last executing test programs: 4m25.262472176s ago: executing program 2 (id=249): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 4m19.79032333s ago: executing program 2 (id=260): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000440)}, 0x20) 4m17.654717444s ago: executing program 2 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x3f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x8480, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="107c70f21f6681b90bea5aaeaf8681826c7a5244f5a3345e013ed2d6a303668e16dca703afafc079c730a07e76e70c41", @ANYRES8, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$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") getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 4m16.408417594s ago: executing program 2 (id=265): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@fmask={'fmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4m15.46008328s ago: executing program 2 (id=272): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) restart_syscall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) write(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0x524, 0x41}, 0xfffe, [0xde9a, 0x8e9, 0xc, 0x4000001d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x2]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) 4m13.676261376s ago: executing program 2 (id=274): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f0000000440)}, 0x20) 4m13.005885649s ago: executing program 32 (id=274): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f0000000440)}, 0x20) 21.123428231s ago: executing program 0 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x100, 0x400000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0) ioctl$TCSETSW2(r3, 0x5408, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r4, &(0x7f0000000140)="5d78955530ee04f49e637359625cbcc90342c257f0d4fe5b4d597110f3c5d4a3ef037cb6c6bec3b4680856014f6e5bf70bbc7c366ef39b6573239fd660634b4d8ad52ec07f87bf6f57c71dbb5a652cb14f33d7894ec0a7806b8ad882e96d33abf62c70ee1e18cc746181253c410a325cd11a8d1fd7ad898be32ce80cea498e550f06470bdb5892db9c96a7161334996b8f544f6d344482e01243fe64d3af31375fe6a602ac60ce54105afb0f19d3169f094fa7a18b69999202124a2898fdc8aae4a52037ee72b506ef4e3c1857411c65fe4c7df4a391e148b2f55572d67093dbb0bb68b1c873523da8df36c2d1fdea934531cb6c60f334ef4f6b126275a8afd379d5accf", 0x104) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 19.674740283s ago: executing program 0 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{0x0}], 0x1}, 0x20000040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0xa02, 0x27) 19.108095441s ago: executing program 0 (id=888): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c0840, &(0x7f0000000040), 0x1, 0x5d2, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x18, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}, [@typed={0x4, 0x15e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c085}, 0x48054) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 16.349481998s ago: executing program 4 (id=895): openat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', 0x24c03, 0x208) 15.830542514s ago: executing program 4 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) sched_getparam(r3, &(0x7f00000001c0)) fcntl$lock(r4, 0x410, 0x0) openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x90) 14.205910515s ago: executing program 4 (id=901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x643, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x10, 0xfffffffc, 0x0, 0x0, "810000cc2b000000000000facc1fff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x162000) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) 10.27500409s ago: executing program 1 (id=912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 10.26948616s ago: executing program 4 (id=913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xd) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) preadv2(r4, &(0x7f00000018c0)=[{0x0}], 0x1, 0x2, 0x40, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x40) 9.287980869s ago: executing program 0 (id=915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x4}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6, 0x1, 0x300, 0x3, 0x560002, r1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x2, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, 0x0, &(0x7f0000000100)) 8.86838208s ago: executing program 3 (id=917): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x26020480) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) 7.916100227s ago: executing program 0 (id=918): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 7.757177905s ago: executing program 5 (id=919): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37d}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8", 0x1f}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7.756048175s ago: executing program 3 (id=920): io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000002c0)={0x28, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x1, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x800}}, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000240)={0xffffffffffffffff, 0x4dca, {0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x1, 0xa, 0x3, "0c0c7337426c823792c7669f6f7b8c7cd01db6b8a5b886ce26992e32359a7f9137ff7745d811bfc20138cad47012b7e2b1d61ffebafe01f2ef4f4ac1d3da2059", "51a8aefcdd088be49e4d153aa3394051f59f1aa22a9aa38d0b02055e0c99efad7662b706f9c2b32c004ce1b4fe9959ec40fa431dc364883707c52dac4ae0a8ae", "2807ccdc7c0d1ffa37a59f2446fe202eb1e5e4ca42ad8819075b9ed9e0ea4eb8", [0xffffffff, 0x8000000000000000]}}) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80200001, 0x30}, 0xc) r6 = dup(r0) write$make_it_fail(r6, &(0x7f00000000c0)='Y\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r7, 0x6, 0x3, &(0x7f00000000c0), 0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") 7.094268798s ago: executing program 5 (id=921): socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setreuid(0xffffffffffffffff, 0xee01) landlock_create_ruleset(0x0, 0x0, 0x0) 7.076885749s ago: executing program 1 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) sched_getparam(r3, &(0x7f00000001c0)) fcntl$lock(r4, 0x410, 0x0) openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x90) 6.760103205s ago: executing program 4 (id=923): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', 0x24c03, 0x208) socket$can_j1939(0x1d, 0x2, 0x7) 6.383249713s ago: executing program 3 (id=924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a", 0xee}, {&(0x7f0000000340)}], 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.855883879s ago: executing program 0 (id=925): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c0840, &(0x7f0000000040), 0x1, 0x5d2, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x18, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x5}, [@typed={0x4, 0x15e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c085}, 0x48054) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 4.812339471s ago: executing program 1 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x188, &(0x7f0000000440)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="012a1807aaaaaaaaaa1204"], 0xb) open(&(0x7f0000000040)='.\x00', 0x86000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 4.812055121s ago: executing program 5 (id=927): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x26020480) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/1000, 0x3e8) 4.588752382s ago: executing program 3 (id=928): mount(0x0, 0x0, 0x0, 0x2101041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, 0x0, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 3.699445587s ago: executing program 5 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) 3.647569619s ago: executing program 3 (id=930): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x26020480) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0) 3.272529548s ago: executing program 5 (id=931): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de1594b75e5371a81c2c32d0c4a028a5aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4d0948a6e219b5769480e6d0a9bf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff8261c63790a91ee2c5ff9a21677b4bc7e73ddf2d0e46807c57bf64b0b9df7fc67ecba6521767dcc7d4299c740e73bc49cbcf0049faf222c48896378497c0a7be6238217f85c83a2c45376ddf1a8f631c22c8cf453e8a4fe7bf8160a82bd069be9a9e163724a7412bbc30b68bb31bd571f0571297726a309691408af62ecfc77ea52718c39e802f00a726aaa625407f3b18fd4f66db2bbd05dfd62e448fc6bb9fc51960e12b67c5d42e82df55f5d87428137874e27db5cc", 0x37d}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8", 0x1f}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.487893937s ago: executing program 5 (id=932): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") 2.466283438s ago: executing program 3 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xd) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) preadv2(r4, &(0x7f00000018c0)=[{0x0}], 0x1, 0x2, 0x40, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x40) 2.169787132s ago: executing program 4 (id=934): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000780)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_fetch_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x6, 0x519, 0x0, &(0x7f0000001040)=@buf_1k="ba2c62c61964536a479c4497fd3107ded2b53bde3533ef147481c2e99958c76c67cbf126ca0e2e05285a654fbfb6459c062f8223e2f0dbb72c54a9f8548d7d39f38b3e0ad63edec8508d7d35f327cff40a7bb3d044ed3c9f3f95355b39ceba389008fb1da87da9f32b8ddd8ec01464e0018a0b97e55e84646fcbdfd0582f03ae5a188bf6eba451d5e5fc81e2621d81bf3c9ab2a22842b959036fe6084d515fc34e107ff92490a9b66c88ed513b499aeb07acd60cc2654d87bee204cf2c63a722b9dbcca2dbc2cca51686a934590447a3eb7218592b486e4d9276929135ead111511f5c905586c2b4e9ae75373f1482c978497e8dd6fc9c473d474bb159daad4da9a0bc3bc60a56293243d46cbcc29a36acc487e6d7cfa2665db9d7421302826b94a8aee47f8e67f442a31feb2bbd245c81009f911ecda321d4a99085e8ec590731b45768a60f644fea5531db13ede57533d4da910e2e7e8f02e3e539608724892d81f6ae2b31f8c13a78eed7f58517cb966ae04d1f47bd6ccf5220ab4ac1e21f8b17755ba8f2cb4292aa84142897b1ea1e8e65a9f4fa770b51c489ad3af0323e93e5a9abe885f6cb0723943968e0122da4e7b76a583aecef84a5eef08b6865b26183f9c549d2bf049c69b602f4b06bcb764839f7ab94065664210253b11a45511c7c7dded0d3521e57201c9110ce4a99aed167c85e198dacca03bfd3db10302f6aedceaf24f8de64b061d3300b4dfbe9cf27121231d5218c978bd103bc9e70dafda3a3f6c34d0551c638d0f8b4b427f5069748ea95768a4715516ba004015a7ee238e08c94fdd4356984a8c942693fe1e4a96cb3e165317e14e4872f55d6b19fa2959bf4f66199c62c477be36a6866f73e68602be11a456c42fc61882fbcf27f978791ab5c4d4ce6c635a2df618f5de94e0e3a584c84aaf7973ca2d9a1a5d0a5765d993ce8d2c2c798cffa7cd50ae43dba46b5ed99242536613d7ece072319a335a0045fe7022d187d6134ae05f049673c6d1bdf23ce372ecf7b3a0f32f85ec5e3013e249cfc6aec52e503657133d981ebce1fa5218a2c568d3d2969e36f9299a92dcb8b5908cffa35b754fb1d76fb37db41fa9114717f9c47b531ff94b270b5c59ccaeed5fe7a371240bf2b0703425b4d16fccf3f329b97c858c905e285c6791463279e70572a74f58a89aab586cad3c860c5b6893144117db53602a3efb6e881a0e432bd378e64c2e95043f1ef0d5e642a7c72c398c8f780038a8ee6ecd3fb9fec4ddfba480f881061e88d465319737f3719af78ff6f219057ba8bccbb978f9da677e168b1d3944dc917b5c7871a047a50efa86b6762c4ab7e085a04fa9311beb0f5e01f92e55fae501474531fefb00d16ee24a6a56efd6b9d0c7f6fe80fd57fb2c9c3d2ef10c9d8548f62a6e4e27d5449aa331f1408bbb0db933e55a3716d"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000080)={0xc, {"a2e3ada14fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38dfcd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac4850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778ef85ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba551eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ccef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c54efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e4b15f929b47f741f0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bb9935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf9f394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa37ef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002040), 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xe39}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xffffed0b}]}, 0x34}}, 0x1) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) r3 = socket(0x23, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r4, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") 1.324192444s ago: executing program 1 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{0x0}], 0x1}, 0x1}], 0x1, 0x20, 0x0) 1.095948486s ago: executing program 1 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = getpid() mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) sched_getparam(r3, &(0x7f00000001c0)) fcntl$lock(r4, 0x410, 0x0) openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x90) 0s ago: executing program 1 (id=937): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): ink becomes ready [ 82.917619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.956544][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.019809][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.031969][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.055763][ T4278] device veth0_macvtap entered promiscuous mode [ 83.096333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.105253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.123320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.132546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.141864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.155930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.172478][ T4278] device veth1_macvtap entered promiscuous mode [ 83.239517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.248951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.251777][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.265455][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.274573][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.284172][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.294258][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.303773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.312417][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.332504][ T4274] device veth0_vlan entered promiscuous mode [ 83.346260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.356642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.365628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.374028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.387085][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.398065][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.409276][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.424448][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.437468][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.454067][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.465097][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.475347][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.486109][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.500714][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.518179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.533762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.542750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.552553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.602014][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612804][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.622459][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632648][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.650707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.662459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.673586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.682029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.691467][ T4274] device veth1_vlan entered promiscuous mode [ 83.700704][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.702659][ T4276] device veth0_vlan entered promiscuous mode [ 83.708571][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.796452][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.810187][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.824793][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.838386][ T4276] device veth1_vlan entered promiscuous mode [ 83.862388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.913215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.964629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.074607][ T4274] device veth0_macvtap entered promiscuous mode [ 84.191308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.412168][ T4274] device veth1_macvtap entered promiscuous mode [ 84.629510][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 84.636030][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 84.636349][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 84.636349][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 84.636909][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 84.910753][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.957451][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.971789][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.982544][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.992675][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.003486][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.018189][ T4371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 85.036351][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.049973][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.074093][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.149768][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.160540][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.160562][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.201743][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.212692][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.223801][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.243348][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.255810][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.281409][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.288839][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.320118][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.338480][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.353593][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.379738][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.397543][ T4276] device veth0_macvtap entered promiscuous mode [ 85.465129][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.493274][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517251][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.536251][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.581098][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591026][ T4276] device veth1_macvtap entered promiscuous mode [ 85.605033][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.661960][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.690128][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.717356][ T4384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9'. [ 85.736239][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.747764][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.766016][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.777876][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.795351][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.807064][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.823444][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.836095][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.854265][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.895546][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.911988][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.939960][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.963611][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.975449][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.989067][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.004270][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.015840][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.026808][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.037833][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.054854][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.110877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.115093][ T4390] loop2: detected capacity change from 0 to 2048 [ 86.157263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.227532][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.257714][ T4393] loop3: detected capacity change from 0 to 128 [ 86.284274][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.298369][ T4390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.346723][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.365829][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.440249][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.448144][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.467843][ T4393] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 86.558535][ T4393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.289115][ C0] sched: RT throttling activated [ 87.315257][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.329272][ T4395] loop1: detected capacity change from 0 to 131072 [ 87.348366][ T4395] F2FS-fs (loop1): invalid crc value [ 87.421996][ T4395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.484107][ T4395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 87.556456][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.593266][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.604390][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.638548][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.675111][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.697164][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.608041][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.659171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.679159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.689140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.719150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.739148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.749145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 88.799131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.819134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.829134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.839131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.115420][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.232312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.333984][ T4416] loop1: detected capacity change from 0 to 128 [ 89.409573][ T4414] loop4: detected capacity change from 0 to 1024 [ 89.539949][ T4283] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 89.754312][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.800751][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.907865][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 89.959201][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.029637][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.037029][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.135139][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 90.375642][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.297170][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.339354][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.383287][ T4435] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.446760][ T4435] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.495168][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.579454][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 91.856477][ T1172] cfg80211: failed to load regulatory.db [ 91.925815][ T4443] loop3: detected capacity change from 0 to 4096 [ 91.936540][ T4443] ntfs3: Unknown parameter 'nocase' [ 92.438934][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 92.583729][ T4414] hfsplus: request for non-existent node 33423360 in B*Tree [ 92.601450][ T4451] loop5: detected capacity change from 0 to 7 [ 92.611686][ T4451] Dev loop5: unable to read RDB block 7 [ 92.617488][ T4451] loop5: AHDI p1 p2 [ 92.621678][ T4451] loop5: partition table partially beyond EOD, truncated [ 92.628932][ T4451] loop5: p1 start 1818582900 is beyond EOD, truncated [ 92.673201][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 92.699346][ T4425] hfsplus: request for non-existent node 33423360 in B*Tree [ 93.434563][ T4456] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 95.429709][ T4463] process 'syz.0.30' launched './file1' with NULL argv: empty string added [ 96.138531][ T4468] loop4: detected capacity change from 0 to 128 [ 96.277945][ T4283] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 101.146636][ T4505] FAULT_INJECTION: forcing a failure. [ 101.146636][ T4505] name failslab, interval 1, probability 0, space 0, times 1 [ 101.280114][ T4505] CPU: 0 PID: 4505 Comm: syz.0.43 Not tainted syzkaller #0 [ 101.287435][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.297575][ T4505] Call Trace: [ 101.300918][ T4505] [ 101.303894][ T4505] dump_stack_lvl+0x188/0x24e [ 101.308674][ T4505] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 101.314387][ T4505] ? show_regs_print_info+0x12/0x12 [ 101.319650][ T4505] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 101.325344][ T4505] should_fail_ex+0x390/0x4c0 [ 101.330082][ T4505] should_failslab+0x5/0x20 [ 101.334632][ T4505] slab_pre_alloc_hook+0x59/0x300 [ 101.339719][ T4505] ? verify_lock_unused+0x140/0x140 [ 101.344970][ T4505] ? load_msg+0x38/0x380 [ 101.349273][ T4505] __kmem_cache_alloc_node+0x4f/0x270 [ 101.354698][ T4505] ? load_msg+0x38/0x380 [ 101.358984][ T4505] __kmalloc+0xa3/0x240 [ 101.363196][ T4505] load_msg+0x38/0x380 [ 101.367333][ T4505] do_msgsnd+0x1a4/0x13c0 [ 101.371725][ T4505] ? __might_fault+0xa6/0x120 [ 101.376449][ T4505] ? __lock_acquire+0x7c40/0x7c40 [ 101.381606][ T4505] ? lockdep_hardirqs_on+0x94/0x140 [ 101.386847][ T4505] ? ksys_msgsnd+0xa0/0xa0 [ 101.391337][ T4505] ? __might_fault+0xc2/0x120 [ 101.396066][ T4505] ? __might_fault+0xa6/0x120 [ 101.400830][ T4505] ? __x64_sys_msgsnd+0xe5/0x110 [ 101.405848][ T4505] do_syscall_64+0x4c/0xa0 [ 101.410320][ T4505] ? clear_bhb_loop+0x60/0xb0 [ 101.415050][ T4505] ? clear_bhb_loop+0x60/0xb0 [ 101.419809][ T4505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.425774][ T4505] RIP: 0033:0x7fb38a39e159 [ 101.430285][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.449944][ T4505] RSP: 002b:00007fb38b1f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 101.458403][ T4505] RAX: ffffffffffffffda RBX: 00007fb38a625fa0 RCX: 00007fb38a39e159 [ 101.466414][ T4505] RDX: 0000000000002000 RSI: 0000200000000940 RDI: 0000000000000000 [ 101.474429][ T4505] RBP: 00007fb38a43503b R08: 0000000000000000 R09: 0000000000000000 [ 101.482447][ T4505] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 101.490460][ T4505] R13: 00007fb38a626038 R14: 00007fb38a625fa0 R15: 00007ffd15b89898 [ 101.498493][ T4505] [ 102.150180][ T4511] device syzkaller0 entered promiscuous mode [ 102.186217][ T4511] tipc: Started in network mode [ 102.200555][ T4511] tipc: Node identity 1ae6fd155fa7, cluster identity 4711 [ 102.218421][ T4511] tipc: Enabled bearer , priority 0 [ 102.277274][ T4511] tipc: Resetting bearer [ 102.323800][ T4510] tipc: Resetting bearer [ 102.449649][ T4510] tipc: Disabling bearer [ 102.579493][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.608355][ T4523] loop0: detected capacity change from 0 to 64 [ 105.260326][ T4539] loop4: detected capacity change from 0 to 128 [ 105.443339][ T4283] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 108.097488][ T4571] loop2: detected capacity change from 0 to 512 [ 108.104846][ T4571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.647975][ T4571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.657583][ T4571] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.963988][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.337669][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 110.602005][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.602005][ T9] [ 110.655948][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 110.704204][ T9] EXT4-fs (loop2): Free/Dirty block details [ 110.742589][ T9] EXT4-fs (loop2): free_blocks=65280 [ 110.796063][ T9] EXT4-fs (loop2): dirty_blocks=33 [ 110.801442][ T9] EXT4-fs (loop2): Block reservation details [ 110.808313][ T9] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 110.831184][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 115.541323][ T4622] ======================================================= [ 115.541323][ T4622] WARNING: The mand mount option has been deprecated and [ 115.541323][ T4622] and is ignored by this kernel. Remove the mand [ 115.541323][ T4622] option from the mount to silence this warning. [ 115.541323][ T4622] ======================================================= [ 115.699521][ T4622] No source specified [ 117.039714][ T4616] loop4: detected capacity change from 0 to 32768 [ 120.554538][ T4657] No source specified [ 120.968140][ T4663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.021489][ T4664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.86'. [ 124.474709][ T4690] FAULT_INJECTION: forcing a failure. [ 124.474709][ T4690] name failslab, interval 1, probability 0, space 0, times 0 [ 124.528914][ T4690] CPU: 0 PID: 4690 Comm: syz.4.111 Not tainted syzkaller #0 [ 124.536304][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.546416][ T4690] Call Trace: [ 124.549741][ T4690] [ 124.552723][ T4690] dump_stack_lvl+0x188/0x24e [ 124.557464][ T4690] ? show_regs_print_info+0x12/0x12 [ 124.562722][ T4690] ? load_image+0x410/0x410 [ 124.567285][ T4690] ? __might_sleep+0xd0/0xd0 [ 124.571944][ T4690] ? __lock_acquire+0x7c40/0x7c40 [ 124.577031][ T4690] should_fail_ex+0x390/0x4c0 [ 124.581776][ T4690] should_failslab+0x5/0x20 [ 124.586329][ T4690] slab_pre_alloc_hook+0x59/0x300 [ 124.591417][ T4690] kmem_cache_alloc+0x56/0x2f0 [ 124.596249][ T4690] ? __alloc_file+0x25/0x230 [ 124.600893][ T4690] __alloc_file+0x25/0x230 [ 124.605357][ T4690] alloc_empty_file+0x90/0x180 [ 124.610163][ T4690] alloc_file+0x5b/0x5f0 [ 124.614469][ T4690] alloc_file_pseudo+0x180/0x200 [ 124.619456][ T4690] ? alloc_empty_file_noaccount+0x80/0x80 [ 124.625247][ T4690] ? alloc_fd+0x590/0x640 [ 124.629642][ T4690] sock_alloc_file+0xb3/0x240 [ 124.634374][ T4690] __sys_socket+0x12d/0x190 [ 124.638922][ T4690] __x64_sys_socket+0x76/0x80 [ 124.643638][ T4690] do_syscall_64+0x4c/0xa0 [ 124.648126][ T4690] ? clear_bhb_loop+0x60/0xb0 [ 124.652843][ T4690] ? clear_bhb_loop+0x60/0xb0 [ 124.657557][ T4690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.663508][ T4690] RIP: 0033:0x7f2d9f79e159 [ 124.667971][ T4690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.687645][ T4690] RSP: 002b:00007f2da0589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 124.696100][ T4690] RAX: ffffffffffffffda RBX: 00007f2d9fa25fa0 RCX: 00007f2d9f79e159 [ 124.704139][ T4690] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 124.712143][ T4690] RBP: 00007f2d9f83503b R08: 0000000000000000 R09: 0000000000000000 [ 124.720145][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.728150][ T4690] R13: 00007f2d9fa26038 R14: 00007f2d9fa25fa0 R15: 00007ffd70f5f2e8 [ 124.736165][ T4690] [ 124.827194][ T4686] loop3: detected capacity change from 0 to 32768 [ 124.860724][ T4686] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.108 (4686) [ 124.986253][ T4686] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.017053][ T4686] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 125.061124][ T4686] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.086006][ T4686] BTRFS info (device loop3): use zstd compression, level 3 [ 125.113141][ T4697] loop2: detected capacity change from 0 to 8 [ 125.123961][ T4686] BTRFS info (device loop3): using free space tree [ 125.179845][ T4697] SQUASHFS error: Failed to read block 0x62: -5 [ 125.189374][ T4697] squashfs image failed sanity check [ 125.381388][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 125.517061][ T4686] BTRFS info (device loop3): enabling ssd optimizations [ 125.647371][ T4722] No source specified [ 126.643764][ T4278] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 128.453520][ T4762] ip_tables: iptables: counters copy to user failed while replacing table [ 128.511844][ T4756] loop1: detected capacity change from 0 to 256 [ 130.568274][ T4778] loop1: detected capacity change from 0 to 128 [ 130.659504][ T4778] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.835760][ T4778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.898662][ T4778] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.792013][ T4778] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 132.764106][ T26] audit: type=1400 audit(1789149777.998:2): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=4801 comm="syz.0.137" name="//o" offset=61 [ 132.792651][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.776226][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 136.638097][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 136.706009][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 136.743942][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 136.783904][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 136.798737][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 136.879828][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 136.907971][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 136.937969][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 137.019716][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 137.027449][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 137.035254][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 137.043568][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 137.051449][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 137.059425][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 138.472329][ T4849] loop1: detected capacity change from 0 to 128 [ 138.576306][ T4849] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.670308][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.742393][ T4849] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.945589][ T4872] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 141.416602][ T4872] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 142.623264][ T4887] loop3: detected capacity change from 0 to 4096 [ 142.632715][ T4887] ntfs3: Unknown parameter 'nocase' [ 145.211121][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 150.781682][ T4947] loop2: detected capacity change from 0 to 128 [ 150.937065][ T4946] loop1: detected capacity change from 0 to 128 [ 151.146160][ T4946] EXT4-fs (loop1): Test dummy encryption mode enabled [ 151.370113][ T4946] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.497524][ T4946] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.939875][ T4957] loop2: detected capacity change from 0 to 4096 [ 152.950318][ T4957] ntfs3: Unknown parameter 'nocase' [ 153.349252][ T4324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.735828][ T4324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.770638][ T4324] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 153.789213][ T4324] usb 1-1: config 1 has no interface number 0 [ 153.795491][ T4324] usb 1-1: config 1 interface 163 has no altsetting 0 [ 153.878616][ T4324] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 153.926361][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.945183][ T4324] usb 1-1: Product: syz [ 153.949834][ T4324] usb 1-1: Manufacturer: syz [ 153.954623][ T4324] usb 1-1: SerialNumber: syz [ 154.114776][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 154.185508][ T4961] FAULT_INJECTION: forcing a failure. [ 154.185508][ T4961] name failslab, interval 1, probability 0, space 0, times 0 [ 154.235569][ T4961] CPU: 0 PID: 4961 Comm: syz.0.175 Not tainted syzkaller #0 [ 154.242958][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.253104][ T4961] Call Trace: [ 154.256441][ T4961] [ 154.259422][ T4961] dump_stack_lvl+0x188/0x24e [ 154.264171][ T4961] ? show_regs_print_info+0x12/0x12 [ 154.269447][ T4961] ? load_image+0x410/0x410 [ 154.274035][ T4961] ? __might_sleep+0xd0/0xd0 [ 154.278677][ T4961] ? __lock_acquire+0x7c40/0x7c40 [ 154.283766][ T4961] should_fail_ex+0x390/0x4c0 [ 154.288496][ T4961] should_failslab+0x5/0x20 [ 154.293039][ T4961] slab_pre_alloc_hook+0x59/0x300 [ 154.298098][ T4961] ? zone_statistics+0x170/0x170 [ 154.303076][ T4961] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 154.308755][ T4961] __kmem_cache_alloc_node+0x4f/0x270 [ 154.314158][ T4961] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 154.319824][ T4961] __kmalloc_node+0xa2/0x240 [ 154.324436][ T4961] ? lock_chain_count+0x20/0x20 [ 154.329324][ T4961] memcg_alloc_slab_cgroups+0x81/0x120 [ 154.334857][ T4961] new_slab+0xc3/0x2d0 [ 154.338948][ T4961] ___slab_alloc+0xbc5/0x1240 [ 154.343645][ T4961] ? sk_prot_alloc+0x57/0x210 [ 154.348342][ T4961] kmem_cache_alloc+0x111/0x2f0 [ 154.353233][ T4961] ? sk_prot_alloc+0x57/0x210 [ 154.357925][ T4961] sk_prot_alloc+0x57/0x210 [ 154.362444][ T4961] ? sk_alloc+0x20/0x330 [ 154.366708][ T4961] sk_alloc+0x36/0x330 [ 154.370790][ T4961] smc_sock_alloc+0x4b/0x570 [ 154.375413][ T4961] smc_create+0xc8/0x290 [ 154.379694][ T4961] __sock_create+0x49a/0x940 [ 154.384347][ T4961] __sys_socket+0xc4/0x190 [ 154.388821][ T4961] __x64_sys_socket+0x76/0x80 [ 154.393528][ T4961] do_syscall_64+0x4c/0xa0 [ 154.397972][ T4961] ? clear_bhb_loop+0x60/0xb0 [ 154.402679][ T4961] ? clear_bhb_loop+0x60/0xb0 [ 154.407382][ T4961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.413299][ T4961] RIP: 0033:0x7fb38a39e159 [ 154.417724][ T4961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.437356][ T4961] RSP: 002b:00007fb38b1f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 154.445802][ T4961] RAX: ffffffffffffffda RBX: 00007fb38a625fa0 RCX: 00007fb38a39e159 [ 154.453787][ T4961] RDX: 0000000000000001 RSI: 0000000000080801 RDI: 000000000000002b [ 154.461768][ T4961] RBP: 00007fb38a43503b R08: 0000000000000000 R09: 0000000000000000 [ 154.469751][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.477754][ T4961] R13: 00007fb38a626038 R14: 00007fb38a625fa0 R15: 00007ffd15b89898 [ 154.485767][ T4961] [ 154.566888][ T4324] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 155.079717][ T4324] usb 1-1: USB disconnect, device number 2 [ 155.261206][ T4324] keyspan 1-1:1.163: device disconnected [ 157.599713][ T5000] loop4: detected capacity change from 0 to 128 [ 159.024991][ T5010] loop2: detected capacity change from 0 to 128 [ 159.089182][ T5010] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.166204][ T5010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.175230][ T5010] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.259172][ T4324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.451148][ T4324] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 159.479207][ T4324] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.519215][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.525945][ T4324] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 159.559147][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.588311][ T4324] usb 4-1: config 0 descriptor?? [ 159.860791][ T5022] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 160.029422][ T5021] loop1: detected capacity change from 0 to 4096 [ 160.039371][ T5022] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 160.051816][ T5021] ntfs3: Unknown parameter 'nocase' [ 161.000314][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.011216][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.266608][ T4324] usbhid 4-1:0.0: can't add hid device: -71 [ 164.334051][ T4324] usbhid: probe of 4-1:0.0 failed with error -71 [ 164.613361][ T4324] usb 4-1: USB disconnect, device number 3 [ 164.863472][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 166.329171][ T26] audit: type=1400 audit(1789149811.558:3): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=5045 comm="syz.3.201" name="//o" offset=60 [ 166.801678][ T5056] loop4: detected capacity change from 0 to 128 [ 168.107197][ T5073] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.018101][ T5076] loop3: detected capacity change from 0 to 4096 [ 169.031244][ T5076] ntfs3: Unknown parameter 'nocase' [ 176.118543][ T5126] loop1: detected capacity change from 0 to 128 [ 176.226439][ T4283] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 181.157263][ T5155] loop2: detected capacity change from 0 to 32768 [ 181.195010][ T5155] XFS: ikeep mount option is deprecated. [ 181.287461][ T5155] XFS (loop2): Mounting V5 Filesystem [ 181.576197][ T5172] loop3: detected capacity change from 0 to 4096 [ 181.585760][ T5172] ntfs3: Unknown parameter 'nocase' [ 181.983743][ T5155] XFS (loop2): Ending clean mount [ 182.521698][ T5179] loop1: detected capacity change from 0 to 128 [ 183.294195][ T5155] XFS (loop2): Quotacheck needed: Please wait. [ 184.017801][ T5155] XFS (loop2): Quotacheck: Done. [ 184.545817][ T4421] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.936890][ T4279] XFS (loop2): Unmounting Filesystem [ 185.033291][ T5189] Zero length message leads to an empty skb [ 188.802492][ T5215] loop2: detected capacity change from 0 to 128 [ 188.905419][ T5215] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.104622][ T5215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.182510][ T5215] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.569164][ T5223] loop1: detected capacity change from 0 to 128 [ 190.597637][ T5235] Bluetooth: MGMT ver 1.22 [ 190.661446][ T5228] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 193.050149][ T4283] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 193.057745][ T4283] Bluetooth: hci0: command 0x0c3a tx timeout [ 194.205226][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 194.232969][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239415][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.724010][ T5281] loop2: detected capacity change from 0 to 128 [ 197.794586][ T5292] loop2: detected capacity change from 0 to 256 [ 197.850301][ T5292] exfat: Deprecated parameter 'namecase' [ 197.919190][ T5292] exfat: Deprecated parameter 'namecase' [ 198.008141][ T5292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 198.693320][ T5306] loop4: detected capacity change from 0 to 128 [ 198.713285][ T5307] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 200.346441][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.574837][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.750759][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.910958][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.418569][ T9] tipc: Left network mode [ 201.429228][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 201.435391][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 201.441552][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.589287][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 202.690056][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.700422][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.708259][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.718095][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.732349][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.739785][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.407677][ T5355] loop3: detected capacity change from 0 to 512 [ 204.783833][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 204.789811][ T4294] Bluetooth: hci4: command 0x0409 tx timeout [ 204.879259][ T4357] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.969339][ T4357] usb 4-1: Using ep0 maxpacket: 32 [ 205.987602][ T4357] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.016994][ T4357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.045976][ T4357] usb 4-1: config 0 has no interface number 0 [ 206.068149][ T4357] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.112676][ T4357] usb 4-1: config 0 interface 85 has no altsetting 0 [ 206.135143][ T4357] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.160643][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.180887][ T4357] usb 4-1: Product: syz [ 206.190990][ T4357] usb 4-1: Manufacturer: syz [ 206.227492][ T4357] usb 4-1: SerialNumber: syz [ 206.250624][ T4357] usb 4-1: config 0 descriptor?? [ 206.287866][ T4357] appletouch 4-1:0.85: Could not find int-in endpoint [ 206.299745][ T4357] appletouch: probe of 4-1:0.85 failed with error -5 [ 206.308156][ T4357] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 206.730463][ T5382] loop3: detected capacity change from 0 to 256 [ 206.833730][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.870525][ T4294] Bluetooth: hci4: command 0x041b tx timeout [ 207.068155][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.226722][ T5333] device bridge_slave_0 entered promiscuous mode [ 207.871818][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.882739][ T4357] usb 4-1: USB disconnect, device number 4 [ 207.889507][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.897829][ T5333] device bridge_slave_1 entered promiscuous mode [ 207.928386][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.994128][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.100253][ T5392] loop3: detected capacity change from 0 to 128 [ 208.155672][ T5333] team0: Port device team_slave_0 added [ 208.181235][ T5392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 208.373933][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.399688][ T5392] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.556089][ T5333] team0: Port device team_slave_1 added [ 208.976492][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 209.187984][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.239896][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.309224][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.402459][ T9] device hsr_slave_0 left promiscuous mode [ 209.412851][ T9] device hsr_slave_1 left promiscuous mode [ 209.537512][ T5405] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 209.561334][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.988161][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.053451][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.098251][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.230225][ T9] device bridge_slave_1 left promiscuous mode [ 210.237300][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.780745][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 211.847770][ T9] device bridge_slave_0 left promiscuous mode [ 211.869460][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.100073][ T9] device veth1_macvtap left promiscuous mode [ 212.106733][ T9] device veth0_macvtap left promiscuous mode [ 212.149221][ T9] device veth1_vlan left promiscuous mode [ 212.156521][ T9] device veth0_vlan left promiscuous mode [ 212.710898][ T5437] loop1: detected capacity change from 0 to 512 [ 212.760199][ T4356] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.783107][ T5437] loop1: detected capacity change from 0 to 256 [ 212.784505][ T4356] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.166780][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.359459][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 213.367888][ T22] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 213.419097][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.439833][ T22] usb 2-1: config 0 has no interface number 0 [ 213.446008][ T22] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.479205][ T22] usb 2-1: config 0 interface 85 has no altsetting 0 [ 213.529002][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 213.548672][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.559628][ T22] usb 2-1: Product: syz [ 213.563848][ T22] usb 2-1: Manufacturer: syz [ 213.568475][ T22] usb 2-1: SerialNumber: syz [ 213.598636][ T22] usb 2-1: config 0 descriptor?? [ 213.629495][ T22] appletouch 2-1:0.85: Could not find int-in endpoint [ 213.655209][ T22] appletouch: probe of 2-1:0.85 failed with error -5 [ 213.779526][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 213.826104][ T22] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 215.910299][ T4263] usb 2-1: USB disconnect, device number 2 [ 216.612505][ T9] team0 (unregistering): Port device team_slave_1 removed [ 216.685718][ T9] team0 (unregistering): Port device team_slave_0 removed [ 216.746068][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.797608][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.330535][ T9] bond0 (unregistering): Released all slaves [ 217.432465][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.455088][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.527882][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.170215][ T5333] device hsr_slave_0 entered promiscuous mode [ 219.190313][ T5333] device hsr_slave_1 entered promiscuous mode [ 219.229249][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.236919][ T5333] Cannot create hsr debugfs directory [ 219.286265][ T5473] loop3: detected capacity change from 0 to 64 [ 219.375127][ T5476] loop1: detected capacity change from 0 to 128 [ 219.446320][ T5476] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.524278][ T5476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.572917][ T5476] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.693751][ T4747] kernel write not supported for file bpf-prog (pid: 4747 comm: kworker/0:11) [ 219.899128][ T5476] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 219.926609][ T5485] loop3: detected capacity change from 0 to 512 [ 220.066502][ T5333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.080116][ T5485] loop3: detected capacity change from 0 to 256 [ 220.205333][ T5333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.238994][ T5476] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 220.379263][ T4280] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.512603][ T5333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.536071][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 220.588050][ T5333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.600134][ T4280] usb 4-1: Using ep0 maxpacket: 32 [ 220.615349][ T4280] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 220.624034][ T4280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.634532][ T4280] usb 4-1: config 0 has no interface number 0 [ 220.641328][ T4280] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.654686][ T4280] usb 4-1: config 0 interface 85 has no altsetting 0 [ 220.666185][ T4280] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 220.686149][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.775331][ T4280] usb 4-1: Product: syz [ 220.795990][ T4280] usb 4-1: Manufacturer: syz [ 220.829149][ T4280] usb 4-1: SerialNumber: syz [ 220.836003][ T4280] usb 4-1: config 0 descriptor?? [ 220.845969][ T4280] appletouch 4-1:0.85: Could not find int-in endpoint [ 220.852940][ T4280] appletouch: probe of 4-1:0.85 failed with error -5 [ 220.860590][ T4280] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 221.207437][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.370986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.402007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.486783][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.588375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.616610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.674248][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.681494][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.689754][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.706364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.747975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.788891][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.796652][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.990968][ T4357] usb 4-1: USB disconnect, device number 5 [ 223.007020][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.111179][ T5333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.167153][ T5333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.236936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.262705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.302551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.330434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.346814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.377151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.430003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.448168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.466908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.487107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.508155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.227478][ T5537] loop3: detected capacity change from 0 to 128 [ 224.293564][ T5537] EXT4-fs (loop3): Test dummy encryption mode enabled [ 224.344788][ T5537] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.425604][ T5537] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.665613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.704849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.733683][ T5537] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 224.815888][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.070044][ T5537] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 225.260191][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 227.570386][ T5570] loop4: detected capacity change from 0 to 512 [ 228.129434][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 228.319189][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 228.327758][ T27] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 228.370222][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.200028][ T27] usb 5-1: config 0 has no interface number 0 [ 229.206544][ T27] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.359158][ T27] usb 5-1: config 0 interface 85 has no altsetting 0 [ 229.396617][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 229.438291][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.462061][ T5601] loop3: detected capacity change from 0 to 128 [ 229.505284][ T5601] EXT4-fs (loop3): Test dummy encryption mode enabled [ 229.523675][ T27] usb 5-1: Product: syz [ 229.604119][ T27] usb 5-1: Manufacturer: syz [ 229.700549][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.722951][ T27] usb 5-1: SerialNumber: syz [ 229.895444][ T5601] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.913318][ T27] usb 5-1: config 0 descriptor?? [ 230.499209][ T5601] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 230.833931][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.924421][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.475784][ T27] usb 5-1: can't set config #0, error -71 [ 231.562741][ T27] usb 5-1: USB disconnect, device number 2 [ 231.755004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.848889][ T5601] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 231.975129][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.028953][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 232.318953][ T5333] device veth0_vlan entered promiscuous mode [ 232.541039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.641606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.209274][ T5333] device veth1_vlan entered promiscuous mode [ 233.409650][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.449880][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.496592][ T5333] device veth0_macvtap entered promiscuous mode [ 233.566397][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.583395][ T5333] device veth1_macvtap entered promiscuous mode [ 233.627945][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.799447][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.250120][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.469378][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.479547][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.490418][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.500539][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.511428][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.537346][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.599976][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.610713][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.621908][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.633020][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.643261][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.654237][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.814294][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.824902][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.176270][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.449488][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.488931][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.530670][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.621946][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.635229][ T5333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.689237][ T5333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.717833][ T5333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.741130][ T5333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.768758][ T5643] loop1: detected capacity change from 0 to 64 [ 236.903510][ T5651] loop4: detected capacity change from 0 to 512 [ 236.982916][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.008995][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.062469][ T5654] loop1: detected capacity change from 0 to 128 [ 237.064171][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.113571][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.126856][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.161352][ T5654] EXT4-fs (loop1): Test dummy encryption mode enabled [ 237.168852][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.241235][ T4357] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 237.250254][ T5654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.262925][ T5654] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.439145][ T4357] usb 5-1: Using ep0 maxpacket: 32 [ 237.451433][ T4357] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 237.538498][ T4357] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.569575][ T4357] usb 5-1: config 0 has no interface number 0 [ 237.575914][ T4357] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.601325][ T5670] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 237.671289][ T4357] usb 5-1: config 0 interface 85 has no altsetting 0 [ 237.786402][ T4357] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 237.901946][ T4357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.982995][ T4357] usb 5-1: Product: syz [ 237.987283][ T4357] usb 5-1: Manufacturer: syz [ 238.033680][ T4357] usb 5-1: SerialNumber: syz [ 238.068138][ T5670] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 238.193964][ T4357] usb 5-1: config 0 descriptor?? [ 238.219309][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 238.254082][ T4357] appletouch 5-1:0.85: Could not find int-in endpoint [ 238.405675][ T4357] appletouch: probe of 5-1:0.85 failed with error -5 [ 238.587675][ T5651] loop4: detected capacity change from 0 to 256 [ 239.365463][ T4357] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 239.438295][ T5693] loop1: detected capacity change from 0 to 128 [ 239.446770][ T4357] usb 5-1: USB disconnect, device number 3 [ 241.115911][ T5722] loop4: detected capacity change from 0 to 128 [ 241.161320][ T5719] loop3: detected capacity change from 0 to 512 [ 241.300683][ T5722] EXT4-fs (loop4): Test dummy encryption mode enabled [ 241.669910][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.685011][ T5722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.868829][ T5722] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.919362][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 241.927715][ T27] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 242.153431][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.515282][ T27] usb 4-1: config 0 has no interface number 0 [ 242.709935][ T5730] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 243.477776][ T27] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.695874][ T27] usb 4-1: config 0 interface 85 has no altsetting 0 [ 243.816804][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 243.974546][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.129172][ T27] usb 4-1: Product: syz [ 244.149954][ T27] usb 4-1: Manufacturer: syz [ 244.174577][ T27] usb 4-1: SerialNumber: syz [ 244.225414][ T27] usb 4-1: config 0 descriptor?? [ 244.265808][ T27] usb 4-1: can't set config #0, error -71 [ 244.404446][ T5730] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 245.107061][ T27] usb 4-1: USB disconnect, device number 6 [ 245.230462][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 245.378263][ T5750] loop5: detected capacity change from 0 to 128 [ 245.464222][ T5750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.512389][ T5750] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.730775][ T5758] loop3: detected capacity change from 0 to 4096 [ 245.740559][ T5758] ntfs3: Unknown parameter 'nocase' [ 246.364361][ T5750] EXT4-fs (loop5): shut down requested (2) [ 246.416608][ T5750] fscrypt (loop5, inode 12): Error -5 getting encryption context [ 246.455201][ T5751] loop4: detected capacity change from 0 to 8192 [ 246.584335][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 246.861565][ T5776] loop5: detected capacity change from 0 to 512 [ 247.944723][ T5786] loop1: detected capacity change from 0 to 128 [ 247.949995][ T4263] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 248.038847][ T5786] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.121135][ T5786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.149132][ T4263] usb 6-1: Using ep0 maxpacket: 32 [ 248.157284][ T4263] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 248.179939][ T5786] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.209474][ T4263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.257289][ T4263] usb 6-1: config 0 has no interface number 0 [ 248.273738][ T4263] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.839290][ T5798] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 249.731345][ T5798] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 249.859111][ T4263] usb 6-1: config 0 interface 85 has no altsetting 0 [ 249.869571][ T4263] usb 6-1: string descriptor 0 read error: -71 [ 249.875893][ T4263] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 249.885860][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.896289][ T4263] usb 6-1: config 0 descriptor?? [ 249.902999][ T4263] usb 6-1: can't set config #0, error -71 [ 249.903562][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 249.915818][ T4263] usb 6-1: USB disconnect, device number 2 [ 250.465934][ T5813] loop5: detected capacity change from 0 to 4096 [ 250.475789][ T5813] ntfs3: Unknown parameter 'nocase' [ 251.625780][ T5823] loop4: detected capacity change from 0 to 4096 [ 252.559342][ T5823] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 253.771545][ T5849] loop3: detected capacity change from 0 to 512 [ 253.867645][ T4376] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.901052][ T5848] loop3: detected capacity change from 0 to 256 [ 254.209341][ T4263] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 254.460138][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 254.501061][ T4263] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 254.708449][ T4263] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.838326][ T4263] usb 4-1: config 0 has no interface number 0 [ 254.917106][ T4263] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.983773][ T4263] usb 4-1: config 0 interface 85 has no altsetting 0 [ 255.035047][ T4263] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 255.065140][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.082375][ T4263] usb 4-1: Product: syz [ 255.086782][ T4263] usb 4-1: Manufacturer: syz [ 255.119277][ T4263] usb 4-1: SerialNumber: syz [ 255.150320][ T4263] usb 4-1: config 0 descriptor?? [ 255.158435][ T5859] loop5: detected capacity change from 0 to 128 [ 255.182271][ T4263] appletouch 4-1:0.85: Could not find int-in endpoint [ 255.225886][ T4263] appletouch: probe of 4-1:0.85 failed with error -5 [ 255.249930][ T4263] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 255.393661][ T4749] usb 4-1: USB disconnect, device number 7 [ 255.671874][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.450910][ T5885] device syzkaller0 entered promiscuous mode [ 257.552203][ T5885] tipc: Started in network mode [ 257.557160][ T5885] tipc: Node identity d2cfc4bb7161, cluster identity 4711 [ 257.580385][ T5885] tipc: Enabled bearer , priority 0 [ 257.612000][ T5885] tipc: Resetting bearer [ 258.439539][ T5882] tipc: Resetting bearer [ 258.552577][ T5882] tipc: Disabling bearer [ 258.590953][ T5897] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 259.898187][ T5906] loop4: detected capacity change from 0 to 131072 [ 260.275798][ T5906] F2FS-fs (loop4): invalid crc value [ 260.353908][ T5906] F2FS-fs (loop4): Found nat_bits in checkpoint [ 260.401030][ T5906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 260.548293][ T5921] loop5: detected capacity change from 0 to 512 [ 260.899244][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 261.089171][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 261.096283][ T22] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 261.140288][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.512442][ T22] usb 6-1: config 0 has no interface number 0 [ 262.031762][ T22] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.119388][ T22] usb 6-1: config 0 interface 85 has no altsetting 0 [ 262.162103][ T22] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 262.199223][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.220345][ T22] usb 6-1: Product: syz [ 262.224667][ T22] usb 6-1: Manufacturer: syz [ 262.255696][ T22] usb 6-1: SerialNumber: syz [ 262.308496][ T22] usb 6-1: config 0 descriptor?? [ 262.352322][ T22] appletouch 6-1:0.85: Could not find int-in endpoint [ 262.372921][ T5927] loop3: detected capacity change from 0 to 32768 [ 262.404984][ T22] appletouch: probe of 6-1:0.85 failed with error -5 [ 262.444272][ T22] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 262.460435][ T5946] device syzkaller0 entered promiscuous mode [ 262.550430][ T5949] tipc: Enabled bearer , priority 0 [ 262.561887][ T5921] loop5: detected capacity change from 0 to 256 [ 262.589921][ T5946] tipc: Resetting bearer [ 262.619911][ T4749] usb 6-1: USB disconnect, device number 3 [ 262.660201][ T5943] tipc: Resetting bearer [ 262.800492][ T5943] tipc: Disabling bearer [ 263.475504][ T5960] loop4: detected capacity change from 0 to 4096 [ 263.486323][ T5960] ntfs3: Unknown parameter 'nocase' [ 264.153125][ T5963] loop5: detected capacity change from 0 to 512 [ 264.232208][ T5963] EXT4-fs: Ignoring removed nobh option [ 265.081555][ T5963] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 265.453684][ T5963] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.433: attempt to clear invalid blocks 1 len 1 [ 265.936304][ T5963] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 266.322027][ T5963] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.433: invalid indirect mapped block 1819239214 (level 0) [ 266.667559][ T5963] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.433: invalid indirect mapped block 1819239214 (level 1) [ 267.107194][ T5963] EXT4-fs (loop5): 1 truncate cleaned up [ 267.240348][ T5963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 267.353227][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 268.834119][ T5990] device syzkaller0 entered promiscuous mode [ 268.886679][ T5991] tipc: Started in network mode [ 268.906048][ T5991] tipc: Node identity ea445b5404e8, cluster identity 4711 [ 268.945557][ T5991] tipc: Enabled bearer , priority 0 [ 268.983025][ T5995] loop3: detected capacity change from 0 to 512 [ 269.011086][ T5990] tipc: Resetting bearer [ 269.074307][ T5988] tipc: Resetting bearer [ 269.170049][ T5988] tipc: Disabling bearer [ 269.185443][ T5989] loop4: detected capacity change from 0 to 32768 [ 269.359165][ T4263] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.789696][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 270.695916][ T4263] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 270.704985][ T4263] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.727116][ T4263] usb 4-1: config 0 has no interface number 0 [ 270.733722][ T4263] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.753458][ T4263] usb 4-1: config 0 interface 85 has no altsetting 0 [ 270.771921][ T4263] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 270.797734][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.818646][ T4263] usb 4-1: Product: syz [ 270.827120][ T4263] usb 4-1: Manufacturer: syz [ 270.847369][ T4263] usb 4-1: SerialNumber: syz [ 270.868444][ T4263] usb 4-1: config 0 descriptor?? [ 270.937205][ T4263] appletouch 4-1:0.85: Could not find int-in endpoint [ 270.959610][ T4263] appletouch: probe of 4-1:0.85 failed with error -5 [ 270.997440][ T4263] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 271.132422][ T5995] loop3: detected capacity change from 0 to 256 [ 271.182778][ T4753] usb 4-1: USB disconnect, device number 8 [ 273.281342][ T6023] loop3: detected capacity change from 0 to 32768 [ 273.405433][ T6023] XFS (loop3): Mounting V5 Filesystem [ 273.529281][ T6023] XFS (loop3): Ending clean mount [ 273.548478][ T6023] XFS (loop3): Quotacheck needed: Please wait. [ 273.602760][ T6023] XFS (loop3): Quotacheck: Done. [ 274.317094][ T4278] XFS (loop3): Unmounting Filesystem [ 278.348686][ T6073] loop3: detected capacity change from 0 to 4096 [ 278.360657][ T6073] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 278.374867][ T6078] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 279.702891][ T6102] loop4: detected capacity change from 0 to 4096 [ 279.710014][ T6102] ntfs3: Unknown parameter 'nocase' [ 280.426505][ T6112] loop4: detected capacity change from 0 to 512 [ 285.763588][ T6141] loop5: detected capacity change from 0 to 4096 [ 285.770672][ T6141] ntfs3: Unknown parameter 'nocase' [ 286.802543][ T6163] loop3: detected capacity change from 0 to 512 [ 287.121452][ T6170] loop5: detected capacity change from 0 to 512 [ 287.736588][ T6181] loop4: detected capacity change from 0 to 512 [ 287.753898][ T6170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 287.783580][ T6170] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.832176][ T6181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.870246][ T6170] capability: warning: `syz.5.493' uses 32-bit capabilities (legacy support in use) [ 288.256458][ T6181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.337013][ T6181] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.927348][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 288.991024][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 291.974141][ T6223] loop1: detected capacity change from 0 to 512 [ 292.822413][ T4356] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.863878][ T6223] loop1: detected capacity change from 0 to 256 [ 292.965174][ T6230] loop3: detected capacity change from 0 to 512 [ 293.012614][ T6230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.125337][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.153822][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 293.219321][ T6230] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.339667][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 293.346691][ T4263] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 293.385761][ T4263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.436925][ T4263] usb 2-1: config 0 has no interface number 0 [ 293.469307][ T4263] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.492253][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 293.503093][ T4263] usb 2-1: config 0 interface 85 has no altsetting 0 [ 293.519955][ T4263] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 293.530310][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.538381][ T4263] usb 2-1: Product: syz [ 293.551145][ T4263] usb 2-1: Manufacturer: syz [ 293.562834][ T4263] usb 2-1: SerialNumber: syz [ 293.614112][ T4263] usb 2-1: config 0 descriptor?? [ 293.659732][ T4263] appletouch 2-1:0.85: Could not find int-in endpoint [ 293.684841][ T4263] appletouch: probe of 2-1:0.85 failed with error -5 [ 293.716502][ T4263] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 295.367435][ T6244] loop5: detected capacity change from 0 to 32768 [ 296.000850][ T27] usb 2-1: USB disconnect, device number 3 [ 297.805409][ T6287] loop3: detected capacity change from 0 to 512 [ 297.812790][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.940887][ T6287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.959333][ T6287] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.490408][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 298.890136][ T6310] loop3: detected capacity change from 0 to 512 [ 299.439346][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 300.129221][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 300.149768][ T27] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 300.157931][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.208357][ T27] usb 4-1: config 0 has no interface number 0 [ 300.239151][ T27] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.729122][ T27] usb 4-1: config 0 interface 85 has no altsetting 0 [ 301.819234][ T27] usb 4-1: string descriptor 0 read error: -71 [ 301.849388][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 301.899076][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.928556][ T27] usb 4-1: config 0 descriptor?? [ 301.959767][ T27] usb 4-1: can't set config #0, error -71 [ 301.982878][ T27] usb 4-1: USB disconnect, device number 9 [ 302.104347][ T6333] loop3: detected capacity change from 0 to 8 [ 302.159316][ T6333] SQUASHFS error: Failed to read block 0x62: -5 [ 302.175899][ T6333] squashfs image failed sanity check [ 302.624796][ T6344] loop1: detected capacity change from 0 to 256 [ 304.959740][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 305.169558][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 305.268267][ T27] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 305.306681][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.539933][ T27] usb 1-1: config 0 has no interface number 0 [ 305.546126][ T27] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.559267][ T27] usb 1-1: config 0 interface 85 has no altsetting 0 [ 305.569783][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 305.578881][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.587050][ T27] usb 1-1: Product: syz [ 305.591385][ T27] usb 1-1: Manufacturer: syz [ 305.596026][ T27] usb 1-1: SerialNumber: syz [ 305.603221][ T27] usb 1-1: config 0 descriptor?? [ 305.619701][ T27] appletouch 1-1:0.85: Could not find int-in endpoint [ 305.626543][ T27] appletouch: probe of 1-1:0.85 failed with error -5 [ 305.678187][ T27] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 305.687339][ T6375] loop3: detected capacity change from 0 to 128 [ 305.749808][ T6375] EXT4-fs (loop3): Test dummy encryption mode enabled [ 305.787971][ T6375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 305.799557][ T6375] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.220771][ T6386] loop4: detected capacity change from 0 to 8 [ 308.328526][ T6386] SQUASHFS error: Failed to read block 0x62: -5 [ 308.400004][ T6390] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 308.544938][ T4747] usb 1-1: USB disconnect, device number 3 [ 308.557157][ T6386] squashfs image failed sanity check [ 308.600703][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 308.758786][ T6393] loop1: detected capacity change from 0 to 8192 [ 310.386604][ T26] audit: type=1400 audit(1789149955.618:4): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6413 comm="syz.5.559" name="//o" offset=45 [ 312.450639][ T6446] loop5: detected capacity change from 0 to 128 [ 312.557480][ T6446] EXT4-fs (loop5): Test dummy encryption mode enabled [ 312.630146][ T6446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 312.684607][ T6446] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.729143][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 313.089295][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 313.923870][ T27] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 313.926756][ T6453] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 313.939224][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.019346][ T27] usb 1-1: config 0 has no interface number 0 [ 314.109657][ T27] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.179344][ T27] usb 1-1: config 0 interface 85 has no altsetting 0 [ 314.222092][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 314.262336][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.298486][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 314.303092][ T27] usb 1-1: Product: syz [ 314.318870][ T27] usb 1-1: Manufacturer: syz [ 314.334158][ T27] usb 1-1: SerialNumber: syz [ 314.358670][ T27] usb 1-1: config 0 descriptor?? [ 314.394405][ T27] appletouch 1-1:0.85: Could not find int-in endpoint [ 314.489170][ T27] appletouch: probe of 1-1:0.85 failed with error -5 [ 314.517386][ T27] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 314.584172][ T6470] loop3: detected capacity change from 0 to 256 [ 316.188089][ T26] audit: type=1400 audit(1789149961.418:5): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6480 comm="syz.4.575" name="//o" offset=50 [ 316.768597][ T27] usb 1-1: USB disconnect, device number 4 [ 317.182840][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.189315][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.296823][ T6493] loop3: detected capacity change from 0 to 512 [ 317.305149][ T6493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.668200][ T6485] loop5: detected capacity change from 0 to 4096 [ 319.891848][ T6493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.901074][ T6493] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.967186][ T6485] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 320.143383][ T4448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 320.269168][ T4448] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 320.349123][ T4448] EXT4-fs (loop3): This should not happen!! Data will be lost [ 320.349123][ T4448] [ 320.358853][ T4448] EXT4-fs (loop3): Total free blocks count 0 [ 320.527322][ T4448] EXT4-fs (loop3): Free/Dirty block details [ 320.534724][ T4448] EXT4-fs (loop3): free_blocks=65280 [ 320.544816][ T4448] EXT4-fs (loop3): dirty_blocks=33 [ 320.551469][ T4448] EXT4-fs (loop3): Block reservation details [ 320.557535][ T4448] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 320.743945][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 321.215585][ T6519] loop3: detected capacity change from 0 to 128 [ 321.280295][ T6519] EXT4-fs (loop3): Test dummy encryption mode enabled [ 321.336733][ T6519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.491299][ T6524] loop5: detected capacity change from 0 to 512 [ 321.515712][ T6519] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 321.839128][ T4345] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 322.910283][ T6532] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 323.043322][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 323.109283][ T4345] usb 6-1: Using ep0 maxpacket: 32 [ 323.116534][ T4345] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 323.146346][ T26] audit: type=1400 audit(1789149968.378:6): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6534 comm="syz.4.588" name="//o" offset=50 [ 323.186028][ T4345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.249105][ T4345] usb 6-1: config 0 has no interface number 0 [ 323.255318][ T4345] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.361409][ T4345] usb 6-1: config 0 interface 85 has no altsetting 0 [ 323.540504][ T4345] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 324.326808][ T4345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.335268][ T4345] usb 6-1: Product: syz [ 324.339735][ T4345] usb 6-1: Manufacturer: syz [ 324.344375][ T4345] usb 6-1: SerialNumber: syz [ 324.359220][ T4345] usb 6-1: config 0 descriptor?? [ 324.368001][ T4345] usb 6-1: can't set config #0, error -71 [ 324.376230][ T4345] usb 6-1: USB disconnect, device number 4 [ 326.138346][ T6562] loop3: detected capacity change from 0 to 256 [ 326.483028][ T6564] loop5: detected capacity change from 0 to 4096 [ 326.490229][ T6564] ntfs3: Unknown parameter 'nocase' [ 326.602286][ T4376] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.151031][ T6594] loop1: detected capacity change from 0 to 164 [ 328.216293][ T6594] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 328.601084][ T6602] loop4: detected capacity change from 0 to 512 [ 328.636428][ T26] audit: type=1400 audit(1789149973.788:7): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6595 comm="syz.5.602" name="//o" offset=50 [ 330.166456][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 330.549363][ T4345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 330.759486][ T4345] usb 5-1: Using ep0 maxpacket: 32 [ 330.767735][ T4345] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 330.843410][ T4345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.939925][ T4345] usb 5-1: config 0 has no interface number 0 [ 331.013035][ T4345] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.141935][ T4345] usb 5-1: config 0 interface 85 has no altsetting 0 [ 331.216549][ T4345] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 331.246373][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.442133][ T4345] usb 5-1: Product: syz [ 331.446386][ T4345] usb 5-1: Manufacturer: syz [ 331.509214][ T4345] usb 5-1: SerialNumber: syz [ 331.570036][ T4345] usb 5-1: config 0 descriptor?? [ 331.609321][ T4345] usb 5-1: can't set config #0, error -71 [ 331.639432][ T4345] usb 5-1: USB disconnect, device number 4 [ 333.842490][ T6638] loop4: detected capacity change from 0 to 4096 [ 333.849721][ T6638] ntfs3: Unknown parameter 'nocase' [ 333.937175][ T4356] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 335.840960][ T6649] loop4: detected capacity change from 0 to 4096 [ 336.092517][ T6649] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 337.501587][ T6672] loop1: detected capacity change from 0 to 512 [ 338.649119][ T4345] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 338.752239][ T6681] loop3: detected capacity change from 0 to 4096 [ 338.759488][ T6681] ntfs3: Unknown parameter 'nocase' [ 338.822234][ T4356] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 340.295452][ T4345] usb 2-1: Using ep0 maxpacket: 32 [ 340.330571][ T4345] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 340.364870][ T4345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.386727][ T4345] usb 2-1: config 0 has no interface number 0 [ 340.430847][ T4345] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.503541][ T4345] usb 2-1: config 0 interface 85 has no altsetting 0 [ 340.551100][ T4345] usb 2-1: string descriptor 0 read error: -71 [ 340.558043][ T4345] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 340.683495][ T4345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.794817][ T4345] usb 2-1: config 0 descriptor?? [ 340.831164][ T4345] usb 2-1: can't set config #0, error -71 [ 341.613625][ T4345] usb 2-1: USB disconnect, device number 4 [ 341.654470][ T6700] loop1: detected capacity change from 0 to 512 [ 341.710731][ T6703] loop3: detected capacity change from 0 to 16 [ 341.753090][ T26] audit: type=1400 audit(1789149986.988:8): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6705 comm="syz.4.631" name="//o" offset=55 [ 341.827423][ T6703] erofs: (device loop3): mounted with root inode @ nid 36. [ 342.145410][ T6713] ip_tables: iptables: counters copy to user failed while replacing table [ 343.677241][ T6726] loop4: detected capacity change from 0 to 64 [ 344.995216][ T6717] loop3: detected capacity change from 0 to 32768 [ 345.163440][ T6737] loop5: detected capacity change from 0 to 512 [ 345.218267][ T6737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 345.238449][ T6717] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 345.258305][ T6739] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 345.323278][ T6737] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.552209][ T6737] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.640: invalid indirect mapped block 4294967295 (level 0) [ 345.794929][ T6737] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.640: invalid indirect mapped block 4294967295 (level 1) [ 346.120473][ T6737] EXT4-fs (loop5): 1 orphan inode deleted [ 346.226625][ T6737] EXT4-fs (loop5): 1 truncate cleaned up [ 346.301400][ T6737] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 347.018289][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 347.286166][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 347.407662][ T26] audit: type=1400 audit(1789149992.638:9): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6758 comm="syz.0.644" name="//o" offset=55 [ 347.567847][ T6761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 347.587650][ T6761] overlayfs: failed to set xattr on upper [ 347.599094][ T6761] overlayfs: ...falling back to index=off,metacopy=off. [ 349.117384][ T6779] loop1: detected capacity change from 0 to 4096 [ 349.677087][ T6779] ntfs3: Unknown parameter 'nocase' [ 352.566905][ T6825] loop1: detected capacity change from 0 to 256 [ 352.574305][ T6825] exfat: Deprecated parameter 'namecase' [ 352.580433][ T6825] exfat: Deprecated parameter 'utf8' [ 352.646226][ T6827] loop5: detected capacity change from 0 to 256 [ 352.653368][ T6825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 352.737064][ T6827] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 352.966617][ T26] audit: type=1800 audit(1789149998.198:10): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.660" name="file1" dev="loop1" ino=1048615 res=0 errno=0 [ 352.992739][ T6832] loop4: detected capacity change from 0 to 256 [ 355.069387][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 355.261568][ T27] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.273302][ T6852] loop3: detected capacity change from 0 to 512 [ 355.299364][ T27] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.573789][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 355.583030][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.591731][ T27] usb 1-1: Product: syz [ 355.596023][ T27] usb 1-1: Manufacturer: syz [ 355.601317][ T27] usb 1-1: SerialNumber: syz [ 355.810355][ T6859] ip_tables: iptables: counters copy to user failed while replacing table [ 356.178464][ T27] ipheth 1-1:1.0: ipheth_get_macaddr: usb_control_msg: -110 [ 356.206775][ T27] ipheth: probe of 1-1:1.0 failed with error -110 [ 356.467129][ T6860] loop5: detected capacity change from 0 to 4096 [ 356.490802][ T6860] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 356.948277][ T4324] apple-mfi-fastcharge 1-1: USB disconnect, device number 5 [ 357.418873][ T6868] loop4: detected capacity change from 0 to 256 [ 357.516487][ T6868] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 357.769507][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 358.259650][ T6878] loop4: detected capacity change from 0 to 256 [ 358.395028][ T126] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 358.426600][ T126] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.481175][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 358.503486][ T126] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 358.525306][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.557985][ T126] usb 4-1: config 0 descriptor?? [ 359.565564][ T6896] loop5: detected capacity change from 0 to 512 [ 360.358795][ T6904] ip_tables: iptables: counters copy to user failed while replacing table [ 360.719099][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 360.749964][ T126] usb 4-1: can't set config #0, error -71 [ 360.781882][ T126] usb 4-1: USB disconnect, device number 10 [ 361.069212][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 361.217760][ T27] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 361.309980][ T27] usb 5-1: config 0 has no interface number 0 [ 361.316177][ T27] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 361.327378][ T27] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 361.339305][ T27] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.352793][ T27] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.429117][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.482781][ T27] usb 5-1: config 0 descriptor?? [ 361.512620][ T27] ldusb 5-1:0.55: Interrupt in endpoint not found [ 361.634734][ T6915] loop5: detected capacity change from 0 to 4096 [ 361.663728][ T6915] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 361.700700][ T27] usb 5-1: USB disconnect, device number 5 [ 362.759824][ T6924] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 362.827419][ T6924] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 362.885464][ T6924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 363.453589][ T6934] loop4: detected capacity change from 0 to 512 [ 364.583371][ T6940] ip_tables: iptables: counters copy to user failed while replacing table [ 364.593247][ T4263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 364.800932][ T6945] loop3: detected capacity change from 0 to 164 [ 364.812927][ T6948] loop1: detected capacity change from 0 to 256 [ 364.874581][ T6945] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 365.245588][ T4263] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 365.376533][ T4263] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.469140][ T4263] usb 6-1: config 0 interface 0 has no altsetting 0 [ 365.476493][ T4263] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 365.486079][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.507360][ T4263] usb 6-1: config 0 descriptor?? [ 366.107462][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.118734][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.170933][ T4263] usbhid 6-1:0.0: can't add hid device: -71 [ 369.177007][ T4263] usbhid: probe of 6-1:0.0 failed with error -71 [ 370.368045][ T4263] usb 6-1: USB disconnect, device number 5 [ 370.516694][ T6977] loop3: detected capacity change from 0 to 512 [ 370.911199][ T6986] loop4: detected capacity change from 0 to 256 [ 371.107058][ T6991] ip_tables: iptables: counters copy to user failed while replacing table [ 372.783354][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.888304][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.977564][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.066302][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.114327][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.125492][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.135832][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.146743][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.158752][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.169963][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.311462][ T126] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 374.312865][ T7025] loop4: detected capacity change from 0 to 256 [ 374.511543][ T126] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 374.536087][ T126] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.582754][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 374.604254][ T126] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 374.638948][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.674419][ T126] usb 6-1: config 0 descriptor?? [ 375.161720][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.173235][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.244805][ T126] usbhid 6-1:0.0: can't add hid device: -71 [ 378.311160][ T126] usbhid: probe of 6-1:0.0 failed with error -71 [ 378.551689][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558187][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.634001][ T126] usb 6-1: USB disconnect, device number 6 [ 378.855672][ T7048] loop4: detected capacity change from 0 to 64 [ 380.435354][ T7059] loop1: detected capacity change from 0 to 512 [ 381.433995][ T7068] ubi0: attaching mtd0 [ 381.440507][ T7068] ubi0: scanning is finished [ 381.445161][ T7068] ubi0: empty MTD device detected [ 381.496928][ T4356] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.548733][ T7073] loop4: detected capacity change from 0 to 256 [ 381.611327][ T7068] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 381.898692][ T7080] ip_tables: iptables: counters copy to user failed while replacing table [ 383.081923][ T7087] loop1: detected capacity change from 0 to 128 [ 383.402471][ T7087] EXT4-fs (loop1): Test dummy encryption mode enabled [ 383.439908][ T7087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 383.489632][ T7087] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.778524][ T4263] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.827587][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.895496][ T7097] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 383.990948][ T4263] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 384.086428][ T4263] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.116581][ T7097] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 384.189104][ T4263] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.195819][ T4263] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 384.239081][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.301914][ T4263] usb 5-1: config 0 descriptor?? [ 384.454896][ T7107] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 384.788087][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.798065][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.972643][ T7113] loop3: detected capacity change from 0 to 256 [ 386.413758][ T7113] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 387.262356][ T4263] usbhid 5-1:0.0: can't add hid device: -71 [ 387.268437][ T4263] usbhid: probe of 5-1:0.0 failed with error -71 [ 387.344008][ T4263] usb 5-1: USB disconnect, device number 6 [ 389.151104][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 389.302682][ T7145] ip_tables: iptables: counters copy to user failed while replacing table [ 391.215608][ T7153] loop1: detected capacity change from 0 to 256 [ 391.225605][ T7152] FAULT_INJECTION: forcing a failure. [ 391.225605][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 391.299791][ T7152] CPU: 0 PID: 7152 Comm: syz.0.756 Not tainted syzkaller #0 [ 391.307154][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.317240][ T7152] Call Trace: [ 391.320551][ T7152] [ 391.323510][ T7152] dump_stack_lvl+0x188/0x24e [ 391.328242][ T7152] ? show_regs_print_info+0x12/0x12 [ 391.333473][ T7152] ? load_image+0x410/0x410 [ 391.338030][ T7152] ? __might_sleep+0xd0/0xd0 [ 391.342729][ T7152] ? __lock_acquire+0x7c40/0x7c40 [ 391.347778][ T7152] should_fail_ex+0x390/0x4c0 [ 391.352496][ T7152] should_failslab+0x5/0x20 [ 391.357041][ T7152] slab_pre_alloc_hook+0x59/0x300 [ 391.362141][ T7152] ? __lock_acquire+0x1465/0x7c40 [ 391.367212][ T7152] kmem_cache_alloc_lru+0x49/0x2e0 [ 391.372341][ T7152] ? __d_alloc+0x2e/0x6e0 [ 391.376684][ T7152] __d_alloc+0x2e/0x6e0 [ 391.380853][ T7152] d_alloc_parallel+0xdc/0x1590 [ 391.385718][ T7152] ? memset+0x1e/0x40 [ 391.389748][ T7152] ? lockdep_init_map_type+0x98/0x8d0 [ 391.395168][ T7152] ? lockdep_softirqs_off+0x430/0x430 [ 391.400562][ T7152] ? d_hash_and_lookup+0x1b0/0x1b0 [ 391.405688][ T7152] ? format_decode+0xb38/0x1330 [ 391.410601][ T7152] ? __init_waitqueue_head+0xa4/0x140 [ 391.416001][ T7152] proc_fill_cache+0x155/0x420 [ 391.420801][ T7152] ? proc_readfd_common+0x870/0x870 [ 391.426022][ T7152] ? pid_revalidate+0x250/0x250 [ 391.430895][ T7152] ? snprintf+0xe5/0x140 [ 391.435170][ T7152] ? proc_readfd_common+0x326/0x870 [ 391.440400][ T7152] ? _raw_spin_unlock+0x24/0x40 [ 391.445271][ T7152] ? task_lookup_next_fd_rcu+0x333/0x390 [ 391.450946][ T7152] ? proc_readfd_common+0x326/0x870 [ 391.456161][ T7152] ? proc_readfd_common+0x326/0x870 [ 391.461399][ T7152] proc_readfd_common+0x56d/0x870 [ 391.466477][ T7152] ? proc_readfd_common+0x326/0x870 [ 391.471735][ T7152] ? proc_readfd_common+0x870/0x870 [ 391.476985][ T7152] ? proc_readfdinfo+0x20/0x20 [ 391.481790][ T7152] ? end_current_label_crit_section+0x14b/0x170 [ 391.488090][ T7152] ? iterate_dir+0x10d/0x550 [ 391.492699][ T7152] ? down_read_killable+0x1cc/0x340 [ 391.497916][ T7152] ? fsnotify_perm+0x248/0x550 [ 391.502725][ T7152] iterate_dir+0x213/0x550 [ 391.507170][ T7152] ? get_pid+0x80/0x80 [ 391.511257][ T7152] __se_sys_getdents64+0xf2/0x270 [ 391.516302][ T7152] ? __x64_sys_getdents64+0x80/0x80 [ 391.521535][ T7152] ? filldir+0x6f0/0x6f0 [ 391.525803][ T7152] ? lockdep_hardirqs_on+0x94/0x140 [ 391.531035][ T7152] do_syscall_64+0x4c/0xa0 [ 391.535486][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 391.540189][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 391.544890][ T7152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.550805][ T7152] RIP: 0033:0x7fb38a39e159 [ 391.555231][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.574852][ T7152] RSP: 002b:00007fb38b1f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 391.583321][ T7152] RAX: ffffffffffffffda RBX: 00007fb38a625fa0 RCX: 00007fb38a39e159 [ 391.591310][ T7152] RDX: 00000000000000fe RSI: 0000200000000380 RDI: 0000000000000004 [ 391.599312][ T7152] RBP: 00007fb38a43503b R08: 0000000000000000 R09: 0000000000000000 [ 391.607318][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.615320][ T7152] R13: 00007fb38a626038 R14: 00007fb38a625fa0 R15: 00007ffd15b89898 [ 391.623323][ T7152] [ 392.189380][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 392.393354][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.412772][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 392.433067][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.483384][ T27] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 392.504873][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 392.552679][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 392.604320][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 392.650105][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 392.719802][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 392.761081][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 392.780529][ T27] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 392.800136][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 392.893668][ T27] usb 2-1: USB disconnect, device number 5 [ 392.927126][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 392.983172][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 393.032918][ T27] keyspan 2-1:1.0: device disconnected [ 393.208805][ T7186] loop4: detected capacity change from 0 to 128 [ 393.258703][ T7186] EXT4-fs (loop4): Test dummy encryption mode enabled [ 393.322345][ T7186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 393.939421][ T7186] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.622834][ T7198] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 394.917515][ T7198] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 395.295330][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 395.312235][ T7205] loop1: detected capacity change from 0 to 512 [ 395.823844][ T7212] ip_tables: iptables: counters copy to user failed while replacing table [ 397.125812][ T7231] loop4: detected capacity change from 0 to 512 [ 397.133166][ T7231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.141527][ T7231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 398.150602][ T7231] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.397909][ T5028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 398.509166][ T5028] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 398.555509][ T5028] EXT4-fs (loop4): This should not happen!! Data will be lost [ 398.555509][ T5028] [ 398.608042][ T5028] EXT4-fs (loop4): Total free blocks count 0 [ 398.639069][ T5028] EXT4-fs (loop4): Free/Dirty block details [ 398.677620][ T5028] EXT4-fs (loop4): free_blocks=65280 [ 398.696251][ T5028] EXT4-fs (loop4): dirty_blocks=33 [ 398.729042][ T5028] EXT4-fs (loop4): Block reservation details [ 398.749262][ T5028] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 398.797096][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 400.500467][ T7257] loop3: detected capacity change from 0 to 128 [ 402.185379][ T7257] EXT4-fs (loop3): Test dummy encryption mode enabled [ 402.231060][ T7257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.329651][ T7257] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.725028][ T7277] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 403.131121][ T7277] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 404.862576][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 404.880985][ T7286] loop4: detected capacity change from 0 to 8 [ 404.979090][ T7286] unable to read inode lookup table [ 405.720702][ T7293] loop3: detected capacity change from 0 to 512 [ 405.727968][ T7293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.671766][ T7293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.682785][ T7293] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.001704][ T6206] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 407.065403][ T6206] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 407.106529][ T6206] EXT4-fs (loop3): This should not happen!! Data will be lost [ 407.106529][ T6206] [ 407.171117][ T6206] EXT4-fs (loop3): Total free blocks count 0 [ 407.177205][ T6206] EXT4-fs (loop3): Free/Dirty block details [ 407.219013][ T6206] EXT4-fs (loop3): free_blocks=65280 [ 407.224511][ T6206] EXT4-fs (loop3): dirty_blocks=33 [ 407.259070][ T6206] EXT4-fs (loop3): Block reservation details [ 407.265147][ T6206] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 407.331128][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 407.750876][ T7318] syz.0.786 uses obsolete (PF_INET,SOCK_PACKET) [ 411.331285][ T7348] loop5: detected capacity change from 0 to 16 [ 411.428938][ T7348] erofs: (device loop5): mounted with root inode @ nid 36. [ 411.584890][ T7351] 9pnet_fd: Insufficient options for proto=fd [ 411.801239][ T7357] FAULT_INJECTION: forcing a failure. [ 411.801239][ T7357] name fail_futex, interval 1, probability 0, space 0, times 1 [ 411.869470][ T7357] CPU: 1 PID: 7357 Comm: syz.0.800 Not tainted syzkaller #0 [ 411.876851][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.886953][ T7357] Call Trace: [ 411.890276][ T7357] [ 411.893248][ T7357] dump_stack_lvl+0x188/0x24e [ 411.898001][ T7357] ? show_regs_print_info+0x12/0x12 [ 411.903259][ T7357] ? load_image+0x410/0x410 [ 411.907834][ T7357] ? cgroup_rstat_updated+0xce/0x350 [ 411.913170][ T7357] ? rcu_read_lock_sched_held+0x86/0x110 [ 411.918868][ T7357] should_fail_ex+0x390/0x4c0 [ 411.923608][ T7357] get_futex_key+0x1b1/0x1000 [ 411.928365][ T7357] ? futex_setup_timer+0xc0/0xc0 [ 411.933358][ T7357] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 411.939416][ T7357] ? __lock_acquire+0x7c40/0x7c40 [ 411.944521][ T7357] ? lock_chain_count+0x20/0x20 [ 411.949435][ T7357] futex_wait_setup+0xb8/0x270 [ 411.954252][ T7357] ? futex_wait_multiple+0x920/0x920 [ 411.959589][ T7357] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 411.965534][ T7357] ? _raw_spin_unlock+0x40/0x40 [ 411.970443][ T7357] futex_wait+0x1b8/0x5c0 [ 411.974839][ T7357] ? futex_wait_setup+0x270/0x270 [ 411.979942][ T7357] do_futex+0x310/0x320 [ 411.984139][ T7357] ? lock_chain_count+0x20/0x20 [ 411.989046][ T7357] ? __ia32_sys_get_robust_list+0x100/0x100 [ 411.994991][ T7357] ? exc_page_fault+0x88/0x100 [ 411.999829][ T7357] __se_sys_futex+0x381/0x410 [ 412.004556][ T7357] ? __x64_sys_futex+0xf0/0xf0 [ 412.009369][ T7357] ? __x64_sys_futex+0x1d/0xf0 [ 412.014176][ T7357] do_syscall_64+0x4c/0xa0 [ 412.018668][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 412.023405][ T7357] ? clear_bhb_loop+0x60/0xb0 [ 412.028150][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.034095][ T7357] RIP: 0033:0x7fb38a39e159 [ 412.038553][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.058209][ T7357] RSP: 002b:00007fb38b1f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.066675][ T7357] RAX: ffffffffffffffda RBX: 00007fb38a625fa8 RCX: 00007fb38a39e159 [ 412.074691][ T7357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb38a625fa8 [ 412.082710][ T7357] RBP: 00007fb38a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 412.090735][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.098750][ T7357] R13: 00007fb38a626038 R14: 00007ffd15b897b0 R15: 00007ffd15b89898 [ 412.106805][ T7357] [ 416.061122][ T7394] loop4: detected capacity change from 0 to 16 [ 416.258354][ T7394] erofs: (device loop4): mounted with root inode @ nid 36. [ 416.388629][ T7400] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 422.649617][ T7466] loop4: detected capacity change from 0 to 128 [ 422.657844][ T7466] EXT4-fs (loop4): Test dummy encryption mode enabled [ 422.679169][ T4280] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 422.840578][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 422.957364][ T7466] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 423.062812][ T4280] usb 6-1: Using ep0 maxpacket: 8 [ 423.070265][ T4280] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 423.078404][ T4280] usb 6-1: config 0 has no interface number 0 [ 423.085277][ T4280] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 423.095968][ T4280] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 423.106825][ T4280] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 423.123332][ T4280] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 423.292158][ T4280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.362751][ T7477] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 423.670202][ T7477] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 423.773955][ T7482] loop3: detected capacity change from 0 to 512 [ 423.984246][ T4280] usb 6-1: config 0 descriptor?? [ 423.994955][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 424.006024][ T4280] ldusb 6-1:0.55: Interrupt in endpoint not found [ 424.213437][ T4280] usb 6-1: USB disconnect, device number 7 [ 424.259248][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 424.721803][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 424.749833][ T126] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 424.757988][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.825005][ T126] usb 4-1: config 0 has no interface number 0 [ 424.856619][ T126] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.945623][ T126] usb 4-1: config 0 interface 85 has no altsetting 0 [ 425.016593][ T126] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 425.107460][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.419953][ T126] usb 4-1: Product: syz [ 425.424420][ T126] usb 4-1: Manufacturer: syz [ 425.429374][ T126] usb 4-1: SerialNumber: syz [ 425.448284][ T126] usb 4-1: config 0 descriptor?? [ 425.535255][ T7519] loop4: detected capacity change from 0 to 128 [ 425.561019][ T126] appletouch 4-1:0.85: Could not find int-in endpoint [ 425.567898][ T126] appletouch: probe of 4-1:0.85 failed with error -5 [ 425.575705][ T126] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 425.592770][ T7519] EXT4-fs (loop4): Test dummy encryption mode enabled [ 425.643860][ T7519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 425.655704][ T7519] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.317389][ T7530] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 426.619766][ T7530] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 426.787357][ T7532] loop3: detected capacity change from 0 to 256 [ 426.970132][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 428.337695][ T7567] loop4: detected capacity change from 0 to 8 [ 428.393297][ T7567] unable to read inode lookup table [ 429.030078][ T7574] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 431.900540][ T4345] usb 4-1: USB disconnect, device number 11 [ 431.962026][ T7608] loop4: detected capacity change from 0 to 128 [ 432.009235][ T7608] EXT4-fs (loop4): Test dummy encryption mode enabled [ 432.196955][ T7608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 432.273977][ T7608] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.590636][ T7622] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 433.114703][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 434.696705][ T7645] loop5: detected capacity change from 0 to 764 [ 434.861294][ T7645] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 435.549117][ T4345] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 435.805657][ T7662] loop5: detected capacity change from 0 to 128 [ 435.816710][ T7662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 435.881701][ T7662] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 435.904401][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 435.915399][ T7662] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.971123][ T4345] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 436.009843][ T4345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.469549][ T7675] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 437.007845][ T4345] usb 1-1: config 0 has no interface number 0 [ 437.014089][ T4345] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.027150][ T4345] usb 1-1: config 0 interface 85 has no altsetting 0 [ 437.487157][ T4345] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 437.496679][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.529264][ T4345] usb 1-1: Product: syz [ 437.549105][ T4345] usb 1-1: Manufacturer: syz [ 437.553794][ T4345] usb 1-1: SerialNumber: syz [ 437.569625][ T4345] usb 1-1: config 0 descriptor?? [ 437.580320][ T4345] appletouch 1-1:0.85: Could not find int-in endpoint [ 437.587169][ T4345] appletouch: probe of 1-1:0.85 failed with error -5 [ 437.594739][ T4345] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 437.683582][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 440.151143][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.157517][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.215475][ T7699] loop5: detected capacity change from 0 to 512 [ 440.222786][ T7699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 440.336663][ T7699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 440.345920][ T7699] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.872162][ T7710] loop3: detected capacity change from 0 to 128 [ 440.910672][ T7710] EXT4-fs (loop3): Test dummy encryption mode enabled [ 440.941242][ T7710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 440.969823][ T7710] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.982892][ T4449] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 440.998097][ T4449] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 441.014122][ T4449] EXT4-fs (loop5): This should not happen!! Data will be lost [ 441.014122][ T4449] [ 441.024514][ T4449] EXT4-fs (loop5): Total free blocks count 0 [ 441.031220][ T4449] EXT4-fs (loop5): Free/Dirty block details [ 441.037206][ T4449] EXT4-fs (loop5): free_blocks=65280 [ 441.043233][ T4449] EXT4-fs (loop5): dirty_blocks=33 [ 441.048524][ T4449] EXT4-fs (loop5): Block reservation details [ 441.055071][ T4449] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 441.101362][ T5333] EXT4-fs (loop5): unmounting filesystem. [ 441.334197][ T7714] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 441.979843][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 443.709071][ T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 443.824445][ T4345] usb 1-1: USB disconnect, device number 6 [ 443.888796][ T7732] loop3: detected capacity change from 0 to 8 [ 443.905166][ T22] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 443.924569][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.958514][ T7732] unable to read inode lookup table [ 443.982941][ T22] usb 6-1: Product: syz [ 443.987190][ T22] usb 6-1: Manufacturer: syz [ 444.020015][ T22] usb 6-1: SerialNumber: syz [ 444.296113][ T22] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 444.529264][ T22] scsi host1: usb-storage 6-1:1.0 [ 444.753751][ T7742] EXT4-fs warning (device sda1): ext4_group_extend:1878: need to use ext2online to resize further [ 445.011148][ T22] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 445.078076][ T7745] loop1: detected capacity change from 0 to 512 [ 445.128342][ T7745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 445.205748][ T14] usb 6-1: USB disconnect, device number 8 [ 445.255392][ T7745] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.912: bad orphan inode 131083 [ 445.271827][ T7745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 446.062061][ T26] audit: type=1800 audit(1789150091.248:11): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.912" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 446.722615][ T7758] loop3: detected capacity change from 0 to 512 [ 446.778057][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 447.003635][ T7758] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 447.011902][ T7758] System zones: 0-2, 18-18, 34-34 [ 447.106902][ T7758] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.920: bg 0: block 248: padding at end of block bitmap is not set [ 447.134127][ T7758] Quota error (device loop3): write_blk: dquota write failed [ 447.143292][ T7758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 447.154198][ T7758] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.920: Failed to acquire dquot type 1 [ 447.168264][ T7758] EXT4-fs (loop3): 1 truncate cleaned up [ 447.174047][ T7758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 447.183321][ T7758] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.469263][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 449.129072][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 449.331985][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.349753][ T22] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 449.367167][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.174757][ T22] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 450.199194][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 450.204995][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 450.235163][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 450.284607][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 450.295543][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 450.311729][ T22] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 450.328169][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 450.338512][ T22] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 450.364174][ T22] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 450.529032][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 450.536133][ T126] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 450.559418][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.985383][ T22] usb 5-1: USB disconnect, device number 7 [ 451.156476][ T22] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 451.235255][ T22] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 451.297862][ T22] keyspan 5-1:1.0: device disconnected [ 451.331164][ T126] usb 1-1: config 0 has no interface number 0 [ 451.337350][ T126] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.351141][ T126] usb 1-1: config 0 interface 85 has no altsetting 0 [ 451.377479][ T126] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 451.399000][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.407078][ T126] usb 1-1: Product: syz [ 451.435618][ T126] usb 1-1: Manufacturer: syz [ 451.471509][ T126] usb 1-1: SerialNumber: syz [ 451.520178][ T126] usb 1-1: config 0 descriptor?? [ 451.539736][ T126] appletouch 1-1:0.85: Could not find int-in endpoint [ 451.564460][ T126] appletouch: probe of 1-1:0.85 failed with error -5 [ 451.595774][ T126] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 451.816451][ T7800] loop1: detected capacity change from 0 to 8 [ 451.896030][ T7800] unable to read inode lookup table [ 451.999081][ T126] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 452.223314][ T126] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 452.223672][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.223721][ T126] usb 6-1: Product: syz [ 452.223832][ T126] usb 6-1: Manufacturer: syz [ 452.223866][ T126] usb 6-1: SerialNumber: syz [ 452.273432][ T126] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 452.370614][ T126] scsi host1: usb-storage 6-1:1.0 [ 453.796136][ T14] ------------[ cut here ]------------ [ 453.802113][ T14] URB ffff88801de6d800 submitted while active [ 453.809822][ T14] WARNING: CPU: 0 PID: 14 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 453.819322][ T14] Modules linked in: [ 453.823269][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 453.830704][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.840834][ T14] Workqueue: events_freezable usb_stor_scan_dwork [ 453.847311][ T14] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 453.853067][ T14] Code: 2e 8b 44 89 ea e8 a9 99 fe 03 e9 bb fb ff ff e8 ae c2 56 fb c6 05 9b 34 e1 07 01 48 c7 c7 20 f2 2e 8b 48 89 de e8 e8 49 22 fb <0f> 0b e9 be f0 ff ff e8 8c c2 56 fb eb 1f e8 85 c2 56 fb 44 8b 64 [ 453.872995][ T14] RSP: 0018:ffffc900001379d8 EFLAGS: 00010246 [ 453.879167][ T14] RAX: 852c85ab35b2b900 RBX: ffff88801de6d800 RCX: ffff88813fea1e00 [ 453.887194][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 453.895251][ T14] RBP: ffffc90000137b98 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 453.903937][ T14] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000c00 [ 453.912201][ T14] R13: ffff888062f6cee0 R14: ffff88801de6d808 R15: dffffc0000000000 [ 453.920280][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 453.929289][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.935915][ T14] CR2: 0000001b2fe22ff8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 453.943990][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.952122][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.960198][ T14] Call Trace: [ 453.963528][ T14] [ 453.966515][ T14] ? __init_swait_queue_head+0xa4/0x140 [ 453.972187][ T14] usb_stor_msg_common+0x29f/0x500 [ 453.977370][ T14] ? trace_contention_end+0x5f/0x170 [ 453.982798][ T14] ? usb_stor_blocking_completion+0x40/0x40 [ 453.988773][ T14] ? mutex_lock_nested+0x10/0x10 [ 453.993823][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.999902][ T14] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 454.005263][ T14] usb_stor_scan_dwork+0xf0/0x260 [ 454.010376][ T14] ? process_one_work+0x7b4/0x1160 [ 454.015552][ T14] process_one_work+0x8ab/0x1160 [ 454.020596][ T14] ? worker_detach_from_pool+0x240/0x240 [ 454.026295][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 454.031501][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 454.037116][ T14] ? wq_worker_running+0x97/0x190 [ 454.042273][ T14] worker_thread+0xaf5/0x12a0 [ 454.047032][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.053030][ T14] kthread+0x29d/0x330 [ 454.057151][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 454.062264][ T14] ? kthread_blkcg+0xd0/0xd0 [ 454.066906][ T14] ret_from_fork+0x1f/0x30 [ 454.071433][ T14] [ 454.074521][ T14] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 454.081831][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 454.089158][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.099254][ T14] Workqueue: events_freezable usb_stor_scan_dwork [ 454.105718][ T14] Call Trace: [ 454.109031][ T14] [ 454.112013][ T14] dump_stack_lvl+0x188/0x24e [ 454.116770][ T14] ? memcpy+0x3c/0x60 [ 454.120796][ T14] ? show_regs_print_info+0x12/0x12 [ 454.126058][ T14] ? load_image+0x410/0x410 [ 454.130629][ T14] panic+0x2d3/0x710 [ 454.134573][ T14] ? bpf_jit_dump+0xd0/0xd0 [ 454.139131][ T14] ? ret_from_fork+0x1f/0x30 [ 454.143773][ T14] __warn+0x2f8/0x4f0 [ 454.147784][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 454.152784][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 454.157749][ T14] report_bug+0x2ba/0x4f0 [ 454.162137][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 454.167100][ T14] handle_bug+0x3a/0x70 [ 454.171294][ T14] exc_invalid_op+0x16/0x40 [ 454.175828][ T14] asm_exc_invalid_op+0x16/0x20 [ 454.180707][ T14] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 454.186308][ T14] Code: 2e 8b 44 89 ea e8 a9 99 fe 03 e9 bb fb ff ff e8 ae c2 56 fb c6 05 9b 34 e1 07 01 48 c7 c7 20 f2 2e 8b 48 89 de e8 e8 49 22 fb <0f> 0b e9 be f0 ff ff e8 8c c2 56 fb eb 1f e8 85 c2 56 fb 44 8b 64 [ 454.205937][ T14] RSP: 0018:ffffc900001379d8 EFLAGS: 00010246 [ 454.212033][ T14] RAX: 852c85ab35b2b900 RBX: ffff88801de6d800 RCX: ffff88813fea1e00 [ 454.220058][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 454.228077][ T14] RBP: ffffc90000137b98 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 454.236079][ T14] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000c00 [ 454.244078][ T14] R13: ffff888062f6cee0 R14: ffff88801de6d808 R15: dffffc0000000000 [ 454.252103][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 454.257078][ T14] ? __init_swait_queue_head+0xa4/0x140 [ 454.262664][ T14] usb_stor_msg_common+0x29f/0x500 [ 454.267806][ T14] ? trace_contention_end+0x5f/0x170 [ 454.273124][ T14] ? usb_stor_blocking_completion+0x40/0x40 [ 454.279064][ T14] ? mutex_lock_nested+0x10/0x10 [ 454.284024][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 454.290050][ T14] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 454.295369][ T14] usb_stor_scan_dwork+0xf0/0x260 [ 454.300429][ T14] ? process_one_work+0x7b4/0x1160 [ 454.305572][ T14] process_one_work+0x8ab/0x1160 [ 454.310546][ T14] ? worker_detach_from_pool+0x240/0x240 [ 454.316214][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 454.321277][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 454.326854][ T14] ? wq_worker_running+0x97/0x190 [ 454.331914][ T14] worker_thread+0xaf5/0x12a0 [ 454.336633][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.342566][ T14] kthread+0x29d/0x330 [ 454.346653][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 454.351718][ T14] ? kthread_blkcg+0xd0/0xd0 [ 454.356326][ T14] ret_from_fork+0x1f/0x30 [ 454.360779][ T14] [ 454.364401][ T14] Kernel Offset: disabled [ 454.368813][ T14] Rebooting in 86400 seconds..