last executing test programs: 1m17.380582029s ago: executing program 0 (id=176): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_get_implied_cluster_alloc_exit\x00', r0, 0x0, 0x5}, 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) copy_file_range(r1, 0x0, r3, &(0x7f00000000c0)=0x800fffd, 0x400002, 0x0) 1m8.218567123s ago: executing program 0 (id=190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x2, "2f007f9e"}, @local=@item_4={0x3, 0x2, 0x0, "af13a13f"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r1, 0x0, 0x0) 1m3.282051235s ago: executing program 0 (id=198): sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004050}, 0x4c830) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0200000", @ANYRES16=0x0, @ANYBLOB="00022cbd70000400000005000000060002000100000008000c000300000005"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c900}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m1.793544805s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5c2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 58.102298348s ago: executing program 0 (id=206): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 57.15212048s ago: executing program 0 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = memfd_secret(0x0) setresuid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x7, 0x11, 0x0, 0x1, [@generic="2fe5af"]}]}, 0x1c}], 0x1}, 0x0) 41.54700926s ago: executing program 32 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = memfd_secret(0x0) setresuid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x7, 0x11, 0x0, 0x1, [@generic="2fe5af"]}]}, 0x1c}], 0x1}, 0x0) 20.62786558s ago: executing program 3 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000007}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 19.997850379s ago: executing program 1 (id=266): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) write$proc_mixer(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e2027"], 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) dup3(r2, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) 17.269131443s ago: executing program 3 (id=267): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5c2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 16.571954844s ago: executing program 2 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 15.616301277s ago: executing program 1 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ftruncate(r0, 0x3) 15.286234939s ago: executing program 3 (id=271): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getresgid(0x0, &(0x7f0000002d80), &(0x7f0000002dc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 12.844229039s ago: executing program 1 (id=273): sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004050}, 0x4c830) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0200000", @ANYRES16=0x0, @ANYBLOB="00022cbd70000400000005000000060002000100000008000c000300000005"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c900}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10.167745476s ago: executing program 3 (id=274): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$eJzs2z1PFEEcx/HfPtxxoIARtTCaEI1oI+dDZWHUjoo3QEXgVOIaUbSAmAiNWphQ2dlYmZhYWBqDnbHyBViY2GmIFJdYWbBmz32Am3vO3a4e30/D7Pxm2NkNc/eH5QRgz7qqcVmylA8OjhUOrI9ZWS8JQEr88Ou26yfsKATQ324OZ70CANnYuia9OCX9LD+ck5OPyoKgAvi6KWlj4olWFeb2gKRXnyU3rh+21qSjbphbBQ1W1xcvpdPRfGvIqD+C+UNxvm9HMhjnZ05G59+vYY1oNBckBzUW5vPx/CNN6x23reoIAID+ZGmyWd5wgK3rC17pXN08V8nP183zlfxCk/xifDwQt2aeTz9471/eDvLJuTvefKNlAqjB7mD/fzmetJ0m+9+ts/+rf08AkL6l5ZVbs57nP5IqjdK9sCdsRH8RSHocY0xXGtEzhxYGR08ojSj4Hjt6HHP6+oR57d27CjtZ2Kik3tyof7ihGtG3qb/3JO6xe3HndzVO/Pj9ePHZ23etDH7T5ins+KduZqNUrhojW+rhdY0bu2DWK7Q23Vr1/TZPWvPlIvnngEK3X4kApK14//ZicWl55eyCI+lGKRe94U9936xU9sXG9T2A/1fypl8rXTN6/N2H0x8//Spfev20gzNfkfTBfCAIAAAAAAAAAAAAAADadkiHs14CAAAAgJSYn/65O9Ltjy5lfY0AAAAAAAAAAAAAAAAAAPSbPwEAAP//dhAJcA==") socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) 9.792803918s ago: executing program 2 (id=275): r0 = io_uring_setup(0x21cb, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0xdd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff]}, 0x1) 8.695854873s ago: executing program 1 (id=276): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x5, 0x0, 0x0) fdatasync(0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x600}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x2c}, 0x8841) socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x3ffd, 0x8000) 7.899262422s ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_get_implied_cluster_alloc_exit\x00', r0, 0x0, 0x5}, 0x18) r1 = open(0x0, 0x14927e, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) copy_file_range(r1, 0x0, r3, &(0x7f00000000c0)=0x800fffd, 0x400002, 0x0) 7.144844057s ago: executing program 4 (id=279): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) write$proc_mixer(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e2027"], 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) dup3(r2, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) 6.753770625s ago: executing program 1 (id=280): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5c2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 6.063792383s ago: executing program 2 (id=281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) 4.392510423s ago: executing program 1 (id=282): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000200)={[{@fsck}, {@discard}, {@direct_io}, {@reconstruct_alloc}, {@norecovery}, {@errors_continue}, {@acl}, {@str_hash={'str_hash', 0x3d, 'crc64'}}], [{@uid_eq}, {@obj_user={'obj_user', 0x3d, 'errors=continue'}}]}, 0x1, 0x58fd, &(0x7f000000b240)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1, 0x1, 0xb, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x6, @void, @value, @void, @value}, 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb70}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0x8000, 0x10, 0x1}, {0x1, 0x2, 0xfff9, 0x3, 0x6, 0xfff}, 0x9a, 0x8, 0x1c1e}}]}}]}, 0x60}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x44, 0x8af82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x1b) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) write(r9, &(0x7f00000000c0)="61c4ea5b79aefad76a5afb60ac4857dd284b60373c885793bedd2de0b36f3ff0d3dbd92fa5112d1009e98f7072f67bd848a7efcdc61fe03b78", 0x39) r10 = openat$dsp(0xffffff9c, 0x0, 0x82040, 0x0) sendmsg$NFT_MSG_GETRULE(r4, 0x0, 0x40000) ioctl$SOUND_MIXER_WRITE_RECSRC(r10, 0xc0044dff, &(0x7f0000000100)=0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x44151}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) 3.977791612s ago: executing program 4 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000085c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000008900)={0x0, 0x0, &(0x7f00000088c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1048}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 3.155428467s ago: executing program 4 (id=284): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.014638621s ago: executing program 2 (id=285): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.958813616s ago: executing program 3 (id=286): socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$usbfs(0x0, 0x200, 0x102) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="69fe0f471ec36a0ae57e89af"], 0x1, 0x1d0, &(0x7f00000004c0)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8140aecc, &(0x7f0000000040)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) 2.331779193s ago: executing program 4 (id=287): r0 = io_uring_setup(0x21cb, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0xdd}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x2, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff]}, 0x1) 1.835249692s ago: executing program 3 (id=288): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002980)={0x44, &(0x7f0000002b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0}) 1.299042948s ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 1.014009127s ago: executing program 2 (id=290): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_get_implied_cluster_alloc_exit\x00', r0, 0x0, 0x5}, 0x18) r1 = open(0x0, 0x14927e, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) copy_file_range(r1, 0x0, r3, &(0x7f00000000c0)=0x800fffd, 0x400002, 0x0) 0s ago: executing program 4 (id=291): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) brk(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 195.696251][ T5776] cgroup: Unknown subsys name 'net' [ 195.888681][ T5776] cgroup: Unknown subsys name 'cpuset' [ 195.908897][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.518032][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.524866][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.971461][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 252.500305][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.511141][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.520410][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.528482][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.540605][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.558321][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.568518][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.577990][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.595590][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.605641][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.633900][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.635486][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.656165][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.665387][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.681576][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.760486][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.772572][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.780891][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.797314][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.809218][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.826149][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.842957][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.852701][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.863989][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.944185][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.309851][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 254.495488][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 254.655267][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 254.710057][ T5808] Bluetooth: hci1: command tx timeout [ 254.715883][ T5808] Bluetooth: hci0: command tx timeout [ 254.778895][ T5808] Bluetooth: hci2: command tx timeout [ 255.040458][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 255.042619][ T5808] Bluetooth: hci4: command tx timeout [ 255.054898][ T5808] Bluetooth: hci3: command tx timeout [ 255.375286][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 255.637596][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.645265][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.655055][ T5798] bridge_slave_0: entered allmulticast mode [ 255.665124][ T5798] bridge_slave_0: entered promiscuous mode [ 255.868437][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.876105][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.884176][ T5798] bridge_slave_1: entered allmulticast mode [ 255.894339][ T5798] bridge_slave_1: entered promiscuous mode [ 256.000831][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.008957][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.016695][ T5799] bridge_slave_0: entered allmulticast mode [ 256.026578][ T5799] bridge_slave_0: entered promiscuous mode [ 256.049738][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.058657][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.066429][ T5806] bridge_slave_0: entered allmulticast mode [ 256.076213][ T5806] bridge_slave_0: entered promiscuous mode [ 256.138618][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.146303][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.154244][ T5799] bridge_slave_1: entered allmulticast mode [ 256.164190][ T5799] bridge_slave_1: entered promiscuous mode [ 256.180158][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.188132][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.195830][ T5806] bridge_slave_1: entered allmulticast mode [ 256.205794][ T5806] bridge_slave_1: entered promiscuous mode [ 256.472888][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.590505][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.611614][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.637266][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.647831][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.655436][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.663371][ T5811] bridge_slave_0: entered allmulticast mode [ 256.672895][ T5811] bridge_slave_0: entered promiscuous mode [ 256.695698][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.757320][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.778451][ T5801] Bluetooth: hci0: command tx timeout [ 256.784129][ T5801] Bluetooth: hci1: command tx timeout [ 256.805324][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.815293][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.823219][ T5811] bridge_slave_1: entered allmulticast mode [ 256.832696][ T5811] bridge_slave_1: entered promiscuous mode [ 256.857177][ T5808] Bluetooth: hci2: command tx timeout [ 257.066883][ T5798] team0: Port device team_slave_0 added [ 257.098223][ T5808] Bluetooth: hci3: command tx timeout [ 257.103940][ T5808] Bluetooth: hci4: command tx timeout [ 257.124742][ T5799] team0: Port device team_slave_0 added [ 257.181014][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.193621][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.201576][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.211940][ T5810] bridge_slave_0: entered allmulticast mode [ 257.221467][ T5810] bridge_slave_0: entered promiscuous mode [ 257.241967][ T5798] team0: Port device team_slave_1 added [ 257.250181][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.258220][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.265923][ T5810] bridge_slave_1: entered allmulticast mode [ 257.276283][ T5810] bridge_slave_1: entered promiscuous mode [ 257.295123][ T5806] team0: Port device team_slave_0 added [ 257.310466][ T5799] team0: Port device team_slave_1 added [ 257.325973][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.445809][ T5806] team0: Port device team_slave_1 added [ 257.665232][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.719653][ T5811] team0: Port device team_slave_0 added [ 257.729467][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.736674][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.763948][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.816010][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.823546][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.850056][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.873538][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.885947][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.893425][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.919850][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.940491][ T5811] team0: Port device team_slave_1 added [ 257.988341][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.995566][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.022047][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.036574][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.045240][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.072931][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.120323][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.127685][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.154190][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.293372][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.301073][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.328017][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.397357][ T5810] team0: Port device team_slave_0 added [ 258.416691][ T5810] team0: Port device team_slave_1 added [ 258.426916][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.434358][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.460786][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.665613][ T5798] hsr_slave_0: entered promiscuous mode [ 258.676471][ T5798] hsr_slave_1: entered promiscuous mode [ 258.848049][ T5806] hsr_slave_0: entered promiscuous mode [ 258.859606][ T5806] hsr_slave_1: entered promiscuous mode [ 258.868702][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.876548][ T5806] Cannot create hsr debugfs directory [ 258.885883][ T5808] Bluetooth: hci1: command tx timeout [ 258.891883][ T5808] Bluetooth: hci0: command tx timeout [ 258.901450][ T5799] hsr_slave_0: entered promiscuous mode [ 258.911941][ T5799] hsr_slave_1: entered promiscuous mode [ 258.920928][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.929035][ T5799] Cannot create hsr debugfs directory [ 258.938470][ T5801] Bluetooth: hci2: command tx timeout [ 258.938714][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.951356][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.978019][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.995236][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.002871][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.029357][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.097855][ T5811] hsr_slave_0: entered promiscuous mode [ 259.108102][ T5811] hsr_slave_1: entered promiscuous mode [ 259.117100][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.124911][ T5811] Cannot create hsr debugfs directory [ 259.197537][ T5801] Bluetooth: hci4: command tx timeout [ 259.197785][ T5808] Bluetooth: hci3: command tx timeout [ 259.766219][ T5810] hsr_slave_0: entered promiscuous mode [ 259.775394][ T5810] hsr_slave_1: entered promiscuous mode [ 259.785149][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.793419][ T5810] Cannot create hsr debugfs directory [ 260.902402][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.929217][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.937649][ T5808] Bluetooth: hci0: command tx timeout [ 260.938042][ T5801] Bluetooth: hci1: command tx timeout [ 261.020062][ T5801] Bluetooth: hci2: command tx timeout [ 261.025912][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.085042][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.257722][ T5801] Bluetooth: hci4: command tx timeout [ 261.263426][ T5801] Bluetooth: hci3: command tx timeout [ 261.324422][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.364757][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.413583][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.437988][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.482032][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.519086][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.541640][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.674892][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.699233][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.732384][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.853756][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.928909][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.985572][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.023221][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.072563][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.150507][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.852151][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.932642][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.108797][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.206203][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.263976][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.271931][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.299068][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.374450][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.382272][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.474300][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.538816][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.546399][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.562771][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.570517][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.627502][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.661017][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.668765][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.793871][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.801622][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.855850][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.888483][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.031845][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.039570][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.149338][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.157277][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.228672][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.419286][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.491150][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.498878][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.515297][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.523071][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.593409][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.352529][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.646251][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.858801][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.106049][ T5798] veth0_vlan: entered promiscuous mode [ 267.127015][ T5811] veth0_vlan: entered promiscuous mode [ 267.215852][ T5811] veth1_vlan: entered promiscuous mode [ 267.234885][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.250046][ T5798] veth1_vlan: entered promiscuous mode [ 267.372248][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.633886][ T5806] veth0_vlan: entered promiscuous mode [ 267.785252][ T5806] veth1_vlan: entered promiscuous mode [ 267.810126][ T5811] veth0_macvtap: entered promiscuous mode [ 267.826454][ T5798] veth0_macvtap: entered promiscuous mode [ 267.905148][ T5811] veth1_macvtap: entered promiscuous mode [ 267.951724][ T5798] veth1_macvtap: entered promiscuous mode [ 268.093853][ T5799] veth0_vlan: entered promiscuous mode [ 268.160047][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.253016][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.293705][ T5799] veth1_vlan: entered promiscuous mode [ 268.317504][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.334127][ T5806] veth0_macvtap: entered promiscuous mode [ 268.389113][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.399076][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.408391][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.417652][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.465946][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.507043][ T5806] veth1_macvtap: entered promiscuous mode [ 268.589195][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.598507][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.607740][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.616781][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.702298][ T5799] veth0_macvtap: entered promiscuous mode [ 268.781854][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.815009][ T5799] veth1_macvtap: entered promiscuous mode [ 268.922997][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.047540][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.076269][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.085637][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.096250][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.105484][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.142706][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.217698][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.226802][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.236074][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.245252][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.454402][ T5810] veth0_vlan: entered promiscuous mode [ 270.645806][ T5810] veth1_vlan: entered promiscuous mode [ 271.031253][ T5810] veth0_macvtap: entered promiscuous mode [ 271.129982][ T5810] veth1_macvtap: entered promiscuous mode [ 271.304314][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.424191][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.525227][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.534468][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.543752][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.553025][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.044878][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.053952][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.274701][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.284101][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.292634][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.302310][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.619461][ T5083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.628757][ T5083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.704018][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.712847][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.824531][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 277.066545][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.075167][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.265628][ T3980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.274398][ T3980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.405436][ T5977] loop0: detected capacity change from 0 to 256 [ 277.466476][ T1780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.475469][ T1780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.773117][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 277.782506][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 277.895442][ T5980] ceph: No mds server is up or the cluster is laggy [ 278.258528][ T5988] loop2: detected capacity change from 0 to 512 [ 279.811558][ T5995] loop0: detected capacity change from 0 to 32768 [ 279.821550][ T5995] XFS: ikeep mount option is deprecated. [ 280.052462][ T5998] loop1: detected capacity change from 0 to 4096 [ 280.091684][ T5998] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 280.134459][ T5995] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.218592][ T5988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 280.232137][ T5988] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.678145][ T5998] ntfs3(loop1): ino=19, mi_enum_attr [ 280.683989][ T5998] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 280.770960][ T5997] ntfs3: Unknown parameter '?ݐ?ݐ?ݐ?ݐ?ݐ?ݐ?2r:F/g' [ 281.853943][ T5995] XFS (loop0): Ending clean mount [ 281.934799][ T5995] XFS (loop0): Quotacheck needed: Please wait. [ 282.095982][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.108701][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.324435][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 282.357569][ T3980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.365848][ T3980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.413489][ T5995] XFS (loop0): Quotacheck: Done. [ 282.667438][ T5798] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.409419][ T6026] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 285.078521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.180641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.487793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 285.676185][ T6033] loop1: detected capacity change from 0 to 256 [ 285.688514][ T6033] exfat: Unknown parameter '' [ 287.197248][ T6038] xt_hashlimit: size too large, truncated to 1048576 [ 288.248448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.478796][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 289.734410][ T9] usb 4-1: device descriptor read/64, error -71 [ 289.785187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.987595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 290.019545][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.249214][ T9] usb 4-1: device descriptor read/64, error -71 [ 290.362339][ T9] usb usb4-port1: attempt power cycle [ 290.808801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 290.818779][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 290.894169][ T9] usb 4-1: device descriptor read/8, error -71 [ 290.939670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.979054][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.985948][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.202631][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 291.249524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.289984][ T9] usb 4-1: device descriptor read/8, error -71 [ 291.402064][ T9] usb usb4-port1: unable to enumerate USB device [ 291.529787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 293.020453][ T6058] loop1: detected capacity change from 0 to 2048 [ 293.023889][ T6060] loop2: detected capacity change from 0 to 128 [ 293.123934][ T6060] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 293.253417][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.968081][ T2056] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 294.309772][ T2056] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.320473][ T2056] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.372572][ T6069] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 294.436402][ T2056] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 294.446178][ T2056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.454718][ T2056] usb 4-1: Product: syz [ 294.459413][ T2056] usb 4-1: Manufacturer: syz [ 294.464407][ T2056] usb 4-1: SerialNumber: syz [ 294.588820][ T2056] usb 4-1: config 0 descriptor?? [ 294.624707][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.896054][ T2056] usb 4-1: USB disconnect, device number 6 [ 296.104620][ T6082] loop4: detected capacity change from 0 to 256 [ 297.517554][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 297.788057][ T9] usb 1-1: device descriptor read/64, error -71 [ 297.900164][ T6095] xt_hashlimit: size too large, truncated to 1048576 [ 298.243228][ T6097] loop1: detected capacity change from 0 to 2048 [ 298.303567][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 298.374310][ T6101] loop3: detected capacity change from 0 to 128 [ 298.466679][ T6101] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 298.500258][ T9] usb 1-1: device descriptor read/64, error -71 [ 298.704813][ T9] usb usb1-port1: attempt power cycle [ 298.830655][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.911845][ T6094] loop2: detected capacity change from 0 to 8192 [ 299.264424][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 299.349499][ T9] usb 1-1: device descriptor read/8, error -71 [ 299.587765][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 299.610524][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.659592][ T9] usb 1-1: device descriptor read/8, error -71 [ 299.785423][ T9] usb usb1-port1: unable to enumerate USB device [ 301.403014][ T2056] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 301.593310][ T2056] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.604290][ T2056] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.796424][ T2056] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 301.806356][ T2056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.814910][ T2056] usb 1-1: Product: syz [ 301.826463][ T2056] usb 1-1: Manufacturer: syz [ 301.834628][ T2056] usb 1-1: SerialNumber: syz [ 301.839720][ T6124] loop2: detected capacity change from 0 to 256 [ 301.959728][ T2056] usb 1-1: config 0 descriptor?? [ 302.326459][ T9] usb 1-1: USB disconnect, device number 6 [ 302.425444][ T6132] loop3: detected capacity change from 0 to 128 [ 302.502830][ T6132] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 303.052262][ T6135] loop2: detected capacity change from 0 to 2048 [ 303.283989][ T6135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.758489][ T2056] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 303.887312][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 303.957427][ T2056] usb 2-1: device descriptor read/64, error -71 [ 304.021520][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.814325][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.826742][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.845113][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 304.860958][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.876337][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.885897][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.907306][ T2056] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 305.090127][ T5855] usb 4-1: config 0 descriptor?? [ 305.117334][ T2056] usb 2-1: device descriptor read/64, error -71 [ 305.244440][ T2056] usb usb2-port1: attempt power cycle [ 305.399061][ T6157] xt_hashlimit: size too large, truncated to 1048576 [ 305.594386][ T5855] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 305.808214][ T2056] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 305.839527][ T5855] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 305.909481][ T2056] usb 2-1: device descriptor read/8, error -71 [ 305.939407][ T5855] usb 4-1: USB disconnect, device number 7 [ 306.186133][ T2056] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 306.259665][ T2056] usb 2-1: device descriptor read/8, error -71 [ 306.394859][ T2056] usb usb2-port1: unable to enumerate USB device [ 307.014595][ T6166] loop2: detected capacity change from 0 to 256 [ 307.117639][ T6169] loop3: detected capacity change from 0 to 128 [ 307.272406][ T6169] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 308.017085][ T6162] fido_id[6162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 308.457335][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 308.710053][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.720863][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.795204][ T6179] loop1: detected capacity change from 0 to 2048 [ 308.858578][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 308.869258][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.877872][ T9] usb 1-1: Product: syz [ 308.882357][ T9] usb 1-1: Manufacturer: syz [ 308.887386][ T9] usb 1-1: SerialNumber: syz [ 309.021165][ T9] usb 1-1: config 0 descriptor?? [ 309.186239][ T6179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.387345][ T9] usb 1-1: USB disconnect, device number 7 [ 309.766017][ T6189] Zero length message leads to an empty skb [ 312.585190][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.308027][ T2056] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 313.413521][ T6207] loop0: detected capacity change from 0 to 256 [ 313.479249][ T2056] usb 5-1: device descriptor read/64, error -71 [ 313.505548][ T6205] loop1: detected capacity change from 0 to 1764 [ 313.790340][ T2056] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 314.602300][ T2056] usb 5-1: device descriptor read/64, error -71 [ 314.739825][ T2056] usb usb5-port1: attempt power cycle [ 314.794610][ T6215] loop1: detected capacity change from 0 to 128 [ 314.804675][ T6214] xt_hashlimit: size too large, truncated to 1048576 [ 314.993148][ T6215] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 315.462760][ T2056] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.558008][ T2056] usb 5-1: device descriptor read/8, error -71 [ 315.817900][ T2056] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 316.018823][ T2056] usb 5-1: device descriptor read/8, error -71 [ 316.159103][ T2056] usb usb5-port1: unable to enumerate USB device [ 319.854410][ T6243] loop1: detected capacity change from 0 to 256 [ 321.115083][ T6251] loop1: detected capacity change from 0 to 128 [ 321.234220][ T6251] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 323.175151][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 324.347282][ T9] usb 1-1: device descriptor read/64, error -71 [ 324.598300][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 325.147451][ T6268] xt_hashlimit: size too large, truncated to 1048576 [ 325.576240][ T6270] loop1: detected capacity change from 0 to 2048 [ 325.766328][ T6270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.418040][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.439381][ T6281] loop3: detected capacity change from 0 to 256 [ 333.699070][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 333.806162][ T6304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 333.928895][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.943678][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.953321][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.957398][ T6306] loop3: detected capacity change from 0 to 128 [ 333.962786][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.097999][ T6306] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 334.134149][ T9] usb 2-1: config 0 descriptor?? [ 335.235158][ T6321] loop3: detected capacity change from 0 to 256 [ 335.458594][ T6320] loop4: detected capacity change from 0 to 2048 [ 335.612816][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.934344][ T5855] usb 2-1: USB disconnect, device number 6 [ 339.349763][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.365084][ T6354] loop2: detected capacity change from 0 to 128 [ 343.502758][ T6354] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 343.884892][ T6359] loop1: detected capacity change from 0 to 256 [ 344.555131][ T6362] loop4: detected capacity change from 0 to 2048 [ 344.566428][ T6363] loop0: detected capacity change from 0 to 1024 [ 344.650276][ T6363] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 344.660991][ T6363] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 344.673502][ T6363] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 344.825365][ T6363] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.128: unexpected bad inode w/o EXT4_IGET_BAD [ 345.013668][ T6363] EXT4-fs (loop0): no journal found [ 345.020082][ T6363] EXT4-fs (loop0): can't get journal size [ 345.215862][ T6363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.434520][ T6363] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.487114][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.459968][ T2056] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 347.785447][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.863900][ T2056] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.874588][ T2056] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.884173][ T2056] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.893719][ T2056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.735115][ T2056] usb 2-1: config 0 descriptor?? [ 350.442050][ T2056] usb 2-1: can't set config #0, error -71 [ 350.459645][ T2056] usb 2-1: USB disconnect, device number 7 [ 352.420683][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.427790][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.521154][ T6400] 9pnet_fd: Insufficient options for proto=fd [ 352.926104][ T6404] loop2: detected capacity change from 0 to 128 [ 353.038863][ T6404] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 353.378445][ T6412] loop0: detected capacity change from 0 to 1764 [ 353.442891][ T6412] iso9660: Unknown parameter '' [ 353.565919][ T6413] loop1: detected capacity change from 0 to 2048 [ 354.321068][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.712598][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 355.991351][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.002071][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.011597][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.021119][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.433850][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.198913][ T9] usb 3-1: config 0 descriptor?? [ 359.289989][ T6444] 9pnet_fd: Insufficient options for proto=fd [ 360.012849][ T5878] usb 3-1: USB disconnect, device number 2 [ 360.319762][ T6456] loop0: detected capacity change from 0 to 128 [ 360.405448][ T6456] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 361.098327][ T6456] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 362.406712][ T6468] loop4: detected capacity change from 0 to 32768 [ 362.416409][ T6468] ======================================================= [ 362.416409][ T6468] WARNING: The mand mount option has been deprecated and [ 362.416409][ T6468] and is ignored by this kernel. Remove the mand [ 362.416409][ T6468] option from the mount to silence this warning. [ 362.416409][ T6468] ======================================================= [ 362.561021][ T6468] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 362.585091][ T6464] loop3: detected capacity change from 0 to 2048 [ 362.694889][ T6468] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 363.007397][ T5810] ocfs2: Unmounting device (7,4) on (node local) [ 363.098188][ T6464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.046323][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.118032][ T2056] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 367.441723][ T2056] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.452331][ T2056] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 367.465960][ T2056] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.475688][ T2056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.674588][ T6502] loop2: detected capacity change from 0 to 128 [ 367.680303][ T2056] usb 2-1: config 0 descriptor?? [ 367.816634][ T6502] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 368.489480][ T2056] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 368.637245][ T6506] loop0: detected capacity change from 0 to 32768 [ 369.129171][ T6506] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 369.278879][ T6506] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 369.510816][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 371.209139][ T5878] usb 2-1: USB disconnect, device number 8 [ 373.291889][ T6531] 9pnet_fd: Insufficient options for proto=fd [ 374.843905][ T6537] loop0: detected capacity change from 0 to 2048 [ 374.875534][ T6542] loop1: detected capacity change from 0 to 256 [ 375.023439][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 375.029861][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 375.036766][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 375.119683][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.861456][ T6551] loop3: detected capacity change from 0 to 32768 [ 378.029637][ T6551] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 378.296462][ T6551] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 378.539359][ T5811] ocfs2: Unmounting device (7,3) on (node local) [ 378.652987][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.749521][ T6557] loop1: detected capacity change from 0 to 128 [ 378.762894][ T6557] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 379.141658][ T6557] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 379.472865][ T6565] 9pnet_fd: Insufficient options for proto=fd [ 379.757380][ T5855] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.139219][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 380.139303][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 380.421351][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.432065][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 380.445746][ T5855] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.455339][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.590602][ T5855] usb 1-1: config 0 descriptor?? [ 380.621186][ T5855] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 383.502080][ T5855] usb 1-1: USB disconnect, device number 10 [ 383.785155][ T6584] loop2: detected capacity change from 0 to 256 [ 384.536380][ T6591] loop1: detected capacity change from 0 to 2048 [ 384.737474][ T6591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.872994][ T6600] loop4: detected capacity change from 0 to 32768 [ 387.128308][ T6600] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.108085][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 388.614628][ T6600] XFS (loop4): Ending clean mount [ 388.627931][ T6600] XFS (loop4): Quotacheck needed: Please wait. [ 388.655038][ T6600] XFS (loop4): Quotacheck: Done. [ 388.664074][ T6600] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.993434][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.963646][ T6634] loop1: detected capacity change from 0 to 256 [ 392.658845][ T6636] loop3: detected capacity change from 0 to 512 [ 392.734262][ T6636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 392.747953][ T6636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 392.935711][ T6636] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 392.957517][ T6636] EXT4-fs (loop3): 1 truncate cleaned up [ 392.965842][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.374959][ T5878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 393.866710][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.877866][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 393.893319][ T5878] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.903050][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.042955][ T5878] usb 5-1: config 0 descriptor?? [ 394.063450][ T5878] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 394.908064][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.807141][ T6657] loop3: detected capacity change from 0 to 2048 [ 395.995505][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.203049][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 396.417540][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 396.481769][ T2056] usb 5-1: USB disconnect, device number 6 [ 396.507901][ T5855] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 396.516446][ T5855] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.526803][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.537702][ T5855] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.548087][ T5855] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.561565][ T5855] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.571097][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.968544][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.730653][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.741108][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.260172][ T5855] usb 3-1: GET_CAPABILITIES returned 2f [ 398.266202][ T5855] usbtmc 3-1:16.0: can't read capabilities [ 401.388154][ T5878] usb 3-1: USB disconnect, device number 3 [ 401.466171][ T6684] loop1: detected capacity change from 0 to 256 [ 404.545792][ T6700] loop4: detected capacity change from 0 to 2048 [ 404.554213][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 404.745551][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.774149][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.786567][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 404.801163][ T5878] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.810647][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.952652][ T5878] usb 4-1: config 0 descriptor?? [ 404.993651][ T5878] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 405.281214][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.105895][ T5878] usb 4-1: USB disconnect, device number 8 [ 409.423168][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.657943][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.818843][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.889841][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.909210][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.491577][ T6740] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 413.047538][ T5802] Bluetooth: hci5: command tx timeout [ 413.728490][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 413.840664][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 413.849249][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.855939][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.077451][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.089068][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 414.104478][ T5878] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.114542][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.250075][ T5878] usb 2-1: config 0 descriptor?? [ 414.272343][ T5878] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 414.377553][ T5855] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 414.574415][ T5855] usb 3-1: config 0 has no interfaces? [ 414.594251][ T5855] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.604441][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.619523][ T5855] usb 3-1: Product: syz [ 414.623940][ T5855] usb 3-1: Manufacturer: syz [ 414.750330][ T5855] usb 3-1: config 0 descriptor?? [ 415.104859][ T5802] Bluetooth: hci5: command tx timeout [ 415.347945][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.358246][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.866325][ T5878] usb 3-1: USB disconnect, device number 4 [ 417.218595][ T5802] Bluetooth: hci5: command tx timeout [ 418.338182][ T5855] usb 2-1: USB disconnect, device number 9 [ 418.933177][ T86] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.152530][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.160404][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.168446][ T6720] bridge_slave_0: entered allmulticast mode [ 419.178184][ T6720] bridge_slave_0: entered promiscuous mode [ 419.352990][ T5802] Bluetooth: hci5: command tx timeout [ 419.360120][ T5802] Bluetooth: hci4: Unable to find connection for big 0x00 [ 420.388609][ T86] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.755102][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.762919][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.772686][ T6720] bridge_slave_1: entered allmulticast mode [ 421.785443][ T6720] bridge_slave_1: entered promiscuous mode [ 422.578066][ T86] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.721488][ T6793] 9pnet_fd: Insufficient options for proto=fd [ 423.194619][ T86] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.335098][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.392982][ T6802] warning: `syz.3.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 423.495888][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.885616][ T6720] team0: Port device team_slave_0 added [ 424.288925][ T6720] team0: Port device team_slave_1 added [ 425.646628][ T86] bridge_slave_1: left allmulticast mode [ 425.653702][ T86] bridge_slave_1: left promiscuous mode [ 425.660535][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.762333][ T86] bridge_slave_0: left allmulticast mode [ 425.768594][ T86] bridge_slave_0: left promiscuous mode [ 425.777875][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.878310][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 426.236727][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.247640][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 426.261254][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.270791][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.379121][ T9] usb 3-1: config 0 descriptor?? [ 426.469033][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 426.909089][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.985804][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.084055][ T86] bond0 (unregistering): Released all slaves [ 427.215849][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.223439][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.250105][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.233673][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.241089][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.268998][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.013338][ T5878] usb 3-1: USB disconnect, device number 5 [ 430.129508][ T6720] hsr_slave_0: entered promiscuous mode [ 430.139755][ T6720] hsr_slave_1: entered promiscuous mode [ 430.148500][ T6720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.156311][ T6720] Cannot create hsr debugfs directory [ 431.344296][ T6838] 9pnet_fd: Insufficient options for proto=fd [ 431.975475][ T6847] loop1: detected capacity change from 0 to 1024 [ 432.095408][ T6847] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.102851][ T6847] EXT4-fs: Ignoring removed nobh option [ 432.109868][ T6847] EXT4-fs: Ignoring removed bh option [ 432.309481][ T86] hsr_slave_0: left promiscuous mode [ 432.368689][ T6847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.429415][ T86] hsr_slave_1: left promiscuous mode [ 432.439072][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.447075][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.495379][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.503547][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.661058][ T86] veth1_macvtap: left promiscuous mode [ 432.667102][ T86] veth0_macvtap: left promiscuous mode [ 432.673152][ T86] veth1_vlan: left promiscuous mode [ 432.679044][ T86] veth0_vlan: left promiscuous mode [ 434.141131][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.895555][ T86] team0 (unregistering): Port device team_slave_1 removed [ 435.208205][ T86] team0 (unregistering): Port device team_slave_0 removed [ 437.439610][ T6876] loop3: detected capacity change from 0 to 64 [ 438.872744][ T6885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 439.241962][ T6720] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.332446][ T6720] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.424631][ T6720] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.522833][ T6720] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.551028][ T6890] loop2: detected capacity change from 0 to 2048 [ 439.791129][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.837762][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.994214][ T6905] 9pnet_fd: Insufficient options for proto=fd [ 442.652483][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.931969][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.062408][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.070113][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.259219][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.267093][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.641122][ T6720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.540237][ T6924] loop3: detected capacity change from 0 to 8 [ 444.548719][ T6924] squashfs: Unknown parameter 'iGj [ 444.548719][ T6924] ~' [ 445.531559][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 445.740882][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 445.811195][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 445.820591][ T9] usb 4-1: config 1 has no interface number 0 [ 445.827175][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 445.837576][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 445.849695][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 445.930529][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 445.940042][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.950264][ T9] usb 4-1: Product: syz [ 445.954670][ T9] usb 4-1: Manufacturer: syz [ 445.960513][ T9] usb 4-1: SerialNumber: syz [ 446.124558][ T6931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.213553][ T6931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.913497][ T6939] loop2: detected capacity change from 0 to 2048 [ 447.043405][ T6931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.055271][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.121820][ T6931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.343983][ T6939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.961326][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 447.984946][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 448.006387][ T9] ===================================================== [ 448.014373][ T9] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 448.022042][ T9] usbnet_probe+0x2e57/0x4390 [ 448.027354][ T9] usb_probe_interface+0xd01/0x1310 [ 448.032976][ T9] really_probe+0x4d4/0xd90 [ 448.038074][ T9] __driver_probe_device+0x268/0x380 [ 448.043792][ T9] driver_probe_device+0x70/0x8b0 [ 448.049563][ T9] __device_attach_driver+0x4ee/0x950 [ 448.055430][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.062951][ T9] __device_attach+0x3c8/0x5c0 [ 448.068367][ T9] device_initial_probe+0x33/0x40 [ 448.073830][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.079226][ T9] device_add+0x12a9/0x1c10 [ 448.084169][ T9] usb_set_configuration+0x3493/0x3b70 [ 448.090125][ T9] usb_generic_driver_probe+0xfc/0x290 [ 448.098507][ T9] usb_probe_device+0x38d/0x690 [ 448.104513][ T9] really_probe+0x4d4/0xd90 [ 448.109355][ T9] __driver_probe_device+0x268/0x380 [ 448.114908][ T9] driver_probe_device+0x70/0x8b0 [ 448.120300][ T9] __device_attach_driver+0x4ee/0x950 [ 448.125909][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.131381][ T9] __device_attach+0x3c8/0x5c0 [ 448.136408][ T9] device_initial_probe+0x33/0x40 [ 448.141877][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.147162][ T9] device_add+0x12a9/0x1c10 [ 448.152060][ T9] usb_new_device+0x104b/0x20c0 [ 448.157984][ T9] hub_event+0x5588/0x7580 [ 448.162798][ T9] process_scheduled_works+0xb9a/0x1d90 [ 448.168918][ T9] worker_thread+0xedf/0x1590 [ 448.174040][ T9] kthread+0xd5c/0xf00 [ 448.178612][ T9] ret_from_fork+0x71/0x90 [ 448.183487][ T9] ret_from_fork_asm+0x1a/0x30 [ 448.188912][ T9] [ 448.191476][ T9] Uninit was stored to memory at: [ 448.200113][ T9] dev_addr_mod+0xb0/0x550 [ 448.205770][ T9] aqc111_bind+0x35f/0x1150 [ 448.210812][ T9] usbnet_probe+0xbe9/0x4390 [ 448.215805][ T9] usb_probe_interface+0xd01/0x1310 [ 448.222512][ T9] really_probe+0x4d4/0xd90 [ 448.227662][ T9] __driver_probe_device+0x268/0x380 [ 448.233444][ T9] driver_probe_device+0x70/0x8b0 [ 448.239034][ T9] __device_attach_driver+0x4ee/0x950 [ 448.244883][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.251100][ T9] __device_attach+0x3c8/0x5c0 [ 448.256382][ T9] device_initial_probe+0x33/0x40 [ 448.261956][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.267456][ T9] device_add+0x12a9/0x1c10 [ 448.272416][ T9] usb_set_configuration+0x3493/0x3b70 [ 448.278632][ T9] usb_generic_driver_probe+0xfc/0x290 [ 448.284589][ T9] usb_probe_device+0x38d/0x690 [ 448.290021][ T9] really_probe+0x4d4/0xd90 [ 448.295035][ T9] __driver_probe_device+0x268/0x380 [ 448.304533][ T9] driver_probe_device+0x70/0x8b0 [ 448.311404][ T9] __device_attach_driver+0x4ee/0x950 [ 448.317341][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.322550][ T9] __device_attach+0x3c8/0x5c0 [ 448.327766][ T9] device_initial_probe+0x33/0x40 [ 448.333214][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.338753][ T9] device_add+0x12a9/0x1c10 [ 448.343656][ T9] usb_new_device+0x104b/0x20c0 [ 448.349045][ T9] hub_event+0x5588/0x7580 [ 448.353957][ T9] process_scheduled_works+0xb9a/0x1d90 [ 448.360183][ T9] worker_thread+0xedf/0x1590 [ 448.365390][ T9] kthread+0xd5c/0xf00 [ 448.370005][ T9] ret_from_fork+0x71/0x90 [ 448.374888][ T9] ret_from_fork_asm+0x1a/0x30 [ 448.383101][ T9] [ 448.385671][ T9] Uninit was stored to memory at: [ 448.391350][ T9] aqc111_bind+0x794/0x1150 [ 448.396381][ T9] usbnet_probe+0xbe9/0x4390 [ 448.404242][ T9] usb_probe_interface+0xd01/0x1310 [ 448.410722][ T9] really_probe+0x4d4/0xd90 [ 448.415671][ T9] __driver_probe_device+0x268/0x380 [ 448.421627][ T9] driver_probe_device+0x70/0x8b0 [ 448.427174][ T9] __device_attach_driver+0x4ee/0x950 [ 448.432998][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.438429][ T9] __device_attach+0x3c8/0x5c0 [ 448.443661][ T9] device_initial_probe+0x33/0x40 [ 448.449223][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.454527][ T9] device_add+0x12a9/0x1c10 [ 448.460858][ T9] usb_set_configuration+0x3493/0x3b70 [ 448.467528][ T9] usb_generic_driver_probe+0xfc/0x290 [ 448.473566][ T9] usb_probe_device+0x38d/0x690 [ 448.479067][ T9] really_probe+0x4d4/0xd90 [ 448.484020][ T9] __driver_probe_device+0x268/0x380 [ 448.489893][ T9] driver_probe_device+0x70/0x8b0 [ 448.495403][ T9] __device_attach_driver+0x4ee/0x950 [ 448.501457][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.509503][ T9] __device_attach+0x3c8/0x5c0 [ 448.515484][ T9] device_initial_probe+0x33/0x40 [ 448.521434][ T9] bus_probe_device+0x3ba/0x5e0 [ 448.526704][ T9] device_add+0x12a9/0x1c10 [ 448.531722][ T9] usb_new_device+0x104b/0x20c0 [ 448.538075][ T9] hub_event+0x5588/0x7580 [ 448.543491][ T9] process_scheduled_works+0xb9a/0x1d90 [ 448.549653][ T9] worker_thread+0xedf/0x1590 [ 448.554191][ T5153] udevd[5153]: worker [6011] terminated by signal 33 (Unknown signal 33) [ 448.554726][ T9] kthread+0xd5c/0xf00 [ 448.567929][ T9] ret_from_fork+0x71/0x90 [ 448.572768][ T9] ret_from_fork_asm+0x1a/0x30 [ 448.578459][ T9] [ 448.581004][ T9] Local variable buf.i created at: [ 448.586518][ T9] aqc111_bind+0x221/0x1150 [ 448.591680][ T9] usbnet_probe+0xbe9/0x4390 [ 448.596710][ T9] [ 448.599471][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 448.614075][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.627656][ T9] Workqueue: usb_hub_wq hub_event [ 448.634646][ T9] ===================================================== [ 448.640071][ T5153] udevd[5153]: worker [6011] failed while handling '/devices/virtual/block/loop2' [ 448.642101][ T9] Disabling lock debugging due to kernel taint [ 448.658133][ T9] Kernel panic - not syncing: kmsan.panic set ... [ 448.664720][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.15.0-rc7-syzkaller #0 PREEMPT(undef) [ 448.676677][ T9] Tainted: [B]=BAD_PAGE [ 448.680944][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.691167][ T9] Workqueue: usb_hub_wq hub_event [ 448.696448][ T9] Call Trace: [ 448.699885][ T9] [ 448.702925][ T9] __dump_stack+0x26/0x30 [ 448.707464][ T9] dump_stack_lvl+0x53/0x270 [ 448.712273][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 448.718342][ T9] dump_stack+0x1e/0x25 [ 448.722715][ T9] panic+0x4bd/0xd50 [ 448.726859][ T9] kmsan_report+0x29d/0x2a0 [ 448.731613][ T9] ? __msan_warning+0x96/0x120 [ 448.736574][ T9] ? usbnet_probe+0x2e57/0x4390 [ 448.741614][ T9] ? usb_probe_interface+0xd01/0x1310 [ 448.747198][ T9] ? really_probe+0x4d4/0xd90 [ 448.752065][ T9] ? __driver_probe_device+0x268/0x380 [ 448.757733][ T9] ? driver_probe_device+0x70/0x8b0 [ 448.763203][ T9] ? __device_attach_driver+0x4ee/0x950 [ 448.768978][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 448.774169][ T9] ? __device_attach+0x3c8/0x5c0 [ 448.779293][ T9] ? device_initial_probe+0x33/0x40 [ 448.784708][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 448.789915][ T9] ? device_add+0x12a9/0x1c10 [ 448.794772][ T9] ? usb_set_configuration+0x3493/0x3b70 [ 448.800604][ T9] ? usb_generic_driver_probe+0xfc/0x290 [ 448.806428][ T9] ? usb_probe_device+0x38d/0x690 [ 448.811649][ T9] ? really_probe+0x4d4/0xd90 [ 448.816541][ T9] ? __driver_probe_device+0x268/0x380 [ 448.822177][ T9] ? driver_probe_device+0x70/0x8b0 [ 448.827568][ T9] ? __device_attach_driver+0x4ee/0x950 [ 448.833314][ T9] ? bus_for_each_drv+0x3e0/0x680 [ 448.838521][ T9] ? __device_attach+0x3c8/0x5c0 [ 448.843680][ T9] ? device_initial_probe+0x33/0x40 [ 448.849064][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 448.854257][ T9] ? device_add+0x12a9/0x1c10 [ 448.859128][ T9] ? usb_new_device+0x104b/0x20c0 [ 448.864313][ T9] ? hub_event+0x5588/0x7580 [ 448.869068][ T9] ? process_scheduled_works+0xb9a/0x1d90 [ 448.874996][ T9] ? worker_thread+0xedf/0x1590 [ 448.880034][ T9] ? kthread+0xd5c/0xf00 [ 448.884471][ T9] ? ret_from_fork+0x71/0x90 [ 448.889254][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 448.894423][ T9] ? usb_autopm_put_interface+0xa3/0xe0 [ 448.900177][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 448.905612][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 448.911063][ T9] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 448.917518][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 448.922955][ T9] __msan_warning+0x96/0x120 [ 448.927726][ T9] usbnet_probe+0x2e57/0x4390 [ 448.932576][ T9] ? pm_runtime_enable+0x3b2/0x4d0 [ 448.937887][ T9] ? __pfx_usbnet_probe+0x10/0x10 [ 448.943085][ T9] usb_probe_interface+0xd01/0x1310 [ 448.948491][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 448.954321][ T9] really_probe+0x4d4/0xd90 [ 448.959034][ T9] __driver_probe_device+0x268/0x380 [ 448.964546][ T9] driver_probe_device+0x70/0x8b0 [ 448.969767][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 448.975219][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 448.981262][ T9] __device_attach_driver+0x4ee/0x950 [ 448.986854][ T9] bus_for_each_drv+0x3e0/0x680 [ 448.991874][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 448.998015][ T9] __device_attach+0x3c8/0x5c0 [ 449.002980][ T9] device_initial_probe+0x33/0x40 [ 449.008189][ T9] bus_probe_device+0x3ba/0x5e0 [ 449.013216][ T9] device_add+0x12a9/0x1c10 [ 449.017920][ T9] usb_set_configuration+0x3493/0x3b70 [ 449.023669][ T9] usb_generic_driver_probe+0xfc/0x290 [ 449.029310][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 449.035582][ T9] usb_probe_device+0x38d/0x690 [ 449.040668][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 449.046202][ T9] really_probe+0x4d4/0xd90 [ 449.050909][ T9] __driver_probe_device+0x268/0x380 [ 449.056389][ T9] driver_probe_device+0x70/0x8b0 [ 449.061598][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 449.067013][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.073052][ T9] __device_attach_driver+0x4ee/0x950 [ 449.078693][ T9] bus_for_each_drv+0x3e0/0x680 [ 449.083719][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 449.089931][ T9] __device_attach+0x3c8/0x5c0 [ 449.094916][ T9] device_initial_probe+0x33/0x40 [ 449.100738][ T9] bus_probe_device+0x3ba/0x5e0 [ 449.105771][ T9] device_add+0x12a9/0x1c10 [ 449.110467][ T9] usb_new_device+0x104b/0x20c0 [ 449.115526][ T9] hub_event+0x5588/0x7580 [ 449.120189][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.126250][ T9] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 449.131976][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 449.137421][ T9] ? __pfx_hub_event+0x10/0x10 [ 449.142369][ T9] process_scheduled_works+0xb9a/0x1d90 [ 449.148183][ T9] worker_thread+0xedf/0x1590 [ 449.153106][ T9] kthread+0xd5c/0xf00 [ 449.157389][ T9] ? __pfx_worker_thread+0x10/0x10 [ 449.162720][ T9] ? __pfx_kthread+0x10/0x10 [ 449.167503][ T9] ret_from_fork+0x71/0x90 [ 449.172126][ T9] ? __pfx_kthread+0x10/0x10 [ 449.176954][ T9] ret_from_fork_asm+0x1a/0x30 [ 449.181968][ T9] [ 449.185539][ T9] Kernel Offset: disabled [ 449.189960][ T9] Rebooting in 86400 seconds..