last executing test programs: 1m2.783416782s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='ext4_es_find_extent_range_enter\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000740)=@multiplanar_fd={0x1, 0x5, 0x4, 0xe000, 0x8, {0x0, 0xea60}, {0x1, 0x1, 0x5, 0x7, 0x1f, 0x5, "d804a96b"}, 0x81, 0x4, {&(0x7f00000005c0)=[{0x6, 0x8, {r1}, 0xffffe62b}, {0xfffffffe, 0x7ff, {}, 0x96}]}, 0x4, 0x0, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 1m2.390003233s ago: executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0xc41, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x4004662b, &(0x7f0000000000)={@id={0x2, 0x8, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0x4004662b, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) 1m1.910020657s ago: executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a227536350102f0010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0d0002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x1e}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_setup(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) setuid(r6) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000100)="c7ee341b8127e4367f1de4c38f4ba163a3b2f5843e3d2189acc6b6ba75c700e7631251c3cedff5c2fe253aafc7af521c36f1d78b4a5d8260314edc6620e97c1dda762f7a82e24f41b9a41310fa4869a09886dd1083367675b96a2a8bbcf90734d48de12c599fe1687b598aecdd8fe70e70121a8acbb2c9cf38fe24a596049eab947a4ddf8381da09b865cf2de45fb0cd0574cb84a6a27c0c37f08d8b4f0049e1e226952ffd0fd4952fafdc00a4c9e1d9ecbf5b4a7a0bbc26", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000002980)='|', 0x1}, {&(0x7f00000029c0)="f5", 0x1}, {&(0x7f0000002a00)="fe", 0xfffffc5d}, {&(0x7f0000002a80)="f0", 0x1}, {&(0x7f00000028c0)='-', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="80", 0x1}, {&(0x7f0000000000)="054c508cb2547e1302c6c5e095d2b2ad93bd99cfcdfd48ff683372c51b476bcbd3b6abbcbe4c6c8991a39aebb0ff0ebd825f029f79de6300000000", 0x1}, {&(0x7f0000002e40)='\x00', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000240)="c06940a8686be6575e44b48667d8738b70d318ea861eaf18e3737d0925cb82efc174e436b30093721a192cc28e9c6dce7850bf1dd7ea90d902e8319e0d2c5589a7f5954c7803a3b7d5075bbe9248254b4a5eaf62e587e301d70f374dfadfbc88b140f5537a4becfd7754adbd18f22a0130dc032843312bdf7f0018c979c5d78bd4dfe21fc6bfc9e9a1ac864490900778f89c23f989647b6ecd5dba55bb2d30504f56ef9aad0bf5b7a7a1b3e8c3e246164581a48b941b135f7a94287fa4d977b9b1baed41aedfadc4ee"}], 0x1}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003200)="8c", 0x1}, {&(0x7f0000003300)="bf", 0x1}, {&(0x7f0000003400)="12", 0x1}, {&(0x7f00000034c0)="8f", 0x1}, {&(0x7f00000035c0)='_'}, {&(0x7f0000003600)="14", 0x1}], 0x6}}], 0x2, 0xf000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m1.494225531s ago: executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) 1m1.36950023s ago: executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1579db7ea6702d78, 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0x7fffffff]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x47, 0x40, 0x6, 0x3, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xa, "6222b4c0a6cfcc5f"}, @timestamp={0x44, 0x14, 0x4e, 0x0, 0x9, [0x9, 0x7f, 0x1c9, 0x3]}, @generic={0x82, 0x2}, @cipso={0x86, 0x25, 0x1, [{0xc, 0xe, "f0d9af072941685fa6334896"}, {0x2, 0xa, "f89e5d4a96207b7e"}, {0x2, 0x4, "d6d8"}, {0x1, 0x3, "11"}]}]}}}}}) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@private1, @in=@multicast1, 0x4e20, 0xff, 0x4e24, 0x2, 0xa, 0xa0, 0x20, 0x21, r1, r2}, {0x1, 0x7, 0xad88, 0x39, 0x0, 0x3, 0x1ff, 0x6}, {0xcf, 0x80000000, 0xffffffffffffff2c, 0x80000000}, 0x7fff, 0x6e6bba, 0x1, 0x1, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x2, @in=@empty, 0x3500, 0x1, 0x2, 0x81, 0x2, 0x8, 0x8}}, 0xe8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002300)=0x3f) write$P9_RLERRORu(r0, &(0x7f0000002340)={0x15, 0x7, 0x1, {{0x8, 'syztnl0\x00'}, 0x2a3}}, 0x15) bind$unix(r0, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x84, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48014}, 0x24044040) sendmsg$inet(r0, &(0x7f0000002940)={&(0x7f00000025c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002780)=[{&(0x7f0000002600)="124a170547ed1e994becbafc98e1a78252405886e142f1961c963468f905e11434efde37e7556b1faaa57277c2cf39efd2bdd594b12366ee6fd0beb5f054cb8475f53130ec767c67d886c3536639297a915dad8b5d6a805a5f0c2d360032850c", 0x60}, {&(0x7f0000002680)="962021451f45e1de33cde13a03a317f71d67d53a22632e24d80280e2c656b77087611207dca73ce118ef31448febd5848b4cde93ade7a44d3e4569bbbf375e8ab98857baef30c312b484983adb0f4dc1b54d87787e3b73c3dbb2af178cc218814ba227adf81abc585f0d1c744f6d0bab9f8b3afa80763653710828ccaf75ab78a477fd05c14ab228795da8d1f8c5f809718e405a8f89acd8111d845f42596bee91e4b03b9661d080dc491eb23767ea29304eb7dfbc", 0xb5}, {&(0x7f0000002740)="39508f631bc0f9db825a29f2ca87adce4b", 0x11}], 0x3, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @private=0xa010102}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x7, 0xa7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x5, [{@empty, 0x3}, {@private=0xa010101, 0x80000001}, {@private=0xa010101, 0x7}]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x89, 0x0, 0x2, [0x80c0, 0x3]}, @ssrr={0x89, 0xf, 0x64, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xb, 0x1, 0x2, [{@broadcast, 0x6}, {@private=0xa010100, 0x3}, {@private=0xa010101, 0x3}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x4}, {@local, 0x9}]}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x1, [0xe537]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x43}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @rand_addr=0x64010101}}}], 0x150}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000029c0), r0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002b00)={@remote, 0x5}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002c00)={'tunl0\x00', &(0x7f0000002b40)={'syztnl0\x00', r1, 0x80, 0x10, 0x80000001, 0x9, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0x3b, 0x2b, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "dc46045e2f10b3"}]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x2}, {@multicast1, 0x7f}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xdb}, {@private=0xa010101, 0x20}, {@multicast1, 0x30c3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @end, @end]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000003000)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2c880800}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002c80)=@newsa={0x31c, 0x10, 0x4, 0x70bd25, 0x25dfdbfe, {{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e24, 0xfffd, 0x8, 0x80, 0x80, 0x3a, r1, r2}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0x33}, @in=@rand_addr=0x64010102, {0x1, 0x4, 0x59340408, 0xffffffff, 0x7ff, 0x3, 0xfffffffffffff779, 0x9}, {0xffffffffffffffff, 0x200, 0x6, 0x9e}, {0x81, 0x0, 0xfba}, 0x70bd29, 0x3502, 0x2, 0x3, 0x9, 0x80}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10000}, @algo_auth={0x132, 0x1, {{'vmac(tea-generic)\x00'}, 0x750, "ad486134f4caa45401d9bdb63f0d533dae0768b1f04419ab757b392d901881d17527a11ab994c552ed89f3fe92a4a3ad26fbd95347a49a2990d076fc820c09213cfe6e56388cb15e8bc767cef7fd7cfc7805d0f15e607adac8f10aae5009b23c40643c167046f980185484f8f060ad185a58775fdeacaf0412c42dcb9c6d2636bffb664f017492f600563e97542230d668ec4de053c36f9b8177334b953f09b5015017487ae3fb311c95f066cb6a41fee29825853c5934ce1834f71d7e192dd63202153667ac6978f0cf14519c7456b38a96b4a1045952cf2121783289cbc00d9fdd3194d541c7e3b7b1"}}, @mark={0xc, 0x15, {0x350759, 0xd58}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4e23, 0x100, 0x4e22, 0x2, 0xa, 0x80, 0x20, 0x33, 0x0, r2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x32}, @in6=@mcast1, {0x180000000000, 0x7, 0x10000, 0xfffffffffffffffb, 0x5, 0x8, 0x8, 0xfffffffffffeffff}, {0x2, 0x7ff, 0x9, 0xffffffffffffffff}, {0x7ff, 0x8, 0xed}, 0x70bd2b, 0x0, 0xa, 0x2, 0x81, 0x11}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) connect$llc(r0, &(0x7f0000003040)={0x1a, 0x313, 0x7, 0x4, 0x3, 0x6, @multicast}, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000003080), 0x84600, 0x0) fcntl$notify(r0, 0x402, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x802080, &(0x7f0000003140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@cache_fscache}, {@privport}, {@mmap}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_any}, {@version_9p2000}, {@loose}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x31, 0x38, 0x36, 0x33, 0x39, 0x31], 0x2d, [0x33, 0x32, 0x62, 0x30], 0x2d, [0x36, 0x63, 0x10, 0x31], 0x2d, [0x64, 0x35, 0x61, 0x65], 0x2d, [0x33, 0x62, 0x34, 0x32, 0x36, 0x63, 0x66, 0x33]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mptcp_pm\x00'}}]}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5f}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000003440)={0x8001, "cdbcd0204e3b36bb5525b5f6f57196e623242cb94e0c2a2bece58f8644013ad8", 0x400, 0xffffffff, 0x4, 0x4, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000034c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000003500)=[@timestamp, @mss={0x2, 0x7fffffff}], 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000003540)=0x40e65964, 0x4) bind$tipc(r5, &(0x7f0000003580)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1}}, 0x10) 1m1.322569477s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") chdir(0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) 1m1.171316861s ago: executing program 0: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$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") socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@newqdisc={0x38, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xfff2}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x10000, 0x8001, 0xa01, 0xffffffffffffffff, 0x800}, 0x48) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000003c0)='./file2\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000980)="$eJzs201u00AYxvFnEjeJoUARHwuElAUL2JCkqajEquIcrKI2rSpcQIRNIiTCBeAMnIOzIHEAELBjhVFsh9Qep3UndUvJ/7fxm3n6OlO36YwqWwCWlifJyKg2eXG3sfbhhinUVyt7YgBKFybH36EL36kLwL+i+is7kuwAxuczHwBn5dsT6Yukrz/fbKtq7+on+XiaV+p2/k664yW5acjP7i8+Sven/eaS3e/Fxzi/nHv+B/em77+qK7qqa1rT9e8/wlAmynf+9t922gMBALBsjFrH5S2pOieNF297VzCzot1P9qo+U9PuftDvHpNvzM3rUd7afhHsHPEuAPJUCn3+sz73plU1+vx15vZ7Ub6evGosMFMAp20wHNUVBP1Xg+FkkY+K0bNecKLCd+oqUpjSzpxf1DIj4VtJ8UhldsVOfOYw3eUfvs7NQXPxyZv4vzTKRn6R9oryoqcO09iyoxVJhdob1uSTwoydLsvqe+V+X4sVWyr0xc2cn4VzUT+jX/50cb5/lwCUr/364GV7MBw93D/o7fX3+s+7nc7jzUcb65vddrSzbx+9vwdwcc0WfR26GwgAAAAAAAAAAAAAAFwkN3Vrcsg+tgsAAADgP+TwYFAzaU1HnjWSurMYAAAAAAAAAAAAAAAAAACcnj8BAAD//yTqAvg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xb8cac9cab6c56892, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000740)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000400)=@nl=@unspec={0xa}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x20}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000d40)=ANY=[@ANYBLOB="00001b5c29b17d955f465b67d9bf68b6c6b4", @ANYRES64, @ANYBLOB="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"], 0x26, 0x2bd, &(0x7f0000000900)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1m0.620119566s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 57.342353822s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x3, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @multicast}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200002, &(0x7f0000000000)={[{@noinit_itable}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r1, 0x125d, 0xffffffffffffffff) r5 = epoll_create1(0x0) r6 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) 56.153504166s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$eJzs3UFrY1UUAODz0jSNukgRN4qLB7pwVaZu3bTKCGJXSgR1ocXpgCRhIIWAI5iZ1fwCl/4Pf4IbN/4Dwa3gri6qV17ee01iX9PS1hT1+1an995z73nvQrrKyeevjgYPHmXx9OTn6HazaO3FXvyZxXa0ovYk2nFe0xgA8G/we0rxW7pOZrt1+9UAAOtQ/v8v3XUtAMB6fPjxJ+/vHxzc/yDPu/Fy79mkn0XE6NmkX87vP4wvYxhHcS96cRqRzpTxu+8d3I92XtiO10fTSb/IHH32Y7X//q8Rs/zd6MV2c/5uXlrIn076m/F85LH/cLMutRcvNee/2ZAf/U688dpC/TvRi5++iEcxjAdR5M7zv9nN83fStydff1ocU+RnrehvzdbNpY113gsAAAAAAAAAAAAAAAAAAAAAAP9tO3mele17Zv17iqGq/87G6Wx+J69tL/fnKfOzeqOyP1CKqkXPNMV3dX+de3mep2rhPL8dr7T9iAAAAAAAAAAAAAAAAAAAAAAUjr96PDgcDo/GtxLU3QDqr/Vfd5+9+cjWUrkNi7euftZit4Gi1pWLo92O1RuepNLlz9WqD21e89zFUzcItuaX+1GUQX0xN9o5/e2Fv/h2+ffjwWFeralf8uAwu+ysbr3P94tTnbjpS0izCk/T8p12z0pdzurc0pvvvNA49UdK6Wr7vPVLeUfVSDZrsXG10zeroPEBi6B7/i5+uHjDCz8yNq75UQMAAAAAAAAAAAAAAAAAAFyi/K7vk6PxccPk05WprX+sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L3/4dH47OgGxHLI+eCaZW8ak0VdGJ8fMePCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/AXwEAAP//wZJM4A==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) 56.029825285s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) 55.662614311s ago: executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)="ad513caf2252fe557fb1e10a73b240a2e689185dbea732bd74f6e73c8065440e689d77d82bcaeb4caa3dacb1a30e5f3e96e6b585e534c30dcf376bd6feeb1e968af406140bf749f7b5"}, 0x20) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000100)=0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5609}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0000d5}, 0x20004050) syz_usb_connect(0x2, 0x39d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xb1, 0x24, 0x87, 0x10, 0x5ac, 0x218, 0xc0d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38b, 0x1, 0x4, 0xa5, 0x0, 0x0, [{{0x9, 0x4, 0x9f, 0x5, 0xb, 0x3, 0xb9, 0x2, 0x7f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x5, 0x3}, [@obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x0, 0x7}, @acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x0, [0xee, 0x1, 0x64, 0x3, 0xf000, 0xfffd]}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x0, 0x10, 0x4}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'V'}, {0x5, 0x24, 0x0, 0x37}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xbb, 0x1, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x1f}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x40}]}], [{{0x9, 0x5, 0x9, 0x2, 0x397, 0x5, 0x1f, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1f, 0x1f, 0x1, [@generic={0xb, 0xe, "115b71a5c2e699f151"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x0, 0x4, 0x0, [@generic={0xb5, 0x30, "93a663f3e388fd33896b0bacd5d123d698ce7ce9f015650da0e826ddfcf61bc01d19205b5e1284946ab45fd3b33931974d01123b340d9fa8ed9fb0f9769305bdc16c2afb2b2b3017f6d43773ef657f405a396958adc2458c3705331994c20284cb32544f938431c81bfcd94ac9820f3b3ceb205db55d378b4d89a4412b742095fab2747fed2d66839e81f707554b45b838b05789a72d7dd8d65460c5f2d7a8a03274309d1567ea6244cf7e47b80e774cadfbfe"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xd0, 0x5, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8}, @generic={0x22, 0x9, "8c1098aff19346a4f41f893862ba61510b9de6a2f617a0150ed8624fdf8e6fd9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0x8, 0x40}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3f, 0x7f, 0x6, [@generic={0x30, 0x3, "a70015bde5e35b320f27b8dbe639035030b71858ead1586cb58be4cbaecd3454d2d5aedab6c98be33ce58a7359be"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x7, 0x80, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x48, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x8, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x3f, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8000}, @generic={0xb0, 0x3, "0127625764b592f030fe10c6ff5fcf164eebece19f612b02dd23c88fa11f2ffe484651ee0807e14b8e73b4b6ed41461d25f8d2f83669aba7a4e8c7ed8fb3e45942456a285e96761721c05ad16305585407b5b927cf2a506a71deac17769b50aa76bab643ac548b1309da7997484b80da50cbd1a7a0af0c767d7a31d4814b5de23fdeb861db04030b5e3a18f425e552fb9f933dd911329ab5a9643acf779af9c0503c88c809a213837ef17964873d"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x6, 0xe, 0x7, [@generic={0x72, 0x11, "4ec8038a5ec6810d69aacdfd64e40f27dee0dc828729513bae98fce2ce8fe6265bbcab7348bb002a6ad63a914a74e64ac96ec6c25a7c2f0b068347946d064c833fcb52eb5f62d29d45710c668c01f077c47ae16c92a24830740ea3f519dc48abf0432bec4f971af2e538ff8e2a4c1665"}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x0, 0x6, 0x6, 0xff, 0x20}, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8c, 0x5, 0x75, 0x7, 0x29}]}, 0x7, [{0x34, &(0x7f0000000700)=@string={0x34, 0x3, "b6f596e0a9f3f2f9bda25c75edee9d6b92c4abe016221d01db39e403bc4faededd303d3fc9a21ce894fb4a19e082289c807c"}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "f9f32d100b1c6490b8b9505e820b91dbda07b19fffb1ac4dec98a8e8811e4342d355e5a258c1e6704337594441a4255789aeacbc770be9bdda70ea7acd6c16e5c7c8f69a857790dcb029be2107c766c0f783dafb932946249812a654181b5f7bae38996fcb189265f82cd9ac5d85ec22bb70c4d247d493ab4a8fd46a2ab30da5596f02daf2bbfc62298971fd240c261e08b3391f93e5b0c1da2304552c2d07ee76f954e1481ef0341f9bdaaefaca0b0e1d89d197195aa708d337c0ec383e398bb03c7e0331c93215"}}, {0xff, &(0x7f0000000840)=@string={0xff, 0x3, "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"}}, {0xd4, &(0x7f0000000940)=@string={0xd4, 0x3, "a76628d6d54a01028b88c50d44863db953e562fc171ed31062c76ef421896dcef4522dc98e40f3f64fe0abb84a080a28c47cbd73cb49e8d0fe3249a706e8b7170d389731dd4f4ab672fd99181e7ee41bd1143aaff05d809234b53cf9ff3421ec9e483e86b92756a6bf5295166a376f265d66e929d744f74085f2d33e8434afc9fe8c93954f3240cd21ec8866e009d55c4bb68cb40f283d12d599f61136287965aed61c637fef8cf03dbdac5e164dc1ac2963f94d732ae52282257be8e1c68db43905a5b2791a30ebf9cd048b209bfe3f86dd"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x280a}}, {0x1b, &(0x7f0000000ac0)=@string={0x1b, 0x3, "10adf068a7f588e210a8b257f10cb49689b98650f6c20d52f7"}}]}) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000b80), 0x900, 0x0) sendmsg(r0, &(0x7f0000002100)={&(0x7f0000000bc0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c40)="061f828ffccf94ea85cbc3214e915b45eea60e12ad312815eabb59b2141319464d4d548c25f1f1a336f235e0452242c849b69b62a682608f22355706e66c7b4a1ce509ec297967738c49dda7567965890ec09626dc69cf5835bed3599399121eaf0ef4b57baf5265e249354f4648afc827ff46414416c6021ca81d0a2197cf81e43df79e2b773b5937b8813f30cd0401d91a56cb88444cc2a847cdab1fa94c5c6e3781f505d0fac4846ae6f58edb854c843bf7701d9f9bf7af9166b853eec19d29e1", 0xc2}, {&(0x7f0000000d40)="0451c0a2180984056d9521", 0xb}, {&(0x7f0000000d80)="f050418dab6a1d108e12086504b7cfff876cc53f1866ac745f435f88306e621a368cefd4f51a3dbd4943ebaed83b1bd9e207cf8190a78acb2328f918ebd720e5a3135a44d0a61563bc97ad0d585fdc15cda37712a16073e59ec7d1046063644938bce54caa9bf66cc2e987caa9f0208be564a80de8552f79dd439fbf61ac19fc27bf39dc2ee1816a6714256db8b6d84ed71ad2b8af03ee09db64bc5e8edb22d93e9e4cae85ae8a501d", 0xa9}, {&(0x7f0000000e40)="e85f58dd968cfb89c39b34c69cee3c69e3bb932d541fbeacf09530b7b6601c6c4c3f5fd47d222f039e58bfb1051a4507b345980ec5ed4656ed98c3ef1ba457da11df1a8b29b1ebc088801572708eb039772adef15550", 0x56}, {&(0x7f0000000ec0)="b7b44e31fd6b1c6b3ec9ef987d417e4a58c8345e4fbf32c9fe0543296d8e4764934f8e3aedf8998ed621dc356677e9a1f9a65d594782718bf775a5c25322bee67d440764e9df9a0756e7cdd60bba4fccb2b7be151388b9c1eee8969b1d9a3a1ff3575994d0fe4a656b52c31aaf97ef3638fddf985c9922e112f2e81c2bc7d423e11860c98a9e61c6802ea8f8f6542462faa5a3b9f86f6a5c5ec5ebfb0943e8a36a5da11def7d02acdc30afff2f8ff0e578e46a953f4a25a09efbbb8318ec8bacf8f33aad086a8785c8c48056ce8631383a73d70e2fc6a57b0cd686b0e7f187395d2b18459f2d64b7c13a", 0xea}, {&(0x7f0000000fc0)="3fac3837cd123564531f0110265bd04077eddd309e2093085d311eb4227d1ccc8c7611a239f37eff026cf586949478dcc9032791267454079b1ba1007ffa49fa6753ccce7a441c1672451ecacd92f9d5016f9833605fb14708209b6d2389b0c6a4e360ff86c90dd17e01ff77ffd81e179966baeac3", 0x75}], 0x6, &(0x7f00000010c0)=[{0x1010, 0x108, 0x0, "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"}], 0x1010}, 0x1004c000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000002140)=""/231) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002240)) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, &(0x7f00000022c0)='./file0\x00') r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000002300), 0x101000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, &(0x7f0000002340)=0x12) pselect6(0x40, &(0x7f0000002380)={0x8, 0xdcb3, 0x3, 0x9, 0xffff, 0x1000, 0xff, 0x3ff}, &(0x7f00000023c0)={0x3, 0x4, 0x8, 0x7, 0x4, 0xe58, 0x40, 0x5}, &(0x7f0000002400)={0xa5, 0x1a1, 0x9, 0x7, 0x81, 0x7, 0x68, 0x1}, &(0x7f0000002440)={0x0, 0x3938700}, &(0x7f00000024c0)={&(0x7f0000002480)={[0x1]}, 0x8}) get_mempolicy(&(0x7f00000026c0), &(0x7f0000002700), 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, &(0x7f0000003bc0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003c00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 53.671815588s ago: executing program 1: syz_open_dev$rtc(&(0x7f0000001ec0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000400010000", 0x7) 51.729468408s ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe80000000000000000000000000ffff090000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c00000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000002000000af00000000000000"], 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0xc41, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0x4004662b, &(0x7f0000000000)={@id={0x2, 0x8, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0x4004662b, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) 50.728731882s ago: executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1579db7ea6702d78, 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0x7fffffff]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x47, 0x40, 0x6, 0x3, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x64, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xa, "6222b4c0a6cfcc5f"}, @timestamp={0x44, 0x14, 0x4e, 0x0, 0x9, [0x9, 0x7f, 0x1c9, 0x3]}, @generic={0x82, 0x2}, @cipso={0x86, 0x25, 0x1, [{0xc, 0xe, "f0d9af072941685fa6334896"}, {0x2, 0xa, "f89e5d4a96207b7e"}, {0x2, 0x4, "d6d8"}, {0x1, 0x3, "11"}]}]}}}}}) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@private1, @in=@multicast1, 0x4e20, 0xff, 0x4e24, 0x2, 0xa, 0xa0, 0x20, 0x21, r1, r2}, {0x1, 0x7, 0xad88, 0x39, 0x0, 0x3, 0x1ff, 0x6}, {0xcf, 0x80000000, 0xffffffffffffff2c, 0x80000000}, 0x7fff, 0x6e6bba, 0x1, 0x1, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x2, @in=@empty, 0x3500, 0x1, 0x2, 0x81, 0x2, 0x8, 0x8}}, 0xe8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002300)=0x3f) write$P9_RLERRORu(r0, &(0x7f0000002340)={0x15, 0x7, 0x1, {{0x8, 'syztnl0\x00'}, 0x2a3}}, 0x15) bind$unix(r0, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x84, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48014}, 0x24044040) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002b00)={@remote, 0x5}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002c00)={'tunl0\x00', &(0x7f0000002b40)={'syztnl0\x00', r1, 0x80, 0x10, 0x80000001, 0x9, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0x3b, 0x2b, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "dc46045e2f10b3"}]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x2}, {@multicast1, 0x7f}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xdb}, {@private=0xa010101, 0x20}, {@multicast1, 0x30c3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @end, @end]}}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000003000)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2c880800}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002c80)=@newsa={0x31c, 0x10, 0x4, 0x70bd25, 0x25dfdbfe, {{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e24, 0xfffd, 0x8, 0x80, 0x80, 0x3a, r1, r2}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0x33}, @in=@rand_addr=0x64010102, {0x1, 0x4, 0x59340408, 0xffffffff, 0x7ff, 0x3, 0xfffffffffffff779, 0x9}, {0xffffffffffffffff, 0x200, 0x6, 0x9e}, {0x81, 0x0, 0xfba}, 0x70bd29, 0x3502, 0x2, 0x3, 0x9, 0x80}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10000}, @algo_auth={0x132, 0x1, {{'vmac(tea-generic)\x00'}, 0x750, "ad486134f4caa45401d9bdb63f0d533dae0768b1f04419ab757b392d901881d17527a11ab994c552ed89f3fe92a4a3ad26fbd95347a49a2990d076fc820c09213cfe6e56388cb15e8bc767cef7fd7cfc7805d0f15e607adac8f10aae5009b23c40643c167046f980185484f8f060ad185a58775fdeacaf0412c42dcb9c6d2636bffb664f017492f600563e97542230d668ec4de053c36f9b8177334b953f09b5015017487ae3fb311c95f066cb6a41fee29825853c5934ce1834f71d7e192dd63202153667ac6978f0cf14519c7456b38a96b4a1045952cf2121783289cbc00d9fdd3194d541c7e3b7b1"}}, @mark={0xc, 0x15, {0x350759, 0xd58}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4e23, 0x100, 0x4e22, 0x2, 0xa, 0x80, 0x20, 0x33, 0x0, r2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x32}, @in6=@mcast1, {0x180000000000, 0x7, 0x10000, 0xfffffffffffffffb, 0x5, 0x8, 0x8, 0xfffffffffffeffff}, {0x2, 0x7ff, 0x9, 0xffffffffffffffff}, {0x7ff, 0x8, 0xed}, 0x70bd2b, 0x0, 0xa, 0x2, 0x81, 0x11}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) connect$llc(r0, &(0x7f0000003040)={0x1a, 0x313, 0x7, 0x4, 0x3, 0x6, @multicast}, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000003080), 0x84600, 0x0) fcntl$notify(r0, 0x402, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x802080, &(0x7f0000003140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@cache_fscache}, {@privport}, {@mmap}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_any}, {@version_9p2000}, {@loose}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x31, 0x38, 0x36, 0x33, 0x39, 0x31], 0x2d, [0x33, 0x32, 0x62, 0x30], 0x2d, [0x36, 0x63, 0x10, 0x31], 0x2d, [0x64, 0x35, 0x61, 0x65], 0x2d, [0x33, 0x62, 0x34, 0x32, 0x36, 0x63, 0x66, 0x33]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mptcp_pm\x00'}}]}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5f}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000003440)={0x8001, "cdbcd0204e3b36bb5525b5f6f57196e623242cb94e0c2a2bece58f8644013ad8", 0x400, 0xffffffff, 0x4, 0x4, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000034c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000003500)=[@timestamp, @mss={0x2, 0x7fffffff}], 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000003540)=0x40e65964, 0x4) bind$tipc(r5, &(0x7f0000003580)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1}}, 0x10) 49.722233488s ago: executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, 0x0, 0x0) 49.589660588s ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$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") socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@newqdisc={0x38, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xfff2}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x10000, 0x8001, 0xa01, 0xffffffffffffffff, 0x800}, 0x48) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000003c0)='./file2\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xb8cac9cab6c56892, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000740)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000400)=@nl=@unspec={0xa}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x20}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000d40)=ANY=[@ANYBLOB="00001b5c29b17d955f465b67d9bf68b6c6b4", @ANYRES64, @ANYBLOB="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"], 0x26, 0x2bd, &(0x7f0000000900)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 48.431731727s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x3, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = epoll_create1(0x0) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) 45.68840703s ago: executing program 4: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000009006000000000000fcffffff09140000001100010000000000000000000084000ab21421d31390b6e07debb5ef0ce786e226f865569b61893bd000068e320e05a141805b3604000000"], 0x28}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') fchdir(r4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000040)=""/104, 0x4d) getdents(r5, &(0x7f0000001fc0)=""/184, 0x111) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="68eec395953d427f22db978db72052e87f0472e1798450ec019301f4f9"]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x199) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) 43.526727604s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x30, 0x4e5126cc, 0x8000, {{0x38, 0x4, 0x3, 0x7, 0xe0, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@generic={0x80, 0x11, "09f33065b75ee1a7ee27fec13b00bf"}, @ssrr={0x89, 0xb, 0x8a, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102]}, @rr={0x7, 0x13, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x23, 0x4d, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1c}, @local, @rand_addr=0x64010100, @broadcast, @local, @private=0xa010100]}, @ssrr={0x89, 0xf, 0x63, [@multicast1, @loopback, @empty]}, @timestamp={0x44, 0x10, 0x75, 0x0, 0xd, [0x6, 0x0, 0x8000]}, @end, @timestamp_prespec={0x44, 0x1c, 0xe3, 0x3, 0xe, [{@multicast1, 0x39d5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xbb2}, {@private=0xa010102, 0x20}]}, @timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x3, [{@local, 0x1}, {@private=0xa010101, 0xb647}, {@multicast1, 0x9}, {@private=0xa010101, 0x1000}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xe9}]}]}}}}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) 32.110439785s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) 31.991821743s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) 31.842745806s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) sendfile(r7, r6, 0x0, 0x8002) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000000)={0x1, 0x0, 0x27f}) socket$netlink(0x10, 0x3, 0x0) 30.579009422s ago: executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) write$tcp_mem(r0, &(0x7f0000001cc0)={0xb9fe, 0x20, 0x40}, 0x48) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) mknod$loop(&(0x7f0000000b40)='./file0\x00', 0x6000, 0x1) 30.475848527s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) write$cgroup_subtree(r5, 0x0, 0xda00) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000500), 0x20, 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac141400000000000000000000000000fc01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000fc82da663513a70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089a9e06900"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) r10 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)=':$.\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_open_dev$rtc(&(0x7f0000000380), 0x6, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x124, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x26, 0x1f, 0xd1, 0x6, {0x4e22, 0x4e21, [0xffff, 0x3, 0x7f, 0x3], [0x3ff, 0x6b, 0x7, 0x6], 0x0, [0x6, 0x9]}, 0x80000000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "9aad1af47f1ce2b14a079bdc1102c73d631a27a5e3169e02589c18cd4ecf22d027a47c31a09ef3fe"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "4797d924d8457b0b8698123df5cf35cfe7d31d6c84c8c4122e0e31a8eb02d9edee5637072cf7282351176d28e0ff6bcfb01a2fbeb7d5df7c7274595e2a2b42b337639ad4d4b4cab7d3a20b5879a3013f00f48cb8883a1d6e9c9bb5684ed5427389da354d06be"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "d3fbcf08fbcb6e6c40870dbdd5ce19ba91f9a50999e0d8ef2d07c4c50546e8d298422f78000000000000b82baad400"/59}]}, 0x124}, 0x1, 0x0, 0x0, 0x2006c800}, 0x48001) 30.020899438s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x20, 0x30, 0x4e5126cc, 0x8000, {{0x38, 0x4, 0x3, 0x7, 0xe0, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@generic={0x80, 0x11, "09f33065b75ee1a7ee27fec13b00bf"}, @ssrr={0x89, 0xb, 0x8a, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010102]}, @rr={0x7, 0x13, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x23, 0x4d, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1c}, @local, @rand_addr=0x64010100, @broadcast, @local, @private=0xa010100]}, @ssrr={0x89, 0xf, 0x63, [@multicast1, @loopback, @empty]}, @timestamp={0x44, 0x10, 0x75, 0x0, 0xd, [0x6, 0x0, 0x8000]}, @end, @timestamp_prespec={0x44, 0x1c, 0xe3, 0x3, 0xe, [{@multicast1, 0x39d5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xbb2}, {@private=0xa010102, 0x20}]}, @timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x3, [{@local, 0x1}, {@private=0xa010101, 0xb647}, {@multicast1, 0x9}, {@private=0xa010101, 0x1000}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xe9}]}]}}}}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) 23.643764242s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 20.695192216s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x4000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file2\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1/file2\x00', &(0x7f0000000800), 0x1008, &(0x7f0000000840)={[], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13.492450618s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0], 0x11, 0x6a0, &(0x7f0000004200)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x7fff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX=r0, @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000200)=@random="a4346ed253421657791d0cf7f150560954642b36a05984095ca8164bd685f3", 0x1f, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x05\x9d\xa4I\xfe\aY\xad\xc3\x04+g\xae{\x8bl\xc1\xbb\xeaM\xb8\xef\xe9\xe0\x80[DB\xec\xf5DT\xbb\xf4\xa7\xb7\x8f\xde\xfdn?\xb4\xfe\x14b\xa3\xbd)alKfG\x8f\x1f\xd3\x92\x93\x9c\x9c\xbe\xa4\t,\\\xe7o\xfb\xb8\xf5\x8b\xfc*\xf2\xd4\xd7E\xa1\xe6P\x96\x9c\xbf\a\x9fU\x9dK\xe4P\xa2M\xcb\"1\xca!\xb4&\xf7\x017E\xb6b\x16\xcb!\xd8\xf5r\xda\x89\xa6\x03\x1a\x06\x00\x00\x00\xe8\x86\x12\xa1\xa3\xcc\x12\xb3\rM\xbfZ\xa6\xbd7B\x99/,\x17\x15R\x1aU\xf8:R1=/\xea\xccp;\x8d,\x1fS\xd6\x84\x00\x00\x00\x00\x00\x00\x00\x041\xc3\xea\x8d\x136\x82Ub\xbc$\r\xf8\xd2\xc24@\xd0Q\x14\x19)\xf0\xc1P\x1fU\xbc\xaa\x1e\xb8+\x96\"\xf7yt#\xec\"\xf0^AA\xbb\x00=t@\xa1G\xa9\x89R@T\x14\x0e\xfe`\x14),\xab\xe9C\xa7\xf0\xd00\xb5\x01\xc7\xa1\x0e\xcc\x14\x9e\xeauc\xc0\x8b\xe5\xbb\xe5f\x9c') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r6, 0x0) ftruncate(r10, 0xc17a) 0s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bfa200000000000007020000f8ffefffb703000008000000b70400000000001085292b5a07f9da78b4e0a058ee67639a97e4a80e6ef6ae2aaddbdef6b91f9e5e81423654111f6f3d5f03a5418d941904bbdee71f5477e5a65e7365356324f630758939bd5e9e2e331966baabc391ad5092e4c733ebd70218fb494deaa3a9e87669b2cb6279e9fa26ce5013275b58758869800621e208cb8f206e9de30ea41cb7aa69b19275a555bb4474a7216e994deb86f0b13f473e528d08d0708a0edc64728f690404406b739d7ea79acb714c9ebf178ba684047b35e380e70ae78f9a8b2bac02a7cae158f7c368a507d9f202cd5e55d70e13090659680e6d4367d7750fd6499fb514c94f642037c5a7c7cd58e5d8bcf7b8874897bda3df34b5c41f962fa5779952b752f016a02c4b8f4cfe1267243cc454c488a0f4d736d68a1a2a0c48a7e3157004de5b9eb2071c4133ceb4e44d1b1150c9cac98e763cf64dca9f14a1135b6993a0805479", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) write$cgroup_subtree(r5, 0x0, 0xda00) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c264000000000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000500), 0x20, 0x1) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac141400000000000000000000000000fc01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000fc82da663513a70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089a9e06900"/112], 0xb8}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) r10 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)=':$.\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_open_dev$rtc(&(0x7f0000000380), 0x6, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x124, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x26, 0x1f, 0xd1, 0x6, {0x4e22, 0x4e21, [0xffff, 0x3, 0x7f, 0x3], [0x3ff, 0x6b, 0x7, 0x6], 0x0, [0x6, 0x9]}, 0x80000000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "9aad1af47f1ce2b14a079bdc1102c73d631a27a5e3169e02589c18cd4ecf22d027a47c31a09ef3fe"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "4797d924d8457b0b8698123df5cf35cfe7d31d6c84c8c4122e0e31a8eb02d9edee5637072cf7282351176d28e0ff6bcfb01a2fbeb7d5df7c7274595e2a2b42b337639ad4d4b4cab7d3a20b5879a3013f00f48cb8883a1d6e9c9bb5684ed5427389da354d06be"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "d3fbcf08fbcb6e6c40870dbdd5ce19ba91f9a50999e0d8ef2d07c4c50546e8d298422f78000000000000b82baad400"/59}]}, 0x124}, 0x1, 0x0, 0x0, 0x2006c800}, 0x48001) kernel console output (not intermixed with test programs): n failed: -22 [ 132.785178][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797106][ T26] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.904180][ T4297] CPU: 1 PID: 4297 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 132.912581][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 132.922819][ T4297] Call Trace: [ 132.926139][ T4297] [ 132.929107][ T4297] dump_stack_lvl+0x1e3/0x2cb [ 132.933854][ T4297] ? nf_tcp_handle_invalid+0x642/0x642 [ 132.939368][ T4297] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 132.945232][ T4297] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 132.950664][ T4297] f2fs_get_read_data_page+0x4ec/0x8c0 [ 132.956183][ T4297] ? f2fs_get_block+0x1b0/0x1b0 [ 132.961090][ T4297] ? PageHeadHuge+0x8e/0x1c0 [ 132.965746][ T4297] f2fs_find_data_page+0x99/0x380 [ 132.970850][ T4297] f2fs_readdir+0x5c3/0xc30 [ 132.975436][ T4297] ? __might_sleep+0xb0/0xb0 [ 132.980120][ T4297] ? f2fs_fill_dentries+0xd60/0xd60 [ 132.985798][ T4297] ? iterate_dir+0x10a/0x560 [ 132.990418][ T4297] ? __fdget_pos+0x2ba/0x360 [ 132.995044][ T4297] ? __lock_acquire+0x1f80/0x1f80 [ 133.000116][ T4297] ? common_file_perm+0x17d/0x1d0 [ 133.005259][ T4297] ? fsnotify_perm+0x42f/0x590 [ 133.010039][ T4297] iterate_dir+0x224/0x560 [ 133.014463][ T4297] ? f2fs_fill_dentries+0xd60/0xd60 [ 133.019704][ T4297] __se_sys_getdents64+0x209/0x4f0 [ 133.024843][ T4297] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 133.030857][ T4297] ? __x64_sys_getdents64+0x80/0x80 [ 133.036084][ T4297] ? filldir+0x6f0/0x6f0 [ 133.040353][ T4297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 133.046351][ T4297] ? lockdep_hardirqs_on+0x94/0x130 [ 133.051563][ T4297] ? syscall_enter_from_user_mode+0x2e/0x230 [ 133.057553][ T4297] do_syscall_64+0x3b/0xb0 [ 133.061988][ T4297] ? clear_bhb_loop+0x45/0xa0 [ 133.066684][ T4297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.072593][ T4297] RIP: 0033:0x7fa389c7cf69 [ 133.077016][ T4297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 133.096717][ T4297] RSP: 002b:00007fa38a93e0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 133.105150][ T4297] RAX: ffffffffffffffda RBX: 00007fa389db3f80 RCX: 00007fa389c7cf69 [ 133.113129][ T4297] RDX: 00000000000000e5 RSI: 00000000200000c0 RDI: 0000000000000007 [ 133.121106][ T4297] RBP: 00007fa389cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 133.129095][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.137162][ T4297] R13: 000000000000000b R14: 00007fa389db3f80 R15: 00007ffe95fb1188 [ 133.145244][ T4297] [ 133.184686][ T3627] gspca_vc032x: reg_w err -71 [ 133.189561][ T3627] vc032x: probe of 1-1:0.0 failed with error -71 [ 133.225224][ T3627] usb 1-1: USB disconnect, device number 6 [ 133.243142][ T4322] loop1: detected capacity change from 0 to 8 [ 133.303981][ T26] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 506ms [ 133.319642][ T26] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.327050][ T4294] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.551006][ T3570] syz-executor.4: attempt to access beyond end of device [ 133.551006][ T3570] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 134.727840][ T4338] loop0: detected capacity change from 0 to 2048 [ 134.772584][ T4338] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 134.839081][ T4338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.014691][ T154] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.745090][ T154] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 135.754337][ T154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 135.764206][ T154] usb 3-1: Product: syz [ 135.774440][ T154] usb 3-1: Manufacturer: syz [ 135.783001][ T154] usb 3-1: SerialNumber: syz [ 135.806048][ T154] usb 3-1: config 0 descriptor?? [ 135.855889][ T154] ch341 3-1:0.0: ch341-uart converter detected [ 135.944614][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.064739][ T154] usb 3-1: failed to receive control message: -121 [ 136.077640][ T154] ch341-uart: probe of ttyUSB0 failed with error -121 [ 136.195569][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 136.314761][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.342282][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 136.373132][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.436090][ T14] usb 5-1: config 0 descriptor?? [ 136.477821][ T14] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 137.005967][ T4366] loop0: detected capacity change from 0 to 2048 [ 137.026725][ T7] usb 3-1: USB disconnect, device number 4 [ 137.034029][ T7] ch341 3-1:0.0: device disconnected [ 137.060220][ T14] gspca_vc032x: reg_w err -71 [ 137.065314][ T14] vc032x: probe of 5-1:0.0 failed with error -71 [ 137.076671][ T14] usb 5-1: USB disconnect, device number 6 [ 137.103953][ T4366] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 137.177059][ T4366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.180708][ T4381] loop1: detected capacity change from 0 to 8 [ 138.258174][ T3713] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.904429][ T4370] loop2: detected capacity change from 0 to 40427 [ 139.081936][ T4370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.149075][ T4393] loop3: detected capacity change from 0 to 2048 [ 139.205133][ T4393] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 139.227264][ T4393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.460781][ T4370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.552639][ T4370] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 139.556121][ T4400] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.589317][ T4370] CPU: 0 PID: 4370 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 139.597724][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.607817][ T4370] Call Trace: [ 139.611120][ T4370] [ 139.614072][ T4370] dump_stack_lvl+0x1e3/0x2cb [ 139.618807][ T4370] ? nf_tcp_handle_invalid+0x642/0x642 [ 139.624317][ T4370] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 139.630191][ T4370] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 139.635805][ T4370] f2fs_map_blocks+0x15fd/0x3ab0 [ 139.640830][ T4370] ? f2fs_do_map_lock+0x70/0x70 [ 139.645739][ T4370] ? page_index+0xff/0x4b0 [ 139.650195][ T4370] f2fs_mpage_readpages+0xbd5/0x2b90 [ 139.655538][ T4370] ? mark_lock+0x9a/0x340 [ 139.659983][ T4370] ? dquot_release_reservation_block+0x90/0x90 [ 139.666185][ T4370] ? folio_add_lru+0x34d/0xd70 [ 139.671022][ T4370] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 139.677242][ T4370] ? f2fs_readahead+0x18a/0x3a0 [ 139.682138][ T4370] ? blk_start_plug+0x95/0x110 [ 139.686960][ T4370] read_pages+0x17f/0x830 [ 139.691335][ T4370] ? folio_add_lru+0x34d/0xd70 [ 139.696130][ T4370] ? folio_add_lru+0x34d/0xd70 [ 139.700936][ T4370] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 139.706629][ T4370] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 139.712143][ T4370] ? page_cache_ra_order+0xb2a/0xd80 [ 139.717486][ T4370] page_cache_ra_unbounded+0x68b/0x7b0 [ 139.723040][ T4370] f2fs_readdir+0x5ae/0xc30 [ 139.727594][ T4370] ? __might_sleep+0xb0/0xb0 [ 139.732255][ T4370] ? f2fs_fill_dentries+0xd60/0xd60 [ 139.737510][ T4370] ? iterate_dir+0x10a/0x560 [ 139.742141][ T4370] ? __fdget_pos+0x2ba/0x360 [ 139.746764][ T4370] ? __lock_acquire+0x1f80/0x1f80 [ 139.751838][ T4370] ? common_file_perm+0x17d/0x1d0 [ 139.756906][ T4370] ? fsnotify_perm+0x42f/0x590 [ 139.761721][ T4370] iterate_dir+0x224/0x560 [ 139.766177][ T4370] ? f2fs_fill_dentries+0xd60/0xd60 [ 139.771611][ T4370] __se_sys_getdents64+0x209/0x4f0 [ 139.776769][ T4370] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 139.782802][ T4370] ? __x64_sys_getdents64+0x80/0x80 [ 139.788036][ T4370] ? filldir+0x6f0/0x6f0 [ 139.792355][ T4370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 139.798376][ T4370] ? lockdep_hardirqs_on+0x94/0x130 [ 139.802904][ T4377] loop4: detected capacity change from 0 to 32768 [ 139.803591][ T4370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 139.816018][ T4370] do_syscall_64+0x3b/0xb0 [ 139.820486][ T4370] ? clear_bhb_loop+0x45/0xa0 [ 139.825222][ T4370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.831164][ T4370] RIP: 0033:0x7f5d9fa7cf69 [ 139.835617][ T4370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 139.855260][ T4370] RSP: 002b:00007f5da073d0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 139.863694][ T4370] RAX: ffffffffffffffda RBX: 00007f5d9fbb3f80 RCX: 00007f5d9fa7cf69 [ 139.871680][ T4370] RDX: 00000000000000e5 RSI: 00000000200000c0 RDI: 0000000000000007 [ 139.879663][ T4370] RBP: 00007f5d9fada6fe R08: 0000000000000000 R09: 0000000000000000 [ 139.887644][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.895672][ T4370] R13: 000000000000000b R14: 00007f5d9fbb3f80 R15: 00007ffe7f6bac58 [ 139.903670][ T4370] [ 139.936426][ T4377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.946760][ T4370] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 139.958620][ T4377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.973913][ T4370] CPU: 1 PID: 4370 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 139.982300][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.992377][ T4370] Call Trace: [ 139.995668][ T4370] [ 139.998608][ T4370] dump_stack_lvl+0x1e3/0x2cb [ 140.003310][ T4370] ? nf_tcp_handle_invalid+0x642/0x642 [ 140.008790][ T4370] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 140.014721][ T4370] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 140.020127][ T4370] f2fs_get_read_data_page+0x4ec/0x8c0 [ 140.025605][ T4370] ? f2fs_get_block+0x1b0/0x1b0 [ 140.030482][ T4370] ? PageHeadHuge+0x8e/0x1c0 [ 140.035103][ T4370] f2fs_find_data_page+0x99/0x380 [ 140.040139][ T4370] f2fs_readdir+0x5c3/0xc30 [ 140.044661][ T4370] ? __might_sleep+0xb0/0xb0 [ 140.049281][ T4370] ? f2fs_fill_dentries+0xd60/0xd60 [ 140.054506][ T4370] ? iterate_dir+0x10a/0x560 [ 140.059119][ T4370] ? __fdget_pos+0x2ba/0x360 [ 140.063716][ T4370] ? __lock_acquire+0x1f80/0x1f80 [ 140.068765][ T4370] ? common_file_perm+0x17d/0x1d0 [ 140.073810][ T4370] ? fsnotify_perm+0x42f/0x590 [ 140.078600][ T4370] iterate_dir+0x224/0x560 [ 140.083032][ T4370] ? f2fs_fill_dentries+0xd60/0xd60 [ 140.088789][ T4370] __se_sys_getdents64+0x209/0x4f0 [ 140.093924][ T4370] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 140.100031][ T4370] ? __x64_sys_getdents64+0x80/0x80 [ 140.105237][ T4370] ? filldir+0x6f0/0x6f0 [ 140.109489][ T4370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 140.115517][ T4370] ? lockdep_hardirqs_on+0x94/0x130 [ 140.120725][ T4370] ? syscall_enter_from_user_mode+0x2e/0x230 [ 140.126720][ T4370] do_syscall_64+0x3b/0xb0 [ 140.131150][ T4370] ? clear_bhb_loop+0x45/0xa0 [ 140.135842][ T4370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.141754][ T4370] RIP: 0033:0x7f5d9fa7cf69 [ 140.146305][ T4370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 140.166129][ T4370] RSP: 002b:00007f5da073d0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 140.175080][ T4370] RAX: ffffffffffffffda RBX: 00007f5d9fbb3f80 RCX: 00007f5d9fa7cf69 [ 140.183070][ T4370] RDX: 00000000000000e5 RSI: 00000000200000c0 RDI: 0000000000000007 [ 140.191050][ T4370] RBP: 00007f5d9fada6fe R08: 0000000000000000 R09: 0000000000000000 [ 140.199025][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.207003][ T4370] R13: 000000000000000b R14: 00007f5d9fbb3f80 R15: 00007ffe7f6bac58 [ 140.215003][ T4370] [ 140.292587][ T4377] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 140.331057][ T154] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.339301][ T154] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 140.583908][ T154] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 244ms [ 140.603557][ T154] gfs2: fsid=syz:syz.0: jid=0: Done [ 140.620592][ T4377] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 140.630212][ T3580] syz-executor.2: attempt to access beyond end of device [ 140.630212][ T3580] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 140.659685][ T4377] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 140.934779][ T3627] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.194822][ T3627] usb 2-1: Using ep0 maxpacket: 8 [ 141.325154][ T3627] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.342200][ T3627] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 141.386997][ T3627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.422775][ T3627] usb 2-1: config 0 descriptor?? [ 141.482643][ T3627] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 141.630032][ T4425] loop4: detected capacity change from 0 to 8 [ 141.814622][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.976092][ T3627] gspca_vc032x: reg_w err -71 [ 141.984648][ T3627] vc032x: probe of 2-1:0.0 failed with error -71 [ 142.020742][ T3627] usb 2-1: USB disconnect, device number 6 [ 142.415613][ T26] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 142.430368][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 142.436815][ T4432] loop3: detected capacity change from 0 to 2048 [ 142.449183][ T26] usb 3-1: Product: syz [ 142.457001][ T4432] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.491319][ T26] usb 3-1: Manufacturer: syz [ 142.505314][ T26] usb 3-1: SerialNumber: syz [ 142.519964][ T26] usb 3-1: config 0 descriptor?? [ 142.595951][ T26] ch341 3-1:0.0: ch341-uart converter detected [ 142.601786][ T4432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.815026][ T26] usb 3-1: failed to receive control message: -121 [ 142.821989][ T26] ch341-uart: probe of ttyUSB0 failed with error -121 [ 143.207081][ T26] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 143.595111][ T26] usb 5-1: not running at top speed; connect to a high speed hub [ 143.716347][ T26] usb 5-1: config 4 has an invalid interface number: 159 but max is 0 [ 143.823829][ T26] usb 5-1: config 4 has no interface number 0 [ 143.943227][ T26] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 144.090324][ T26] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 144.127697][ T26] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 144.160093][ T26] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 144.193172][ T26] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 144.230964][ T26] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 144.260916][ T26] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 144.293363][ T26] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 144.324399][ T26] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 144.361221][ T26] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 144.393560][ T26] usb 5-1: config 4 interface 159 has no altsetting 0 [ 144.588197][ T26] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 144.603774][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.627303][ T26] usb 5-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 144.635934][ T4443] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.674209][ T4434] loop1: detected capacity change from 0 to 40427 [ 144.733250][ T26] usb 5-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 144.767314][ T4434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.813248][ T26] usb 5-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 144.898359][ T4434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.924870][ T4436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.960104][ T4436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.985789][ T4436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.167550][ T154] usb 3-1: USB disconnect, device number 5 [ 145.174245][ T154] ch341 3-1:0.0: device disconnected [ 145.180661][ T3575] syz-executor.1: attempt to access beyond end of device [ 145.180661][ T3575] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 145.396650][ T26] appletouch 5-1:4.159: Could not find int-in endpoint [ 145.403588][ T26] appletouch: probe of 5-1:4.159 failed with error -5 [ 145.423838][ T26] usbhid 5-1:4.159: couldn't find an input interrupt endpoint [ 145.454450][ T26] usb 5-1: USB disconnect, device number 7 [ 146.132725][ T4462] loop2: detected capacity change from 0 to 2048 [ 146.167851][ T4462] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 146.254047][ T4462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.659966][ T4470] loop1: detected capacity change from 0 to 8 [ 146.898142][ T3627] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.420207][ T4452] loop0: detected capacity change from 0 to 32768 [ 147.436383][ T4452] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 147.451682][ T4452] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 147.604576][ T3627] usb 5-1: Using ep0 maxpacket: 8 [ 147.612637][ T4452] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 147.651718][ T26] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 147.666480][ T26] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 147.730059][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.745873][ T3627] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 147.772043][ T3627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.792287][ T3627] usb 5-1: config 0 descriptor?? [ 147.814935][ T26] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 148ms [ 147.837243][ T26] gfs2: fsid=syz:syz.0: jid=0: Done [ 147.856690][ T3627] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 147.870981][ T4452] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 147.872689][ T4456] loop3: detected capacity change from 0 to 32768 [ 147.898451][ T4456] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 147.917462][ T4456] CPU: 1 PID: 4456 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0 [ 147.925879][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 147.936076][ T4456] Call Trace: [ 147.939393][ T4456] [ 147.942361][ T4456] dump_stack_lvl+0x1e3/0x2cb [ 147.947106][ T4456] ? nf_tcp_handle_invalid+0x642/0x642 [ 147.952617][ T4456] ? panic+0x764/0x764 [ 147.956748][ T4456] sysfs_create_dir_ns+0x2c6/0x390 [ 147.961930][ T4456] ? sysfs_warn_dup+0xa0/0xa0 [ 147.966717][ T4456] kobject_add_internal+0x6df/0xd10 [ 147.971988][ T4456] kobject_init_and_add+0x120/0x190 [ 147.977244][ T4456] ? lockdep_softirqs_off+0x420/0x420 [ 147.982679][ T4456] ? widen_string+0x3a/0x310 [ 147.987328][ T4456] ? kobject_add+0x210/0x210 [ 147.991983][ T4456] ? __init_swait_queue_head+0xaa/0x140 [ 147.997622][ T4456] gfs2_sys_fs_add+0x237/0x4a0 [ 148.002435][ T4456] ? gfs2_recover_set+0x240/0x240 [ 148.007516][ T4456] ? snprintf+0xd6/0x120 [ 148.011855][ T4456] ? vscnprintf+0x80/0x80 [ 148.016239][ T4456] ? read_word_at_a_time+0xe/0x20 [ 148.021569][ T4456] ? strscpy+0x89/0x220 [ 148.025774][ T4456] gfs2_fill_super+0x1228/0x26e0 [ 148.030806][ T4456] ? gfs2_reconfigure+0xcf0/0xcf0 [ 148.035883][ T4456] ? ptr_to_hashval+0x70/0x70 [ 148.040658][ T4456] ? up_write+0x19d/0x580 [ 148.045155][ T4456] ? set_blocksize+0x1c6/0x350 [ 148.049986][ T4456] get_tree_bdev+0x3fe/0x620 [ 148.054722][ T4456] ? gfs2_reconfigure+0xcf0/0xcf0 [ 148.059803][ T4456] gfs2_get_tree+0x50/0x210 [ 148.064357][ T4456] ? bpf_lsm_capable+0x5/0x10 [ 148.069100][ T4456] vfs_get_tree+0x88/0x270 [ 148.073574][ T4456] do_new_mount+0x2ba/0xb40 [ 148.078127][ T4456] ? ns_capable+0x85/0xe0 [ 148.082513][ T4456] ? do_move_mount_old+0x160/0x160 [ 148.087693][ T4456] __se_sys_mount+0x2d5/0x3c0 [ 148.092435][ T4456] ? __x64_sys_mount+0xc0/0xc0 [ 148.097275][ T4456] ? syscall_enter_from_user_mode+0x2e/0x230 [ 148.103310][ T4456] ? lockdep_hardirqs_on+0x94/0x130 [ 148.108563][ T4456] ? __x64_sys_mount+0x1c/0xc0 [ 148.113390][ T4456] do_syscall_64+0x3b/0xb0 [ 148.117871][ T4456] ? clear_bhb_loop+0x45/0xa0 [ 148.122606][ T4456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.128555][ T4456] RIP: 0033:0x7f53d9c7e66a [ 148.133011][ T4456] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 148.152836][ T4456] RSP: 002b:00007f53daa85ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 148.161300][ T4456] RAX: ffffffffffffffda RBX: 00007f53daa85f80 RCX: 00007f53d9c7e66a [ 148.169312][ T4456] RDX: 0000000020037f40 RSI: 0000000020037f80 RDI: 00007f53daa85f40 [ 148.177324][ T4456] RBP: 0000000020037f40 R08: 00007f53daa85f80 R09: 0000000000000000 [ 148.185338][ T4456] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020037f80 [ 148.193349][ T4456] R13: 00007f53daa85f40 R14: 0000000000037f19 R15: 0000000020037fc0 [ 148.201477][ T4456] [ 148.211535][ T4456] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 148.244659][ T4456] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 148.408339][ T4480] loop4: detected capacity change from 0 to 256 [ 148.515005][ T3627] gspca_vc032x: reg_w err -71 [ 148.519805][ T3627] vc032x: probe of 5-1:0.0 failed with error -71 [ 148.547986][ T3627] usb 5-1: USB disconnect, device number 8 [ 148.901939][ T4485] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.412702][ T4487] loop4: detected capacity change from 0 to 2048 [ 149.462280][ T4487] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.496704][ T4476] loop2: detected capacity change from 0 to 40427 [ 149.503826][ T4487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.745716][ T4476] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.937361][ T4476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.054623][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.167780][ T3580] syz-executor.2: attempt to access beyond end of device [ 150.167780][ T3580] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 150.510390][ T3616] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 150.698229][ T4508] loop1: detected capacity change from 0 to 2048 [ 150.722291][ T4508] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 150.762424][ T4508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.834894][ T26] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.843994][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 150.876603][ T26] usb 1-1: Product: syz [ 150.883512][ T26] usb 1-1: Manufacturer: syz [ 150.914592][ T26] usb 1-1: SerialNumber: syz [ 150.976122][ T26] usb 1-1: config 0 descriptor?? [ 151.004692][ T3616] usb 4-1: not running at top speed; connect to a high speed hub [ 151.016157][ T26] ch341 1-1:0.0: ch341-uart converter detected [ 151.085350][ T3616] usb 4-1: config 4 has an invalid interface number: 159 but max is 0 [ 151.096012][ T3616] usb 4-1: config 4 has no interface number 0 [ 151.102435][ T3616] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 151.134618][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 151.147927][ T4514] loop2: detected capacity change from 0 to 8 [ 151.162867][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 151.194118][ T3616] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 151.226935][ T3616] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 151.266832][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 151.348119][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 151.391879][ T26] usb 1-1: failed to receive control message: -121 [ 151.409256][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 151.412618][ T26] ch341-uart: probe of ttyUSB0 failed with error -121 [ 151.466877][ T3616] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 151.511843][ T3616] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 152.184035][ T3616] usb 4-1: config 4 interface 159 has no altsetting 0 [ 152.540094][ T3616] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 152.704162][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.750673][ T3616] usb 4-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 152.919818][ T3616] usb 4-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 152.988230][ T3616] usb 4-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 153.085133][ T4503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 153.101014][ T4503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 153.122645][ T4503] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 153.307322][ T3616] appletouch 4-1:4.159: Could not find int-in endpoint [ 153.323856][ T3616] appletouch: probe of 4-1:4.159 failed with error -5 [ 153.331176][ T4523] loop3: detected capacity change from 0 to 256 [ 153.347153][ T3616] usbhid 4-1:4.159: couldn't find an input interrupt endpoint [ 153.374678][ T26] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.407573][ T3616] usb 4-1: USB disconnect, device number 6 [ 153.415507][ T3713] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.624715][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 153.775031][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.796642][ T7] usb 1-1: USB disconnect, device number 7 [ 153.812381][ T7] ch341 1-1:0.0: device disconnected [ 153.842534][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 153.911234][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.949776][ T4531] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.952335][ T26] usb 5-1: config 0 descriptor?? [ 154.014081][ T4519] loop2: detected capacity change from 0 to 32768 [ 154.027071][ T26] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 154.043059][ T4519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 154.065712][ T4519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 154.153025][ T4519] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 154.178816][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 154.192812][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 154.367018][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 174ms [ 154.375163][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 154.380636][ T4519] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 154.532058][ T4521] loop4: detected capacity change from 0 to 256 [ 154.688706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 154.697099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 154.705422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 154.713723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.722075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.730406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.738769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.747082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.755431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.763740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.853739][ T26] gspca_vc032x: reg_w err -71 [ 154.858576][ T26] vc032x: probe of 5-1:0.0 failed with error -71 [ 154.867340][ T26] usb 5-1: USB disconnect, device number 9 [ 155.891353][ T4557] loop4: detected capacity change from 0 to 2048 [ 155.917471][ T4557] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 155.939174][ T4557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.151975][ T4560] loop3: detected capacity change from 0 to 8 [ 156.422120][ T4565] loop1: detected capacity change from 0 to 2048 [ 156.485452][ T4565] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.541412][ T4565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.178736][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.242397][ T4571] loop3: detected capacity change from 0 to 2048 [ 157.278119][ T4571] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.313145][ T4571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.455251][ T7] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 158.464358][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 158.496615][ T7] usb 1-1: Product: syz [ 158.500844][ T7] usb 1-1: Manufacturer: syz [ 158.524599][ T7] usb 1-1: SerialNumber: syz [ 158.546198][ T7] usb 1-1: config 0 descriptor?? [ 158.585757][ T7] ch341 1-1:0.0: ch341-uart converter detected [ 158.606288][ T4581] loop3: detected capacity change from 0 to 512 [ 158.684879][ T4581] EXT4-fs (loop3): 1 truncate cleaned up [ 158.690686][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.790771][ T4586] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.804800][ T7] usb 1-1: failed to receive control message: -121 [ 158.815370][ T7] ch341-uart: probe of ttyUSB0 failed with error -121 [ 159.082951][ T3573] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 13: comm syz-executor.3: lblock 0 mapped to illegal pblock 13 (length 1) [ 159.128518][ T3573] EXT4-fs (loop3): Remounting filesystem read-only [ 159.433120][ T3573] EXT4-fs (loop3): unmounting filesystem. [ 160.234107][ T4594] loop2: detected capacity change from 0 to 8 [ 160.537097][ T3573] syz-executor.3 (3573) used greatest stack depth: 19864 bytes left [ 160.724513][ C1] hrtimer: interrupt took 59160 ns [ 160.743609][ T3894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.930349][ T3894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.149232][ T3627] usb 1-1: USB disconnect, device number 8 [ 161.157600][ T3627] ch341 1-1:0.0: device disconnected [ 161.260777][ T3894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.475487][ T3894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.442104][ T4613] loop0: detected capacity change from 0 to 2048 [ 162.531979][ T4613] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 162.636323][ T4613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.675531][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.686752][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.699286][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.709013][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.716860][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.725036][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.804382][ T4615] loop2: detected capacity change from 0 to 2048 [ 162.917911][ T4615] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 163.040728][ T4615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.095036][ T4626] loop0: detected capacity change from 0 to 2048 [ 164.147490][ T4626] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 164.243017][ T4626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.388351][ T4616] chnl_net:caif_netlink_parms(): no params data found [ 164.652253][ T4636] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.754836][ T3582] Bluetooth: hci2: command tx timeout [ 165.114719][ T151] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 165.348333][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.364232][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.378861][ T4616] device bridge_slave_0 entered promiscuous mode [ 165.427241][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.435004][ T151] usb 2-1: not running at top speed; connect to a high speed hub [ 165.440107][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.472352][ T4616] device bridge_slave_1 entered promiscuous mode [ 165.518997][ T151] usb 2-1: config 4 has an invalid interface number: 159 but max is 0 [ 165.534171][ T151] usb 2-1: config 4 has no interface number 0 [ 165.550942][ T151] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 165.575340][ T151] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 165.590459][ T151] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 165.604209][ T151] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 165.616278][ T151] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 165.629710][ T4616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.634787][ T3616] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.669344][ T4616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.670847][ T151] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 165.724651][ T151] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 165.749149][ T151] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 165.781956][ T4656] loop2: detected capacity change from 0 to 2048 [ 165.795303][ T151] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 165.809279][ T151] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 165.856510][ T4656] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.868983][ T151] usb 2-1: config 4 interface 159 has no altsetting 0 [ 165.888082][ T4656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.928727][ T4616] team0: Port device team_slave_0 added [ 165.934838][ T3616] usb 5-1: Using ep0 maxpacket: 8 [ 165.948288][ T4616] team0: Port device team_slave_1 added [ 166.101029][ T3894] device hsr_slave_0 left promiscuous mode [ 166.135684][ T3894] device hsr_slave_1 left promiscuous mode [ 166.166682][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.206591][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.215476][ T151] usb 2-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 166.225041][ T3616] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.236604][ T151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.244086][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.257471][ T3616] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 166.344973][ T151] usb 2-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 166.409819][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.758228][ T151] usb 2-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 166.795865][ T3616] usb 5-1: config 0 descriptor?? [ 166.817846][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.836966][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 166.860307][ T151] usb 2-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 166.957086][ T3582] Bluetooth: hci2: command tx timeout [ 166.961699][ T3894] device bridge_slave_1 left promiscuous mode [ 166.971486][ T4645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.979160][ T4645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.986940][ T4645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.995854][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.047525][ T3894] device bridge_slave_0 left promiscuous mode [ 167.053843][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.125799][ T3894] device veth1_macvtap left promiscuous mode [ 167.140008][ T3894] device veth0_macvtap left promiscuous mode [ 167.177906][ T3894] device veth1_vlan left promiscuous mode [ 167.200720][ T3894] device veth0_vlan left promiscuous mode [ 167.251731][ T4669] loop0: detected capacity change from 0 to 8 [ 167.253653][ T4654] loop4: detected capacity change from 0 to 256 [ 167.330364][ T3616] gspca_vc032x: reg_w err -71 [ 167.337177][ T3616] vc032x: probe of 5-1:0.0 failed with error -71 [ 167.367443][ T151] appletouch 2-1:4.159: Could not find int-in endpoint [ 167.379673][ T3616] usb 5-1: USB disconnect, device number 10 [ 167.388496][ T151] appletouch: probe of 2-1:4.159 failed with error -5 [ 167.414744][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.448788][ T151] usbhid 2-1:4.159: couldn't find an input interrupt endpoint [ 167.529576][ T151] usb 2-1: USB disconnect, device number 7 [ 167.941342][ T14] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 167.967452][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 168.002372][ T14] usb 3-1: Product: syz [ 168.011193][ T14] usb 3-1: Manufacturer: syz [ 168.021024][ T14] usb 3-1: SerialNumber: syz [ 168.054314][ T14] usb 3-1: config 0 descriptor?? [ 168.108258][ T14] ch341 3-1:0.0: ch341-uart converter detected [ 168.182802][ T4678] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.331666][ T14] usb 3-1: failed to receive control message: -121 [ 168.360958][ T14] ch341-uart: probe of ttyUSB0 failed with error -121 [ 168.520959][ T4686] loop1: detected capacity change from 0 to 2048 [ 168.609423][ T3894] team0 (unregistering): Port device team_slave_1 removed [ 168.627412][ T4686] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.685594][ T4686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.713677][ T3894] team0 (unregistering): Port device team_slave_0 removed [ 168.741105][ T4687] loop4: detected capacity change from 0 to 2048 [ 168.758130][ T4687] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.798073][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.873481][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.929182][ T4687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.994904][ T3574] Bluetooth: hci2: command tx timeout [ 170.282006][ T14] usb 3-1: USB disconnect, device number 6 [ 170.292293][ T14] ch341 3-1:0.0: device disconnected [ 170.390841][ T3894] bond0 (unregistering): Released all slaves [ 170.650532][ T4703] loop2: detected capacity change from 0 to 2048 [ 170.697388][ T4616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.717756][ T4703] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 170.725966][ T4616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.802125][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.811327][ T4616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.849738][ T4616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.873767][ T4616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.943305][ T4616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.090899][ T4707] loop0: detected capacity change from 0 to 2048 [ 171.102224][ T3574] Bluetooth: hci2: command tx timeout [ 171.240424][ T4707] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 171.263758][ T4616] device hsr_slave_0 entered promiscuous mode [ 171.283570][ T4707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.301577][ T4616] device hsr_slave_1 entered promiscuous mode [ 171.337040][ T4616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.577712][ T4616] Cannot create hsr debugfs directory [ 172.021794][ T4705] loop4: detected capacity change from 0 to 32768 [ 172.796292][ T4616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.842826][ T4616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.908786][ T4616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.947833][ T4616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.237736][ T4616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.274891][ T22] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 173.339054][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.353988][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.380775][ T4616] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.414447][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.426520][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.443839][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.451056][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.529521][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.544310][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.585382][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.605156][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.612336][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.620451][ T22] usb 5-1: not running at top speed; connect to a high speed hub [ 173.664971][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.688217][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.714881][ T22] usb 5-1: config 4 has an invalid interface number: 159 but max is 0 [ 173.723807][ T22] usb 5-1: config 4 has no interface number 0 [ 173.779002][ T4616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.789677][ T22] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 173.834657][ T22] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 173.845956][ T4616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.890194][ T22] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 173.912038][ T4734] loop2: detected capacity change from 0 to 2048 [ 173.935000][ T22] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 173.978815][ T4734] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.984573][ T22] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 174.042919][ T4734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.045022][ T22] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 174.131945][ T22] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 174.178639][ T22] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 174.229332][ T22] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 174.274015][ T22] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 174.374449][ T22] usb 5-1: config 4 interface 159 has no altsetting 0 [ 174.824979][ T3618] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.074703][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 175.107436][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.116835][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.125723][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.139564][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.149602][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.158490][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.167443][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.176070][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.186917][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.195182][ T3618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.206381][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.225181][ T3618] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 175.235203][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 175.244379][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.267381][ T22] usb 5-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 175.305920][ T22] usb 5-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 175.333750][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.357812][ T3618] usb 2-1: config 0 descriptor?? [ 175.380994][ T22] usb 5-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 175.417317][ T3618] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 175.584849][ T4729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.592395][ T4729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.609462][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.615524][ T4729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.630332][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.643212][ T4753] loop0: detected capacity change from 0 to 4096 [ 175.678523][ T4616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.689484][ T4758] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.819548][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.845396][ T4744] loop1: detected capacity change from 0 to 256 [ 175.852048][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.933540][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.975357][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.992445][ T4616] device veth0_vlan entered promiscuous mode [ 176.019055][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.030663][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.044424][ T4616] device veth1_vlan entered promiscuous mode [ 176.118010][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.139322][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.157950][ T3618] gspca_vc032x: reg_w err -110 [ 176.162831][ T3618] vc032x: probe of 2-1:0.0 failed with error -110 [ 176.183555][ T4616] device veth0_macvtap entered promiscuous mode [ 176.243613][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.260675][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.283866][ T4616] device veth1_macvtap entered promiscuous mode [ 176.302358][ T3616] usb 2-1: USB disconnect, device number 8 [ 176.335873][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.362845][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.396140][ T22] appletouch 5-1:4.159: Could not find int-in endpoint [ 176.424941][ T22] appletouch: probe of 5-1:4.159 failed with error -5 [ 176.450626][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.452334][ T22] usbhid 5-1:4.159: couldn't find an input interrupt endpoint [ 176.512038][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.557216][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.560839][ T22] usb 5-1: USB disconnect, device number 11 [ 176.744279][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.768134][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.779196][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.809275][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.842749][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.900365][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.908300][ T3653] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.979386][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.043426][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.091688][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.173781][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.215652][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.231168][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.242409][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.253210][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.271465][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.281505][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.312823][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.351312][ T4781] loop4: detected capacity change from 0 to 2048 [ 177.357148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.493770][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.498667][ T4781] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 177.537368][ T4616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.561653][ T4781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.575190][ T3653] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 177.587110][ T3653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 177.601214][ T3653] usb 3-1: Product: syz [ 177.602697][ T4616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.605892][ T3653] usb 3-1: Manufacturer: syz [ 177.626390][ T4616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.692107][ T4616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.834660][ T3653] usb 3-1: SerialNumber: syz [ 177.841160][ T3653] usb 3-1: config 0 descriptor?? [ 177.859715][ T4792] loop0: detected capacity change from 0 to 2048 [ 177.892190][ T3653] ch341 3-1:0.0: ch341-uart converter detected [ 178.267673][ T3653] usb 3-1: failed to receive control message: -121 [ 178.274267][ T3653] ch341-uart: probe of ttyUSB0 failed with error -121 [ 178.346348][ T4792] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 178.443037][ T4792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.003841][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.065256][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.118125][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.142841][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.157246][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.237309][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.270527][ T4801] loop4: detected capacity change from 0 to 2048 [ 179.352080][ T4801] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 179.400919][ T4801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.912796][ T4816] Bluetooth: MGMT ver 1.22 [ 180.048929][ T154] usb 3-1: USB disconnect, device number 7 [ 180.058248][ T154] ch341 3-1:0.0: device disconnected [ 180.191835][ T4820] loop3: detected capacity change from 0 to 512 [ 180.267882][ T4820] EXT4-fs (loop3): 1 truncate cleaned up [ 180.295193][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.468103][ T4616] EXT4-fs (loop3): unmounting filesystem. [ 180.724800][ T3618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 180.829663][ T4828] loop3: detected capacity change from 0 to 4096 [ 180.974730][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 181.105742][ T3618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.132178][ T3618] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 181.181079][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.231681][ T3618] usb 3-1: config 0 descriptor?? [ 181.309730][ T3618] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 181.333992][ T4835] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.574751][ T3627] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 181.746572][ T4825] loop2: detected capacity change from 0 to 256 [ 181.914916][ T3627] usb 4-1: not running at top speed; connect to a high speed hub [ 182.004951][ T3627] usb 4-1: config 4 has an invalid interface number: 159 but max is 0 [ 182.014061][ T3627] usb 4-1: config 4 has no interface number 0 [ 182.024691][ T3616] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.034287][ T3627] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 182.071536][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 182.104634][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 182.130695][ T3627] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 182.161293][ T3627] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 182.181212][ T4858] loop4: detected capacity change from 0 to 2048 [ 182.190705][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 182.212287][ T4858] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.222962][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 182.222999][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 182.223028][ T3627] usb 4-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 182.223058][ T3627] usb 4-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 182.223083][ T3627] usb 4-1: config 4 interface 159 has no altsetting 0 [ 182.281376][ T4858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.314753][ T3616] usb 2-1: Using ep0 maxpacket: 8 [ 182.404976][ T3627] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 182.414439][ T3627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.414866][ T3618] gspca_vc032x: reg_r err -110 [ 182.423379][ T3627] usb 4-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 182.435068][ T3616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.471725][ T3627] usb 4-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 182.480856][ T3618] vc032x: probe of 3-1:0.0 failed with error -110 [ 182.511564][ T3627] usb 4-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 182.570883][ T4837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.574648][ T3616] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.580336][ T4837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.601964][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.608348][ T4837] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.642275][ T3616] usb 2-1: config 0 descriptor?? [ 182.687157][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 182.704612][ T154] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.928333][ T3627] appletouch 4-1:4.159: Could not find int-in endpoint [ 182.945654][ T3627] appletouch: probe of 4-1:4.159 failed with error -5 [ 182.954328][ T3627] usbhid 4-1:4.159: couldn't find an input interrupt endpoint [ 182.982627][ T3627] usb 4-1: USB disconnect, device number 7 [ 183.109493][ T4848] loop1: detected capacity change from 0 to 256 [ 183.165121][ T3616] gspca_vc032x: reg_w err -71 [ 183.169972][ T3616] vc032x: probe of 2-1:0.0 failed with error -71 [ 183.198938][ T3616] usb 2-1: USB disconnect, device number 9 [ 183.274739][ T154] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 183.294552][ T154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 183.302784][ T154] usb 1-1: Product: syz [ 183.307632][ T154] usb 1-1: Manufacturer: syz [ 183.312361][ T154] usb 1-1: SerialNumber: syz [ 183.324254][ T154] usb 1-1: config 0 descriptor?? [ 183.372229][ T154] ch341 1-1:0.0: ch341-uart converter detected [ 183.574971][ T154] usb 1-1: failed to receive control message: -121 [ 183.582857][ T154] ch341-uart: probe of ttyUSB0 failed with error -121 [ 183.658783][ T4868] loop4: detected capacity change from 0 to 2048 [ 183.686150][ T4868] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 183.722087][ T4868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.000995][ T3618] usb 3-1: USB disconnect, device number 8 [ 184.039118][ T4870] loop1: detected capacity change from 0 to 512 [ 184.144205][ T4870] EXT4-fs (loop1): 1 truncate cleaned up [ 184.160732][ T4870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.730795][ T3575] EXT4-fs (loop1): unmounting filesystem. [ 185.057384][ T4879] tty tty25: ldisc open failed (-12), clearing slot 24 [ 185.474737][ T3618] usb 1-1: USB disconnect, device number 9 [ 185.481442][ T3618] ch341 1-1:0.0: device disconnected [ 185.710647][ T4883] loop2: detected capacity change from 0 to 4096 [ 185.783887][ T4887] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.928536][ T4866] loop3: detected capacity change from 0 to 32768 [ 185.978914][ T4866] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.022387][ T4866] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.139216][ T4866] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 186.164337][ T3618] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.171781][ T3618] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.468312][ T3618] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 296ms [ 186.483543][ T3618] gfs2: fsid=syz:syz.0: jid=0: Done [ 186.493690][ T4866] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 186.507853][ T4866] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 186.914955][ T3616] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 187.605391][ T3616] usb 1-1: not running at top speed; connect to a high speed hub [ 187.685195][ T3616] usb 1-1: config 4 has an invalid interface number: 159 but max is 0 [ 187.720791][ T3616] usb 1-1: config 4 has no interface number 0 [ 187.771126][ T4908] loop4: detected capacity change from 0 to 2048 [ 187.779788][ T3616] usb 1-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 187.795554][ T4908] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.835342][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 187.836565][ T4910] loop2: detected capacity change from 0 to 512 [ 187.861489][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 187.870369][ T4908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.886511][ T3616] usb 1-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 187.935275][ T3616] usb 1-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 188.000995][ T4910] EXT4-fs (loop2): 1 truncate cleaned up [ 188.006020][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 188.009137][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.059504][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 188.098614][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 188.135221][ T3616] usb 1-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 188.148052][ T3616] usb 1-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 188.159092][ T3616] usb 1-1: config 4 interface 159 has no altsetting 0 [ 188.232614][ T3580] EXT4-fs (loop2): unmounting filesystem. [ 188.304715][ T154] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.325622][ T3616] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 188.347496][ T3616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.365151][ T3616] usb 1-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 188.549289][ T3616] usb 1-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 188.579826][ T3616] usb 1-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 188.765324][ T154] usb 4-1: Using ep0 maxpacket: 8 [ 189.425853][ T154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.458257][ T154] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 189.501787][ T154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.638006][ T154] usb 4-1: config 0 descriptor?? [ 189.664987][ T3616] usb 1-1: can't set config #4, error -71 [ 189.686774][ T154] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 189.698414][ T3616] usb 1-1: USB disconnect, device number 10 [ 189.813559][ T4925] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.075326][ T3616] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.110535][ T4914] loop3: detected capacity change from 0 to 256 [ 190.254982][ T154] gspca_vc032x: reg_w err -71 [ 190.259805][ T154] vc032x: probe of 4-1:0.0 failed with error -71 [ 190.274268][ T4931] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.294719][ T154] usb 4-1: USB disconnect, device number 8 [ 190.320697][ T3627] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.328356][ T3616] usb 1-1: Using ep0 maxpacket: 8 [ 190.360605][ T27] audit: type=1804 audit(1717807288.731:18): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3742313174/syzkaller.udfh00/72/.log" dev="sda1" ino=1961 res=1 errno=0 [ 190.390804][ T4934] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 190.442854][ T4936] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 190.465155][ T3616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.485939][ T3616] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 190.495218][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.511835][ T3616] usb 1-1: config 0 descriptor?? [ 190.556856][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 190.883386][ T4939] loop2: detected capacity change from 0 to 2048 [ 190.944459][ T4939] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 191.039887][ T4939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.059407][ T4923] loop0: detected capacity change from 0 to 256 [ 191.414797][ T3616] gspca_vc032x: reg_w err -110 [ 191.419966][ T3616] vc032x: probe of 1-1:0.0 failed with error -110 [ 191.435661][ T3627] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 191.449578][ T3627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 191.458296][ T3627] usb 2-1: Product: syz [ 191.485246][ T3582] Bluetooth: hci4: command 0x0406 tx timeout [ 191.492029][ T3582] Bluetooth: hci1: command 0x0406 tx timeout [ 191.502969][ T3582] Bluetooth: hci0: command 0x0406 tx timeout [ 192.435882][ T3574] Bluetooth: hci3: command 0x0406 tx timeout [ 192.439256][ T3627] usb 2-1: Manufacturer: syz [ 192.446630][ T3627] usb 2-1: SerialNumber: syz [ 192.453202][ T3627] usb 2-1: config 0 descriptor?? [ 192.495924][ T3627] ch341 2-1:0.0: ch341-uart converter detected [ 192.504836][ T154] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 192.522624][ T27] audit: type=1804 audit(1717807290.891:19): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/9/.log" dev="sda1" ino=1966 res=1 errno=0 [ 192.549196][ T4958] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 192.629884][ T4959] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 192.636901][ T3617] usb 1-1: USB disconnect, device number 11 [ 192.704827][ T3627] usb 2-1: failed to receive control message: -121 [ 192.711493][ T3627] ch341-uart: probe of ttyUSB0 failed with error -121 [ 192.854809][ T154] usb 5-1: not running at top speed; connect to a high speed hub [ 192.943463][ T4961] loop0: detected capacity change from 0 to 2048 [ 192.971066][ T4961] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 193.021549][ T27] audit: type=1804 audit(1717807291.391:20): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/10/.log" dev="sda1" ino=1967 res=1 errno=0 [ 193.050297][ T4964] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 193.083571][ T4961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.103020][ T4963] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 193.114453][ T154] usb 5-1: config 4 has an invalid interface number: 159 but max is 0 [ 193.133353][ T154] usb 5-1: config 4 has no interface number 0 [ 193.139634][ T154] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 193.150706][ T154] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 193.162326][ T154] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 193.173292][ T154] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 193.305856][ T154] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 193.582726][ T154] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 193.828225][ T154] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 194.057865][ T154] usb 5-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 194.082545][ T154] usb 5-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 194.095241][ T154] usb 5-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 194.114436][ T154] usb 5-1: config 4 interface 159 has no altsetting 0 [ 194.202294][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208939][ T154] usb 5-1: string descriptor 0 read error: -71 [ 194.217368][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.232542][ T154] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 194.246794][ T154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.284893][ T154] usb 5-1: can't set config #4, error -71 [ 194.309537][ T154] usb 5-1: USB disconnect, device number 12 [ 195.250793][ T154] usb 2-1: USB disconnect, device number 10 [ 195.369616][ T4972] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 195.384626][ T27] audit: type=1804 audit(1717807293.741:21): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/11/.log" dev="sda1" ino=1965 res=1 errno=0 [ 195.418926][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.435058][ T154] ch341 2-1:0.0: device disconnected [ 195.441884][ T4977] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 195.543024][ T4976] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.875983][ T3618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 198.295908][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 198.414805][ T3618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.453263][ T3618] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 198.475004][ T3616] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.496031][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.529982][ T3618] usb 5-1: config 0 descriptor?? [ 198.577894][ T3618] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 198.673625][ T5001] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.734707][ T3653] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 198.742562][ T3616] usb 3-1: Using ep0 maxpacket: 8 [ 198.780201][ T4986] loop4: detected capacity change from 0 to 256 [ 198.874881][ T3616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.886185][ T3616] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 198.895533][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.915638][ T3618] gspca_vc032x: reg_r err -71 [ 198.920222][ T5005] loop3: detected capacity change from 0 to 2048 [ 198.920408][ T3618] vc032x: probe of 5-1:0.0 failed with error -71 [ 198.951250][ T3616] usb 3-1: config 0 descriptor?? [ 198.956865][ T5005] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.965485][ T3618] usb 5-1: USB disconnect, device number 13 [ 198.991819][ T5005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.997858][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 199.213393][ T3653] usb 2-1: not running at top speed; connect to a high speed hub [ 199.237287][ T5008] loop0: detected capacity change from 0 to 512 [ 199.268919][ T5008] EXT4-fs (loop0): 1 truncate cleaned up [ 199.294649][ T5008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.319151][ T3653] usb 2-1: config 4 has an invalid interface number: 159 but max is 0 [ 199.333750][ T5008] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 199.341942][ T3653] usb 2-1: config 4 has no interface number 0 [ 199.368690][ T5008] EXT4-fs (loop0): Remounting filesystem read-only [ 199.417697][ T5000] loop2: detected capacity change from 0 to 256 [ 199.418203][ T3653] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 199.451388][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 199.466418][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 199.499191][ T3653] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 199.530910][ T3653] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 199.565877][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 199.577535][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 199.589454][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 199.601584][ T3653] usb 2-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 199.614607][ T3653] usb 2-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 199.626183][ T3653] usb 2-1: config 4 interface 159 has no altsetting 0 [ 199.667703][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 199.804951][ T3653] usb 2-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 199.818653][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.837411][ T3653] usb 2-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 199.873916][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.933152][ T3653] usb 2-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 199.999157][ T3653] usb 2-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 200.094887][ T3616] gspca_vc032x: reg_r err -110 [ 200.120119][ T3616] vc032x: probe of 3-1:0.0 failed with error -110 [ 200.126987][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.168845][ T5003] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 200.300087][ T5003] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 200.485028][ T5003] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 200.904654][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 200.913841][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 200.962301][ T7] usb 5-1: Product: syz [ 200.968275][ T7] usb 5-1: Manufacturer: syz [ 200.973262][ T7] usb 5-1: SerialNumber: syz [ 201.140885][ T7] usb 5-1: config 0 descriptor?? [ 201.199461][ T7] ch341 5-1:0.0: ch341-uart converter detected [ 201.279804][ T3653] appletouch 2-1:4.159: Could not find int-in endpoint [ 201.287379][ T3653] appletouch: probe of 2-1:4.159 failed with error -5 [ 201.297290][ T3653] usbhid 2-1:4.159: couldn't find an input interrupt endpoint [ 201.318912][ T3653] usb 2-1: USB disconnect, device number 11 [ 202.011475][ T3653] usb 3-1: USB disconnect, device number 9 [ 202.234753][ T7] usb 5-1: failed to receive control message: -121 [ 202.241417][ T7] ch341-uart: probe of ttyUSB0 failed with error -121 [ 202.409933][ T5034] loop1: detected capacity change from 0 to 8 [ 202.457072][ T5035] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.108030][ T27] audit: type=1804 audit(1717807301.481:22): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/16/.log" dev="sda1" ino=1963 res=1 errno=0 [ 203.143380][ T5041] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 203.547251][ T5044] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 204.303650][ T5047] loop0: detected capacity change from 0 to 256 [ 204.322081][ T27] audit: type=1804 audit(1717807302.701:23): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3742313174/syzkaller.udfh00/78/.log" dev="sda1" ino=1960 res=1 errno=0 [ 204.322695][ T5051] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 204.347076][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.375707][ T5052] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 204.376457][ T27] audit: type=1804 audit(1717807302.741:24): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/17/.log" dev="sda1" ino=1966 res=1 errno=0 [ 204.431975][ T5054] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 204.434699][ T5055] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 204.802837][ T3616] usb 5-1: USB disconnect, device number 14 [ 204.845216][ T3616] ch341 5-1:0.0: device disconnected [ 205.192816][ T5062] loop4: detected capacity change from 0 to 2048 [ 205.244729][ T5062] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 205.367124][ T5062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.818226][ T27] audit: type=1804 audit(1717807305.191:25): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir705037354/syzkaller.pS1SJQ/19/.log" dev="sda1" ino=1954 res=1 errno=0 [ 206.858383][ T5083] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 207.025331][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.079653][ T5085] loop0: detected capacity change from 0 to 8 [ 207.326756][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 208.722806][ T5087] sched: RT throttling activated [ 208.893025][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.931677][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 208.978725][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.066189][ T7] usb 2-1: config 0 descriptor?? [ 209.137274][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 209.265049][ T5095] loop3: detected capacity change from 0 to 256 [ 209.644965][ T5081] loop1: detected capacity change from 0 to 256 [ 209.875661][ T7] gspca_vc032x: reg_w err -110 [ 209.900131][ T7] vc032x: probe of 2-1:0.0 failed with error -110 [ 210.460679][ T3653] usb 2-1: USB disconnect, device number 12 [ 210.505683][ T154] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 210.685459][ T27] audit: type=1804 audit(1717807309.051:26): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651646697/syzkaller.47KxEb/88/.log" dev="sda1" ino=1963 res=1 errno=0 [ 210.715774][ T5113] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 210.776336][ T5115] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 210.952562][ T5112] loop0: detected capacity change from 0 to 8 [ 211.069858][ T3713] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.084857][ T154] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 211.107492][ T154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 211.159276][ T154] usb 3-1: Product: syz [ 211.193769][ T154] usb 3-1: Manufacturer: syz [ 211.224376][ T154] usb 3-1: SerialNumber: syz [ 211.307341][ T154] usb 3-1: config 0 descriptor?? [ 211.321734][ T27] audit: type=1804 audit(1717807309.691:27): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1785894222/syzkaller.aWbQvV/87/.log" dev="sda1" ino=1963 res=1 errno=0 [ 211.327801][ T5123] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 211.438378][ T154] ch341 3-1:0.0: ch341-uart converter detected [ 211.614858][ T154] usb 3-1: failed to receive control message: -121 [ 211.639536][ T154] ch341-uart: probe of ttyUSB0 failed with error -121 [ 212.934804][ T3617] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.004578][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.254627][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 213.374959][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.390827][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 213.406761][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.429617][ T14] usb 5-1: config 0 descriptor?? [ 213.463225][ T5136] loop0: detected capacity change from 0 to 256 [ 213.479152][ T14] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 213.495058][ T3617] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.512536][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 213.541429][ T3617] usb 2-1: Product: syz [ 213.551303][ T3617] usb 2-1: Manufacturer: syz [ 213.556493][ T3617] usb 2-1: SerialNumber: syz [ 213.580464][ T3617] usb 2-1: config 0 descriptor?? [ 213.641400][ T27] audit: type=1804 audit(1717807312.011:28): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3092355664/syzkaller.4Ad8hB/85/.log" dev="sda1" ino=1964 res=1 errno=0 [ 213.674271][ T5138] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 213.676339][ T3617] ch341 2-1:0.0: ch341-uart converter detected [ 213.725912][ T5134] loop3: detected capacity change from 0 to 40427 [ 213.732725][ T5139] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 213.867652][ T5134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.908115][ T5125] loop4: detected capacity change from 0 to 256 [ 213.924726][ T3617] usb 2-1: failed to receive control message: -121 [ 213.931340][ T3617] ch341-uart: probe of ttyUSB1 failed with error -121 [ 214.044805][ T14] gspca_vc032x: reg_w err -71 [ 214.067926][ T14] vc032x: probe of 5-1:0.0 failed with error -71 [ 214.068344][ T3617] usb 3-1: USB disconnect, device number 10 [ 214.094285][ T3617] ch341 3-1:0.0: device disconnected [ 214.117168][ T5134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 214.122404][ T14] usb 5-1: USB disconnect, device number 15 [ 214.241347][ T5144] loop0: detected capacity change from 0 to 2048 [ 214.318053][ T5144] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.356880][ T5144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.864674][ T3617] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 215.042663][ T7] usb 2-1: USB disconnect, device number 13 [ 215.066992][ T7] ch341 2-1:0.0: device disconnected [ 215.190681][ T5155] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 215.210521][ T3617] usb 3-1: not running at top speed; connect to a high speed hub [ 215.234891][ T27] audit: type=1804 audit(1717807313.561:29): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir651646697/syzkaller.47KxEb/91/.log" dev="sda1" ino=1963 res=1 errno=0 [ 215.341634][ T5156] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 215.420603][ T3617] usb 3-1: config 4 has an invalid interface number: 159 but max is 0 [ 215.480205][ T3617] usb 3-1: config 4 has no interface number 0 [ 215.503574][ T3617] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 215.525099][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 215.544720][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 215.560784][ T3617] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 215.574212][ T3617] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 215.592222][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 215.603444][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 215.621663][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 215.661724][ T3617] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 215.683651][ T3617] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 215.710730][ T27] audit: type=1804 audit(1717807314.081:30): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1785894222/syzkaller.aWbQvV/91/.log" dev="sda1" ino=1965 res=1 errno=0 [ 215.742541][ T5161] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 215.742800][ T3617] usb 3-1: config 4 interface 159 has no altsetting 0 [ 216.074934][ T3617] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 216.084212][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.104550][ T3617] usb 3-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 216.141156][ T3617] usb 3-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 216.214567][ T3617] usb 3-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 216.298353][ T5147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.323047][ T5147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.341228][ T5147] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.378886][ T3616] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.429373][ T5172] loop0: detected capacity change from 0 to 256 [ 216.554678][ T154] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.573096][ T5176] loop0: detected capacity change from 0 to 512 [ 216.609560][ T5176] EXT4-fs (loop0): 1 truncate cleaned up [ 216.615578][ T5176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.624701][ T3616] usb 5-1: Using ep0 maxpacket: 8 [ 216.633009][ T5176] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 216.660639][ T5176] EXT4-fs (loop0): Remounting filesystem read-only [ 216.687720][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 216.702814][ T3617] appletouch 3-1:4.159: Could not find int-in endpoint [ 216.709958][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 216.718484][ T3617] appletouch: probe of 3-1:4.159 failed with error -5 [ 216.736699][ T3617] usbhid 3-1:4.159: couldn't find an input interrupt endpoint [ 216.744896][ T3616] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.761346][ T3617] usb 3-1: USB disconnect, device number 11 [ 216.777027][ T3616] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 216.794425][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.818756][ T3616] usb 5-1: config 0 descriptor?? [ 216.856935][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 216.964566][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 217.091425][ T5180] loop0: detected capacity change from 0 to 32768 [ 217.104931][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.132996][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 217.154744][ T154] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 217.163850][ T154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 217.220605][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.229499][ T154] usb 2-1: Product: syz [ 217.239864][ T154] usb 2-1: Manufacturer: syz [ 217.252203][ T154] usb 2-1: SerialNumber: syz [ 217.258174][ T26] usb 4-1: config 0 descriptor?? [ 217.267074][ T154] usb 2-1: config 0 descriptor?? [ 217.282246][ T5167] loop4: detected capacity change from 0 to 256 [ 217.296852][ T26] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 217.334641][ T3616] gspca_vc032x: reg_w err -71 [ 217.335910][ T154] ch341 2-1:0.0: ch341-uart converter detected [ 217.339424][ T3616] vc032x: probe of 5-1:0.0 failed with error -71 [ 217.391668][ T3616] usb 5-1: USB disconnect, device number 16 [ 217.564895][ T154] usb 2-1: failed to receive control message: -121 [ 217.565331][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 217.571477][ T154] ch341-uart: probe of ttyUSB0 failed with error -121 [ 217.710555][ T5170] loop3: detected capacity change from 0 to 256 [ 217.830316][ T26] gspca_vc032x: reg_w err -71 [ 217.835879][ T26] vc032x: probe of 4-1:0.0 failed with error -71 [ 217.870452][ T26] usb 4-1: USB disconnect, device number 9 [ 218.307151][ T7] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 218.370435][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 218.566119][ T7] usb 3-1: Product: syz [ 218.658415][ T7] usb 3-1: Manufacturer: syz [ 218.752036][ T7] usb 3-1: SerialNumber: syz [ 218.880246][ T7] usb 3-1: config 0 descriptor?? [ 218.927137][ T7] ch341 3-1:0.0: ch341-uart converter detected [ 219.089993][ T5191] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.146537][ T7] usb 3-1: failed to receive control message: -121 [ 219.160648][ T7] ch341-uart: probe of ttyUSB1 failed with error -121 [ 220.363180][ T7] usb 2-1: USB disconnect, device number 14 [ 220.522793][ T7] ch341 2-1:0.0: device disconnected [ 220.771959][ T5187] loop4: detected capacity change from 0 to 40427 [ 220.794616][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.833845][ T5187] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.899107][ T5187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.933696][ T5187] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 220.943166][ T5187] CPU: 1 PID: 5187 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 220.946377][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.951606][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 220.951627][ T5187] Call Trace: [ 220.951637][ T5187] [ 220.951647][ T5187] dump_stack_lvl+0x1e3/0x2cb [ 220.980223][ T5187] ? nf_tcp_handle_invalid+0x642/0x642 [ 220.985744][ T5187] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 220.991621][ T5187] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 220.997045][ T5187] f2fs_map_blocks+0x15fd/0x3ab0 [ 221.002046][ T5187] ? f2fs_do_map_lock+0x70/0x70 [ 221.006927][ T5187] ? page_index+0xff/0x4b0 [ 221.011362][ T5187] f2fs_mpage_readpages+0xbd5/0x2b90 [ 221.016693][ T5187] ? mark_lock+0x9a/0x340 [ 221.021057][ T5187] ? dquot_release_reservation_block+0x90/0x90 [ 221.027225][ T5187] ? folio_add_lru+0x34d/0xd70 [ 221.032022][ T5187] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 221.038200][ T5187] ? f2fs_readahead+0x18a/0x3a0 [ 221.043275][ T5187] ? blk_start_plug+0x95/0x110 [ 221.048064][ T5187] read_pages+0x17f/0x830 [ 221.052420][ T5187] ? folio_add_lru+0x34d/0xd70 [ 221.057281][ T5187] ? folio_add_lru+0x34d/0xd70 [ 221.062064][ T5187] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 221.067728][ T5187] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 221.073224][ T5187] ? page_cache_ra_order+0xb2a/0xd80 [ 221.078563][ T5187] page_cache_ra_unbounded+0x68b/0x7b0 [ 221.084057][ T5187] f2fs_readdir+0x5ae/0xc30 [ 221.088589][ T5187] ? __might_sleep+0xb0/0xb0 [ 221.093207][ T5187] ? f2fs_fill_dentries+0xd60/0xd60 [ 221.098431][ T5187] ? iterate_dir+0x10a/0x560 [ 221.103058][ T5187] ? __fdget_pos+0x2ba/0x360 [ 221.107685][ T5187] ? __lock_acquire+0x1f80/0x1f80 [ 221.112742][ T5187] ? common_file_perm+0x17d/0x1d0 [ 221.117787][ T5187] ? fsnotify_perm+0x42f/0x590 [ 221.122568][ T5187] iterate_dir+0x224/0x560 [ 221.127001][ T5187] ? f2fs_fill_dentries+0xd60/0xd60 [ 221.132389][ T5187] __se_sys_getdents64+0x209/0x4f0 [ 221.137555][ T5187] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 221.143588][ T5187] ? __x64_sys_getdents64+0x80/0x80 [ 221.148801][ T5187] ? filldir+0x6f0/0x6f0 [ 221.153059][ T5187] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.159049][ T5187] ? lockdep_hardirqs_on+0x94/0x130 [ 221.164264][ T5187] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.170259][ T5187] do_syscall_64+0x3b/0xb0 [ 221.174694][ T5187] ? clear_bhb_loop+0x45/0xa0 [ 221.179391][ T5187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.185299][ T5187] RIP: 0033:0x7fa389c7cf69 [ 221.189730][ T5187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.209344][ T5187] RSP: 002b:00007fa38a93e0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 221.217769][ T5187] RAX: ffffffffffffffda RBX: 00007fa389db3f80 RCX: 00007fa389c7cf69 [ 221.225751][ T5187] RDX: 00000000000000e5 RSI: 00000000200000c0 RDI: 0000000000000007 [ 221.233726][ T5187] RBP: 00007fa389cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 221.241700][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.249771][ T5187] R13: 000000000000000b R14: 00007fa389db3f80 R15: 00007ffe95fb1188 [ 221.257779][ T5187] [ 221.310183][ T5187] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 221.323865][ T5187] CPU: 0 PID: 5187 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 221.332412][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 221.342588][ T5187] Call Trace: [ 221.345934][ T5187] [ 221.348907][ T5187] dump_stack_lvl+0x1e3/0x2cb [ 221.353634][ T5187] ? nf_tcp_handle_invalid+0x642/0x642 [ 221.359135][ T5187] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 221.365002][ T5187] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 221.370427][ T5187] f2fs_get_read_data_page+0x4ec/0x8c0 [ 221.376062][ T5187] ? f2fs_get_block+0x1b0/0x1b0 [ 221.380968][ T5187] ? PageHeadHuge+0x8e/0x1c0 [ 221.385606][ T5187] f2fs_find_data_page+0x99/0x380 [ 221.390715][ T5187] f2fs_readdir+0x5c3/0xc30 [ 221.395265][ T5187] ? __might_sleep+0xb0/0xb0 [ 221.399906][ T5187] ? f2fs_fill_dentries+0xd60/0xd60 [ 221.405152][ T5187] ? iterate_dir+0x10a/0x560 [ 221.409770][ T5187] ? __fdget_pos+0x2ba/0x360 [ 221.414388][ T5187] ? __lock_acquire+0x1f80/0x1f80 [ 221.419453][ T5187] ? common_file_perm+0x17d/0x1d0 [ 221.424514][ T5187] ? fsnotify_perm+0x42f/0x590 [ 221.429310][ T5187] iterate_dir+0x224/0x560 [ 221.433762][ T5187] ? f2fs_fill_dentries+0xd60/0xd60 [ 221.439002][ T5187] __se_sys_getdents64+0x209/0x4f0 [ 221.444144][ T5187] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 221.450167][ T5187] ? __x64_sys_getdents64+0x80/0x80 [ 221.455393][ T5187] ? filldir+0x6f0/0x6f0 [ 221.459669][ T5187] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.465676][ T5187] ? lockdep_hardirqs_on+0x94/0x130 [ 221.470918][ T5187] ? syscall_enter_from_user_mode+0x2e/0x230 [ 221.476944][ T5187] do_syscall_64+0x3b/0xb0 [ 221.481402][ T5187] ? clear_bhb_loop+0x45/0xa0 [ 221.486122][ T5187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.492055][ T5187] RIP: 0033:0x7fa389c7cf69 [ 221.496495][ T5187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 221.516143][ T5187] RSP: 002b:00007fa38a93e0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 221.524587][ T5187] RAX: ffffffffffffffda RBX: 00007fa389db3f80 RCX: 00007fa389c7cf69 [ 221.532588][ T5187] RDX: 00000000000000e5 RSI: 00000000200000c0 RDI: 0000000000000007 [ 221.540589][ T5187] RBP: 00007fa389cda6fe R08: 0000000000000000 R09: 0000000000000000 [ 221.548585][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.556580][ T5187] R13: 000000000000000b R14: 00007fa389db3f80 R15: 00007ffe95fb1188 [ 221.564598][ T5187] [ 221.683648][ T3618] usb 3-1: USB disconnect, device number 12 [ 221.691233][ T3618] ch341 3-1:0.0: device disconnected [ 221.738779][ T5207] loop2: detected capacity change from 0 to 256 [ 221.758028][ T3570] syz-executor.4: attempt to access beyond end of device [ 221.758028][ T3570] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 221.794761][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 221.794901][ T26] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 221.811319][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 221.829283][ T26] usb 4-1: Product: syz [ 221.833606][ T26] usb 4-1: Manufacturer: syz [ 221.840443][ T26] usb 4-1: SerialNumber: syz [ 221.865410][ T26] usb 4-1: config 0 descriptor?? [ 221.910593][ T5209] loop2: detected capacity change from 0 to 512 [ 221.917289][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.930269][ T26] ch341 4-1:0.0: ch341-uart converter detected [ 221.933616][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 221.975461][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.005801][ T7] usb 2-1: config 0 descriptor?? [ 222.019890][ T5209] EXT4-fs (loop2): 1 truncate cleaned up [ 222.033211][ T5209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.056852][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 222.063460][ T5209] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 222.090738][ T5209] EXT4-fs (loop2): Remounting filesystem read-only [ 222.144899][ T26] usb 4-1: failed to receive control message: -121 [ 222.151581][ T26] ch341-uart: probe of ttyUSB0 failed with error -121 [ 222.210073][ T3580] EXT4-fs (loop2): unmounting filesystem. [ 222.492692][ T5200] loop1: detected capacity change from 0 to 256 [ 222.595438][ T3618] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 222.622388][ T5216] loop4: detected capacity change from 0 to 2048 [ 222.711023][ T5216] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.167808][ T5216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.474788][ T7] gspca_vc032x: reg_w err -110 [ 223.479801][ T7] vc032x: probe of 2-1:0.0 failed with error -110 [ 223.545583][ T7] usb 2-1: USB disconnect, device number 15 [ 223.766360][ T3618] usb 3-1: not running at top speed; connect to a high speed hub [ 223.856561][ T3618] usb 3-1: config 4 has an invalid interface number: 159 but max is 0 [ 223.872372][ T3618] usb 3-1: config 4 has no interface number 0 [ 223.895038][ T3618] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0x9 has invalid maxpacket 919, setting to 64 [ 223.924342][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 223.963354][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 223.980157][ T3618] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 223.992837][ T3618] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 224.011562][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 224.022571][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 224.042877][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 224.061954][ T3618] usb 3-1: config 4 interface 159 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 224.088470][ T3618] usb 3-1: config 4 interface 159 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 224.101609][ T5219] loop4: detected capacity change from 0 to 32768 [ 224.131116][ T3618] usb 3-1: config 4 interface 159 has no altsetting 0 [ 224.305585][ T3618] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=c0.d1 [ 224.321479][ T3618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.331695][ T3618] usb 3-1: Product: ⾗큋㷏᰸鑗꺡䑗鱄睰ꁘ䈢녹汵䈽愨ꝑ谋殤⑛坜ᅢᓁ︀猨겳㒅믻꒕赀⓹蚘东䛾Ṣⶊꗹ鲋䐪根合톿襪䴡專꾊퍄ꢇꚒꈕ䐁౫ᖭ韷㙋뵑蒤౫쒶ⵢ刳廃ңᲁꗟ뎳풉櫏胄傣Х镵縮噪ጎ᮫﹨㺲⇮龤栢끝綾Ƕ䜏Ἥᥝ刐빙⠔Π㸾ⴻ瑼忑꧶遫ᤕ⇆嶃㭵辻幵ﱻ빮쪑磡衊䔪봔䟰᜜뼯륚 [ 224.374313][ T3618] usb 3-1: Manufacturer: ိᰋ遤릸幐ஂߚ龱뇿䶬飬ẁ䉃嗓ꋥ션烦㝃䑙ꑁ圥꺉벬୷뷩烚竪泍죇髶瞅⦰↾윇쁦菷ﯚ⦓⑆ኘ咦ᬘ筟㢮澙ᣋ斒⳸곙蕝⋬炻틄푇ꮓ轊櫔댪ꔍ潙믲拼褩ﵱతḦ댈Ἱ솰⏚唄⴬略Ṉ㓰鬟껚쫺ซ褝韑娙ࢧ㟓㸸謹㲰;줱ᔲ [ 224.411236][ T3618] usb 3-1: SerialNumber: 暧혨䫕ȁ袋ළ虄뤽ﱢḗდ읢褡칭勴줭䂎뢫ࡊ⠊糄玽䧋탨㋾ꝉិ㠍㆗保뙊ﵲᢙ縞ᯤᓑ꼺巰銀딴祿㓿䢞蘾➹Ꙗ势ᚕ㝪♯晝⧩䓗䃷㻓㒄즯賾間㉏쵀暈ৠ峕뙋뒌⠏ሽ駕ᇶ⠶敹횮挜봽庬䴖곁挩䷹⩳⋥▂웡뒍Թ능᩹췹謄鬠㿾 [ 224.485047][ T5213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.594734][ T3616] usb 4-1: USB disconnect, device number 10 [ 224.595077][ T5213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.602375][ T3616] ch341 4-1:0.0: device disconnected [ 224.641401][ T5213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.656733][ T3618] appletouch 3-1:4.159: Could not find int-in endpoint [ 225.663742][ T3618] appletouch: probe of 3-1:4.159 failed with error -5 [ 225.709576][ T3618] usbhid 3-1:4.159: couldn't find an input interrupt endpoint [ 225.774294][ T3618] usb 3-1: USB disconnect, device number 13 [ 226.021380][ T5232] loop3: detected capacity change from 0 to 8 [ 226.076577][ T3713] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.278067][ T27] audit: type=1804 audit(1717807324.651:31): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3742313174/syzkaller.udfh00/86/.log" dev="sda1" ino=1968 res=1 errno=0 [ 226.315660][ T5235] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 226.386598][ T5236] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 226.548378][ T5225] loop4: detected capacity change from 0 to 40427 [ 227.142233][ T5225] F2FS-fs (loop4): Found nat_bits in checkpoint [ 227.276544][ T5225] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 227.454693][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.593269][ T5247] loop4: detected capacity change from 0 to 256 [ 227.759021][ T5249] loop4: detected capacity change from 0 to 512 [ 227.805882][ T5249] EXT4-fs (loop4): 1 truncate cleaned up [ 227.812692][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.857854][ T3570] EXT4-fs (loop4): unmounting filesystem. [ 227.990761][ T5253] loop4: detected capacity change from 0 to 2048 [ 228.027092][ T5253] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.044953][ T26] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 228.054097][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 228.058732][ T5253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.076307][ T26] usb 4-1: Product: syz [ 228.086370][ T26] usb 4-1: Manufacturer: syz [ 228.105278][ T26] usb 4-1: SerialNumber: syz [ 228.125584][ T26] usb 4-1: config 0 descriptor?? [ 228.206029][ T26] ch341 4-1:0.0: ch341-uart converter detected [ 228.414838][ T26] usb 4-1: failed to receive control message: -121 [ 228.422798][ T26] ch341-uart: probe of ttyUSB0 failed with error -121 [ 228.828348][ T5257] loop4: detected capacity change from 0 to 32768 [ 230.125094][ T3616] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 230.365126][ T3616] usb 5-1: Using ep0 maxpacket: 8 [ 230.485125][ T3616] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.504573][ T3616] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 230.513656][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.550311][ T3616] usb 5-1: config 0 descriptor?? [ 230.596814][ T3616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 230.865841][ T3618] usb 4-1: USB disconnect, device number 11 [ 230.884233][ T3618] ch341 4-1:0.0: device disconnected [ 231.080995][ T5261] loop4: detected capacity change from 0 to 256 [ 231.114717][ T3616] gspca_vc032x: reg_w err -71 [ 231.119884][ T3616] vc032x: probe of 5-1:0.0 failed with error -71 [ 231.404395][ T3616] usb 5-1: USB disconnect, device number 17 [ 232.300578][ T5268] loop3: detected capacity change from 0 to 2048 [ 232.352919][ T5268] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.379883][ T5268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.527532][ T5277] loop3: detected capacity change from 0 to 8 [ 234.553246][ T5285] loop3: detected capacity change from 0 to 256 [ 234.678841][ T5290] loop3: detected capacity change from 0 to 512 [ 234.719777][ T5290] EXT4-fs (loop3): 1 truncate cleaned up [ 234.731717][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.821171][ T4616] EXT4-fs (loop3): unmounting filesystem. [ 234.994045][ T5295] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.340143][ T5299] loop3: detected capacity change from 0 to 2048 [ 235.361744][ T5299] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 235.381932][ T5299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.641015][ T5302] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.997634][ T5305] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.104539][ T3617] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.674822][ T3617] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 239.687554][ T3617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 239.699391][ T3617] usb 4-1: Product: syz [ 239.703749][ T3617] usb 4-1: Manufacturer: syz [ 239.712064][ T3617] usb 4-1: SerialNumber: syz [ 239.736130][ T3617] usb 4-1: config 0 descriptor?? [ 239.785725][ T3617] ch341 4-1:0.0: ch341-uart converter detected [ 240.004670][ T3617] usb 4-1: failed to receive control message: -121 [ 240.011274][ T3617] ch341-uart: probe of ttyUSB0 failed with error -121 [ 241.943959][ T7] usb 4-1: USB disconnect, device number 12 [ 241.955485][ T7] ch341 4-1:0.0: device disconnected [ 242.364548][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 242.884632][ T7] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 242.893721][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 242.903273][ T7] usb 4-1: Product: syz [ 242.907935][ T7] usb 4-1: Manufacturer: syz [ 242.912561][ T7] usb 4-1: SerialNumber: syz [ 242.919457][ T7] usb 4-1: config 0 descriptor?? [ 242.965692][ T7] ch341 4-1:0.0: ch341-uart converter detected [ 243.184723][ T7] usb 4-1: failed to receive control message: -121 [ 243.192571][ T7] ch341-uart: probe of ttyUSB0 failed with error -121 [ 244.191879][ T7] usb 4-1: USB disconnect, device number 13 [ 244.199112][ T7] ch341 4-1:0.0: device disconnected [ 245.791908][ T5330] loop3: detected capacity change from 0 to 256 [ 245.914408][ T5332] loop3: detected capacity change from 0 to 512 [ 245.954301][ T5332] EXT4-fs (loop3): 1 truncate cleaned up [ 245.970229][ T5332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.018284][ T4616] EXT4-fs (loop3): unmounting filesystem. [ 247.613514][ T3587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.622884][ T3587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.638479][ T3587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.647766][ T3587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.662807][ T3587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.671458][ T3587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.714634][ T3574] Bluetooth: hci5: command tx timeout [ 251.798332][ T3574] Bluetooth: hci5: command tx timeout [ 253.874883][ T3574] Bluetooth: hci5: command tx timeout [ 254.560508][ T3587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.570076][ T3587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.584898][ T3587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.593794][ T3587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.602415][ T3587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.611665][ T3587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.636400][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642872][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.954653][ T3587] Bluetooth: hci5: command tx timeout [ 256.684783][ T3587] Bluetooth: hci6: command tx timeout [ 257.505215][ T3574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.516044][ T3574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.528204][ T3574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.538089][ T3574] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.546614][ T3574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 257.553889][ T3574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.755381][ T3587] Bluetooth: hci6: command tx timeout [ 259.634587][ T3587] Bluetooth: hci7: command tx timeout [ 260.834937][ T3587] Bluetooth: hci6: command tx timeout [ 261.714705][ T3587] Bluetooth: hci7: command tx timeout [ 262.914721][ T3587] Bluetooth: hci6: command tx timeout [ 263.795323][ T3574] Bluetooth: hci7: command tx timeout [ 264.666261][ T3587] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 264.676910][ T3587] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 264.693666][ T3587] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.705248][ T3587] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 264.713050][ T3587] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 264.720704][ T3587] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 265.875047][ T3587] Bluetooth: hci7: command tx timeout [ 266.765181][ T3574] Bluetooth: hci8: command tx timeout [ 268.834697][ T3574] Bluetooth: hci8: command tx timeout [ 270.915111][ T3574] Bluetooth: hci8: command tx timeout [ 272.995288][ T3574] Bluetooth: hci8: command tx timeout [ 278.213467][ T3587] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 278.224972][ T3587] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 278.233036][ T3587] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 278.242437][ T3587] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 278.250088][ T3587] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 278.257666][ T3587] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 280.274634][ T3587] Bluetooth: hci9: command tx timeout [ 282.354910][ T3587] Bluetooth: hci9: command tx timeout [ 284.434847][ T3587] Bluetooth: hci9: command tx timeout [ 286.515256][ T3587] Bluetooth: hci9: command tx timeout [ 288.434543][ T3582] Bluetooth: hci2: command 0x0406 tx timeout [ 312.698244][ T3587] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 312.707684][ T3587] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 312.716254][ T3587] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 312.725292][ T3587] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 312.733793][ T3587] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 312.741507][ T3587] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 314.834755][ T3587] Bluetooth: hci10: command tx timeout [ 316.914797][ T3587] Bluetooth: hci10: command tx timeout [ 317.079585][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085973][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.995256][ T3587] Bluetooth: hci10: command tx timeout [ 319.567222][ T3574] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 319.585789][ T3574] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 319.593997][ T3574] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 319.609659][ T3574] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 319.617565][ T3574] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 319.625674][ T3574] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 321.075305][ T3587] Bluetooth: hci10: command tx timeout [ 321.714614][ T3574] Bluetooth: hci11: command tx timeout [ 322.470521][ T3587] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 322.480315][ T3587] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 322.489113][ T3587] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 322.497422][ T3587] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 322.510732][ T3587] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 322.518789][ T3587] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 323.794683][ T3587] Bluetooth: hci11: command tx timeout [ 324.595388][ T3587] Bluetooth: hci12: command tx timeout [ 325.875130][ T3587] Bluetooth: hci11: command tx timeout [ 326.674532][ T3587] Bluetooth: hci12: command tx timeout [ 327.954547][ T3587] Bluetooth: hci11: command tx timeout [ 328.755084][ T3587] Bluetooth: hci12: command tx timeout [ 329.681629][ T3574] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 329.691644][ T3574] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 329.701162][ T3574] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 329.711423][ T3574] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 329.725280][ T3574] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 329.732653][ T3574] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 330.835160][ T3574] Bluetooth: hci12: command tx timeout [ 331.795641][ T3574] Bluetooth: hci13: command tx timeout [ 333.874577][ T3574] Bluetooth: hci13: command tx timeout [ 335.955102][ T3574] Bluetooth: hci13: command tx timeout [ 338.035202][ T3574] Bluetooth: hci13: command tx timeout [ 343.315171][ T3587] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 343.324197][ T3587] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 343.341930][ T3587] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 343.350234][ T3587] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 343.359735][ T3587] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 343.367244][ T3587] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 345.394794][ T3587] Bluetooth: hci14: command tx timeout [ 347.475337][ T3587] Bluetooth: hci14: command tx timeout [ 349.554602][ T3587] Bluetooth: hci14: command tx timeout [ 351.634591][ T3587] Bluetooth: hci14: command tx timeout [ 370.196319][ T28] INFO: task syz-executor.1:5222 blocked for more than 143 seconds. [ 370.215059][ T28] Not tainted 6.1.92-syzkaller #0 [ 370.222414][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.236786][ T28] task:syz-executor.1 state:D stack:25848 pid:5222 ppid:3575 flags:0x00004006 2024/06/08 00:44:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 370.248918][ T28] Call Trace: [ 370.321411][ T28] [ 370.325566][ T28] __schedule+0x142d/0x4550 [ 370.330172][ T28] ? __mutex_lock+0x6b4/0xd80 [ 370.337848][ T28] ? __sched_text_start+0x8/0x8 [ 370.342773][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 370.349868][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 370.355521][ T3574] Bluetooth: hci5: command 0x0406 tx timeout [ 370.361735][ T28] schedule+0xbf/0x180 [ 370.366864][ T28] schedule_preempt_disabled+0xf/0x20 [ 370.373598][ T28] __mutex_lock+0x6b9/0xd80 [ 370.380840][ T28] ? __mutex_lock+0x53c/0xd80 [ 370.386977][ T28] ? do_ipv6_setsockopt+0x38d/0x43e0 [ 370.392305][ T28] ? mutex_lock_nested+0x10/0x10 [ 370.402765][ T28] ? __might_fault+0xbd/0x110 [ 370.408976][ T28] do_ipv6_setsockopt+0x38d/0x43e0 [ 370.414138][ T28] ? validate_chain+0xd1/0x5950 [ 370.434478][ T28] ? sk_dst_reset+0xa0/0xa0 [ 370.439057][ T28] ? reweight_entity+0x6e/0x4d0 [ 370.443958][ T28] ? reacquire_held_locks+0x660/0x660 [ 370.467888][ T28] ? reacquire_held_locks+0x660/0x660 [ 370.490181][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 370.510063][ T28] ? preempt_schedule+0xd9/0xe0 [ 370.516130][ T28] ? preempt_schedule_common+0xa6/0xd0 [ 370.521644][ T28] ? preempt_schedule+0xd9/0xe0 [ 370.544620][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 370.550364][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 370.556957][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 370.562904][ T28] ? _raw_spin_unlock+0x40/0x40 [ 370.568205][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 370.573995][ T28] ? mark_lock+0x9a/0x340 [ 370.578909][ T28] ? aa_label_sk_perm+0x4f7/0x6e0 [ 370.583984][ T28] ? aa_sk_perm+0xa60/0xa60 [ 370.594806][ T28] ? __might_sleep+0xb0/0xb0 [ 370.599451][ T28] ? __fget_files+0x28/0x4a0 [ 370.604093][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 370.615371][ T28] ? aa_sk_perm+0x92d/0xa60 [ 370.619940][ T28] ? aa_af_perm+0x350/0x350 [ 370.631325][ T28] ? __fget_files+0x435/0x4a0 [ 370.644680][ T28] ipv6_setsockopt+0x58/0x190 [ 370.649430][ T28] ? sock_common_recvmsg+0x240/0x240 [ 370.674448][ T28] __sys_setsockopt+0x57e/0xa00 [ 370.679822][ T28] ? __ia32_sys_recv+0xb0/0xb0 [ 370.694476][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 370.700530][ T28] __x64_sys_setsockopt+0xb1/0xc0 [ 370.714457][ T28] do_syscall_64+0x3b/0xb0 [ 370.718971][ T28] ? clear_bhb_loop+0x45/0xa0 [ 370.723805][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.748994][ T28] RIP: 0033:0x7f5e8227cf69 [ 370.753477][ T28] RSP: 002b:00007f5e82f4c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 370.790935][ T28] RAX: ffffffffffffffda RBX: 00007f5e823b3f80 RCX: 00007f5e8227cf69 [ 370.831288][ T28] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000005 [ 370.853707][ T28] RBP: 00007f5e822da6fe R08: 0000000000000108 R09: 0000000000000000 [ 370.866089][ T28] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 370.874159][ T28] R13: 000000000000000b R14: 00007f5e823b3f80 R15: 00007ffec04225e8 [ 370.905101][ T28] [ 370.908305][ T28] [ 370.908305][ T28] Showing all locks held in the system: [ 370.924496][ T28] 1 lock held by rcu_tasks_kthre/12: [ 370.929839][ T28] #0: ffffffff8d12ae50 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 370.965016][ T28] 1 lock held by rcu_tasks_trace/13: [ 370.970360][ T28] #0: ffffffff8d12b650 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 371.014521][ T28] 1 lock held by khungtaskd/28: [ 371.019427][ T28] #0: ffffffff8d12ac80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 371.044489][ T28] 3 locks held by kworker/0:2/151: [ 371.049663][ T28] #0: ffff888012471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [