0b"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000) dup(0xffffffffffffffff) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000780)=""/136, 0x17}], 0x1, 0x0, 0x8) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000080)={0x4000000}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000580)={0x24, &(0x7f0000000600)={0x0, 0x3, 0x100, {0x100, 0x24, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000500)={0x0, 0x22, 0x1f, {[@main=@item_012={0x1, 0x0, 0x9, "c7"}, @global=@item_4={0x3, 0x1, 0x0, "9ac8e05a"}, @main=@item_012={0x1, 0x0, 0xc, "05"}, @main=@item_012={0x2, 0x0, 0x9, "d9ec"}, @local=@item_4={0x3, 0x2, 0x0, "22420a10"}, @global=@item_012={0x1, 0x1, 0x0, "9a"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x0, "b3569c18"}, @local=@item_4={0x3, 0x2, 0x8, "91a65453"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0x188}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x40, 0x14, 0x17, "c7eeff95acbd0de3cb1db91184d52d71472cebc5594846"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x1, 0x13, "d7e33a0b3ad61b7a5a3b06c755e5f1db6fdc75"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x6}}) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {0x0}], 0x2) syz_open_procfs(r3, &(0x7f0000000480)='net/kcm\x00') 5.253957073s ago: executing program 0 (id=282): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 4.531631549s ago: executing program 0 (id=283): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000380)={0x6c, 0x11, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x400, [0x5, 0x5, 0x81, 0x728d, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0xf}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x5000, [0xe579]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x80, 0x7, [0xe67]}}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x9d}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0xfff}, @pad1]}, 0x98) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000, 0x380000, @loopback, 0x9}, 0x1c) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x8}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "5feb70635ea4fc5aaf2b712e5f31114fdbb99c9ea6fa098eaac6e3f02c6b414804ec12f78b6a56d5bba40fe1edc9cf4287f72ebb90318e7896078196c45a3d4c0fe06b30df1c49874f9bfc6ce2e4c2017b0b"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x3, 0x3, {{0x28, 0x4, 0x0, 0x20, 0xa0, 0x68, 0x0, 0x48, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0x8, [{@empty, 0x8}]}, @lsrr={0x83, 0xb, 0x88, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @cipso={0x86, 0x4f, 0x3, [{0x6, 0xc, "1a3005cafd843404dcdc"}, {0x6, 0xe, "a37828ee14c78b3c2a82cd14"}, {0x2, 0xe, "88de86624a0681fd811f749f"}, {0x7, 0xc, "ed13127f8ba97a8f0dba"}, {0x7, 0x2}, {0x0, 0xb, "b9917697ef037c6408"}, {0x7, 0x3, "04"}, {0x1, 0x5, "921446"}]}, @ssrr={0x89, 0x17, 0xf7, [@rand_addr=0x64010102, @loopback, @multicast2, @empty, @loopback]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x5, [{@loopback, 0x1}]}]}}}}}) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000080)={0x4000000}) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {0x0}], 0x2) syz_open_procfs(r4, &(0x7f0000000480)='net/kcm\x00') 4.48014437s ago: executing program 1 (id=284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903279dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44c4ca5c28b0830910f3", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000001c0)={0x1000, 0x4, 0x3, 0xffffffffbffffffd, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x400, 0x6, 0x87fffbfff}, 0x0, 0x0) 4.293870891s ago: executing program 4 (id=285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x200}}}}}}, 0x0) 3.679247789s ago: executing program 4 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x0, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0x8, 0x8}}]}, 0x154}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000340)="ccc50d0793f1c12da56e15326ae7f7f29d87dbc9576c8dcee58cb50f22595ff1a317a4d45adb7cf9adbd942199261ff82622dc8c2b2b636e9ea6892b128dd77148263fef509924ed0ddcebae4096dbeeea0c7ae8960f1009b3871ecfde2784a1e05af55b57c5528ade26440b5aac81a545fed8b5c57fddea79e669061498271c6a9b651c3e06b267d76da6073a649fd09416408aa83ac3360f9b68f1f93727b36c111ba498d07e6aaa3e4a46423ba6fd8853c8c39241279f8650341b6dc42be0eb46e5abcd2a0fa2251e") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xb8, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x12}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0xb8}}, 0x4010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="4000520006"], 0x24}}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.592273908s ago: executing program 1 (id=287): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) write$sndseq(r0, 0x0, 0x0) 3.31734311s ago: executing program 3 (id=288): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 3.274550639s ago: executing program 4 (id=289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r0, 0x1) 3.153694768s ago: executing program 1 (id=290): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2.662454656s ago: executing program 3 (id=291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2.635061528s ago: executing program 4 (id=292): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000840)=r5) 2.548240379s ago: executing program 1 (id=293): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 2.252650739s ago: executing program 1 (id=294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 2.072234506s ago: executing program 4 (id=295): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB="62616d726965722c6429636f6d706f73652c6e6c733d6d6163726f6d616e69616e2c706172743d3078303030303030303030303030306334372c6e6f6465636f6d706f73652c646521e57af66f73652c00"], 0x3, 0x6b9, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mount(&(0x7f0000000900)=@nullb, &(0x7f0000000940)='./file1\x00', &(0x7f0000000a00)='rpc_pipefs\x00', 0x800408, 0x0) pwritev2(r0, &(0x7f0000001e80)=[{&(0x7f0000000a40)="488da8980249935519e9ae42553f01486a117b206f5701df159553a6f2ad11691271d4f8f0f75cc8f612f96642bd8842553b9c990a86618b75c7f6ba233160d531ba54c9885022c76dd87f5706fafcd69ba71c2b57186f6dab339217420fdc9950faf978d7f51ec42bdab7723230beeac5d310e336e449a228226021088f72e9fe97019444a88e4ff5869b70dee174639b63af75b4683de83bb457751af8e7fce5b13941d10cd6d6", 0xa8}, {&(0x7f0000000b00)="85d2a26ae501592297353ed2cca450c4416b19701aa5e2966b2b01c03b186596439e2da5bcc9a7ff496d4cb7bebabcc787bfa2b58eb93960630a1feac8e96e8a89cd3a6cc3341f3e29d7b6483be7762dfee91443ead719015defaf1e8b2bf4e2109abb164f33a77161f6b657c1420968fd", 0x71}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="97e343de600c6c6e45ed3c288850536a08ed7180488f79598137e03640110d359b47e34b62aad9c02aae21514be4a76cfac3adaf7ec97fa8df2281932a14fd48881bf794d166a79db1e6cfb6fd3fb58c15d75378e9ff15df99d9691c980d338e7d725f6455911dee86a72263e8b7358dce7fd6ad9ee241eea812621a0cf1fd0eca1209508212a9a08965dcdfc1afdb587044c4e0651cd2b23b3b9d646a761f7223ce9f96c071114f7a090127f5fd006af3546e7363ab8403d4148dc0a8dc2b58811daa24b39a681af2", 0xc9}, {&(0x7f0000001c80)="c927f44da6a1e57d23c87cb63c3b5be7c1cf9151dd7d9b880e67db3c22fe84bf88fb1b508090b89e197c706c4b05decd942dfd2460f4258350c4e589534459039322e641256c273edf2a2debe00a293a0645518eba82d2a0af7b53e59e50911be2d14179c2ea49eaef83979c8c4aa6f134fb95e0e7df8e0ab146483593120b42349c1baa58be8881de92fac53ee5b812a7d4f1f50644215ed94a1ad656b4b8425c5129907ac40f79a1bd978adca6c66a7d19cf287b736b2a351ea09bb833566923e0f5792758ba", 0xc7}, {&(0x7f0000001d80)="9026f1cf9a7fa5449a380ec689d795411d121b2dbed060953a737b7d478c2de3d5641984c08953d99add73b70c948f1f26507c6c6db495152caee5087c36cde99dbd28222c79a0d205120b1eb46bb29ff1a0d72656cd810460ce297e458775092504b4941268fb5924a4ad9cad73ee4b21e890215cbae84f28a5a9d4b4797e043b355315783b8b0e7852c262db41634d9d4c1e8094a860f7cd52e6f932a55cb0222ee294c1bc375fabfcd08a32a062afb894621401916aa128e3462356ef13fd663dcfecb36ac28f66b28e9c9ce88e4a0040b27b0e4063fa3ff9e377c469ed53a39b0d37eaf8546a86", 0xe9}], 0x6, 0x400, 0x100, 0x16) r1 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x800010, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="1e0534e9c8ed25d9"], 0x1, 0x5956, &(0x7f0000008e40)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v3={0x3000000, [{0x21, 0x81}, {0x0, 0x9}]}, 0x18, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c9, 0x1, 0x3, 0xd59f7c, 0x4, 0x5, 0x2000b, 0x8, 0xb53a, 0x722, 0xe73, 0x58c, 0xf, 0x38, 0x13, {0xffff945a, 0x1}, 0x3, 0xed}}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, 0x0) select(0x40, &(0x7f0000000040)={0x2, 0x727408b6, 0x7, 0x10001, 0x3, 0x0, 0x0, 0x7}, &(0x7f0000000100)={0xa8, 0xfffffffffffff317, 0x63, 0x9, 0x1, 0x1, 0x1000, 0x3}, &(0x7f00000001c0)={0x6, 0x8000000000000001, 0xb, 0x174, 0xfb, 0x9d15, 0x6, 0x88f}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}]) io_submit(0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r1, r1, 0x2) 1.991301991s ago: executing program 2 (id=296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x200}}}}}}, 0x0) 1.976355376s ago: executing program 3 (id=297): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r2], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 1.692578056s ago: executing program 1 (id=298): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03ac024d8c71ef288563"], 0xffdd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) setrlimit(0x6, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000540)=@netrom={'nr', 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000080)={[0x80000001]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001040)=ANY=[@ANYBLOB="24000000011f010880010000000000000000000405000100210000000600064000060000c8f2c63b06c137de30714a09d192530e9adbd4418b4f3f46bceb94e8a39f25125d3c392d38754688c24311b8da29790a9245119079567538901584ec"], 0x24}}, 0x0) r5 = syz_mount_image$btrfs(&(0x7f00000010c0), &(0x7f0000001100)='./bus/file0\x00', 0x1204408, &(0x7f0000000200)={[{@compress_force}, {@clear_cache}, {@compress}, {@skip_balance}, {@space_cache_v1}, {@enospc_debug}]}, 0x0, 0x51ab, &(0x7f0000005240)="$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") socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f0000be0000/0x2000)=nil, 0xffffffffdf41ffff, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000c40)={0x2, 0x0, {0xffffffffffffffff, @struct={0x1}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, @usage=0xffffffffffffffc4, 0x4001}, {0xfffffffffffffffe, @usage=0x80000001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x58a, @struct={0x0, 0x1}, 0x0, 0xfffffffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x51, @struct={0x4c00000}, 0x0, 0x80000000004, 0x7, 0xfffffffffffffffe, 0x0, 0x0, 0x6a, @struct={0x2, 0x90000001}, 0x3, 0x4}}) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) 1.376808974s ago: executing program 2 (id=299): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@file_umask={'file_umask', 0x3d, 0x2}}, {@uid}, {@type={'type', 0x3d, "9d4b9598"}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@umask={'umask', 0x3d, 0x3}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x322, &(0x7f0000000600)="$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") r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x2c, 0x30, 0x8003, 0xc, 0x1, 0x1000, 0xffffffff, 0x15b, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) 1.282678566s ago: executing program 3 (id=300): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 445.785805ms ago: executing program 0 (id=301): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 367.21702ms ago: executing program 3 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r0, 0x1) 254.059347ms ago: executing program 2 (id=303): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002f000000d40000002000000095000000000000007bac32b25ef8fa1700215c9f0ecae5731ffa5975e80e9efd118a60a86a6afd6e7bb79dc57a0983ca3752"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_ACCEPT_LIST={{}, 0x5}}}, 0x7) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000000080), 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/21, 0x15}], 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prlimit64(r4, 0x6, &(0x7f0000000000)={0x9, 0x841}, &(0x7f0000000040)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x80}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7fff, 0x51000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c080) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048020}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x7}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$pid(0x1, r4, 0x2000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu pi'], 0xb) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ac1e0001000000000000000000000000ff010000003500000a00080000000000000000000000ff4e0d9be6c1590cc7ff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000200"], 0xec}}, 0x0) 0s ago: executing program 4 (id=304): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 169.264627][ T5762] cgroup: Unknown subsys name 'net' [ 169.492780][ T5762] cgroup: Unknown subsys name 'cpuset' [ 169.508455][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 214.508566][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 218.405122][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.431937][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.444989][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.455122][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.474511][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.475742][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.482343][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.503368][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.508454][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.520133][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.525721][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.530555][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.544700][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.554278][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.564178][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.572395][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.587328][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.596802][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.638146][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.653090][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.665385][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.697516][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.709732][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.720275][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.746704][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.756495][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.811090][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.026756][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.125853][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.158779][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.296673][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.303522][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.706753][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 220.063549][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 220.558178][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 220.623740][ T5781] Bluetooth: hci1: command tx timeout [ 220.704229][ T5781] Bluetooth: hci0: command tx timeout [ 220.709197][ T5779] Bluetooth: hci2: command tx timeout [ 220.719597][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.727547][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.735368][ T5780] bridge_slave_0: entered allmulticast mode [ 220.744508][ T5780] bridge_slave_0: entered promiscuous mode [ 220.768292][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.776351][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.784100][ T5780] bridge_slave_1: entered allmulticast mode [ 220.792870][ T5780] bridge_slave_1: entered promiscuous mode [ 220.803802][ T5779] Bluetooth: hci3: command tx timeout [ 220.807302][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 220.874315][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 221.064610][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.192727][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.221645][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.231550][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.239335][ T5778] bridge_slave_0: entered allmulticast mode [ 221.248301][ T5778] bridge_slave_0: entered promiscuous mode [ 221.291338][ T5779] Bluetooth: hci4: command tx timeout [ 221.439400][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.448081][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.455942][ T5778] bridge_slave_1: entered allmulticast mode [ 221.464962][ T5778] bridge_slave_1: entered promiscuous mode [ 221.480981][ T5780] team0: Port device team_slave_0 added [ 221.499772][ T5780] team0: Port device team_slave_1 added [ 221.697978][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.705394][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.732577][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.767506][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.781387][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.788833][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.815182][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.841025][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.080936][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.091626][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.101023][ T5782] bridge_slave_0: entered allmulticast mode [ 222.109000][ T5782] bridge_slave_0: entered promiscuous mode [ 222.129355][ T5778] team0: Port device team_slave_0 added [ 222.163838][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.171342][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.179157][ T5791] bridge_slave_0: entered allmulticast mode [ 222.188055][ T5791] bridge_slave_0: entered promiscuous mode [ 222.226783][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.234823][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.242466][ T5782] bridge_slave_1: entered allmulticast mode [ 222.251631][ T5782] bridge_slave_1: entered promiscuous mode [ 222.267100][ T5778] team0: Port device team_slave_1 added [ 222.302372][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.312067][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.319955][ T5791] bridge_slave_1: entered allmulticast mode [ 222.328880][ T5791] bridge_slave_1: entered promiscuous mode [ 222.337937][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.345702][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.353606][ T5792] bridge_slave_0: entered allmulticast mode [ 222.362428][ T5792] bridge_slave_0: entered promiscuous mode [ 222.632338][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.642292][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.650082][ T5792] bridge_slave_1: entered allmulticast mode [ 222.658026][ T5792] bridge_slave_1: entered promiscuous mode [ 222.679747][ T5780] hsr_slave_0: entered promiscuous mode [ 222.689448][ T5780] hsr_slave_1: entered promiscuous mode [ 222.704163][ T5779] Bluetooth: hci1: command tx timeout [ 222.767401][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.778608][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.786007][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.787519][ T5779] Bluetooth: hci2: command tx timeout [ 222.812502][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.823800][ T5779] Bluetooth: hci0: command tx timeout [ 222.865885][ T5781] Bluetooth: hci3: command tx timeout [ 222.913949][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.933989][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.952943][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.996636][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.004033][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.030430][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.177790][ T5782] team0: Port device team_slave_0 added [ 223.201216][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.332120][ T5782] team0: Port device team_slave_1 added [ 223.346545][ T5781] Bluetooth: hci4: command tx timeout [ 223.351750][ T5778] hsr_slave_0: entered promiscuous mode [ 223.361537][ T5778] hsr_slave_1: entered promiscuous mode [ 223.369911][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.377794][ T5778] Cannot create hsr debugfs directory [ 223.394998][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.460882][ T5791] team0: Port device team_slave_0 added [ 223.591133][ T5791] team0: Port device team_slave_1 added [ 223.726797][ T5792] team0: Port device team_slave_0 added [ 223.742607][ T5792] team0: Port device team_slave_1 added [ 223.765958][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.773118][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.799698][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.827476][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.834753][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.861120][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.034060][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.041333][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.067822][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.132587][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.139883][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.166289][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.210393][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.217712][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.244264][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.273755][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.280880][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.307508][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.522010][ T5782] hsr_slave_0: entered promiscuous mode [ 224.531682][ T5782] hsr_slave_1: entered promiscuous mode [ 224.540204][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.548055][ T5782] Cannot create hsr debugfs directory [ 224.785003][ T5781] Bluetooth: hci1: command tx timeout [ 224.829853][ T5791] hsr_slave_0: entered promiscuous mode [ 224.839351][ T5791] hsr_slave_1: entered promiscuous mode [ 224.847548][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.855423][ T5791] Cannot create hsr debugfs directory [ 224.874432][ T5792] hsr_slave_0: entered promiscuous mode [ 224.876846][ T5781] Bluetooth: hci0: command tx timeout [ 224.884127][ T5792] hsr_slave_1: entered promiscuous mode [ 224.889310][ T5781] Bluetooth: hci2: command tx timeout [ 224.894113][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.904610][ T5792] Cannot create hsr debugfs directory [ 224.943555][ T5779] Bluetooth: hci3: command tx timeout [ 225.098522][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.190133][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.252245][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.288567][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.307620][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.363074][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.425777][ T5779] Bluetooth: hci4: command tx timeout [ 225.487113][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.552935][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.178448][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.247619][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.306306][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.361120][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.442409][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.474301][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.580185][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.619845][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.768784][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.822811][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.841651][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.864778][ T5779] Bluetooth: hci1: command tx timeout [ 226.932118][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.945126][ T5779] Bluetooth: hci2: command tx timeout [ 226.950736][ T5779] Bluetooth: hci0: command tx timeout [ 227.005634][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.025569][ T5779] Bluetooth: hci3: command tx timeout [ 227.155054][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.239426][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.339040][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.346788][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.445762][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.453508][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.504369][ T5779] Bluetooth: hci4: command tx timeout [ 227.540962][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.670317][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.700334][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.708177][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.771574][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.779311][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.980802][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.120103][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.127937][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.157136][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.164766][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.246527][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.469103][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.631875][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.667899][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.675736][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.782556][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.802308][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.810060][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.086115][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.219253][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.226983][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.331650][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.339390][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.960473][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.339305][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.449803][ T5780] veth0_vlan: entered promiscuous mode [ 230.593073][ T5780] veth1_vlan: entered promiscuous mode [ 230.618637][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.877465][ T5778] veth0_vlan: entered promiscuous mode [ 231.000606][ T5780] veth0_macvtap: entered promiscuous mode [ 231.058654][ T5778] veth1_vlan: entered promiscuous mode [ 231.082111][ T5780] veth1_macvtap: entered promiscuous mode [ 231.190998][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.222660][ T5782] veth0_vlan: entered promiscuous mode [ 231.381967][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.392035][ T5782] veth1_vlan: entered promiscuous mode [ 231.432258][ T5778] veth0_macvtap: entered promiscuous mode [ 231.481667][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.519915][ T5778] veth1_macvtap: entered promiscuous mode [ 231.591061][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.601712][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.613052][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.623024][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.725978][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.738990][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.755461][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.847540][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.863208][ T5782] veth0_macvtap: entered promiscuous mode [ 231.916176][ T5782] veth1_macvtap: entered promiscuous mode [ 231.946397][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.958029][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.972896][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.142815][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.155006][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.166050][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.176759][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.191261][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.201760][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.213079][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.222578][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.232719][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.318363][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.329162][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.339516][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.350277][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.365187][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.584968][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.594158][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.603117][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.612430][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.656883][ T5792] veth0_vlan: entered promiscuous mode [ 232.752821][ T5792] veth1_vlan: entered promiscuous mode [ 233.091750][ T5792] veth0_macvtap: entered promiscuous mode [ 233.196047][ T5792] veth1_macvtap: entered promiscuous mode [ 233.397567][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.409749][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.421504][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.432742][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.442893][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.453780][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.468351][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.657224][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.669274][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.679865][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.690599][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.700855][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.711584][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.726273][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.944717][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.954164][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.963119][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.972321][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.264065][ T5791] veth0_vlan: entered promiscuous mode [ 234.382680][ T5791] veth1_vlan: entered promiscuous mode [ 234.773730][ T5791] veth0_macvtap: entered promiscuous mode [ 234.835486][ T5791] veth1_macvtap: entered promiscuous mode [ 235.039295][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.050081][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.060224][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.071004][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.081086][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.091783][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.103214][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.119266][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.133873][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.351276][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.363610][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.375226][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.386481][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.396710][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.407568][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.417676][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.429283][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.443830][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.627278][ T5791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.637815][ T5791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.648179][ T5791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.658419][ T5791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.053574][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.061676][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.199488][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.209614][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.694068][ T5780] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.727067][ T3773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.735290][ T3773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.968263][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.977685][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.327747][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 239.338977][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 239.348777][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 239.358343][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 239.648839][ T5006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.657260][ T5006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.902349][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.912213][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.751381][ T5957] bridge0: port 3(syz_tun) entered blocking state [ 240.758780][ T5957] bridge0: port 3(syz_tun) entered disabled state [ 240.765976][ T5957] syz_tun: entered allmulticast mode [ 240.774289][ T5957] syz_tun: entered promiscuous mode [ 240.781807][ T5957] bridge0: port 3(syz_tun) entered blocking state [ 240.788924][ T5957] bridge0: port 3(syz_tun) entered forwarding state [ 240.821399][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.858866][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 240.875210][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.929600][ T5957] bridge_slave_0 (unregistering): left allmulticast mode [ 240.937207][ T5957] bridge_slave_0 (unregistering): left promiscuous mode [ 240.945951][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.371283][ T5966] loop0: detected capacity change from 0 to 256 [ 243.195295][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.203473][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.114484][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.122692][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.623782][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.633901][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.919478][ T5006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.927733][ T5006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.579033][ T5984] syzkaller0: entered promiscuous mode [ 246.584902][ T5984] syzkaller0: entered allmulticast mode [ 247.668740][ T5989] sctp: failed to load transform for md5: -2 [ 248.118120][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 248.129999][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.450702][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11'. [ 248.459993][ T6001] netlink: 'syz.3.11': attribute type 7 has an invalid length. [ 248.467931][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 249.989416][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 250.125687][ T6009] loop3: detected capacity change from 0 to 128 [ 250.578377][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 250.763973][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 250.795945][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 250.834424][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 250.864027][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.872678][ T8] usb 3-1: config 179 has no interface number 0 [ 250.879449][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 250.891198][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 250.903065][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.914820][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 250.926549][ T8] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.940278][ T8] usb 3-1: config 179 interface 65 has no altsetting 0 [ 250.947569][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 250.959500][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.132329][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 251.642630][ T6015] loop0: detected capacity change from 0 to 32768 [ 251.651335][ T6015] ======================================================= [ 251.651335][ T6015] WARNING: The mand mount option has been deprecated and [ 251.651335][ T6015] and is ignored by this kernel. Remove the mand [ 251.651335][ T6015] option from the mount to silence this warning. [ 251.651335][ T6015] ======================================================= [ 251.835883][ T6015] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 252.038088][ T8] usb 3-1: USB disconnect, device number 2 [ 252.038305][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.055152][ T8] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 252.214288][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 252.311975][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 252.425541][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 252.485957][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 252.501490][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.586096][ T25] usb 4-1: config 0 descriptor?? [ 252.596695][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 252.661461][ T25] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 253.024296][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 253.104576][ T25] gspca_sonixj: reg_r err -32 [ 253.118006][ T25] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 253.215528][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 253.239874][ T6026] loop4: detected capacity change from 0 to 4096 [ 253.303842][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 253.406360][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.471280][ T5833] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 253.481001][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.489515][ T5833] usb 3-1: Product: syz [ 253.494006][ T5833] usb 3-1: Manufacturer: syz [ 253.498803][ T5833] usb 3-1: SerialNumber: syz [ 253.529035][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 253.578709][ T5847] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.588564][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.596964][ T5847] usb 2-1: Product: syz [ 253.601345][ T5847] usb 2-1: Manufacturer: syz [ 253.606240][ T5847] usb 2-1: SerialNumber: syz [ 253.626732][ T5833] usb 3-1: config 0 descriptor?? [ 253.656314][ T5833] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 253.700476][ T5833] usb 3-1: Direct firmware load for dvb-usb-digivox-02.fw failed with error -2 [ 253.710456][ T5833] usb 3-1: Falling back to sysfs fallback for: dvb-usb-digivox-02.fw [ 253.733416][ C0] hrtimer: interrupt took 251135 ns [ 253.756700][ T5847] r8152-cfgselector 2-1: Unknown version 0x0000 [ 253.763211][ T5847] r8152-cfgselector 2-1: config 0 descriptor?? [ 254.098812][ T6036] loop0: detected capacity change from 0 to 4096 [ 254.222342][ T6036] ntfs3(loop0): $Secure::$SII is corrupted. [ 254.229029][ T6036] ntfs3(loop0): Failed to initialize $Secure (-22). [ 254.613174][ T6040] evm: overlay not supported [ 254.624140][ T5781] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 254.624174][ T5779] Bluetooth: hci5: command 0x1003 tx timeout [ 255.209236][ T8] usb 4-1: USB disconnect, device number 2 [ 255.393136][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 255.403011][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 255.412327][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 255.421494][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 256.096278][ T5847] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 256.866800][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 257.940694][ T6063] loop4: detected capacity change from 0 to 16 [ 258.105540][ T6063] erofs (device loop4): mounted with root inode @ nid 36. [ 258.839305][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 258.897294][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 259.055045][ T6075] bridge0: port 3(syz_tun) entered blocking state [ 259.062091][ T6075] bridge0: port 3(syz_tun) entered disabled state [ 259.069298][ T6075] syz_tun: entered allmulticast mode [ 259.077438][ T6075] syz_tun: entered promiscuous mode [ 259.085617][ T6075] bridge0: port 3(syz_tun) entered blocking state [ 259.092637][ T6075] bridge0: port 3(syz_tun) entered forwarding state [ 259.127155][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 259.143580][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.192503][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 259.263435][ T6075] bridge_slave_0 (unregistering): left allmulticast mode [ 259.271855][ T6075] bridge_slave_0 (unregistering): left promiscuous mode [ 259.279469][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.924832][ T5847] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.933687][ T5847] usb 2-1: config 179 has no interface number 0 [ 259.940186][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 259.951787][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 259.963657][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.980662][ T5847] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.993434][ T5847] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.007082][ T5847] usb 2-1: config 179 interface 65 has no altsetting 0 [ 260.014286][ T5847] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 260.023755][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.928261][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 260.938415][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.947457][ T8] usb 1-1: Product: syz [ 260.951947][ T8] usb 1-1: Manufacturer: syz [ 260.956997][ T8] usb 1-1: SerialNumber: syz [ 260.966084][ T2029] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 261.724422][ T2029] usb 5-1: Using ep0 maxpacket: 16 [ 261.745254][ T2029] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 261.755001][ T2029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.825879][ T5847] usb 2-1: can't set config #179, error -71 [ 261.897664][ T5847] usb 2-1: USB disconnect, device number 3 [ 261.929439][ T2029] usb 5-1: config 0 descriptor?? [ 262.274382][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 262.281283][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 262.302443][ T2029] usb 5-1: can't set config #0, error -71 [ 262.328802][ T8] r8152-cfgselector 1-1: can't set config #0, error -71 [ 262.354566][ T2029] usb 5-1: USB disconnect, device number 2 [ 262.397184][ T8] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 262.444007][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 262.453115][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 262.464533][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 262.474724][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 262.683797][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 262.924813][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.954559][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 262.996843][ T5847] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 263.006863][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.015336][ T5847] usb 2-1: Product: syz [ 263.019720][ T5847] usb 2-1: Manufacturer: syz [ 263.024732][ T5847] usb 2-1: SerialNumber: syz [ 263.131686][ T5847] usb 2-1: config 0 descriptor?? [ 263.194258][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 263.199699][ T5847] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in cold state, will try to load a firmware [ 263.203808][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.222749][ T8] usb 1-1: Product: syz [ 263.227369][ T8] usb 1-1: Manufacturer: syz [ 263.232164][ T8] usb 1-1: SerialNumber: syz [ 263.486134][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 263.492776][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 263.497366][ T6093] loop3: detected capacity change from 0 to 512 [ 263.577344][ T6093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 263.591338][ T6093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 263.667958][ T6093] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.46: bad orphan inode 131083 [ 263.703534][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.021512][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.031421][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.117705][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.127786][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.239340][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.249403][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.340682][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.350642][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.428896][ T8] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 264.594530][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.733063][ T6101] bridge0: port 3(syz_tun) entered blocking state [ 264.740191][ T6101] bridge0: port 3(syz_tun) entered disabled state [ 264.747453][ T6101] syz_tun: entered allmulticast mode [ 264.755542][ T6101] syz_tun: entered promiscuous mode [ 264.763020][ T6101] bridge0: port 3(syz_tun) entered blocking state [ 264.770073][ T6101] bridge0: port 3(syz_tun) entered forwarding state [ 264.807909][ T6101] netlink: 52 bytes leftover after parsing attributes in process `syz.4.47'. [ 264.824550][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 264.840781][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.869019][ T6101] bridge_slave_0 (unregistering): left allmulticast mode [ 264.876472][ T6101] bridge_slave_0 (unregistering): left promiscuous mode [ 264.892823][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.526880][ T6103] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 265.696046][ T6103] batadv1: entered promiscuous mode [ 268.033949][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 268.315691][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 268.325353][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.334021][ T8] usb 4-1: Product: syz [ 268.338398][ T8] usb 4-1: Manufacturer: syz [ 268.343195][ T8] usb 4-1: SerialNumber: syz [ 268.544712][ T6118] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.482166][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 269.484698][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 269.488771][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 269.510858][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 269.522059][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 269.531365][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 270.047921][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.058286][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.180045][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.190056][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.328524][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.338367][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.384867][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.394962][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.517681][ T8] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 272.581408][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.592859][ T2029] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 272.627929][ T6141] batadv1: entered promiscuous mode [ 272.821879][ T2029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.832608][ T2029] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 272.844813][ T2029] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.855003][ T2029] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.868643][ T2029] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 272.880267][ T2029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.933866][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 272.943195][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.951661][ T8] usb 4-1: Product: syz [ 272.956278][ T8] usb 4-1: Manufacturer: syz [ 272.961187][ T8] usb 4-1: SerialNumber: syz [ 273.046407][ T2029] usb 1-1: config 0 descriptor?? [ 273.077881][ T2029] em28xx 1-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 273.088065][ T2029] em28xx 1-1:0.0: Video interface 0 found: [ 273.113924][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 273.120605][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 273.370141][ T2029] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 273.458032][ T6150] loop2: detected capacity change from 0 to 1024 [ 273.487319][ T2029] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.501649][ T2029] em28xx 1-1:0.0: board has no eeprom [ 273.533566][ T6150] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.601185][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.611180][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.651590][ T6150] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.67: Invalid block bitmap block 0 in block_group 0 [ 273.674829][ T2029] em28xx 1-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 273.683078][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.683099][ T2029] em28xx 1-1:0.0: Currently, V4L2 is not supported on this model [ 273.685259][ T8] em28xx 1-1:0.0: Binding DVB extension [ 273.698034][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.701631][ T8] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0 [ 273.713781][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.716212][ T8] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 273.724802][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.732057][ T8] em28xx 1-1:0.0: Registering input extension [ 273.745016][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.766347][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.808557][ T2029] usb 1-1: USB disconnect, device number 4 [ 273.814614][ T6150] Quota error (device loop2): write_blk: dquota write failed [ 273.814869][ T6150] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 273.823953][ T2029] em28xx 1-1:0.0: Disconnecting em28xx [ 273.833878][ T6150] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.67: Failed to acquire dquot type 0 [ 273.879889][ T6150] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.67: Freeing blocks not in datazone - block = 0, count = 4096 [ 273.921439][ T3061] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 274.002055][ T6150] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.67: Invalid inode bitmap blk 0 in block_group 0 [ 274.035762][ T5006] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 274.045166][ T5006] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:23: Failed to release dquot type 0 [ 274.082536][ T6150] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 274.092278][ T2029] em28xx 1-1:0.0: Closing input extension [ 274.120629][ T6150] EXT4-fs (loop2): 1 orphan inode deleted [ 274.186357][ T2029] em28xx 1-1:0.0: Freeing device [ 274.294956][ T6150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.779088][ T6150] syz.2.67 (6150) used greatest stack depth: 4864 bytes left [ 275.135458][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 275.961853][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.417426][ T6175] loop3: detected capacity change from 0 to 512 [ 277.647962][ T6175] EXT4-fs (loop3): orphan cleanup on readonly fs [ 277.654989][ T6175] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 277.777908][ T6175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 277.899473][ T6175] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.74: attempt to clear invalid blocks 2 len 1 [ 277.973857][ T6175] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.74: invalid indirect mapped block 1819239214 (level 0) [ 278.057653][ T6175] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.74: invalid indirect mapped block 1819239214 (level 1) [ 278.237300][ T6175] EXT4-fs (loop3): 1 truncate cleaned up [ 278.245118][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.321960][ T6183] loop4: detected capacity change from 0 to 1024 [ 278.352673][ T6183] EXT4-fs: Ignoring removed bh option [ 278.466982][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.725666][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.047326][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.202483][ T6189] 9pnet: Could not find request transport: fd0x0000000000000006 [ 280.303845][ T2029] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 280.529296][ T2029] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 280.538887][ T2029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.547410][ T2029] usb 5-1: Product: syz [ 280.554446][ T2029] usb 5-1: Manufacturer: syz [ 280.560007][ T2029] usb 5-1: SerialNumber: syz [ 280.632181][ T2029] r8152-cfgselector 5-1: Unknown version 0x0000 [ 280.638906][ T2029] r8152-cfgselector 5-1: config 0 descriptor?? [ 280.646446][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 280.730886][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.737843][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.841673][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 280.851519][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.862286][ T8] usb 4-1: Product: syz [ 280.867989][ T8] usb 4-1: Manufacturer: syz [ 280.873002][ T8] usb 4-1: SerialNumber: syz [ 280.912610][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 280.919295][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 281.136817][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.147382][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.187817][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.197701][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.360620][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.375833][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.393005][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.403245][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.458622][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.468448][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.517825][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.528610][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.617472][ T3061] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 281.664215][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.674386][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.781178][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.791732][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.832324][ T25] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 283.882367][ T6241] loop4: detected capacity change from 0 to 512 [ 283.924939][ T6242] batadv1: entered promiscuous mode [ 284.634861][ T6241] EXT4-fs (loop4): Test dummy encryption mode enabled [ 284.641886][ T6241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.836124][ T6241] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.99: bad orphan inode 131083 [ 284.916696][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.934034][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 285.835065][ T25] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 285.844516][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.852739][ T25] usb 4-1: Product: syz [ 285.857341][ T25] usb 4-1: Manufacturer: syz [ 285.862135][ T25] usb 4-1: SerialNumber: syz [ 285.964804][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 285.971315][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 286.786233][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.798464][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.918924][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.928933][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.037253][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.048224][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.171051][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.182638][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.299099][ T8] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 288.344265][ T6269] loop2: detected capacity change from 0 to 64 [ 288.447049][ T6269] hfs: Unknown parameter '00000000000000000000005' [ 288.596149][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.801640][ T6269] loop2: detected capacity change from 0 to 2048 [ 288.898139][ T6269] EXT4-fs: Ignoring removed bh option [ 289.018309][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.115563][ T6284] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 289.515717][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.540835][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 289.754251][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 289.884739][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.894205][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.902432][ T8] usb 5-1: Product: syz [ 289.907053][ T8] usb 5-1: Manufacturer: syz [ 289.911875][ T8] usb 5-1: SerialNumber: syz [ 290.077457][ T8] r8152-cfgselector 5-1: Unknown version 0x0000 [ 290.084190][ T8] r8152-cfgselector 5-1: config 0 descriptor?? [ 290.814974][ T6303] loop3: detected capacity change from 0 to 512 [ 290.831073][ T6303] EXT4-fs (loop3): Test dummy encryption mode enabled [ 290.838504][ T6303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.902347][ T6303] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.122: bad orphan inode 131083 [ 291.015393][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.365363][ T6315] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 292.524504][ T25] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 292.526922][ T6315] bond1: entered promiscuous mode [ 292.541179][ T6315] bond1: entered allmulticast mode [ 293.054701][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.127'. [ 293.064407][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 293.073730][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.127'. [ 293.082818][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.127'. [ 294.935727][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.295919][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 296.364327][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 296.754370][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 297.161865][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 297.172064][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.180836][ T25] usb 5-1: Product: syz [ 297.185378][ T25] usb 5-1: Manufacturer: syz [ 297.190166][ T25] usb 5-1: SerialNumber: syz [ 298.509893][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 298.516823][ T25] r8152-cfgselector 5-1: config 0 descriptor?? [ 298.955106][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.136'. [ 298.966391][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 298.975791][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.136'. [ 298.991281][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.136'. [ 299.098983][ T8] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 299.430669][ T6355] loop3: detected capacity change from 0 to 512 [ 299.548944][ T6355] EXT4-fs (loop3): Test dummy encryption mode enabled [ 299.556137][ T6355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.689169][ T6355] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.140: bad orphan inode 131083 [ 299.797070][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.236008][ T6368] loop0: detected capacity change from 0 to 512 [ 300.284941][ T6368] EXT4-fs (loop0): Test dummy encryption mode enabled [ 300.292048][ T6368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.492280][ T6368] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.143: bad orphan inode 131083 [ 300.598322][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.530137][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.427649][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.979076][ T6384] loop0: detected capacity change from 0 to 64 [ 304.014280][ T6384] hfs: Unknown parameter '00000000000000000000005' [ 304.212374][ T6387] loop3: detected capacity change from 0 to 512 [ 304.315043][ T6384] loop0: detected capacity change from 0 to 2048 [ 304.323723][ T6384] EXT4-fs: Ignoring removed bh option [ 304.347543][ T6387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 304.459216][ T6387] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.150: bad orphan inode 131083 [ 304.490203][ T6387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.506761][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.178709][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.363080][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.487798][ T6414] loop2: detected capacity change from 0 to 512 [ 306.549636][ T6414] EXT4-fs (loop2): Test dummy encryption mode enabled [ 306.558101][ T6414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.657044][ T6414] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.158: bad orphan inode 131083 [ 306.705736][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.744630][ T6420] syz.4.160 (6420): /proc/6419/oom_adj is deprecated, please use /proc/6419/oom_score_adj instead. [ 306.843881][ T2029] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 307.126051][ T2029] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 307.135824][ T2029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.144511][ T2029] usb 1-1: Product: syz [ 307.149016][ T2029] usb 1-1: Manufacturer: syz [ 307.154384][ T2029] usb 1-1: SerialNumber: syz [ 307.343789][ T2029] r8152-cfgselector 1-1: Unknown version 0x0000 [ 307.350585][ T2029] r8152-cfgselector 1-1: config 0 descriptor?? [ 307.857443][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.867457][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.946062][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.955969][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.988330][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.005383][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.040397][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.051013][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.186134][ T25] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 311.199567][ T6436] loop0: detected capacity change from 0 to 32768 [ 311.408638][ T6436] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 311.543208][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.057885][ T5780] ocfs2: Unmounting device (7,0) on (node local) [ 314.368778][ T6457] loop3: detected capacity change from 0 to 256 [ 314.415912][ T6457] exfat: Invalid uid '0x00000000ffffffff' [ 316.229067][ T6468] mmap: syz.0.171 (6468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.576307][ T5833] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 316.636208][ T5847] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 317.195494][ T5847] usb 2-1: USB disconnect, device number 4 [ 317.400291][ T5833] usb 3-1: USB disconnect, device number 3 [ 318.387794][ T5847] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 319.457537][ T5847] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 319.472556][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.482647][ T5847] usb 2-1: Product: syz [ 319.487141][ T5847] usb 2-1: Manufacturer: syz [ 319.491967][ T5847] usb 2-1: SerialNumber: syz [ 319.710053][ T5847] r8152-cfgselector 2-1: Unknown version 0x0000 [ 319.716962][ T5847] r8152-cfgselector 2-1: config 0 descriptor?? [ 320.160693][ T6474] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 320.259417][ T6474] batadv1: entered promiscuous mode [ 320.322313][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.332345][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.408492][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.418384][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.482045][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.497106][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.534577][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.545338][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.628863][ T5847] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 321.490216][ T2029] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 321.693770][ T2029] usb 4-1: Using ep0 maxpacket: 16 [ 321.776798][ T2029] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 321.786650][ T2029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.795146][ T2029] usb 4-1: Product: syz [ 321.799510][ T2029] usb 4-1: Manufacturer: syz [ 321.804449][ T2029] usb 4-1: SerialNumber: syz [ 321.894096][ T2029] r8152-cfgselector 4-1: Unknown version 0x0000 [ 321.900764][ T2029] r8152-cfgselector 4-1: config 0 descriptor?? [ 322.026158][ T6491] loop2: detected capacity change from 0 to 128 [ 322.102980][ T6491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 322.200198][ T6491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.320587][ T6491] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 322.455009][ T6496] Zero length message leads to an empty skb [ 322.506309][ T6496] binder: 6495:6496 ioctl c0306201 0 returned -14 [ 322.523634][ T6497] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 322.570580][ T6496] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 322.578580][ T6496] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 322.586620][ T6496] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 322.594598][ T6496] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 322.602410][ T6496] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 322.610513][ T6496] netlink: 201260 bytes leftover after parsing attributes in process `syz.1.190'. [ 323.702493][ T6510] binder: 6507:6510 ioctl c0306201 0 returned -14 [ 323.747980][ T6510] netlink: 'syz.2.194': attribute type 3 has an invalid length. [ 323.756004][ T6510] netlink: 'syz.2.194': attribute type 2 has an invalid length. [ 323.770169][ T6510] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 323.780025][ T6510] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 323.788033][ T6510] netlink: 201260 bytes leftover after parsing attributes in process `syz.2.194'. [ 323.992702][ T6514] loop1: detected capacity change from 0 to 164 [ 324.103118][ T6514] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 324.190643][ T6512] netlink: 172844 bytes leftover after parsing attributes in process `syz.1.195'. [ 324.459287][ T2029] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 324.810508][ T6523] netlink: 201360 bytes leftover after parsing attributes in process `syz.1.200'. [ 324.855118][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 324.879711][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 324.924885][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 324.936975][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 324.972000][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.034399][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.080128][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.127021][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.198766][ T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 325.208225][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.216789][ T8] usb 3-1: Product: syz [ 325.221152][ T8] usb 3-1: Manufacturer: syz [ 325.226114][ T8] usb 3-1: SerialNumber: syz [ 325.229281][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.270830][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.352761][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 325.366772][ T8] r8152-cfgselector 3-1: Unknown version 0x0000 [ 325.373499][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 325.837046][ T6531] FAULT_INJECTION: forcing a failure. [ 325.837046][ T6531] name failslab, interval 1, probability 0, space 0, times 1 [ 325.850545][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.1.203 Not tainted 6.13.0-syzkaller-09338-g05dbaf8dd8bf #0 [ 325.850667][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.850747][ T6531] Call Trace: [ 325.850795][ T6531] [ 325.850838][ T6531] dump_stack_lvl+0x216/0x2d0 [ 325.850989][ T6531] dump_stack+0x1e/0x24 [ 325.851096][ T6531] should_fail_ex+0x767/0x830 [ 325.851282][ T6531] should_failslab+0x17f/0x210 [ 325.851453][ T6531] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 325.851603][ T6531] ? __alloc_skb+0x1e9/0x7b0 [ 325.851719][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 325.851889][ T6531] __alloc_skb+0x1e9/0x7b0 [ 325.852014][ T6531] netlink_alloc_large_skb+0x1b4/0x280 [ 325.852169][ T6531] netlink_sendmsg+0xa96/0x11e0 [ 325.852349][ T6531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.852506][ T6531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.852663][ T6531] __sock_sendmsg+0x30f/0x380 [ 325.852823][ T6531] ____sys_sendmsg+0x877/0xb60 [ 325.852980][ T6531] ___sys_sendmsg+0x28d/0x3c0 [ 325.853124][ T6531] ? __rcu_read_unlock+0x7b/0xe0 [ 325.853261][ T6531] ? __fget_files+0x42b/0x500 [ 325.853433][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 325.853587][ T6531] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 325.853750][ T6531] __x64_sys_sendmsg+0x212/0x3c0 [ 325.853892][ T6531] ? kmsan_get_metadata+0x13e/0x1c0 [ 325.854058][ T6531] x64_sys_call+0x2ed6/0x3c30 [ 325.854191][ T6531] do_syscall_64+0xcd/0x1e0 [ 325.854393][ T6531] ? clear_bhb_loop+0x25/0x80 [ 325.854551][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.854712][ T6531] RIP: 0033:0x7f785c78cda9 [ 325.854810][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.854913][ T6531] RSP: 002b:00007f785d681038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.855029][ T6531] RAX: ffffffffffffffda RBX: 00007f785c9a5fa0 RCX: 00007f785c78cda9 [ 325.855117][ T6531] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 325.855191][ T6531] RBP: 00007f785d681090 R08: 0000000000000000 R09: 0000000000000000 [ 325.855267][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.855343][ T6531] R13: 0000000000000000 R14: 00007f785c9a5fa0 R15: 00007ffc9fcd96c8 [ 325.855442][ T6531] [ 326.159171][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.168990][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.318990][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.331034][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.344802][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.357257][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.371593][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.381467][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.556016][ T5847] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 326.586391][ T6534] loop3: detected capacity change from 0 to 512 [ 326.649896][ T6534] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.824387][ T6534] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.204: iget: bad extended attribute block 19 [ 326.908232][ T6534] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.204: couldn't read orphan inode 15 (err -117) [ 326.944931][ T6534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.046950][ T6534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.204: bg 0: block 65: padding at end of block bitmap is not set [ 327.114329][ T6534] Quota error (device loop3): write_blk: dquota write failed [ 327.122476][ T6534] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 327.133629][ T6534] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.204: Failed to acquire dquot type 0 [ 327.227287][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 327.454659][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 327.535336][ T5847] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 327.544839][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.558398][ T5847] usb 1-1: Product: syz [ 327.562776][ T5847] usb 1-1: Manufacturer: syz [ 327.569591][ T5847] usb 1-1: SerialNumber: syz [ 327.642520][ T6534] syz.3.204 (6534) used greatest stack depth: 3488 bytes left [ 327.739258][ T5847] r8152-cfgselector 1-1: Unknown version 0x0000 [ 327.747971][ T5847] r8152-cfgselector 1-1: config 0 descriptor?? [ 327.790763][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.964885][ T6569] validate_nla: 4 callbacks suppressed [ 328.965060][ T6569] netlink: 'syz.3.216': attribute type 29 has an invalid length. [ 329.066509][ T6569] netlink: 'syz.3.216': attribute type 29 has an invalid length. [ 329.193714][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 329.403687][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 329.461097][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.471782][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.568045][ T8] usb 5-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31 [ 329.577743][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.586185][ T8] usb 5-1: Product: syz [ 329.590548][ T8] usb 5-1: Manufacturer: syz [ 329.595726][ T8] usb 5-1: SerialNumber: syz [ 329.643074][ T8] usb 5-1: config 0 descriptor?? [ 330.174630][ T6580] loop1: detected capacity change from 0 to 64 [ 330.407328][ T5847] r8152-cfgselector 1-1: Unknown version 0x0000 [ 330.414655][ T5847] r8152-cfgselector 1-1: bad CDC descriptors [ 330.586012][ T5847] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 330.834549][ T2029] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 331.067723][ T2029] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.098806][ T2029] usb 2-1: config 81 has an invalid interface number: 13 but max is 0 [ 331.107980][ T2029] usb 2-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 331.118757][ T2029] usb 2-1: config 81 has no interface number 0 [ 331.125446][ T2029] usb 2-1: config 81 interface 13 has no altsetting 0 [ 331.156481][ T2029] usb 2-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 331.166570][ T2029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.175061][ T2029] usb 2-1: Product: syz [ 331.179611][ T2029] usb 2-1: Manufacturer: syz [ 331.184750][ T2029] usb 2-1: SerialNumber: syz [ 331.491759][ T2029] qmi_wwan 2-1:81.13: bogus CDC Union: master=0, slave=1 [ 331.515334][ T2029] qmi_wwan 2-1:81.13: probe with driver qmi_wwan failed with error -22 [ 331.587315][ T2029] usb 2-1: USB disconnect, device number 6 [ 332.244424][ T8] usb 5-1: USB disconnect, device number 6 [ 332.550291][ T6597] capability: warning: `syz.4.230' uses 32-bit capabilities (legacy support in use) [ 332.656559][ T6598] loop2: detected capacity change from 0 to 256 [ 332.715829][ T6598] exfat: Deprecated parameter 'utf8' [ 332.721801][ T6598] exfat: Deprecated parameter 'utf8' [ 332.844122][ T6598] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 334.115241][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 334.344274][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 334.405902][ T5847] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 334.420585][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.430711][ T5847] usb 1-1: Product: syz [ 334.435178][ T5847] usb 1-1: Manufacturer: syz [ 334.440046][ T5847] usb 1-1: SerialNumber: syz [ 334.563106][ T5847] r8152-cfgselector 1-1: Unknown version 0x0000 [ 334.569800][ T5847] r8152-cfgselector 1-1: config 0 descriptor?? [ 334.902753][ T6624] loop2: detected capacity change from 0 to 1024 [ 334.974227][ T6624] EXT4-fs: Ignoring removed nobh option [ 334.980065][ T6624] EXT4-fs: Ignoring removed bh option [ 335.134843][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.175076][ T5833] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 335.366404][ T5833] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 335.375282][ T5833] usb 4-1: config 54 has no interface number 0 [ 335.422951][ T5833] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 335.432535][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.446325][ T5833] usb 4-1: Product: syz [ 335.450700][ T5833] usb 4-1: Manufacturer: syz [ 335.457400][ T5833] usb 4-1: SerialNumber: syz [ 335.958508][ T5833] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 335.977395][ T5833] usb 4-1: USB disconnect, device number 8 [ 336.010146][ T3938] usb 4-1: Failed to submit usb control message: -71 [ 336.017599][ T3938] usb 4-1: unable to send the bmi data to the device: -71 [ 336.026167][ T3938] usb 4-1: unable to get target info from device [ 336.032736][ T3938] usb 4-1: could not get target info (-71) [ 336.039851][ T3938] usb 4-1: could not probe fw (-71) [ 337.059075][ T5847] r8152-cfgselector 1-1: Unknown version 0x0000 [ 337.065921][ T5847] r8152-cfgselector 1-1: bad CDC descriptors [ 337.195532][ T5847] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 338.204285][ T6654] loop1: detected capacity change from 0 to 32768 [ 338.254029][ T6654] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 338.391272][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.560768][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 339.399732][ T6676] FAULT_INJECTION: forcing a failure. [ 339.399732][ T6676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.413661][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.4.256 Not tainted 6.13.0-syzkaller-09338-g05dbaf8dd8bf #0 [ 339.413783][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 339.413853][ T6676] Call Trace: [ 339.413896][ T6676] [ 339.413938][ T6676] dump_stack_lvl+0x216/0x2d0 [ 339.414073][ T6676] dump_stack+0x1e/0x24 [ 339.414179][ T6676] should_fail_ex+0x767/0x830 [ 339.414364][ T6676] should_fail+0x2a/0x40 [ 339.414528][ T6676] should_fail_usercopy+0x2e/0x40 [ 339.414654][ T6676] _copy_from_user+0x35/0x110 [ 339.414777][ T6676] get_user_ifreq+0x12c/0x310 [ 339.414924][ T6676] sock_ioctl+0x81a/0xd70 [ 339.415094][ T6676] ? __pfx_sock_ioctl+0x10/0x10 [ 339.415237][ T6676] __se_sys_ioctl+0x246/0x440 [ 339.415385][ T6676] __x64_sys_ioctl+0x96/0xe0 [ 339.415531][ T6676] x64_sys_call+0x19f0/0x3c30 [ 339.415663][ T6676] do_syscall_64+0xcd/0x1e0 [ 339.415824][ T6676] ? clear_bhb_loop+0x25/0x80 [ 339.415980][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.416131][ T6676] RIP: 0033:0x7fe5ce38cda9 [ 339.416221][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.416324][ T6676] RSP: 002b:00007fe5cf131038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.416440][ T6676] RAX: ffffffffffffffda RBX: 00007fe5ce5a5fa0 RCX: 00007fe5ce38cda9 [ 339.416532][ T6676] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000007 [ 339.416607][ T6676] RBP: 00007fe5cf131090 R08: 0000000000000000 R09: 0000000000000000 [ 339.416683][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.416754][ T6676] R13: 0000000000000000 R14: 00007fe5ce5a5fa0 R15: 00007ffc05310068 [ 339.416852][ T6676] [ 339.598076][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.405182][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 340.613547][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 340.673699][ T5847] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 340.683199][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.691732][ T5847] usb 3-1: Product: syz [ 340.696265][ T5847] usb 3-1: Manufacturer: syz [ 340.701065][ T5847] usb 3-1: SerialNumber: syz [ 340.750378][ T6687] loop4: detected capacity change from 0 to 2048 [ 340.815397][ T6687] nilfs2: Unknown parameter '' [ 341.470006][ T6691] loop3: detected capacity change from 0 to 32768 [ 341.531366][ T5847] r8152-cfgselector 3-1: Unknown version 0x0000 [ 341.538043][ T5847] r8152-cfgselector 3-1: config 0 descriptor?? [ 341.566271][ T6691] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 341.738703][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 342.183210][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.190123][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.450845][ T6706] loop0: detected capacity change from 0 to 256 [ 342.898114][ T6706] FAT-fs (loop0): IO charset cpush not found [ 343.084943][ T6706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 343.244910][ T5847] r8152-cfgselector 3-1: Unknown version 0x0000 [ 343.257953][ T5847] r8152-cfgselector 3-1: bad CDC descriptors [ 343.362150][ T5847] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 344.178918][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 344.188436][ T6724] netlink: 'syz.0.276': attribute type 7 has an invalid length. [ 344.196481][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 344.289005][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'. [ 344.299443][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 344.309181][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'. [ 344.318466][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'. [ 344.342099][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 344.376005][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 344.382265][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 344.389777][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 344.400743][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 345.583676][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 345.890882][ T5847] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 345.900427][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.908874][ T5847] usb 4-1: Product: syz [ 345.913682][ T5847] usb 4-1: Manufacturer: syz [ 345.918486][ T5847] usb 4-1: SerialNumber: syz [ 346.167380][ T5847] r8152-cfgselector 4-1: Unknown version 0x0000 [ 346.174487][ T5847] r8152-cfgselector 4-1: config 0 descriptor?? [ 346.264595][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 346.524047][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 346.631728][ T5833] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 346.641455][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.649861][ T5833] usb 3-1: Product: syz [ 346.654401][ T5833] usb 3-1: Manufacturer: syz [ 346.659212][ T5833] usb 3-1: SerialNumber: syz [ 346.772287][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.784133][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.847461][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.857294][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.976890][ T5833] r8152-cfgselector 3-1: Unknown version 0x0000 [ 346.983592][ T5833] r8152-cfgselector 3-1: config 0 descriptor?? [ 347.028690][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.038620][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.157306][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.167331][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.294539][ T8] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 347.813729][ T5833] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 347.993636][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 348.053581][ T5833] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 348.063105][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.071537][ T5833] usb 1-1: Product: syz [ 348.076072][ T5833] usb 1-1: Manufacturer: syz [ 348.080895][ T5833] usb 1-1: SerialNumber: syz [ 348.209350][ T5833] r8152-cfgselector 1-1: Unknown version 0x0000 [ 348.215965][ T5833] r8152-cfgselector 1-1: config 0 descriptor?? [ 349.240404][ T5833] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 349.513767][ T6769] loop4: detected capacity change from 0 to 1024 [ 349.537710][ T6769] hfsplus: Unknown parameter 'bamrier' [ 350.061286][ T6773] loop1: detected capacity change from 0 to 128 [ 350.227286][ T6773] FAT-fs (loop1): bogus number of reserved sectors [ 350.234447][ T6773] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 350.244242][ T6773] FAT-fs (loop1): Can't find a valid FAT filesystem [ 350.357876][ T6776] loop2: detected capacity change from 0 to 64 [ 350.402680][ T6769] loop4: detected capacity change from 0 to 32768 [ 350.633872][ T6773] loop1: detected capacity change from 0 to 2048 [ 350.686548][ T6769] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 350.695136][ T8] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 350.707679][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.716788][ T6769] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 350.730808][ T6769] bcachefs (loop4): Version upgrade required: [ 350.730808][ T6769] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 350.730808][ T6769] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 350.730808][ T6769] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 350.801222][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.817293][ T6769] bcachefs (loop4): dropping and reconstructing all alloc info [ 350.950258][ T6769] bcachefs (loop4): accounting_read... [ 350.956328][ T6773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.975967][ T6773] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.009946][ T6769] done [ 351.012929][ T6769] bcachefs (loop4): alloc_read... done [ 351.019055][ T6769] bcachefs (loop4): stripes_read... done [ 351.029074][ T6769] bcachefs (loop4): snapshots_read... done [ 351.043391][ T6769] bcachefs (loop4): done starting filesystem [ 351.256126][ T1098] ===================================================== [ 351.263574][ T1098] BUG: KMSAN: uninit-value in bch2_write_inode+0x9fa/0xf80 [ 351.270950][ T1098] bch2_write_inode+0x9fa/0xf80 [ 351.276119][ T1098] bch2_vfs_write_inode+0x8a/0x150 [ 351.281425][ T1098] __writeback_single_inode+0x8da/0x1290 [ 351.287428][ T1098] writeback_sb_inodes+0xac4/0x1c90 [ 351.292813][ T1098] wb_writeback+0x4df/0xcb0 [ 351.297676][ T1098] wb_workfn+0x40b/0x1940 [ 351.302212][ T1098] process_scheduled_works+0xae0/0x1c40 [ 351.310670][ T1098] worker_thread+0xea7/0x14f0 [ 351.317226][ T1098] kthread+0x6b9/0xef0 [ 351.321490][ T1098] ret_from_fork+0x6d/0x90 [ 351.326240][ T1098] ret_from_fork_asm+0x1a/0x30 [ 351.331167][ T1098] [ 351.333815][ T1098] Local variable io_opts.i117 created at: [ 351.339643][ T1098] bch2_write_inode+0x696/0xf80 [ 351.345596][ T1098] bch2_vfs_write_inode+0x8a/0x150 [ 351.350908][ T1098] [ 351.353453][ T1098] CPU: 0 UID: 0 PID: 1098 Comm: kworker/u8:9 Not tainted 6.13.0-syzkaller-09338-g05dbaf8dd8bf #0 [ 351.364772][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 351.376411][ T1098] Workqueue: writeback wb_workfn (flush-bcachefs-1) [ 351.383447][ T1098] ===================================================== [ 351.390497][ T1098] Disabling lock debugging due to kernel taint [ 351.396947][ T1098] Kernel panic - not syncing: kmsan.panic set ... [ 351.403507][ T1098] CPU: 0 UID: 0 PID: 1098 Comm: kworker/u8:9 Tainted: G B 6.13.0-syzkaller-09338-g05dbaf8dd8bf #0 [ 351.415691][ T1098] Tainted: [B]=BAD_PAGE [ 351.419954][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 351.430163][ T1098] Workqueue: writeback wb_workfn (flush-bcachefs-1) [ 351.437024][ T1098] Call Trace: [ 351.440411][ T1098] [ 351.443452][ T1098] dump_stack_lvl+0x216/0x2d0 [ 351.448301][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.454354][ T1098] dump_stack+0x1e/0x24 [ 351.458675][ T1098] panic+0x4e2/0xcf0 [ 351.462776][ T1098] ? kmsan_get_metadata+0x61/0x1c0 [ 351.468109][ T1098] kmsan_report+0x2c7/0x2d0 [ 351.472816][ T1098] ? kmsan_get_metadata+0x60/0x1c0 [ 351.478124][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.484139][ T1098] ? __msan_warning+0x95/0x120 [ 351.489090][ T1098] ? bch2_write_inode+0x9fa/0xf80 [ 351.494302][ T1098] ? bch2_vfs_write_inode+0x8a/0x150 [ 351.499786][ T1098] ? __writeback_single_inode+0x8da/0x1290 [ 351.505779][ T1098] ? writeback_sb_inodes+0xac4/0x1c90 [ 351.511327][ T1098] ? wb_writeback+0x4df/0xcb0 [ 351.516168][ T1098] ? wb_workfn+0x40b/0x1940 [ 351.520876][ T1098] ? process_scheduled_works+0xae0/0x1c40 [ 351.526783][ T1098] ? worker_thread+0xea7/0x14f0 [ 351.531804][ T1098] ? kthread+0x6b9/0xef0 [ 351.536235][ T1098] ? ret_from_fork+0x6d/0x90 [ 351.541070][ T1098] ? ret_from_fork_asm+0x1a/0x30 [ 351.546186][ T1098] ? kmsan_get_metadata+0x13e/0x1c0 [ 351.551595][ T1098] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 351.558138][ T1098] ? kmsan_get_metadata+0x13e/0x1c0 [ 351.563555][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.569580][ T1098] ? kmsan_get_metadata+0x13e/0x1c0 [ 351.574977][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.580989][ T1098] ? bch2_inode_opts_get+0xd03/0xe40 [ 351.586440][ T1098] ? kmsan_get_metadata+0x13e/0x1c0 [ 351.591832][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.597836][ T1098] __msan_warning+0x95/0x120 [ 351.602600][ T1098] bch2_write_inode+0x9fa/0xf80 [ 351.607617][ T1098] ? __bch2_inode_peek+0x221/0x890 [ 351.612944][ T1098] ? __pfx_inode_update_times_fn+0x10/0x10 [ 351.618966][ T1098] bch2_vfs_write_inode+0x8a/0x150 [ 351.624259][ T1098] ? __pfx_bch2_vfs_write_inode+0x10/0x10 [ 351.630167][ T1098] __writeback_single_inode+0x8da/0x1290 [ 351.635992][ T1098] writeback_sb_inodes+0xac4/0x1c90 [ 351.641424][ T1098] ? kmsan_get_metadata+0x13e/0x1c0 [ 351.646846][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.652853][ T1098] wb_writeback+0x4df/0xcb0 [ 351.657550][ T1098] ? queue_io+0x431/0x780 [ 351.662059][ T1098] wb_workfn+0x40b/0x1940 [ 351.667708][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.673734][ T1098] ? __pfx_wb_workfn+0x10/0x10 [ 351.678682][ T1098] process_scheduled_works+0xae0/0x1c40 [ 351.684450][ T1098] worker_thread+0xea7/0x14f0 [ 351.689338][ T1098] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 351.695365][ T1098] kthread+0x6b9/0xef0 [ 351.699605][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 351.704894][ T1098] ? __pfx_kthread+0x10/0x10 [ 351.709661][ T1098] ret_from_fork+0x6d/0x90 [ 351.714261][ T1098] ? __pfx_kthread+0x10/0x10 [ 351.719027][ T1098] ret_from_fork_asm+0x1a/0x30 [ 351.723977][ T1098] [ 351.727393][ T1098] Kernel Offset: disabled [ 351.731773][ T1098] Rebooting in 86400 seconds..