last executing test programs: 11.714827933s ago: executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6cfa7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x37}, 0x48, 0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000005340), 0xbf) 10.967685515s ago: executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000370000000400000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001ae000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c000500000000810000000014003500767863616e3100"/48], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000063180200640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008"], 0x94}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x2c}}, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xffffffd9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 10.490195483s ago: executing program 0: syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.363689916s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 8.561233051s ago: executing program 0: syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'nr0\x00', 0x400}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0205647, &(0x7f0000000040)={0xf010000, @sdr={0x0, 0x20}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5000003"], 0xfdef) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 7.863777041s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000001140)=""/136, 0x57}], 0x1) 6.864977563s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xffffff90, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffde9) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x4}, 0xf) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tun(r4, &(0x7f0000000140)={@void, @val={0x3, 0x1, 0x8, 0x3, 0x0, 0x3}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @random="af0c419c3de5", @local, @random="1cf1871c107f", @dev={0xfe, 0x80, '\x00', 0x1f}}}, 0x3e) socket(0x1, 0x3, 0x20) 6.552645275s ago: executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6cfa7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x37}, 0x48, 0xffffffffffffffff) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000005340), 0xbf) 6.547768789s ago: executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040)=""/206, 0xce}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/157, 0x9d}], 0x9) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000014c0)={{0x9}, 'port1\x00', 0x8, 0x20, 0x100, 0x800, 0x5, 0x4, 0x6, 0x0, 0x6, 0x2}) r3 = syz_usb_connect(0x3, 0x1fe, &(0x7f0000001580)={{0x12, 0x1, 0x110, 0xa1, 0xf, 0xbd, 0x8, 0x2040, 0x7213, 0x31d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ec, 0x1, 0x33, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x5, 0x3, 0x3f, 0x2f, 0xf, 0x3f, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c295be66"}, {0x5, 0x24, 0x0, 0xc1af}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6c, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x1f, 0x9, 0xf7}, @obex={0x5, 0x24, 0x15, 0x100}, @mdlm_detail={0xa2, 0x24, 0x13, 0x20, "d2292d818d52dd82c880c616d83bf1e7d271698745ec8eb668c669e60bddc8575cb1ae87a2721ccf426775f72aa0fb71cf208d0077e77a5352a961edd60c9829ce1e6dfcd6e7bb18607d2b927043ae763cb0f77d3da44fcc7d067953a38984673257e51cf1d4254a65ce4c94e1108ed13235c708eb1c44c0bd8bb40ba332ca402c725746bc500646e0339f45712aeeeae63cff4aa6ab2f05d095e2c79564"}]}], [{{0x9, 0x5, 0x0, 0x6, 0x400, 0x20, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x5, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x1f}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x1f, 0x8, 0x8, [@generic={0x4d, 0x22, "ed7ea1a2621ceefd979ddd21610b170b1be9c62fb0d174d6e74276b713d1c1c2d1d0ecfeb4b54b3ce85f285d1710cd86943190edacc1c8a9ba945585aade86f3e871f58dbc3255a07affaa"}, @generic={0x8e, 0x22, "e4f5ca161734e87d471e1e891ffa4beb7e6fe5604e029959284dbd5b2667bd8df180be5a129f4f81681a6ddb59fbadf22b6c46b4ffbca762687d6ca3c9bad6af3c6667edda45f99011e087e915b9df7e8e5aa5e517822bef5678b6ae4a0797750fbdfc780ae2bbb0233adf32c7166692b8e6ccdaf1bba8a4d4f3d46656ca95686c60fa3a36fd490e0f7b02f3"}]}}]}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x110, 0x3, 0x1f, 0x1, 0x10, 0xc1}, 0x30, &(0x7f00000017c0)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x41, "1a002ff4409fb77e5eb4b65c53f2e97c"}, @ssp_cap={0x14, 0x10, 0xa, 0xd9, 0x2, 0x0, 0xff00, 0x0, [0x3e80, 0xff0030]}]}, 0x3, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x41d}}, {0xb6, &(0x7f0000001840)=@string={0xb6, 0x3, "b250894597931eae3c21d1a285bc77df67dc53952fc61c4e2e3b39db8e8d5b2ec6790ec57e189e545b249ae5ad08cc53f4af7c728d95325bedd4926c578906b92155e7956dbd6f28c126751b360e3f898017555f2f15a8e481aae0669b2552645bbf01c6f4b1a9c0cb8571b3348bff5df1439aa23ea6249876d00fc529ceb9a6115ba4827e37d5669a794732217d78ff48bc063de4cea2404916a4e25c75bf1894afcf75c8fd7aed6684c054eb9b355e4938f97d"}}, {0xd0, &(0x7f0000001900)=@string={0xd0, 0x3, "761d1a751b72778de425fa24c6e9759e4274c8f3403c87eb30e3fed6c5e80ed80def3b9c0fa3f518493ae7e5363af9aba996f9c8b3499487cee108f20b5bb0db44e5da5f03f5d4b3f8d0e86376e253fbc7f32617643def67026321fd1b7ed6946550f39264568c63de1c919fd1172545ab454c066223bfec1c723bd76e39acf3d9060321d99679c2e0b1e1d1120794dd17987f5b5d33be1a9e1620feada1a6ed70df44fe3b30592a08f0fcb5ad31ae020cce673b8c02e2e056dc7d5bd894002a29e6f34d0d3038f2885d8a4ea1fb"}}]}) syz_usb_disconnect(r3) prctl$PR_GET_TSC(0x19, &(0x7f0000001a40)) recvmmsg(r2, &(0x7f0000007a80)=[{{&(0x7f0000001a80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001b00)=""/72, 0x48}, {&(0x7f0000001b80)=""/247, 0xf7}, {&(0x7f0000001c80)=""/97, 0x61}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/150, 0x96}], 0x5, &(0x7f0000002e40)=""/45, 0x2d}, 0xfffffbf2}, {{&(0x7f0000002e80)=@caif, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f00)=""/2, 0x2}, {&(0x7f0000002f40)=""/23, 0x17}, {&(0x7f0000002f80)=""/211, 0xd3}], 0x3, &(0x7f00000030c0)=""/248, 0xf8}, 0x6}, {{&(0x7f00000031c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003240)=""/196, 0xc4}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/188, 0xbc}, {&(0x7f0000004400)=""/76, 0x4c}, {&(0x7f0000004480)=""/96, 0x60}, {&(0x7f0000004500)=""/169, 0xa9}], 0x6, &(0x7f0000004640)=""/173, 0xad}, 0x20}, {{&(0x7f0000004700)=@caif, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/52, 0x34}, {&(0x7f00000047c0)=""/40, 0x28}, {&(0x7f0000004800)}], 0x3, &(0x7f0000004880)=""/211, 0xd3}, 0x1}, {{&(0x7f0000004980)=@can, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004a00)=""/237, 0xed}, {&(0x7f0000004b00)=""/226, 0xe2}], 0x2}, 0x21}, {{&(0x7f0000004c40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004cc0)=""/30, 0x1e}, {&(0x7f0000004d00)=""/218, 0xda}], 0x2, &(0x7f0000004e40)=""/22, 0x16}, 0x3}, {{&(0x7f0000004e80), 0x80, &(0x7f0000005f80)=[{&(0x7f0000004f00)=""/117, 0x75}, {&(0x7f0000004f80)=""/4096, 0x1000}], 0x2, &(0x7f0000005fc0)=""/163, 0xa3}, 0xb92}, {{&(0x7f0000006080)=@nfc_llcp, 0x80, &(0x7f0000006600)=[{&(0x7f0000006100)=""/236, 0xec}, {&(0x7f0000006200)=""/85, 0x55}, {&(0x7f0000006280)=""/135, 0x87}, {&(0x7f0000006340)=""/38, 0x26}, {&(0x7f0000006380)=""/241, 0xf1}, {&(0x7f0000006480)=""/254, 0xfe}, {&(0x7f0000006580)=""/106, 0x6a}], 0x7, &(0x7f0000006680)=""/145, 0x91}, 0x5}, {{&(0x7f0000006740)=@nfc_llcp, 0x80, &(0x7f0000006880)=[{&(0x7f00000067c0)=""/43, 0x2b}, {&(0x7f0000006800)=""/128, 0x80}], 0x2, &(0x7f00000068c0)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f00000078c0)=@qipcrtr, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007940)=""/79, 0x4f}], 0x1, &(0x7f0000007a00)=""/86, 0x56}, 0x23}], 0xa, 0x10080, &(0x7f0000007d00)={0x0, 0x3938700}) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000007ec0)={&(0x7f0000008000)={[{&(0x7f0000007d40)="4b7b3b772768797fc869f42818a0f92a6c84b08353987e1c5ff30bb1d1437a93420bc9402f1b50858c1a3b9ec79e6c312acdfcf5f0973acae29401319ed6d64cb78026513499cefdf790c4217f3c017c558fb8b7f1141ca124a44a6550c59c8c92b4f10520ff2f767af4f9dc11d7708f93837c7a17875489ccf24371f56892e890ddee52973bc0a5f0201fd934235226201e1392710b17379113d1fde5a6aba29d9913faca4c014b9fe4b876b9a00fdb2c751a1e3056de516609d38c267736675fb53202d3e71f4716eedd98fa5643a20e2b21894c0d1988d44e1b953c1136206ac26252e5a537d09c65dd83d6e21f78b16ed3daefbdc8fab03cdedfc8ba", 0xfe, 0x1}, {&(0x7f0000007e40)="98b26dce0b99aec3ae00574aa3b3b46b5b5f1e467284f134fa54956aa3d060c9b60ee8519500723ec81a43ff06f3befff5ef6e92ff3024639d97a348fd26397298c26f36631df43dd0dd4e42f3a561fcdb331fe2706900e7baa7662f1caa0e161e693bd44f39c0", 0x67, 0x2}]}, 0x2, 0x1}, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000007f00)=0x3) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000007f40)=""/42) syz_usb_connect$uac1(0x6, 0xb5, &(0x7f0000009000)={{0x12, 0x1, 0x753, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x1, 0x50, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x4, 0x5, 0x0, 0x39}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0x7}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x20, 0x3, 0x3, 0x0, 'S>', "b5292a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x4, 0xfb, {0x7, 0x25, 0x1, 0x81, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfc, 0x4, 0x0, 0x2, "9e", "f7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1f, 0xfffb, 0xff, "4b1ddec8e9bfe456c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x9, 0x7, {0x7, 0x25, 0x1, 0x6, 0x7, 0x5}}}}}}}]}}, &(0x7f0000009440)={0xa, &(0x7f0000007f80)={0xa, 0x6, 0x100, 0xfe, 0x6, 0x1f, 0x20, 0x8}, 0xa4, &(0x7f00000090c0)={0x5, 0xf, 0xa4, 0x3, [@generic={0x8a, 0x10, 0x9, "fd724544dcece6b8ccf2e096bc791ec77a41e38b9acdec455c7fe8a8fcbae37fe0395e6209ed18d27b6ef43b55f80cfecc61dfe49244261c1b3569b90d5d6cfc09f7bb6b3447e54a1fc9e48d1135c6c255063230eecdaab6995a4639307abb664ee931ece39cf7de7a3031bc4c1452dc1f972a4134704f3c1277681652901b522c89fce62ac4bc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x4, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0xff, 0x40af, 0x49}]}, 0x7, [{0xa6, &(0x7f0000009180)=@string={0xa6, 0x3, "8be0d3285c866be9f7fcb01aa5a20101ec7532d62c43261fd81b107f3a2bd734edcc31675e0d63559c6c9fae016ec9e5221799fca18a9ccb16da3495213cd5235ae0244f714db58f233712572b0e9714015efc57307d8c55f6ba647ffa677409c55462b22342de41e01ecdc3ea4c83b6d15f677fe4ca9bf127619a8a0f1884c2c4166cab5af99841c22cd47fc80fa42965d7d36be2aaf76e54a8869a2e7a2bff2fd50ad8"}}, {0x4, &(0x7f0000007fc0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000009240)=@lang_id={0x4, 0x3, 0x421}}, {0x89, &(0x7f0000009280)=@string={0x89, 0x3, "36094bebc54d722a3d43ecefed0283879f49dc02509d615a26d73713a753dd008c7947edefc8ea6157eaaea05a5987bed43ebd7ca44dfb040b9063bdefa61aaf86d0512402e67ae311bada0eab63e47d798d028ba3588d49461f93a674a0b77f25cd05c921adc6668814f0033b610908658aac8fffc582ca005133c6bd3d56c9e4055ab5449da6"}}, {0x4, &(0x7f0000009340)=@lang_id={0x4, 0x3, 0x44f}}, {0x55, &(0x7f0000009380)=@string={0x55, 0x3, "b824b9fc0dd4c8c787f01cc6fb5b3bc1f14812d3788e7dd3418eb9e46b04f7678f08fb2b4fa04a266eafdd28426b1981b9bdd7f480851f1087822e576b563490b956526773259d19dec53ac01b0c4f764addbf"}}, {0xd, &(0x7f0000009400)=@string={0xd, 0x3, "8ae131c9b3029f231635ce"}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000094c0)={r1, 0x2, 0x2, 0xfff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000009540)={0x2, &(0x7f0000009500)=[{0x9, 0xff, 0x2, 0x9}, {0x40, 0x0, 0x7, 0x3}]}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f000000aec0)={0x7, 0x7, 0x2}, &(0x7f000000af00)=0x28) 5.736745255s ago: executing program 4: syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.536123979s ago: executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000002e00"], 0x0, 0x1b}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000580)='./bus\x00', 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)=@deltaction={0x8c, 0x31, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6da}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004240)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x0, 0x5, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x2e, [@private=0xa010100]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x3, [0x8]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x10005]}, @ra={0x94, 0x4}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4b, 0x3f, 0x5b, 0x8, 0x5, 0xa7, 0xc8, 0x2, 0x9, 0x22, 0x1f, 0xaf}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2, 0x400000}, 0x1c) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) 5.423072512s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 5.241138931s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './bus', [{0x20, '#! '}], 0xa, "68c0c0cb6ba25b9cb55a9c1c9c296de80b05541c194390f23ec7d65b24350e3dbaf47563be1d588956b9e5e85fba153e1dac879dd59afd540dc7d1044e77a04acedeaf51ab46e743d989c478e9cfa2844bdec9959e839f442441cf83f1faa9f5115aef36c7777ac3824f13e09447ccb4b1a35db09766ba94ce5f8f1088b26a78df0012b0ee888634d22640f61dbdb3c10d956be16a2606c39a3a4d4bf8e8690954e228ed2753092a9893e32675c0dfd6cefaea5524379362b8e93c7e3e98d28d638f9942308ec3f1ca433e3d7a3b8489750fb15d393a2116d5abb78289b9b3a86279b18b4aad643a8a4681de09b429be93b82d7aeb1a2dce9bfaa66e0a24cf3d51a2a469a19981349b63463a243b7125af3945a0f7c481e07368da60b43e2eb9029a65909c609a93489ed4b9452acfdbdd0476b3950e348185a9bbd66988ebd0a050357b7f1d2a4bb119db107eec869917a8a214895f1f6faf16d24b0d2bfefa386f0eb2304119c94965215ea53edad7930add825a600b2197fa708c9d9957b9f76c35c007f027fcf5d5eb6a148d072d61dc483f57098006f0b7524cb4f7498e27e8cba4251c441b172bebe2b59e941ae1d5613aeace160d2a7c6a2a7a64f27824ecc66a455c7cc7aa677f02913bc837ff2fdb3b5d8acc030ef65ea0fe9edc9c78cfa31833d64c6bbeebb0f136894440e926bf03ebccc775af5c632ca8511b49b022c0e50e285c07f292fa57cc01feab8265c85aae4b9119bc1bcd4bab41c365ccb756474f97ae3e49774040a85b269a2b914998d5c02867a6b72f8964b1b97f42b5453acbba6d6c965d40acff09e361c5c33571356c31cb0d870110eaa579ef59d8740eb7e5fcd4ca4c326f757a140a008d8b28f6c13358901fc04693b37b95cb086d9c9fb3ea62da7de3cf47b3d874657f090b5a054434c3c6da3ae2b5d8d60b102df3863f4c598fb42f3b1b577b956cf07d6a27c461695ce7afdcdd5f93a674d10c28b26592985c3e5dfe724619a31b829c5ed0fff14b27397807b5fcb3a73811dfcac3e3bf9e2a4eed7b5eb25fe931e4b00d3e3999e6a50c36a8d9a09298231114e756f4f65f089382d8ed8828ea439b78e51ca18a14f02f1039ef9f8e613a1ca7f8e9723d5b5dfa5847862fca38757e158f8171ae83ea01facaf95b048913dc1c944539fbb3ae2896383d8d6f4d3770303154f88909673ccb4ad0ce463503692dd70bb6a0cc2e54c1254b5bcb29289f796cd338c66f3da4ace6aea33416a5651e288891557cf664d90671628f599941bc02abd4356f0c96534d58338378c59bfa89298451f64e9fd65926694ef07fae25b753a5affc7062003d671a51b4057ba3aeab408daacf7e45541ab83626b051536789be872993cccafb98c9ff100f5142a44ef8fbe62113a48c95bd291483805137d344eaaf567c9aa273a84086d1fd88d52a8355b11290efec476eba746e844bffb66d0221dc73bdfd3ddf014cd70a05bd429869347c7031a175b8d78e9016570583b6754b52bb9b57e663cc430818964865cddc6d6f9af230533e9bedafd3df08600caeab0f11543f8959d61f70f8553e59b1ff7b9b6294984cce7ac99acbc4dc229cd05ce7fb9f6d670fc197e17ee6c90482770fe77de55542d53d5fa8eefdf3e9b0f9fc3425ee3db72ae2d10edf7b87bd1840cbcc4c4352573c94493cfb0d2ff55a505e7d4fb0c1ffa058a7c8f4bddc9c4f7a7948a2d175b77b25524291a39a70df991eca90c5d908964d012f1eeef31a732062a6779c11ae703e658f195d9ca9932cbfacfb4d86416d943525b174d7771f9e796486b8b6f9ef3ead774f67af9a8becb298c16dcd4bda142e457badfe6548065f5f39722f4356831dce7368d6bd33e4916df477e79d28600f9f70e01be943559f994037fa09454cfe27b925d582ffb4827aa643ccd1e5d7beffc4ba36fd566cb73e92ea42c7b1441abae8de71e0e3c5f0abab9b8437db30b4e541c4ae4e5ff82d574043269d32483616f60e683ab2056211e148dfb0475e513cc483432ce463a724ca5d2cca26781a423e10d0804721a708989713209e7297b26ad218e696277fb33f75fb1dcac981474260901563bfb71df5898018ec91cab760b92b2bc55c8f83a397363c97efe742ec2199c84fe32cf9fac4f54432e903008aa28621fa897a5f835474f08f5d13e34b68c87d261c0edc64c31fd14ba443281afe13f02836bc31de1688858101c58099e236bcec72992c2a340af94367926e1018b7ceb91a05a412810ca4c73de490f0a8b45fd3f3ab1c33e2aba24acc1efbaf8e5058d8b0c61369928a3a8b5a45434bc371a4ff77482afb8f2822c8fe1b24bfa6210a4a174261dc4d113c0e69c1cb3d474864c4aa4ae9f29729896975504fac3f7435172075fc03129b1d4c340d251ccde350db8f73b97909e786a146e813977d698180c3bd099c30e3e29b670c627747f4b4b7f30e7a52acdc0bde62aa002d0b64128d73a635034acc55564c39b9b553a2dc25c190b571e04f611f69fec6be74deb2081aaf793c4c1c32d97b26fe0eba97e1715907ca0f44531449372608a0280518f79f64b1aeda7b9af69de6d5ccb56ef28946004cf7b71f1ed38331e36f8dfcaadc4f1911c93be27b37a9f6abccacc24bfa78c701f299c27a38fc639504c81fd3fd4d5732d4eadc9ae0f7436e635f29db458b49888036de654fbaa0c1f04928b9aa5fd7829d2bd27fa5e5cc8f8d956355eedb8536d9c4ea399c1d0831ab58308bb964438b21eca16ed6679d097481c273ea999a1b40cfe381f40b34d1e052ca39bc92ce05a4bbd198cabb00d1f1095d4d46716e69a52068be124f4d4e27259553ace54a4fbe784a0f531578a10e95451718ef84877de2fb13b3a888fe3cf8808740cde55b129eab76d939ab3cd68ff526d4b02248104f6dbaa4702e90d026a12e08f00d473f0b611ddeca7e6868313d68d7afbd5a3a2ef2682cc054478ef7e1334f19c9a4e42df3b60ebac61d0509554b8d094813d6be8015653baa814e52cebcd575d84a55668952d84cdfaefecd4645f00b29bcf6f3bb273f24205e6c774f511202bd279f08bc6067153b39a32705152c448b01b6a72416e63854dca745631c6ff48097b8e668b27780adf9d95fb7037e6580776dcc8feb3af5634c98c4da9a24b0ac03aecb0a6fdb3a4e7f9551f7cab105bdca94ccdd9a96e5e0c0771214a76488d24ab6b65d7627d41b8a956f8959fef7ce3de7e702b384a46424e082cb5c388dec879a19ff4848c1cda4cb1f495b17b3865e64f9244dbcc24c43ba401075e991babf79f4310822b1d2a5d8c5da5821176b5ff41c17408088caac73cd44cbdb7de4c0a4078449b46679099a31d406f4dfce3a85338f131f0c818491e4bb5d663d82845ff2f059908b39b83be6333f16dd3fe78ea97bd289ff5480d704e53de554bcd896728eb1c425f9ec13db6ad997134fb4debe2790e398f9aac69fd1e1644555543d99235cbfdde3208969905e9536f572317b60a1aeda16b2c2f933b550d69755614a6770e37e63c7abc1a020266d392d3a8d305a2a7bfb3fc8bd0aa12988875af5674b838063746d55da670383eabfab0fa1f0fa943006c6e3c5fb42bd4282ef298856d81b22aed9a6a2f6b5f6d2a92c577e9af4537c93adf7965905ede5b92a193692ee08bc933e4c178d57e757fa60e0e1b344586ffffaca6d19873d6b6629d83e2c6b55f82ad941b9e55cba600562a3a01a38f13d64b6021bb814d3da3ae1d931a9694ccb495713860a900e898693d4ccad95cabf1c0adedc143c2f23247ff3f0c7599d0868bdb2146cbceda3aff70789dabb71196c88e4f40eb9f260b733e2d275354aa9b5feb41beb5febad582c13beae8897695e3173572666d46d814bd9bacd39ee8e89157f083f23c07a928e481d71a69403dcd03efb12b322e394d936f6ed987065b49e67cdd336e6b5893d021a7d32bbd4401cb2b9f7d7f7048278927753687b422adf269bc97aa83eb9f0bcb97491cd7f6e479e813d1a66a2d657f762ed752fa2fb28feee600b0babaf4ef7f7d029d4e87d0b5161bff2e0b9a2b1163d58db1973fa956a54c7177e0ca94d11daf1b00fba1d0a5c0d151deaa6e7a07ba2e863fabee230d64b76cfc75a389fdbfd7e652b990e039724fcf321c848ff8705d5cf469d64f4d0b93435539b83189c0a3147e268b4dc8bf6df483ad26454ff8bd28f21eb2307b9b8fa0398c19b3c6671e59442cb2e47e26f79519d6d31b81e04173f14d1219917a7973c43145510f4548c5738430e6019654624787d522901d7ce36cc8ef0efaba9d4aac6719773975e86d13069107b3e39af377c3c0ac7d725763d0f9ef5ca8542188d0eec76b3f3f219014291f5ecd95a501a5040931b3a2329570f31471a083fa16388a0d010e428bd17f12be2c4e609908a939205a5b5437a508d4856d3e5b86443dca065b1520737ec0b1f39dd5b6597855901fbd3d667b30dd3be93c4ad52c30bf093d33f1e16973bdf8d6bd9c72f5164b5818552d66eeb8722bfd75b1b247be34a1c2828e03a4a2d3e46972e62e94072a1b9c45b57c87586400c41f69571539aa8403407f419c4c3cd86a2252272ccceddd3a2746d0fda32608b2342ceedff87db23000585cb99e2fe30dc00762ce3c76068934900bcae2a5fa001c175862233c8287559b2dc93404f3916d4e3ba62c70a7da479450c93d17be568c49729989ae4d4681d8586ae0ea66ed06921aba8ecfb8f374f6ec02c088fcca774f4187d1194e3cedc38acc9be5bec0185151bf2c3471c790707d2c02d7da6ca4992b94077401dd007c033753625cd64088cdd905b475f18f829a56fb22f36ff607824e03fc413f1b78c4af9818c41053145ea6d2aaec7ebcba20b8bc6dedbb66ac8283a5c0f65cf7c4aa797bf709fca28bcda175b9deccd3f66381663a038db01832900bf7e4a07d536497985415d169e03ab8e3e4090e0b0aadc7cbe81afb778719942942916737d71ec7506cb6e8ebb66cae0214f2322880b5a9be07f6225acb9ab613762e380305331049092147d8cb855ce5c052c7c74e5846bb42c7340d08cdebdfb89a6ba0aeb2ba1d69daa2d4a34107b3608168d87219dc5c2dfc808e810b9e8ec00519f2ca4fb17644b9e2cc0da3a3cf68fe70ccfb407e2954c4bdbad2eeac5b834de9010658ea4f1978d21088241f1bcb34ae4a72d367085d41b97ea4ba56b9e48bd130bea42a6b2442422d8bac93e307f572f2cdbb5a208b2d35c0e71e64ef6ca7fd8d0f35f237cf2c09f9d7359b2ceef140a84bfc5f72508c672b0e1201df4fb039e1f469e252283da1536671aaf5ac07a1ddd3de9564c43d421c4f1c7b77fd213d0ffc641185c4bed887ea7c2fdf715ae694aec5d7397c6a2c9a9e0e2ae2b3e784c03c35687d92616918795fa1d02f0273fd8f8c8b8449cd40a12fd0cef779d3933708ea948393bce98634259ad9bcf2b1a281ac55d0161c1edfb3834975659091b1253bb7fc4f3bbc97e14f4804954949aa0e9522577054d5fa246fc6d041e0541beab474732ce631fbf6791b2d036d958d51df96020d7ff52b8321bdcd6911c68692ddc4517f3a584b996f491662e7f0d81cb164b367eeb9917f038dad3134d3468d8a473fdf4b459712a63aa95124387dfa3b48da022bc093257b3d0f3ecbf1ccbb834fb1df26dcfff8e717c655313fbc7c5b6505458823a8e5b4859736eb232a928366ae38e490666af5ff16646bddf720a5208f738025751a6e21e0d5de42ab3f1831de33790cb"}, 0x100d) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000b066d841c317255e3714d79700ae33008500000086000000bf91000000000000b7020000000000007b00000084000000b700"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x21, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x59c, &(0x7f0000000100)="$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") r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3, 0x1c) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080408037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 4.707492036s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x70d5}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a80f0081004c00080045000070006800000001000000000000000400907800000000450000050000000000000000ffffffff7f000001"], 0x0) 4.409608069s ago: executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.39809939s ago: executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000370000000400000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001ae000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c000500000000810000000014003500767863616e3100"/48], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000063180200640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008"], 0x94}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x2c}}, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xffffffd9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4.33711813s ago: executing program 2: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000120001"], 0x14}], 0x1}, 0x0) 4.02739695s ago: executing program 0: r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xffffc000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000180)=0xa424) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0xfffffffd, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1c, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "56420008090000000000000000800200"}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89) r5 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000140)=ANY=[], 0xfd, 0x150d, &(0x7f0000001840)="$eJzs3Au4TtW3MPAx5pyLTeJNcl9jjsWbXCZJEkqSS5IkIbknJEmSJIlNbklIQq47yT3knjZt9/sl96SdvyRJQkKS+T1b+pz+l6PzP51P39nj9zzr2XPstcZcY+7xvPtdaz17v992HlK1QbVKdZkZ/h36twH++iURABIAoD8AZAOAAABKZy+dPW1/Jo2J/9ZJxP+QetOudgXiapL+p2/S//RN+p++Sf/TN+l/+ib9T9+k/+mb9F+IdG1GnutkS7+bPP///5z67yTL+3+6gP9qh/T/fxv9Xzpa+p++Sf/TN+l/+ib9T8+Cq12AuMrk9Z++Sf+FSNf+9GfK689e7Wfasv0XNiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4v+Bs/4yAwC/ja92XUIIIYQQQgghhPjz+A+udgVCCCGEEEIIIYT4n4egQIOBADJARkiATJAZroEscC1khWwQg+sgO1wPOeAGyAm5IDfkgbyQD/JDCAQWGCIoAAUhDjdCIbgJCkMRKArFwEFxKAE3Q0m4BUrBrVAaboMycDuUhXIXz5nmLqgId0MluAcqQxWoCtXgXqgO90ENuB9qwgNQCx6E2vAQ1IGHoS7Ug/rwCDSAR6EhNILG0ASaQjNofoX8pGz/LP8l6AYvQ3foAYnQE3rBK9Ab+kBf6Af94VUYAK/BQHgdBsFgGAJvwFB4E4bBWzAcRsBIeBtGwWgYA2NhHIyHJHgHJsC7MBHee/RamAxTYCpMg+kwA96HmTALZsMHMAfmwjxIyrQAFsIi+BAWw0eQDEtgKXwMKbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8Alsg+2wA3bCLtgNe+BT2AufwT74HFLxiz+UnxHgUv6Z3+dDFwQEVKjQoMEMmAETMAEzY2bMglkwK2bFGMYwO2bHHJgDc2JOzI25MRHzYn7Mj4SEjIwFsADGMY6FsBAWxsJYFIuiQ4clsASWxFuwFJbC0lgay2AZLIvlsBzegXdgBayAFbEiVsJKWBkrY1WsivfivXgf1sAaWBNrYi2shbWxNtbBOlgX62J9rI8NsAE2xIbYGBtjU2yKzbE5tsAW2BJbYmtsjW2wDbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXfBFfBFfwpfwZXwZe2Bl1RN7YS/sjb2xL/bDfvgqDsDX8DV8HQfhYByCb+Ab+CYOw9M4HEfgSByJFdRoHINjkdV4TMIkzAgTcCJOxEk4GSfjVJyG03EGzsCZOAtn4Qc4B+fiXJyP83EhLsJFuBg/wmRMxqV4BlNwGS7HFbgSV+FKXINrcQ2uxw24HjfhJtyCW/AT/AS343bciTtxN+7GT/FT/Aw/w0GYiqm4H/fjATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcT+BJPIGn8BSexjN4FgDO4Tk8j+fxAl5Ie/GrNEYZlUFlUAkqQWVWmVUWlUVlVVlVTMVUdpVd5VA5VE6VU+VWuVVelVflV/kVKVKsIlVAFVBxFVeFVCFVWBVWRVVR5ZRTJVQJVVKVVKVUKVVa3abKqNtVWVVOtXJ3qDtUBdXaVVR3q0qqkqqsqqiqqpqqpqqr6qqGqqFqqpqqlqqlaquHVB3VE/tiPZXWmQZqMDZUQ7CxaqKaqmbqTXxMtVDDsKVqpVqrJ9QIHI5tVQvXTj2t2qsx2EE9q8bic6qTGo+d1Quqi3pRdVUvqW6qpeuueqhJ2FP1UlOxt+qj+qp+aiZWUWkdq6peVy9lHKyGqDfUQnxTDVNvqeFqhBqp3laj1Gg1Ro1V49R4laTeURPUu2qiek9NUpPVFDVVTVPT1Qz1vpqpZqnZ6gM1R81V89R8tUAtVIvUh2qx+kglqyVqqfpYpahlarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9Q2tV3tUDvVLrVb7VGfqr3qM7VPfa5S1Rdqv/qbOqC+VAfVV+qQ+lodVt+oI+pbdVR9p46p79VxdUKdVD+oU+pHdVqdUWfVT+qc+lmdV7+oC8or0KiV1troQGfQGXWCzrR+ya9/Aqaz6mw6pq/T2fX1Ooe+QefUuXRuk0fn1fl0fh1q0lazjnQBXVDH9Y26kL5JF9ZFdFFdTDtdXJfQN+uS+hZdSt+qS+vbdBl9uy6ry+nyHvSduoK+S1fUd+tK+h5dWVfRVXU1fa+uru/TNfT9uqZ+QNfSD+ra+iFdRz+s6+p6ur5+RDfQj+qGupFurJvoprqZbq4f0y3047qlbqVb6yd0G/2kbquf0u3007q9fkZ30M/qjvo53Uk/rzvrF3QX/aLuqn/RF7TX3XUPnah76l76Fd1b99GZdD/dX7+qB+jX9ED9uh6kB+sh+g09VL+ph+m39HA9Qo/Ub+tRerQeo8fqcXq8TtLv6An6XT1Rv6cn6cl6ip6qp+npuu+lmWb/gfx3/0n+wItn36K36k/0Nr1d79A79S69W+/Re/RevVfv0/t0qk7V+/V+fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1Cf2T/kGf0j/q0/qMPqN/0uf0OX3+0s8ADBpltDEmMBlMRpNgMpnM5hqTxVxrsppsJmauM9nN9SaHucHkNLlMbpPH5DX5TH4TGjLWsIlMAVPQxM2NppC5yRQ2RUxRU8w4U9yUMDf/t/OvVF9z09y0MC1MS9PStDatTRvTxrQ1bU070860N+1NB9PBdDQdTSfTyXQ2nU0X08V0NV1NN9PNdDfdTaJJNL3MK6a36WP6mn6mv3nVDDADzEAz0Awyg8wQM8QMNUPNMDPMDDfDzUgz0owyo8wYM8aMM+NMks9mJpgJZqKZaCaZSWZK/2xmmplmZpgZZqaZaWab2WaOmWPmmXlmgVlgFplFZrFZbJJNsllqlpoUs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMilmq9lqtpltZofZYXaZXWaP2WP2mr1mn9lnUk2q2W/2mwPmgDloDppD5pA5bA6bI+aIOWqOmmPmmDlujpuT5qQ5ZU6Z0+a0OWvOmnPmnDlvzpsL5kLaZV+gAhWYwAQZggxBQpAQZA4yB1mCLEHWIGsQC2JB9iB7kCO4IcgZ5ApyB3mCvEG+IH8QBhTYgIMoKBAUDOLBjUGh4KagcFAkKBoUC1xQPCgR3ByUDG4JSgW3BqWD24Iywe1B2aBcUD64I7gzqBDcFVQM7g4qBfcElYMqQdWgWnBvUD24L6gR3B/UDB4IagUPBrWDh4I6wcNB3aBeUD94JGgQPBo0DBoFjYMmQdOgWdD84vw9/6T5vT+d63HXPewRJoY9w17hK2HvsE/YN+wX9g9fDQeEr4UDw9fDQeHgcEj4Rjg0fDMcFr4VDg9HhCPDt8NR4ehwTDg2HBeOD5PCd8IJ4bvhxPC9cFI4OZwSTA2nhdPDGeH74cxwVjg7/CCcE84N54XzwwXhwhB/vSSG5HBJuDT8OEwJl4XLwxXhynBVuDpcE64N14Xrww3hxnBT6QG/HhpuC7eHO8Kd4a5wd7gn/DTcG34W7gs/D1PDL8L94d/CA+GX4cHwq/BQ+HV4OPwmPBJ+Gx4NvwuPhd+Hx8MT4cnwh/BU+GN4OjwTng1/Cs+FP4fnw1/CC6FPu7hPe3snQ4YyUAZKoATKTJkpC2WhrJSVYhSj7JSdclAOykk5KTflpryUl/JTfkrDxFSAClCc4lSIClFhKkxFqSg5clSCSlBJKkmlqBSVptJUhspQWSpL5ak83Ul30l10F91Nd9M9dA9VoSpUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSf6lMDakANqSE1psbUlJpSc2pOLagFtaSW1JpaUxtqQ22pLbWjdtSe2lMH6kAdqSN1ok7UmTpTF+pCXakrdaNu1J26UyIlUi/qRb2pN/WlvtSf+tMAGkADaSANokE0hIbQUBpKw2gYDacRNJLeplE0msbQWBpH4ymJkmgCTaCJNJEm0SSaQlNoGk2jGTSDZtJMmk2zaQ7NoXk0jxbQAlpEi2gxLaZkSqaltJRSKIWW03JaSStpNa2mtbSW1tN62kgbaTNtpq20lbbRNtpBO2gX7aI9tIf20l7aR/solVJpP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HaeTdJJO0Sk6TafpLJ2lc/Qznadf6AJ5SrCZbGZ7jc1ir7VZbTb793Fum8fmtflsfhvanDbX72Ky1ha2RWxRW8w6W9yWsDf/Q1zWlrPl7R32TlvB3mUr2rI2E/zHuLq9z9aw99ua9gFbzd77u7iWfdDWto/aOraRrWub2Pq2mW1gH7UNbSPb2DaxTW0z28Y+advap2w7+7Rtb5/5h3ix/ciutevservB7rWf2bP2J3vEfmvP2Z9td9vD9rev2gH2NTvQvm4H2cG/jwHsSPu2HWVH2zF2rB1nx/9DPMVOtdPsdDvDvm9n2ln/EC+yH9o5NtnOs/PtArvwYpxWU7JdYpfaj22KXWaX2xV2pV1lV9s1/7fWFXaT3Wy32D32U7vNbrc77E67y+6+GKetY5/93KbaL+xh+409YL+0B+1Re8h+fTFOW99R+509Zr+3x+0Je9L+YE/ZH+1pe+bi+tPW/oP9xV6w3gIjK9ZsOOAMnJETOBNn5ms4C1/LWTkbx/g6zs7Xcw6+gXNyLs7NeTgv5+P8HDKxZeaIC3BBjvONXIhv4sJchItyMXZcnEvwzVySb+FSfCuX5tu4DN/OZbkcl+c7+E6uwHdxRb6bK/E9XJmrcFWuxvdydb6Pa/D9XJMf4Fr8INfmh7gOP8x1uR7X50e4AT/KDbkRN+Ym3JSbcXN+jFvw49ySW3FrfoLb8JPclp/idvw0t+dnuAM/yx35Oe7Ez3NnfoG78IvclV/ibvwyd+cenMg9uRe/wr25D/flftyfX+UB/BoP5Nd5EA/mIfwGD+U3eRi/xcN5BI/kt3kUj+YxPJbH8XhO4nd4Ar/LE/k9nsSTeQpP5Wk8nWfw+zyTZ/Fs/oDn8Fyex/N5AS/kRfwhL+aPOJmX8FL+mFN4GS/nFbySV/FqXsNreR2v5w28kTfxZt7CW/kT3sbbeQfv5F28m/fwp7yXP+N9/Dmn8he8n//GB/hLPshf8SH+mg/zN3yEv+Wj/B0f4+/5OJ/gk/wDn+If+TSf4bP8E5/jn/k8/8IX2DNEGKlIRyYKogxRxighyhRljq6JskTXRlmjbFEsui7KHl0f5YhuiHJGuaLcUZ4ob5Qvyh+FEUU24iiKCkQFo3h0Y1QouikqHBWJikbFIhcVj0pEN0clo1uiUtGtUenotqhMdHtUNioXlY/uiO6MKkR3RRWju6NK0T1R5ahKVDWqFt0bVY/ui2pE90c1oweiUtGDUe3ooahO9HBUN6oX1Y8eiRpEj0YNo0ZR46hJ1DRqFjWPHotaRI9HLaNWUevoiahN9GTUNnoqahc9HbWPnrm8v0jw67vp3+1PjHpG+tITsvv1gvjC+KL4h/HF8Y/iyfEl8aXxj+Mp8WXx5fEV8ZXxVfHV8TXxtfF18fXxDfGN8U3xzfEtce+rZQSHaTfCYFzgMriMLsFlcpndNS6Lu9ZlddlczF3nsrvrXQ53g8vpcrncLo/L6/K5/C505KxjF7kCrqCLuxtdIXeTK+yKuKKumHOuuCvhmrnmrrlr4R53LV0r19o94Z5wT7on3VMJlwp3HdyzrqN7znVyz7vn3Quui3vRdXUvuW7uZdfd9XCJLtH1cr1cb9fb9XV9XX/X3w1wA9xAN9ANcoPcEDfEDXVD3TA3zA13w91IN9KNcqPcGDfGjXPjXJJLchPcBDfRTXST3CQ3xU1x09w0N8PNcDPdTDfbzXZz3Bw3z81zC9wCt8gtcovdYpfskt1St9SluBS33C13K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt81tczvcDrfL7XJ73B631+11+9w+l+pS3X633x1wB9xB95U75L52h9037oj71h1137lj7nt33J1wJ53Xp9yP7rQ74866n9w597M7735xF5x3SbF3YhNi78Ymxt6LTYpNjk2JTY1Ni02PzYi9H5sZmxWbHfsgNic2NzYvNj+2ILYwtij2YWxx7KNYcmxJbGns41hKbFlseWxFbGVsVcz7fNsiX8AX9HF/oy/kb/KFfRFf1Bfzzhf3JfzNvqS/xZfyt/rS/jZfxt/uy/pyvrxv5Bv7Jr6pb+ab+8d8C/+4b+lb+db+Cd/GP+nb+qd8O/+0b++f8R38s76jf8538s/7zv6FuZe67Lv5l31338Mn+p6+l3/F9/Z9fF/fz/f3r/oB/jU/0L/uB/nBfoh/ww/1b/ph/i0/3I/wI/3bfpQf7cf4sX6cH++T/Dt+gn/XT/Tv+Ul+sp/ip/ppfrqf4d/3M/0sP9t/4Of4uX6en+8X+IV+kf/QL/Yf+WS/xC/1H/sUv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+J3+a3+x1+p9/ld/s9/lO/13/m9/nPfar/wu/3f/MH/Jf+oP/KH/Jf+8P+G3/Ef+uP+u/8Mf+9P+5P+JP+B3/K/+hP+zP+rP/Jn/M/+/P+F39B/mdNCCGEEOIP0VfY3/OffE9d2tL0AoBrt+c59Pdzbsz567iP2ts+BgBP9+hc77etXr3ExMRLx6ZoCArOB4DY5fyLnz9wKV4GreFJaAetoOQ/ra+PKn/xuu8/mz9+G0BmgEy/5aTdHmWGv5//ln8xf6MP+UrzzwcoXPByTtqJfosvz1/qX8y/u80V5s/0ZRJAy/+QkwUux5fnLwGPwzPQ7ndHCiGEEEIIIYQQv+qjznW50v1t2v15XnM5JyNcjq90f34FFf+MNQghhBBCCCGEEOI/99yLXZ96rF27Vh3/Nw8y/jXK+AsMEAD+AmVc7QHgX6KMv/Tgav9mEkIIIYQQQvzZLl/0X+1KhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKI9Ovf/4Qw9YcPvtprFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIa62/xMAAP//8L5aaQ==") r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000001800)="8342a546373ca174614b6ffdeaa7bb2ee723305685f7caf47edb", 0x1a, 0x2c091, 0x0, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.795040281s ago: executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000001140)=""/136, 0x57}], 0x1) 3.775476712s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) symlinkat(&(0x7f0000000180)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000240)='./bus\x00') 3.656616105s ago: executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000040)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6cfa7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x37}, 0x48, 0xffffffffffffffff) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000005340), 0xbf) 3.267566686s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000002240)={[{@nossd_spread}, {@datasum}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@clear_cache}, {@datacow}, {@nobarrier}, {@nodiscard}, {@ssd}, {@enospc_debug}]}, 0x3, 0x55a3, &(0x7f0000005640)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x10, 0x800000000000000, 0x10000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x127140, 0x0) 3.214942295s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x9c}}, 0x0) ioperm(0x0, 0x81, 0x80) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c7362736563746f723d3078666666666666666666666666666665372c646d6f64653d307830303030303030303030303030306630303030303030303030303030332c6d61703d6e6f726d616c2c6f76657272696465726f29a5349fb12cc34f7ab448636b7065726d2c6d61703d6f66662c626c6f636b3d3078303030303030303030303030303830302c63727566742c756e686964652c73657373696f6e3d3078303030303030303030303030303036322c636864636b3d72656c617865642c686964652c00"/220], 0x2, 0xa03, &(0x7f0000003a40)="$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") ioctl$sock_SIOCINQ(r5, 0x5760, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) 2.540510768s ago: executing program 4: syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.306416081s ago: executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000002e00"], 0x0, 0x1b}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000580)='./bus\x00', 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000480)=@deltaction={0x8c, 0x31, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6da}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004240)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x0, 0x5, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x2e, [@private=0xa010100]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x3, [0x8]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x10005]}, @ra={0x94, 0x4}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4b, 0x3f, 0x5b, 0x8, 0x5, 0xa7, 0xc8, 0x2, 0x9, 0x22, 0x1f, 0xaf}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2, 0x400000}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 1.452024586s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x70d5}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a80f0081004c00080045000070006800000001000000000000000400907800000000450000050000000000000000ffffffff7f000001"], 0x0) 1.424141577s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 509.071331ms ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f000001f980)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x280) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/35) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000001380), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) lseek(r2, 0xffff, 0x0) ftruncate(r3, 0x1f) write$FUSE_ATTR(r2, &(0x7f0000000340)={0x78}, 0x78) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x3, "248f07"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0}) 434.623683ms ago: executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000120001"], 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): group descriptors [ 502.357340][ T7772] EXT4-fs (loop4): group descriptors corrupted! [ 502.765834][ T7774] loop1: detected capacity change from 0 to 1764 [ 502.792311][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.792875][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.628175][ T7783] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 503.765671][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.909329][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.989956][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.998061][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.112562][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.120474][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.815029][ T6182] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 504.914576][ T6182] usb 1-1: USB disconnect, device number 12 [ 505.245380][ T7803] loop4: detected capacity change from 0 to 64 [ 505.376484][ T29] audit: type=1804 audit(1717533394.005:367): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir571224882/syzkaller.gF5a8C/64/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 505.480825][ T7807] loop0: detected capacity change from 0 to 128 [ 505.513331][ T29] audit: type=1804 audit(1717533394.136:368): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir571224882/syzkaller.gF5a8C/64/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 505.539476][ T29] audit: type=1800 audit(1717533394.196:369): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 505.617012][ T7798] loop1: detected capacity change from 0 to 4096 [ 505.655372][ T7798] ntfs3: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 505.674215][ T7807] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 505.688671][ T7807] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 506.829254][ T7815] 9pnet_fd: Insufficient options for proto=fd [ 506.915245][ T7817] loop2: detected capacity change from 0 to 128 [ 506.951903][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.008734][ T7817] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 507.067245][ T7817] sysv_free_block: trying to free block not in datazone [ 507.078299][ T7817] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 507.414180][ T7669] veth0_vlan: entered promiscuous mode [ 507.526074][ T7669] veth1_vlan: entered promiscuous mode [ 507.573915][ T7815] loop4: detected capacity change from 0 to 4096 [ 507.720202][ T7815] NILFS (loop4): unrecognized mount option "" [ 507.836526][ T7669] veth0_macvtap: entered promiscuous mode [ 507.909703][ T7823] loop0: detected capacity change from 0 to 512 [ 507.943841][ T7669] veth1_macvtap: entered promiscuous mode [ 507.973365][ T7823] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 507.984906][ T7823] EXT4-fs (loop0): group descriptors corrupted! [ 508.059729][ T7825] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 508.197083][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.210113][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.210211][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.232069][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.242235][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.253121][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.263455][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.274433][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.290308][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.507994][ T7815] loop4: detected capacity change from 0 to 2048 [ 508.584263][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.595108][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.605476][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.616996][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.627203][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.638060][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.649024][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.660096][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.676305][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.784108][ T7815] EXT4-fs error (device loop4): __ext4_fill_super:5464: inode #2: comm syz-executor.4: unexpected EA_INODE flag [ 508.827831][ T7815] EXT4-fs (loop4): Remounting filesystem read-only [ 508.835223][ T7815] EXT4-fs (loop4): get root inode failed [ 508.841739][ T7815] EXT4-fs (loop4): mount failed [ 508.900706][ T7669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.909845][ T7669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.920374][ T7669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.929468][ T7669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.160814][ T5349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 510.036689][ T7834] loop1: detected capacity change from 0 to 40427 [ 510.074268][ T7834] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(134218752) [ 510.084218][ T7834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 510.101109][ T5349] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 510.102812][ T7834] F2FS-fs (loop1): invalid crc value [ 510.178191][ T7834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 510.215724][ T5349] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.227045][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.238308][ T5349] usb 1-1: SerialNumber: syz [ 510.514119][ T7834] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 510.522110][ T7834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 510.726410][ T7846] loop2: detected capacity change from 0 to 64 [ 510.971422][ T29] audit: type=1804 audit(1717533399.528:370): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3832909917/syzkaller.zA6HKb/160/file2/bus" dev="loop2" ino=3 res=1 errno=0 [ 511.055643][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.070182][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.158023][ T29] audit: type=1804 audit(1717533399.788:371): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3832909917/syzkaller.zA6HKb/160/file2/bus" dev="loop2" ino=3 res=1 errno=0 [ 511.256596][ T7852] loop4: detected capacity change from 0 to 128 [ 511.265183][ T29] audit: type=1800 audit(1717533399.888:372): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="loop2" ino=3 res=0 errno=0 [ 511.320068][ T7852] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 511.338020][ T7852] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 512.487660][ T7863] loop4: detected capacity change from 0 to 128 [ 512.564096][ T7863] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 512.600366][ T7863] sysv_free_block: trying to free block not in datazone [ 512.609308][ T7863] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 512.694716][ T7865] Restarting kernel threads ... done. [ 512.761975][ T7865] syz-executor.2[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.762610][ T7865] syz-executor.2[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.917509][ T5349] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 513.037856][ T5349] usb 1-1: USB disconnect, device number 13 [ 513.047379][ T7865] loop2: detected capacity change from 0 to 1024 [ 513.167412][ T7865] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.515089][ T7865] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0 [ 513.669857][ T7865] Quota error (device loop2): write_blk: dquota write failed [ 513.677897][ T7865] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 513.689456][ T7865] EXT4-fs error (device loop2): ext4_acquire_dquot:6882: comm syz-executor.2: Failed to acquire dquot type 0 [ 513.727336][ T7865] EXT4-fs error (device loop2): ext4_free_blocks:6576: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 513.787074][ T7865] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0 [ 513.806687][ T7865] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 513.816966][ T4424] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 513.829542][ T4424] EXT4-fs error (device loop2): ext4_release_dquot:6905: comm kworker/u8:28: Failed to release dquot type 0 [ 513.852451][ T7876] loop0: detected capacity change from 0 to 512 [ 513.869383][ T7865] EXT4-fs (loop2): 1 orphan inode deleted [ 513.875725][ T7865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.901119][ T7876] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 513.913649][ T7876] EXT4-fs (loop0): group descriptors corrupted! [ 514.333242][ T7880] 9pnet_fd: Insufficient options for proto=fd [ 514.431748][ T5072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.691430][ T7880] loop1: detected capacity change from 0 to 4096 [ 514.752257][ T7880] NILFS (loop1): unrecognized mount option "" [ 515.595238][ T7880] loop1: detected capacity change from 0 to 2048 [ 515.673596][ T7896] loop4: detected capacity change from 0 to 64 [ 515.730136][ T7880] EXT4-fs error (device loop1): __ext4_fill_super:5464: inode #2: comm syz-executor.1: unexpected EA_INODE flag [ 515.800103][ T7880] EXT4-fs (loop1): Remounting filesystem read-only [ 515.807668][ T7880] EXT4-fs (loop1): get root inode failed [ 515.813669][ T7880] EXT4-fs (loop1): mount failed [ 515.937623][ T29] audit: type=1804 audit(1717533404.581:373): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir571224882/syzkaller.gF5a8C/70/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 516.075654][ T29] audit: type=1804 audit(1717533404.711:374): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir571224882/syzkaller.gF5a8C/70/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 516.102062][ T29] audit: type=1800 audit(1717533404.761:375): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 516.170023][ T7906] loop2: detected capacity change from 0 to 128 [ 516.224898][ T7906] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 516.239330][ T7906] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 516.599440][ T3167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.599560][ T3167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.696235][ T7911] loop0: detected capacity change from 0 to 128 [ 516.713096][ T7911] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 516.723808][ T7911] sysv_free_block: trying to free block not in datazone [ 516.735416][ T7911] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 516.760008][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.768767][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.876811][ T6181] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 517.478544][ T5349] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 517.643881][ T5349] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 517.955367][ T7919] loop2: detected capacity change from 0 to 512 [ 518.011979][ T7919] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 518.026368][ T7919] EXT4-fs (loop2): group descriptors corrupted! [ 518.036897][ T6181] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 518.038510][ T7920] Restarting kernel threads ... done. [ 518.116054][ T7916] loop3: detected capacity change from 0 to 1764 [ 518.131737][ T7920] syz-executor.0[7920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.133182][ T7920] syz-executor.0[7920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.173825][ T6181] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.195838][ T6181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 518.204192][ T6181] usb 2-1: SerialNumber: syz [ 518.212960][ T7916] ISOFS: Unable to identify CD-ROM format. [ 518.428287][ T7920] loop0: detected capacity change from 0 to 1024 [ 518.510527][ T7920] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.915940][ T7920] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 518.943145][ T7920] Quota error (device loop0): write_blk: dquota write failed [ 518.954192][ T7920] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 518.967847][ T7920] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 0 [ 518.998682][ T29] audit: type=1326 audit(1717533407.632:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.022727][ T29] audit: type=1326 audit(1717533407.682:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.080413][ T7920] EXT4-fs error (device loop0): ext4_free_blocks:6576: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 519.083905][ T29] audit: type=1326 audit(1717533407.742:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.122809][ T29] audit: type=1326 audit(1717533407.762:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.148738][ T29] audit: type=1326 audit(1717533407.792:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.174965][ T29] audit: type=1326 audit(1717533407.792:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 519.223536][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.233086][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.260697][ T7920] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 519.309760][ T7920] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 519.339854][ T3547] EXT4-fs error (device loop0): ext4_release_dquot:6905: comm kworker/u8:23: Failed to release dquot type 0 [ 519.382313][ T7920] EXT4-fs (loop0): 1 orphan inode deleted [ 519.389779][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.824633][ T7939] 9pnet_fd: Insufficient options for proto=fd [ 519.832784][ T5349] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 520.108065][ T5082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.223349][ T7939] loop3: detected capacity change from 0 to 2048 [ 520.276785][ T5349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.289361][ T5349] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 520.322858][ T7942] loop4: detected capacity change from 0 to 1764 [ 520.358873][ T7939] EXT4-fs error (device loop3): __ext4_fill_super:5464: inode #2: comm syz-executor.3: unexpected EA_INODE flag [ 520.392267][ T7939] EXT4-fs (loop3): Remounting filesystem read-only [ 520.399696][ T7939] EXT4-fs (loop3): get root inode failed [ 520.406375][ T7939] EXT4-fs (loop3): mount failed [ 520.529223][ T5349] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.539268][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.547773][ T5349] usb 3-1: Product: syz [ 520.552270][ T5349] usb 3-1: Manufacturer: syz [ 520.557491][ T5349] usb 3-1: SerialNumber: syz [ 520.590810][ T7946] loop0: detected capacity change from 0 to 64 [ 520.982566][ T6181] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 521.043634][ T6181] usb 2-1: USB disconnect, device number 13 [ 521.139668][ T7953] loop4: detected capacity change from 0 to 128 [ 521.161384][ T7953] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 521.161930][ T7953] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 521.311334][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 521.311431][ T29] audit: type=1326 audit(1717533409.993:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 521.347821][ T29] audit: type=1326 audit(1717533409.993:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 521.358096][ T7952] loop3: detected capacity change from 0 to 2048 [ 521.623906][ T7955] loop1: detected capacity change from 0 to 128 [ 521.653681][ T7955] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 521.665036][ T7955] sysv_free_block: trying to free block not in datazone [ 521.666307][ T7955] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 521.817342][ T5349] usb 3-1: USB disconnect, device number 11 [ 522.849268][ T6182] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 522.890133][ T7963] loop4: detected capacity change from 0 to 512 [ 522.947354][ T6182] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 523.084461][ T7964] loop1: detected capacity change from 0 to 1764 [ 523.123465][ T7963] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 523.135056][ T7963] EXT4-fs (loop4): group descriptors corrupted! [ 523.166000][ T7964] ISOFS: Unable to identify CD-ROM format. [ 523.585525][ T7972] Restarting kernel threads ... done. [ 523.640250][ T7972] syz-executor.2[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.643924][ T7972] syz-executor.2[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.958016][ T7972] loop2: detected capacity change from 0 to 1024 [ 524.057512][ T7972] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 524.167792][ T7972] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0 [ 524.176630][ T7981] loop1: detected capacity change from 0 to 64 [ 524.223829][ T7972] Quota error (device loop2): write_blk: dquota write failed [ 524.233642][ T7972] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 524.244911][ T7972] EXT4-fs error (device loop2): ext4_acquire_dquot:6882: comm syz-executor.2: Failed to acquire dquot type 0 [ 524.248144][ T7982] loop4: detected capacity change from 0 to 1764 [ 524.326011][ T29] audit: type=1804 audit(1717533412.985:461): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir450203418/syzkaller.CuiTXS/123/file2/bus" dev="loop1" ino=3 res=1 errno=0 [ 524.359821][ T7976] loop0: detected capacity change from 0 to 2048 [ 524.379590][ T7972] EXT4-fs error (device loop2): ext4_free_blocks:6576: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 524.420455][ T7972] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0 [ 524.437070][ T4328] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 524.439343][ T7972] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 524.446698][ T4328] EXT4-fs error (device loop2): ext4_release_dquot:6905: comm kworker/u8:27: Failed to release dquot type 0 [ 524.464120][ T6181] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 524.518499][ T7976] EXT4-fs error (device loop0): __ext4_fill_super:5464: inode #2: comm syz-executor.0: unexpected EA_INODE flag [ 524.583856][ T7972] EXT4-fs (loop2): 1 orphan inode deleted [ 524.590694][ T7972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.619479][ T29] audit: type=1804 audit(1717533413.225:462): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir450203418/syzkaller.CuiTXS/123/file2/bus" dev="loop1" ino=3 res=1 errno=0 [ 524.621378][ T7976] EXT4-fs (loop0): Remounting filesystem read-only [ 524.645027][ T29] audit: type=1800 audit(1717533413.295:463): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=3 res=0 errno=0 [ 524.651612][ T7976] EXT4-fs (loop0): get root inode failed [ 524.679794][ T7976] EXT4-fs (loop0): mount failed [ 524.945122][ T6181] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 525.053579][ T6181] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.064012][ T6181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 525.073474][ T6181] usb 4-1: SerialNumber: syz [ 525.179400][ T5072] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.246229][ T7988] loop4: detected capacity change from 0 to 128 [ 525.257803][ T7990] loop0: detected capacity change from 0 to 128 [ 525.297801][ T7988] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 525.313976][ T7988] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 525.331588][ T7990] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 525.341850][ T7990] sysv_free_block: trying to free block not in datazone [ 525.350748][ T7990] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 525.687617][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.688356][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.785299][ T29] audit: type=1326 audit(1717533414.356:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 525.785575][ T29] audit: type=1326 audit(1717533414.356:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 525.974232][ T6182] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 526.365698][ T6182] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.379315][ T6182] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.393433][ T6182] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 526.403249][ T6182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.418584][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 526.418749][ T29] audit: type=1326 audit(1717533415.056:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 526.454558][ T29] audit: type=1326 audit(1717533415.056:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 526.478804][ T29] audit: type=1326 audit(1717533415.056:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 526.524530][ T6182] usb 2-1: config 0 descriptor?? [ 526.588606][ T6182] appletouch 2-1:0.0: Could not find int-in endpoint [ 526.596032][ T6182] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 526.607448][ T6182] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 526.922336][ T6185] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 527.240651][ T29] audit: type=1326 audit(1717533415.926:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 527.264523][ T29] audit: type=1326 audit(1717533415.926:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 527.342916][ T6185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.354712][ T6185] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 527.428560][ T5348] usb 2-1: USB disconnect, device number 14 [ 527.551446][ T6181] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 527.593510][ T6185] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.605142][ T6185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.614461][ T6185] usb 3-1: Product: syz [ 527.620520][ T6185] usb 3-1: Manufacturer: syz [ 527.626339][ T6185] usb 3-1: SerialNumber: syz [ 527.647524][ T8008] loop0: detected capacity change from 0 to 512 [ 527.660528][ T6181] usb 4-1: USB disconnect, device number 17 [ 527.728073][ T8008] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 527.742376][ T8008] EXT4-fs (loop0): group descriptors corrupted! [ 527.945615][ T8013] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.966580][ T29] audit: type=1326 audit(1717533416.617:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 527.966851][ T29] audit: type=1326 audit(1717533416.617:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 527.967105][ T29] audit: type=1326 audit(1717533416.617:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9de907bb60 code=0x7ffc0000 [ 527.967471][ T29] audit: type=1326 audit(1717533416.617:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 527.967806][ T29] audit: type=1326 audit(1717533416.627:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 528.184745][ T8015] loop4: detected capacity change from 0 to 1764 [ 528.550078][ T8020] loop1: detected capacity change from 0 to 64 [ 528.625863][ T5349] usb 3-1: USB disconnect, device number 12 [ 528.894297][ T8017] loop0: detected capacity change from 0 to 2048 [ 528.903147][ T8021] Restarting kernel threads ... done. [ 528.985872][ T8017] EXT4-fs error (device loop0): __ext4_fill_super:5464: inode #2: comm syz-executor.0: unexpected EA_INODE flag [ 529.013687][ T8021] syz-executor.3[8021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.014716][ T8021] syz-executor.3[8021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.027455][ T8017] EXT4-fs (loop0): Remounting filesystem read-only [ 529.047637][ T8017] EXT4-fs (loop0): get root inode failed [ 529.053851][ T8017] EXT4-fs (loop0): mount failed [ 529.149071][ T8023] loop3: detected capacity change from 0 to 1024 [ 529.190044][ T8028] loop4: detected capacity change from 0 to 128 [ 529.236718][ T8028] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 529.276075][ T8028] sysv_free_block: trying to free block not in datazone [ 529.285749][ T8028] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 529.318814][ T8023] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 529.482467][ T8023] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 529.568122][ T8023] EXT4-fs error (device loop3): ext4_acquire_dquot:6882: comm syz-executor.3: Failed to acquire dquot type 0 [ 529.614551][ T8023] EXT4-fs error (device loop3): ext4_free_blocks:6576: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 529.688406][ T8023] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 529.759694][ T4328] EXT4-fs error (device loop3): ext4_release_dquot:6905: comm kworker/u8:27: Failed to release dquot type 0 [ 529.787463][ T8023] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 529.922893][ T8023] EXT4-fs (loop3): 1 orphan inode deleted [ 529.929277][ T8023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.533761][ T8037] loop1: detected capacity change from 0 to 128 [ 530.686853][ T8037] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 530.701308][ T8037] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 531.354054][ T7669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.380429][ T5349] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 531.395481][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.693928][ T8047] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.812258][ T5349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.823172][ T5349] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.836918][ T5349] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 531.847402][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.890059][ T5349] usb 5-1: config 0 descriptor?? [ 531.997231][ T5349] appletouch 5-1:0.0: Could not find int-in endpoint [ 532.004404][ T5349] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 532.016039][ T5349] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 532.200074][ T8053] loop3: detected capacity change from 0 to 512 [ 532.245801][ T8053] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 532.257238][ T8056] loop2: detected capacity change from 0 to 64 [ 532.259767][ T8053] EXT4-fs (loop3): group descriptors corrupted! [ 532.358802][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 532.358881][ T29] audit: type=1326 audit(1717533421.049:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.388798][ T29] audit: type=1326 audit(1717533421.059:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.413016][ T29] audit: type=1326 audit(1717533421.069:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.437745][ T29] audit: type=1326 audit(1717533421.079:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.467370][ T29] audit: type=1326 audit(1717533421.079:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.493212][ T29] audit: type=1326 audit(1717533421.099:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.516611][ T29] audit: type=1326 audit(1717533421.109:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.540088][ T29] audit: type=1326 audit(1717533421.109:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.564170][ T29] audit: type=1326 audit(1717533421.119:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.588114][ T29] audit: type=1326 audit(1717533421.119:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x7ffc0000 [ 532.720422][ T8060] loop1: detected capacity change from 0 to 2048 [ 532.814352][ T8060] EXT4-fs error (device loop1): __ext4_fill_super:5464: inode #2: comm syz-executor.1: unexpected EA_INODE flag [ 532.869407][ T8060] EXT4-fs (loop1): Remounting filesystem read-only [ 532.876781][ T8060] EXT4-fs (loop1): get root inode failed [ 532.883539][ T8060] EXT4-fs (loop1): mount failed [ 532.981568][ T8069] loop3: detected capacity change from 0 to 128 [ 533.025310][ T5128] usb 5-1: USB disconnect, device number 11 [ 533.096321][ T8069] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 533.121167][ T8069] sysv_free_block: trying to free block not in datazone [ 533.130258][ T8069] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 533.211850][ T5349] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 533.650448][ T5349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.661002][ T5349] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 534.021714][ T5349] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.031646][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.040176][ T5349] usb 1-1: Product: syz [ 534.044607][ T5349] usb 1-1: Manufacturer: syz [ 534.051484][ T5349] usb 1-1: SerialNumber: syz [ 535.206665][ T6181] usb 1-1: USB disconnect, device number 14 [ 535.222600][ T8080] loop3: detected capacity change from 0 to 2048 [ 535.583538][ T8087] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.604068][ T6800] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 2 [ 535.648781][ T8089] loop2: detected capacity change from 0 to 128 [ 535.673703][ T8089] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 535.688351][ T8089] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 536.299577][ T6185] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 536.314358][ T8096] loop1: detected capacity change from 0 to 512 [ 536.394909][ T8096] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 536.395055][ T8096] EXT4-fs (loop1): group descriptors corrupted! [ 536.547014][ T5349] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 536.656828][ T6185] usb 5-1: Using ep0 maxpacket: 8 [ 536.815520][ T8099] loop3: detected capacity change from 0 to 64 [ 536.827713][ T6185] usb 5-1: config 51 has an invalid interface number: 9 but max is 0 [ 536.836144][ T6185] usb 5-1: config 51 has no interface number 0 [ 536.843636][ T6185] usb 5-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 536.854731][ T6185] usb 5-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 536.868068][ T6185] usb 5-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 536.879541][ T6185] usb 5-1: config 51 interface 9 has no altsetting 0 [ 536.978051][ T5349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.988987][ T5349] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.002514][ T5349] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 537.012189][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.084305][ T5349] usb 1-1: config 0 descriptor?? [ 537.108119][ T6185] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 537.117986][ T6185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.126457][ T6185] usb 5-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 537.156229][ T6185] usb 5-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 537.185566][ T6185] usb 5-1: SerialNumber: syz [ 537.221347][ T5349] appletouch 1-1:0.0: Could not find int-in endpoint [ 537.228632][ T5349] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 537.230147][ T8090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 537.239775][ T5349] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 537.280921][ T8090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 537.313210][ T8105] loop2: detected capacity change from 0 to 128 [ 537.406971][ T8105] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 537.440961][ T8105] sysv_free_block: trying to free block not in datazone [ 537.450012][ T8105] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 537.650785][ T6185] usb 5-1: USB disconnect, device number 12 [ 538.824598][ T5349] usb 1-1: USB disconnect, device number 15 [ 539.534565][ T8121] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.690526][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 539.690610][ T29] audit: type=1326 audit(1717533428.383:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.723663][ T29] audit: type=1326 audit(1717533428.383:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.747365][ T29] audit: type=1326 audit(1717533428.393:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.772399][ T29] audit: type=1326 audit(1717533428.393:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.796866][ T29] audit: type=1326 audit(1717533428.403:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.820332][ T29] audit: type=1326 audit(1717533428.403:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.844556][ T29] audit: type=1326 audit(1717533428.403:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.868387][ T29] audit: type=1326 audit(1717533428.403:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.891796][ T29] audit: type=1326 audit(1717533428.413:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 539.915359][ T29] audit: type=1326 audit(1717533428.413:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de907cf69 code=0x7ffc0000 [ 540.325290][ T6185] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 540.539522][ T8134] loop0: detected capacity change from 0 to 64 [ 540.580025][ T8133] loop4: detected capacity change from 0 to 128 [ 540.653938][ T8133] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 540.668922][ T8133] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 540.747023][ T6185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.757972][ T6185] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 540.955905][ T6185] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.959581][ T8129] loop3: detected capacity change from 0 to 4096 [ 540.965517][ T6185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.980528][ T6185] usb 3-1: Product: syz [ 540.985072][ T6185] usb 3-1: Manufacturer: syz [ 540.989958][ T6185] usb 3-1: SerialNumber: syz [ 541.044080][ T8129] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 541.177315][ T8129] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 541.336327][ T8129] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 541.771559][ T6181] usb 3-1: USB disconnect, device number 13 [ 542.409117][ T5128] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 542.551978][ T8153] loop1: detected capacity change from 0 to 256 [ 542.683365][ T2802] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 542.713884][ T6181] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 542.835728][ T5128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.847043][ T5128] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.861122][ T5128] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=10.00 [ 542.870612][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.924848][ T5128] usb 5-1: config 0 descriptor?? [ 542.974006][ T6181] usb 1-1: Using ep0 maxpacket: 8 [ 542.981814][ T5128] appletouch 5-1:0.0: Could not find int-in endpoint [ 542.989158][ T5128] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 543.001795][ T5128] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 543.115131][ T8158] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.115149][ T6181] usb 1-1: config 51 has an invalid interface number: 9 but max is 0 [ 543.115339][ T6181] usb 1-1: config 51 has no interface number 0 [ 543.140159][ T6181] usb 1-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 543.151306][ T6181] usb 1-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 543.162891][ T6181] usb 1-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 543.173559][ T6181] usb 1-1: config 51 interface 9 has no altsetting 0 [ 543.383950][ T6181] usb 1-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 543.394783][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.404401][ T6181] usb 1-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 543.436951][ T6181] usb 1-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 543.468954][ T6181] usb 1-1: SerialNumber: syz [ 543.506321][ T8151] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.555203][ T8151] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.750527][ T8165] loop2: detected capacity change from 0 to 256 [ 543.801385][ T6182] usb 5-1: USB disconnect, device number 13 [ 543.950517][ T8167] loop1: detected capacity change from 0 to 64 [ 543.960092][ T6181] usb 1-1: USB disconnect, device number 16 [ 544.045342][ T8165] FAT-fs (loop2): Directory bread(block 64) failed [ 544.052423][ T8165] FAT-fs (loop2): Directory bread(block 65) failed [ 544.059656][ T8165] FAT-fs (loop2): Directory bread(block 66) failed [ 544.066709][ T8165] FAT-fs (loop2): Directory bread(block 67) failed [ 544.073826][ T8165] FAT-fs (loop2): Directory bread(block 68) failed [ 544.080630][ T8165] FAT-fs (loop2): Directory bread(block 69) failed [ 544.087751][ T8165] FAT-fs (loop2): Directory bread(block 70) failed [ 544.094820][ T8165] FAT-fs (loop2): Directory bread(block 71) failed [ 544.101797][ T8165] FAT-fs (loop2): Directory bread(block 72) failed [ 544.109004][ T8165] FAT-fs (loop2): Directory bread(block 73) failed [ 544.290239][ T8169] loop3: detected capacity change from 0 to 128 [ 544.381525][ T8169] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 544.397772][ T8169] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 546.307145][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 546.307227][ T29] audit: type=1326 audit(1717533435.006:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.339366][ T29] audit: type=1326 audit(1717533435.006:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.365434][ T29] audit: type=1326 audit(1717533435.016:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.390666][ T29] audit: type=1326 audit(1717533435.046:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.414641][ T29] audit: type=1326 audit(1717533435.046:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.440439][ T29] audit: type=1326 audit(1717533435.046:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.463968][ T29] audit: type=1326 audit(1717533435.096:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.489075][ T29] audit: type=1326 audit(1717533435.096:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.513388][ T29] audit: type=1326 audit(1717533435.096:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 546.540362][ T29] audit: type=1326 audit(1717533435.096:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 547.062258][ T6181] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 547.095020][ T8196] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 547.493212][ T6181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.505724][ T6181] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 547.611489][ T8194] loop4: detected capacity change from 0 to 32768 [ 547.629376][ T8194] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8194) [ 547.705028][ T8194] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 547.716118][ T8194] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 547.726482][ T8194] BTRFS info (device loop4): using free-space-tree [ 547.785848][ T6181] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.796071][ T6181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.805730][ T6181] usb 4-1: Product: syz [ 547.811754][ T6181] usb 4-1: Manufacturer: syz [ 547.816792][ T6181] usb 4-1: SerialNumber: syz [ 547.965597][ T8188] loop0: detected capacity change from 0 to 4096 [ 548.086674][ T8188] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 548.246978][ T8188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 548.362801][ T8191] loop4: detected capacity change from 32768 to 11 [ 548.372286][ T8194] syz-executor.4: attempt to access beyond end of device [ 548.372286][ T8194] loop4: rw=2049, sector=10240, nr_sectors = 16 limit=11 [ 548.386963][ T8194] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 548.798481][ T5128] usb 4-1: USB disconnect, device number 18 [ 548.889289][ T3167] kworker/u8:20: attempt to access beyond end of device [ 548.889289][ T3167] loop4: rw=67112961, sector=10440, nr_sectors = 8 limit=11 [ 548.904757][ T3167] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 548.915403][ T3167] kworker/u8:20: attempt to access beyond end of device [ 548.915403][ T3167] loop4: rw=67112961, sector=10464, nr_sectors = 8 limit=11 [ 548.930194][ T3167] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 548.941999][ T3167] kworker/u8:20: attempt to access beyond end of device [ 548.941999][ T3167] loop4: rw=67112961, sector=10472, nr_sectors = 8 limit=11 [ 548.956922][ T3167] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 548.961137][ T8188] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 548.967581][ T3167] kworker/u8:20: attempt to access beyond end of device [ 548.967581][ T3167] loop4: rw=67112961, sector=10480, nr_sectors = 8 limit=11 [ 548.989413][ T3167] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 549.001266][ T6539] BTRFS error (device loop4 state A): Transaction aborted (error -5) [ 549.009895][ T6539] BTRFS: error (device loop4 state A) in __btrfs_free_extent:3255: errno=-5 IO failure [ 549.020049][ T6539] BTRFS info (device loop4 state EA): forced readonly [ 549.027574][ T6539] BTRFS error (device loop4 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 549.043215][ T6539] BTRFS: error (device loop4 state EA) in btrfs_run_delayed_refs:2246: errno=-5 IO failure [ 549.079850][ T8224] loop2: detected capacity change from 0 to 64 [ 549.114019][ T6539] BTRFS info (device loop4 state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 549.917966][ T8229] loop1: detected capacity change from 0 to 128 [ 550.017800][ T8229] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 550.034040][ T8229] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 550.246805][ T3547] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 550.254916][ T6182] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 550.960709][ T6182] usb 4-1: Using ep0 maxpacket: 8 [ 551.104461][ T6182] usb 4-1: config 51 has an invalid interface number: 9 but max is 0 [ 551.113202][ T6182] usb 4-1: config 51 has no interface number 0 [ 551.120119][ T6182] usb 4-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 551.131629][ T6182] usb 4-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 551.143588][ T6182] usb 4-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 551.154598][ T6182] usb 4-1: config 51 interface 9 has no altsetting 0 [ 551.369980][ T6182] usb 4-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 551.379754][ T6182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.388087][ T6182] usb 4-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 551.417769][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.426701][ T6182] usb 4-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 551.454745][ T6182] usb 4-1: SerialNumber: syz [ 551.580794][ T8231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 551.593205][ T8231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.011298][ T8249] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 552.132992][ T6182] usb 4-1: USB disconnect, device number 19 [ 553.853496][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 553.853581][ T29] audit: type=1326 audit(1717533442.560:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 553.883841][ T29] audit: type=1326 audit(1717533442.560:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 553.907483][ T29] audit: type=1326 audit(1717533442.570:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 553.930977][ T29] audit: type=1326 audit(1717533442.570:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 553.956190][ T29] audit: type=1326 audit(1717533442.590:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 553.988180][ T29] audit: type=1326 audit(1717533442.590:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 554.011673][ T29] audit: type=1326 audit(1717533442.620:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 554.035754][ T29] audit: type=1326 audit(1717533442.620:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 554.060689][ T29] audit: type=1326 audit(1717533442.620:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 554.087153][ T29] audit: type=1326 audit(1717533442.620:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 554.392925][ T8269] loop4: detected capacity change from 0 to 64 [ 554.627873][ T5348] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 554.736378][ T8274] loop3: detected capacity change from 0 to 128 [ 554.817921][ T8274] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 554.832550][ T8274] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 555.059278][ T8271] loop0: detected capacity change from 0 to 4096 [ 555.111892][ T5348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.112119][ T5348] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 555.173762][ T8271] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 555.267066][ T8271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 555.338365][ T5348] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.348276][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.356663][ T5348] usb 2-1: Product: syz [ 555.361676][ T5348] usb 2-1: Manufacturer: syz [ 555.366671][ T5348] usb 2-1: SerialNumber: syz [ 555.372752][ T8271] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 555.526363][ T8281] loop2: detected capacity change from 0 to 8 [ 555.577522][ T8281] squashfs: Unknown parameter '9p' [ 555.858169][ T8281] loop2: detected capacity change from 0 to 256 [ 556.228622][ T6182] usb 2-1: USB disconnect, device number 15 [ 556.441335][ T3167] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 556.474098][ T5072] bridge0: port 4(syz_tun) entered disabled state [ 556.582106][ T5072] syz_tun (unregistering): left allmulticast mode [ 556.589099][ T5072] syz_tun (unregistering): left promiscuous mode [ 556.596037][ T5072] bridge0: port 4(syz_tun) entered disabled state [ 556.755041][ T8290] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 556.899442][ T3167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.963415][ T8292] loop3: detected capacity change from 0 to 512 [ 557.158392][ T3167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.279816][ T8292] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz-executor.3: Bad quota inum: 5, type: 0 [ 557.303167][ T8292] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 557.368652][ T3167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.392201][ T8292] EXT4-fs (loop3): mount failed [ 557.555202][ T3167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.887433][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 558.039040][ T3167] erspan0: left allmulticast mode [ 558.046803][ T3167] erspan0: left promiscuous mode [ 558.053013][ T3167] bridge0: port 3(erspan0) entered disabled state [ 558.128463][ T3167] bridge_slave_1: left allmulticast mode [ 558.134428][ T3167] bridge_slave_1: left promiscuous mode [ 558.141604][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.186793][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 558.195205][ T3167] bridge_slave_0: left allmulticast mode [ 558.203146][ T3167] bridge_slave_0: left promiscuous mode [ 558.211448][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.357624][ T8] usb 2-1: config 51 has an invalid interface number: 9 but max is 0 [ 558.367645][ T8] usb 2-1: config 51 has no interface number 0 [ 558.374634][ T8] usb 2-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 558.388623][ T8] usb 2-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 558.400093][ T8] usb 2-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 558.411482][ T8] usb 2-1: config 51 interface 9 has no altsetting 0 [ 558.574044][ T8309] loop0: detected capacity change from 0 to 64 [ 558.746646][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 558.757402][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.767588][ T8] usb 2-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 558.797761][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.804716][ T8] usb 2-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 558.832276][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.839143][ T8] usb 2-1: SerialNumber: syz [ 558.929890][ T8301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.987935][ T8301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.072835][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 559.072921][ T29] audit: type=1804 audit(1717533447.772:751): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2915032974/syzkaller.oO2hHC/184/file2/bus" dev="loop0" ino=3 res=1 errno=0 [ 559.190410][ T29] audit: type=1800 audit(1717533447.812:752): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 559.211758][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.214553][ T8314] loop3: detected capacity change from 0 to 128 [ 559.253649][ T8314] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 559.268681][ T8314] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 559.417072][ T8] usb 2-1: USB disconnect, device number 16 [ 560.146609][ T3167] hsr_slave_0: left promiscuous mode [ 560.181475][ T3167] hsr_slave_1: left promiscuous mode [ 560.196799][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.204810][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.224911][ T3167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.232925][ T3167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.251607][ T5126] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 560.369486][ T3167] veth1_macvtap: left promiscuous mode [ 560.376296][ T3167] veth0_macvtap: left promiscuous mode [ 560.383306][ T3167] veth1_vlan: left promiscuous mode [ 560.389640][ T3167] veth0_vlan: left promiscuous mode [ 560.721633][ T5126] usb 5-1: Using ep0 maxpacket: 8 [ 560.956399][ T6182] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 561.064674][ T5126] usb 5-1: config 51 has an invalid interface number: 9 but max is 0 [ 561.073173][ T5126] usb 5-1: config 51 has no interface number 0 [ 561.083154][ T5126] usb 5-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 561.095628][ T5126] usb 5-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 561.108228][ T5126] usb 5-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 561.119455][ T5126] usb 5-1: config 51 interface 9 has no altsetting 0 [ 561.205414][ T6182] usb 1-1: Using ep0 maxpacket: 32 [ 561.386563][ T6182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.398325][ T6182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.408585][ T6182] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.424491][ T6182] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 561.434464][ T6182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.451253][ T3167] team0 (unregistering): Port device team_slave_1 removed [ 561.527748][ T6182] usb 1-1: config 0 descriptor?? [ 561.541918][ T3167] team0 (unregistering): Port device team_slave_0 removed [ 561.595416][ T8327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.633350][ T8327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.645728][ T8327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.667546][ T8327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.685757][ T8327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 561.713419][ T8327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.897975][ T5126] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 561.908441][ T5126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.918533][ T5126] usb 5-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 561.948129][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.959243][ T5126] usb 5-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 561.988954][ T5126] usb 5-1: SerialNumber: syz [ 562.228516][ T8317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.247265][ T8317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.262415][ T6182] petalynx 0003:18B1:0037.000F: unknown main item tag 0x0 [ 562.270349][ T6182] petalynx 0003:18B1:0037.000F: item fetching failed at offset 10/11 [ 562.331800][ T6182] petalynx 0003:18B1:0037.000F: parse failed [ 562.338608][ T6182] petalynx 0003:18B1:0037.000F: probe with driver petalynx failed with error -22 [ 562.475299][ T6182] usb 1-1: USB disconnect, device number 17 [ 562.735711][ T5126] usb 5-1: USB disconnect, device number 14 [ 562.972985][ T8336] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.282659][ T8326] chnl_net:caif_netlink_parms(): no params data found [ 563.396715][ T8341] loop1: detected capacity change from 0 to 512 [ 563.565854][ T8341] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz-executor.1: Bad quota inum: 5, type: 0 [ 563.705713][ T8341] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 563.753900][ T8341] EXT4-fs (loop1): mount failed [ 563.799578][ T8327] Bluetooth: hci1: command tx timeout [ 564.940739][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.948996][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.961170][ T8326] bridge_slave_0: entered allmulticast mode [ 564.971957][ T8326] bridge_slave_0: entered promiscuous mode [ 564.979700][ T8357] loop1: detected capacity change from 0 to 64 [ 565.159625][ T29] audit: type=1804 audit(1717533453.795:753): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir450203418/syzkaller.CuiTXS/149/file2/bus" dev="loop1" ino=3 res=1 errno=0 [ 565.281453][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.290152][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.299160][ T8326] bridge_slave_1: entered allmulticast mode [ 565.311639][ T8326] bridge_slave_1: entered promiscuous mode [ 565.452793][ T8364] loop3: detected capacity change from 0 to 128 [ 565.549593][ T29] audit: type=1804 audit(1717533454.106:754): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir450203418/syzkaller.CuiTXS/149/file2/bus" dev="loop1" ino=3 res=1 errno=0 [ 565.591238][ T8364] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 565.605889][ T8364] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 565.836917][ T29] audit: type=1800 audit(1717533454.366:755): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=3 res=0 errno=0 [ 565.875339][ T8327] Bluetooth: hci1: command tx timeout [ 566.106891][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.169540][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.397082][ T8326] team0: Port device team_slave_0 added [ 566.456368][ T8326] team0: Port device team_slave_1 added [ 566.670311][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.677701][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.704419][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.789286][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.796759][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.823292][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.971590][ T5353] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 567.190782][ T8326] hsr_slave_0: entered promiscuous mode [ 567.215032][ T8326] hsr_slave_1: entered promiscuous mode [ 567.234086][ T5353] usb 5-1: Using ep0 maxpacket: 8 [ 567.381966][ T5353] usb 5-1: config 51 has an invalid interface number: 9 but max is 0 [ 567.390485][ T5353] usb 5-1: config 51 has no interface number 0 [ 567.397130][ T5353] usb 5-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 567.408236][ T5353] usb 5-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 567.419810][ T5353] usb 5-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 567.430225][ T5353] usb 5-1: config 51 interface 9 has no altsetting 0 [ 567.477871][ T8379] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.611544][ T5126] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 567.663896][ T5353] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 567.674479][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.683561][ T5353] usb 5-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 567.714257][ T5353] usb 5-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 567.741595][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.748474][ T5353] usb 5-1: SerialNumber: syz [ 567.843430][ T8371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 567.860838][ T8371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 567.951442][ T8327] Bluetooth: hci1: command tx timeout [ 567.961143][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 568.131858][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.143385][ T5126] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 568.153580][ T5126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.192248][ T5126] usb 4-1: config 0 descriptor?? [ 568.233573][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 568.321775][ T5353] usb 5-1: USB disconnect, device number 15 [ 568.421667][ T8] usb 1-1: config 51 has an invalid interface number: 9 but max is 0 [ 568.430140][ T8] usb 1-1: config 51 has no interface number 0 [ 568.439378][ T8] usb 1-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 568.451785][ T8] usb 1-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 568.463854][ T8] usb 1-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 568.474278][ T8] usb 1-1: config 51 interface 9 has no altsetting 0 [ 568.667931][ T8326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 568.681362][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.692246][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.721589][ T8326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 568.738143][ T5126] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 568.749646][ T8385] loop1: detected capacity change from 0 to 512 [ 568.761856][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 568.771767][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.780065][ T8] usb 1-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 568.809428][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.817764][ T8] usb 1-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 568.845641][ T8] usb 1-1: SerialNumber: syz [ 568.863793][ T5126] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input13 [ 568.902781][ T8326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 568.918681][ T8385] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz-executor.1: Bad quota inum: 5, type: 0 [ 568.929559][ T8326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 568.933814][ T8381] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.951546][ T8381] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.956298][ T8385] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 568.982631][ T5126] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 569.022500][ T8385] EXT4-fs (loop1): mount failed [ 569.398318][ T8] usb 1-1: USB disconnect, device number 18 [ 569.507613][ T5126] usb 4-1: USB disconnect, device number 20 acpid: input device has been disconnected, fd 3 [ 570.030903][ T8327] Bluetooth: hci1: command tx timeout [ 570.298965][ T8326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.423934][ T8326] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.478772][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.486893][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.585364][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.593322][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.090886][ T8408] loop0: detected capacity change from 0 to 64 [ 572.296142][ T29] audit: type=1804 audit(1717533460.939:756): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2915032974/syzkaller.oO2hHC/191/file2/bus" dev="loop0" ino=3 res=1 errno=0 [ 572.321912][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.551906][ T29] audit: type=1804 audit(1717533461.199:757): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2915032974/syzkaller.oO2hHC/191/file2/bus" dev="loop0" ino=3 res=1 errno=0 [ 572.638835][ T29] audit: type=1800 audit(1717533461.329:758): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 572.697948][ T8414] loop3: detected capacity change from 0 to 128 [ 572.786942][ T8414] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 572.801362][ T8414] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 573.171141][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.171319][ T8422] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.371094][ T8424] loop4: detected capacity change from 0 to 512 [ 573.412077][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.446001][ T8422] Bluetooth: MGMT ver 1.22 [ 573.563012][ T8424] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz-executor.4: Bad quota inum: 5, type: 0 [ 573.579376][ T8424] EXT4-fs warning (device loop4): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 573.618855][ T8424] EXT4-fs (loop4): mount failed [ 573.949084][ T8326] veth0_vlan: entered promiscuous mode [ 573.958802][ T5126] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 574.088794][ T8326] veth1_vlan: entered promiscuous mode [ 574.253516][ T5126] usb 1-1: Using ep0 maxpacket: 8 [ 574.440855][ T5126] usb 1-1: config 51 has an invalid interface number: 9 but max is 0 [ 574.449505][ T5126] usb 1-1: config 51 has no interface number 0 [ 574.456067][ T5126] usb 1-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 574.468030][ T5126] usb 1-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 574.479778][ T5126] usb 1-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 574.490114][ T5126] usb 1-1: config 51 interface 9 has no altsetting 0 [ 574.569986][ T8326] veth0_macvtap: entered promiscuous mode [ 574.648934][ T8326] veth1_macvtap: entered promiscuous mode [ 574.738710][ T5126] usb 1-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 574.748841][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.757233][ T5126] usb 1-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 574.789797][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.797131][ T5126] usb 1-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 574.830349][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.841585][ T5126] usb 1-1: SerialNumber: syz [ 574.995782][ T8429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 575.010068][ T8429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 575.015868][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.030412][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.042825][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.054023][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.064258][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.078068][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.089526][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.100462][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.120606][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.394454][ T5126] usb 1-1: USB disconnect, device number 19 [ 575.464546][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.477769][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.491620][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.502571][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.512979][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.524023][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.534658][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.547546][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.564015][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.619866][ T8326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.632295][ T8326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.642513][ T8326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.653434][ T8326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.045476][ T6181] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 576.327894][ T6181] usb 5-1: Using ep0 maxpacket: 8 [ 576.447141][ T6181] usb 5-1: config 51 has an invalid interface number: 9 but max is 0 [ 576.455829][ T6181] usb 5-1: config 51 has no interface number 0 [ 576.462530][ T6181] usb 5-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 576.475213][ T6181] usb 5-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 576.490368][ T6181] usb 5-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 576.505268][ T6181] usb 5-1: config 51 interface 9 has no altsetting 0 [ 576.684479][ T6181] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 576.695845][ T6181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.704616][ T6181] usb 5-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 576.734308][ T6181] usb 5-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 576.764853][ T6181] usb 5-1: SerialNumber: syz [ 576.915169][ T8435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.979408][ T8435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 577.448892][ T6181] usb 5-1: USB disconnect, device number 16 [ 578.105475][ T8457] loop0: detected capacity change from 0 to 64 [ 578.284549][ T29] audit: type=1804 audit(1717533466.962:759): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2915032974/syzkaller.oO2hHC/195/file2/bus" dev="loop0" ino=3 res=1 errno=0 [ 578.311599][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.500115][ T29] audit: type=1804 audit(1717533467.182:760): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2915032974/syzkaller.oO2hHC/195/file2/bus" dev="loop0" ino=3 res=1 errno=0 [ 578.526318][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.534586][ T29] audit: type=1800 audit(1717533467.192:761): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0 [ 578.626616][ T8465] loop3: detected capacity change from 0 to 128 [ 578.701231][ T8465] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 578.715607][ T8465] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 579.404479][ T8471] loop4: detected capacity change from 0 to 1024 [ 579.424365][ T8471] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.710664][ T8471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.579788][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.591605][ T8488] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.626267][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.868599][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 581.124896][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 581.266099][ T8] usb 4-1: config 51 has an invalid interface number: 9 but max is 0 [ 581.276043][ T8] usb 4-1: config 51 has no interface number 0 [ 581.282528][ T8] usb 4-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 581.293829][ T8] usb 4-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 581.307391][ T8] usb 4-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 581.317946][ T8] usb 4-1: config 51 interface 9 has no altsetting 0 [ 581.514824][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 581.524917][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.533299][ T8] usb 4-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 581.563543][ T8] usb 4-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 581.592549][ T8] usb 4-1: SerialNumber: syz [ 581.686688][ T8486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 581.715729][ T8486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 582.156705][ T8] usb 4-1: USB disconnect, device number 21 [ 582.381449][ T8506] loop4: detected capacity change from 0 to 8 [ 582.620296][ T29] audit: type=1326 audit(1717533471.294:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9562a7cf69 code=0x0 [ 583.304330][ T2802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.313040][ T2802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.552003][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.560761][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.185494][ T8521] loop3: detected capacity change from 0 to 128 [ 584.195901][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 584.274340][ T8521] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 584.289975][ T8521] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 584.588450][ T8529] loop4: detected capacity change from 0 to 512 [ 584.795442][ T8529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.809465][ T8529] ext4 filesystem being mounted at /root/syzkaller-testdir571224882/syzkaller.gF5a8C/113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.068859][ T8529] EXT4-fs error (device loop4): ext4_do_update_inode:5082: inode #2: comm syz-executor.4: corrupted inode contents [ 585.155955][ T8529] EXT4-fs error (device loop4): ext4_dirty_inode:5942: inode #2: comm syz-executor.4: mark_inode_dirty error [ 585.276902][ T8529] EXT4-fs error (device loop4): ext4_do_update_inode:5082: inode #2: comm syz-executor.4: corrupted inode contents [ 585.434648][ T8529] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 585.930219][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.214105][ T29] audit: type=1326 audit(1717533474.886:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x0 [ 586.238829][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.465979][ T8555] loop4: detected capacity change from 0 to 8 [ 586.713838][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 586.723696][ T8559] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 586.941786][ T6181] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 587.214501][ T6181] usb 4-1: Using ep0 maxpacket: 8 [ 587.336931][ T6181] usb 4-1: config 51 has an invalid interface number: 9 but max is 0 [ 587.346159][ T6181] usb 4-1: config 51 has no interface number 0 [ 587.352923][ T6181] usb 4-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 587.363968][ T6181] usb 4-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 587.375796][ T6181] usb 4-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 587.386126][ T6181] usb 4-1: config 51 interface 9 has no altsetting 0 [ 587.472542][ T8568] loop2: detected capacity change from 0 to 64 [ 587.547025][ T8568] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 587.585925][ T6181] usb 4-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 587.595786][ T6181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.604254][ T6181] usb 4-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 587.640040][ T6181] usb 4-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 587.671359][ T6181] usb 4-1: SerialNumber: syz [ 587.789608][ T8558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 587.842396][ T8558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 588.188474][ T6181] usb 4-1: USB disconnect, device number 22 [ 590.633541][ T29] audit: type=1326 audit(1717533479.338:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x0 [ 590.667116][ T8598] loop1: detected capacity change from 0 to 8 [ 591.788753][ T8620] loop3: detected capacity change from 0 to 16 [ 591.855061][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 591.865176][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.089589][ T6181] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 592.209629][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 592.403195][ T6181] usb 3-1: Using ep0 maxpacket: 8 [ 592.454356][ T8629] loop3: detected capacity change from 0 to 64 [ 592.470419][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 592.540850][ T6181] usb 3-1: config 51 has an invalid interface number: 9 but max is 0 [ 592.549554][ T6181] usb 3-1: config 51 has no interface number 0 [ 592.556140][ T6181] usb 3-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 592.567440][ T6181] usb 3-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 592.580508][ T6181] usb 3-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 592.591326][ T6181] usb 3-1: config 51 interface 9 has no altsetting 0 [ 592.630130][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.643790][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.654961][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 592.664787][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.699922][ T8] usb 1-1: config 0 descriptor?? [ 592.764473][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.795548][ T6181] usb 3-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 592.805510][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.814492][ T6181] usb 3-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 592.847651][ T6181] usb 3-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 592.876305][ T6181] usb 3-1: SerialNumber: syz [ 592.951306][ T8617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 592.960648][ T8617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.244980][ T8] cp2112 0003:10C4:EA90.0011: unexpected long global item [ 593.326330][ T8] cp2112 0003:10C4:EA90.0011: parse failed [ 593.333170][ T8] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 593.350798][ T6181] usb 3-1: USB disconnect, device number 14 [ 593.512126][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.521381][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.553510][ T8] usb 1-1: USB disconnect, device number 20 [ 593.617255][ T29] audit: type=1326 audit(1717533482.320:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb47c7cf69 code=0x0 [ 593.939659][ T8652] loop1: detected capacity change from 0 to 8 [ 594.409942][ T8657] mmap: syz-executor.0 (8657): VmData 175796224 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 594.869662][ T8664] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 594.881769][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 594.894509][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.961627][ T6181] libceph: connect (1)[c::]:6789 error -101 [ 595.968605][ T6181] libceph: mon0 (1)[c::]:6789 connect error [ 596.119650][ T29] audit: type=1326 audit(1717533484.781:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.143989][ T29] audit: type=1326 audit(1717533484.791:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.167830][ T29] audit: type=1326 audit(1717533484.791:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.191290][ T29] audit: type=1326 audit(1717533484.831:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.217801][ T29] audit: type=1326 audit(1717533484.841:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.274535][ T6182] libceph: connect (1)[c::]:6789 error -101 [ 596.282144][ T6182] libceph: mon0 (1)[c::]:6789 connect error [ 596.285081][ T8677] ceph: No mds server is up or the cluster is laggy [ 596.323088][ T29] audit: type=1326 audit(1717533484.971:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.350063][ T29] audit: type=1326 audit(1717533484.981:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.374470][ T29] audit: type=1326 audit(1717533484.981:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.397844][ T29] audit: type=1326 audit(1717533484.981:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2149e7cf69 code=0x7ffc0000 [ 596.458177][ T6181] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 596.777707][ T6181] usb 1-1: Using ep0 maxpacket: 8 [ 596.917094][ T6181] usb 1-1: config 1 interface 0 has no altsetting 0 [ 597.097026][ T6181] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.40 [ 597.106810][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.115143][ T6181] usb 1-1: Product: syz [ 597.119780][ T6181] usb 1-1: Manufacturer: syz [ 597.124675][ T6181] usb 1-1: SerialNumber: syz [ 597.207575][ T6182] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 597.352586][ T8684] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-generic)" [ 597.588435][ T6182] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.599172][ T6182] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 597.830185][ T6182] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.840148][ T6182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.848912][ T6182] usb 3-1: Product: syz [ 597.853428][ T6182] usb 3-1: Manufacturer: syz [ 597.862770][ T6182] usb 3-1: SerialNumber: syz [ 597.986739][ T6181] usbhid 1-1:1.0: can't add hid device: -71 [ 597.993925][ T6181] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 598.048439][ T6181] usb 1-1: USB disconnect, device number 21 [ 598.887577][ T6182] usb 3-1: USB disconnect, device number 15 [ 599.024227][ T8703] loop1: detected capacity change from 0 to 1024 [ 599.326241][ T6181] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 599.598232][ T6181] usb 1-1: Using ep0 maxpacket: 8 [ 599.735570][ T6181] usb 1-1: config 51 has an invalid interface number: 9 but max is 0 [ 599.744187][ T6181] usb 1-1: config 51 has no interface number 0 [ 599.751133][ T6181] usb 1-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 599.762182][ T6181] usb 1-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 599.773587][ T6181] usb 1-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 599.784327][ T6181] usb 1-1: config 51 interface 9 has no altsetting 0 [ 599.971136][ T6181] usb 1-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 599.980704][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.989450][ T6181] usb 1-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 600.021509][ T6181] usb 1-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 600.052353][ T6181] usb 1-1: SerialNumber: syz [ 600.161511][ T8706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.240928][ T8706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.278702][ T8716] loop2: detected capacity change from 0 to 512 [ 600.301274][ T8703] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 600.321917][ T8716] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 600.398336][ T8716] EXT4-fs (loop2): 1 truncate cleaned up [ 600.404733][ T8716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.524384][ T8719] overlayfs: missing 'lowerdir' [ 600.603469][ T6181] usb 1-1: USB disconnect, device number 22 [ 600.905104][ T8326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.396080][ T8732] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 601.804589][ T6182] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 601.891292][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 601.891376][ T29] audit: type=1326 audit(1717533490.614:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb47c7cf69 code=0x0 [ 602.087403][ T6182] usb 3-1: Using ep0 maxpacket: 8 [ 602.215024][ T6182] usb 3-1: config 1 interface 0 has no altsetting 0 [ 602.276215][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.288161][ T8740] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.404764][ T6182] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.40 [ 602.414609][ T6182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.424088][ T6182] usb 3-1: Product: syz [ 602.428806][ T6182] usb 3-1: Manufacturer: syz [ 602.433889][ T6182] usb 3-1: SerialNumber: syz [ 602.811027][ T29] audit: type=1326 audit(1717533491.284:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.835493][ T29] audit: type=1326 audit(1717533491.304:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.859088][ T29] audit: type=1326 audit(1717533491.304:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.885113][ T29] audit: type=1326 audit(1717533491.304:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.909787][ T29] audit: type=1326 audit(1717533491.334:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.933515][ T29] audit: type=1326 audit(1717533491.354:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.956963][ T29] audit: type=1326 audit(1717533491.354:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 602.988053][ T29] audit: type=1326 audit(1717533491.354:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 603.017362][ T29] audit: type=1326 audit(1717533491.374:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2cb67cf69 code=0x7ffc0000 [ 603.363986][ T5126] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 603.436355][ T6182] usbhid 3-1:1.0: can't add hid device: -71 [ 603.443628][ T6182] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 603.503376][ T6182] usb 3-1: USB disconnect, device number 16 [ 603.758051][ T5126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.768622][ T5126] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 603.976496][ T5126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.986080][ T5126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.994524][ T5126] usb 2-1: Product: syz [ 604.001089][ T5126] usb 2-1: Manufacturer: syz [ 604.006948][ T5126] usb 2-1: SerialNumber: syz [ 604.014692][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 604.418120][ T8757] loop2: detected capacity change from 0 to 256 [ 604.433624][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 604.433811][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.517102][ T8] usb 1-1: config 0 descriptor?? [ 604.529044][ T8757] exfat: Bad value for 'uid' [ 604.567680][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 605.215924][ T6185] usb 2-1: USB disconnect, device number 17 [ 605.702809][ T8764] loop2: detected capacity change from 0 to 512 [ 605.732699][ T8764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 605.900480][ T8764] EXT4-fs (loop2): 1 truncate cleaned up [ 605.907034][ T8764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.972650][ T8] gspca_sunplus: reg_w_riv err -110 [ 605.978452][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 606.038524][ T8] usb 1-1: USB disconnect, device number 23 [ 606.222910][ T8326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.512131][ T5126] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 606.643438][ T8775] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 606.653513][ T8775] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 606.667586][ T8775] overlayfs: conflicting lowerdir path [ 606.792242][ T5126] usb 2-1: Using ep0 maxpacket: 8 [ 606.797636][ T8778] loop2: detected capacity change from 0 to 512 [ 606.942010][ T5126] usb 2-1: config 51 has an invalid interface number: 9 but max is 0 [ 606.950513][ T5126] usb 2-1: config 51 has no interface number 0 [ 606.957225][ T5126] usb 2-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 606.970585][ T5126] usb 2-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 606.982823][ T5126] usb 2-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 606.993127][ T5126] usb 2-1: config 51 interface 9 has no altsetting 0 [ 607.231408][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.245898][ T8778] ext4 filesystem being mounted at /root/syzkaller-testdir1710425009/syzkaller.wmqXOL/16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.262091][ T5126] usb 2-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 607.273534][ T5126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.282560][ T5126] usb 2-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 607.314530][ T5126] usb 2-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 607.342250][ T5126] usb 2-1: SerialNumber: syz [ 607.403125][ T8773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.428884][ T8773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.790723][ T8326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.812606][ T5126] usb 2-1: USB disconnect, device number 18 [ 608.125910][ T8793] loop4: detected capacity change from 0 to 512 [ 608.247026][ T8793] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 608.292987][ T8793] EXT4-fs (loop4): 1 orphan inode deleted [ 608.302015][ T8793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.645890][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.664805][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 608.676607][ T8805] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 609.002241][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 609.002323][ T29] audit: type=1326 audit(1717533497.727:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.034839][ T29] audit: type=1326 audit(1717533497.737:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.058904][ T29] audit: type=1326 audit(1717533497.737:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.082364][ T29] audit: type=1326 audit(1717533497.757:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.108120][ T29] audit: type=1326 audit(1717533497.787:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.133379][ T29] audit: type=1326 audit(1717533497.797:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.157334][ T29] audit: type=1326 audit(1717533497.807:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.180822][ T29] audit: type=1326 audit(1717533497.807:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.190759][ T8810] loop4: detected capacity change from 0 to 512 [ 609.204584][ T29] audit: type=1326 audit(1717533497.817:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.238865][ T29] audit: type=1326 audit(1717533497.817:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x7ffc0000 [ 609.378861][ T8810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 609.464685][ T8810] EXT4-fs (loop4): 1 truncate cleaned up [ 609.471406][ T8810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.060465][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 610.257464][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.490128][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.503586][ T8] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 610.736063][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.746716][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.757806][ T8] usb 4-1: Product: syz [ 610.763008][ T8] usb 4-1: Manufacturer: syz [ 610.768670][ T8] usb 4-1: SerialNumber: syz [ 611.699926][ T6182] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 611.760397][ T8836] loop0: detected capacity change from 0 to 2048 [ 611.827653][ T8836] loop0: p3 < > p4 < > [ 611.832639][ T8836] loop0: partition table partially beyond EOD, truncated [ 611.842989][ T8836] loop0: p3 start 4284289 is beyond EOD, truncated [ 611.860007][ T6185] usb 4-1: USB disconnect, device number 23 [ 612.116410][ T6182] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 612.260547][ T6182] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 612.271245][ T6182] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 612.280048][ T6182] usb 1-1: Manufacturer: syz [ 612.284979][ T6182] usb 1-1: SerialNumber: syz [ 613.097148][ T8851] loop4: detected capacity change from 0 to 512 [ 613.250203][ T8851] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 613.303456][ T8851] EXT4-fs (loop4): 1 orphan inode deleted [ 613.313188][ T8851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.349066][ T6182] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 613.361153][ T6185] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 613.376337][ T6182] usb 1-1: USB disconnect, device number 24 [ 613.566842][ T6539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.632853][ T6185] usb 2-1: Using ep0 maxpacket: 8 [ 613.649578][ T8857] x_tables: unsorted underflow at hook 1 [ 613.769143][ T6185] usb 2-1: config 51 has an invalid interface number: 9 but max is 0 [ 613.777624][ T6185] usb 2-1: config 51 has no interface number 0 [ 613.784277][ T6185] usb 2-1: config 51 interface 9 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 613.795468][ T6185] usb 2-1: config 51 interface 9 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 613.808298][ T6185] usb 2-1: config 51 interface 9 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 16 [ 613.819911][ T6185] usb 2-1: config 51 interface 9 has no altsetting 0 [ 614.070626][ T6185] usb 2-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 614.080549][ T6185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.089217][ T6185] usb 2-1: Product: ᵶ甚爛起◤⓺鹵瑂㱀훾鰻ꌏᣵ㩉㨶꯹隩죹䦳螔嬋忚돔탸揨ﭓᜦ㵤柯挂ﴡ縛铖健鋳噤掌᳞龑៑䔥䖫ٌ⍢爜휻㥮ۙ℃雙쉹뇠퇡ܒ頗孿㍝᪾᚞︠ꆭ﹄〻⩙뗼ㆭʮ츌㭧ʌ孽铘⨀䷳」嶈亊ﮡ [ 614.119369][ T6185] usb 2-1: Manufacturer: 傲䖉鎗긞ℼꋑ벅镓옯东㬮趎⹛秆씎᡾咞⑛ࢭ双꿴牼閍嬲퓭沒襗뤆唡闧뵭⡯⛁᭵ึ褿ក录ᔯꪁ曠▛摒뽛영뇴삩藋덱謴巿䏱ꊚ꘾頤큶씏츩ꚹ嬑芤㝾曕禚㉇紡ｸ뱈㴆커䂢ᙉ畜ᢿ꾔痏﷈葦哀鯫帵㡉緹 [ 614.150856][ T6185] usb 2-1: SerialNumber: syz [ 614.210010][ T8850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 614.219169][ T8850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 614.338681][ T8862] loop3: detected capacity change from 0 to 512 [ 614.375316][ T8862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.455905][ T8862] EXT4-fs (loop3): 1 truncate cleaned up [ 614.462122][ T8862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.527107][ T8867] loop0: detected capacity change from 0 to 512 [ 614.620029][ T6185] usb 2-1: USB disconnect, device number 19 [ 614.916290][ T7669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.271996][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.282175][ T8873] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 615.287755][ T5079] Bluetooth: hci6: command 0x0406 tx timeout [ 615.815386][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 615.815470][ T29] audit: type=1326 audit(1717533504.551:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bda27cf69 code=0x0 [ 617.140245][ T8892] loop1: detected capacity change from 0 to 1764 [ 617.161272][ T8890] loop2: detected capacity change from 0 to 32768 [ 617.181080][ T8890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8890) [ 617.231223][ T8890] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 617.241894][ T8890] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 617.253481][ T8890] BTRFS info (device loop2): using free-space-tree [ 617.532121][ T8890] BTRFS info (device loop2): rebuilding free space tree [ 617.638956][ T8908] loop3: detected capacity change from 0 to 512 [ 617.755205][ T8908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 617.998912][ T8908] EXT4-fs (loop3): 1 truncate cleaned up [ 618.005230][ T8908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.934921][ T7669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.325765][ T4424] ===================================================== [ 619.333066][ T4424] BUG: KMSAN: uninit-value in deflate_fast+0xfe1/0x2f70 [ 619.340644][ T4424] deflate_fast+0xfe1/0x2f70 [ 619.346329][ T4424] zlib_deflate+0x1d14/0x2920 [ 619.354040][ T4424] zlib_compress_pages+0xd89/0x2020 [ 619.360410][ T4424] btrfs_compress_pages+0x2aa/0x460 [ 619.366058][ T4424] compress_file_range+0xf50/0x25d0 [ 619.375897][ T4424] btrfs_work_helper+0x52f/0x18d0 [ 619.381585][ T4424] process_scheduled_works+0xa81/0x1bd0 [ 619.393888][ T4424] worker_thread+0xea5/0x1560 [ 619.405785][ T4424] kthread+0x3e2/0x540 [ 619.411148][ T4424] ret_from_fork+0x6d/0x90 [ 619.415909][ T4424] ret_from_fork_asm+0x1a/0x30 [ 619.420924][ T4424] [ 619.423354][ T4424] Uninit was stored to memory at: [ 619.446252][ T4424] fill_window+0x2073/0x2600 [ 619.460702][ T4424] deflate_fast+0x1a9/0x2f70 [ 619.465747][ T4424] zlib_deflate+0x1d14/0x2920 [ 619.471130][ T4424] zlib_compress_pages+0xd89/0x2020 [ 619.476714][ T4424] btrfs_compress_pages+0x2aa/0x460 [ 619.482176][ T4424] compress_file_range+0xf50/0x25d0 [ 619.488049][ T4424] btrfs_work_helper+0x52f/0x18d0 [ 619.493737][ T4424] process_scheduled_works+0xa81/0x1bd0 [ 619.499713][ T4424] worker_thread+0xea5/0x1560 [ 619.504806][ T4424] kthread+0x3e2/0x540 [ 619.509226][ T4424] ret_from_fork+0x6d/0x90 [ 619.514030][ T4424] ret_from_fork_asm+0x1a/0x30 [ 619.519439][ T4424] [ 619.521880][ T4424] Uninit was stored to memory at: [ 619.529798][ T4424] copy_page_from_iter_atomic+0x12b7/0x2ae0 [ 619.537051][ T4424] btrfs_copy_from_user+0x176/0x4c0 [ 619.542656][ T4424] btrfs_buffered_write+0x119a/0x2ab0 [ 619.548508][ T4424] btrfs_do_write_iter+0x395/0x2270 [ 619.556899][ T4424] btrfs_file_write_iter+0x38/0x50 [ 619.562873][ T4424] __kernel_write_iter+0x64d/0xc80 [ 619.568376][ T4424] dump_user_range+0x8dc/0xee0 [ 619.573394][ T4424] elf_core_dump+0x57c7/0x5ae0 [ 619.578946][ T4424] do_coredump+0x32d5/0x4920 [ 619.585812][ T4424] get_signal+0x267e/0x2d00 [ 619.590556][ T4424] arch_do_signal_or_restart+0x53/0xcb0 [ 619.596549][ T4424] syscall_exit_to_user_mode+0x5d/0x160 [ 619.602380][ T4424] do_syscall_64+0xdc/0x1e0 [ 619.608189][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.614360][ T4424] [ 619.616968][ T4424] Uninit was created at: [ 619.621477][ T4424] __alloc_pages+0x9d6/0xe70 2024/06/04 20:38:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 619.626387][ T4424] alloc_pages_mpol+0x299/0x990 [ 619.631470][ T4424] alloc_pages+0x1bf/0x1e0 [ 619.637301][ T4424] dump_user_range+0x4a/0xee0 [ 619.642240][ T4424] elf_core_dump+0x57c7/0x5ae0 [ 619.647407][ T4424] do_coredump+0x32d5/0x4920 [ 619.652233][ T4424] get_signal+0x267e/0x2d00 [ 619.659903][ T4424] arch_do_signal_or_restart+0x53/0xcb0 [ 619.666701][ T4424] syscall_exit_to_user_mode+0x5d/0x160 [ 619.672527][ T4424] do_syscall_64+0xdc/0x1e0 [ 619.677472][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.683638][ T4424] [ 619.686255][ T4424] CPU: 1 PID: 4424 Comm: kworker/u8:28 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 619.696479][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 619.706887][ T4424] Workqueue: btrfs-delalloc btrfs_work_helper [ 619.713197][ T4424] ===================================================== [ 619.720694][ T4424] Disabling lock debugging due to kernel taint [ 619.727270][ T4424] Kernel panic - not syncing: kmsan.panic set ... [ 619.733838][ T4424] CPU: 1 PID: 4424 Comm: kworker/u8:28 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 619.745449][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 619.755707][ T4424] Workqueue: btrfs-delalloc btrfs_work_helper [ 619.762117][ T4424] Call Trace: [ 619.765542][ T4424] [ 619.768705][ T4424] dump_stack_lvl+0x216/0x2d0 [ 619.773794][ T4424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 619.780030][ T4424] dump_stack+0x1e/0x30 [ 619.785291][ T4424] panic+0x4e2/0xcd0 [ 619.789749][ T4424] ? kmsan_get_metadata+0xf1/0x1d0 [ 619.795159][ T4424] kmsan_report+0x2d5/0x2e0 [ 619.800400][ T4424] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 619.807424][ T4424] ? __msan_warning+0x95/0x120 [ 619.812459][ T4424] ? deflate_fast+0xfe1/0x2f70 [ 619.817755][ T4424] ? zlib_deflate+0x1d14/0x2920 [ 619.822962][ T4424] ? zlib_compress_pages+0xd89/0x2020 [ 619.828591][ T4424] ? btrfs_compress_pages+0x2aa/0x460 [ 619.834380][ T4424] ? compress_file_range+0xf50/0x25d0 [ 619.840066][ T4424] ? btrfs_work_helper+0x52f/0x18d0 [ 619.845618][ T4424] ? process_scheduled_works+0xa81/0x1bd0 [ 619.851625][ T4424] ? worker_thread+0xea5/0x1560 [ 619.856772][ T4424] ? kthread+0x3e2/0x540 [ 619.861302][ T4424] ? ret_from_fork+0x6d/0x90 [ 619.866149][ T4424] ? ret_from_fork_asm+0x1a/0x30 [ 619.871394][ T4424] ? ret_from_fork_asm+0x1a/0x30 [ 619.876701][ T4424] ? kmsan_get_metadata+0x146/0x1d0 [ 619.882162][ T4424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 619.888247][ T4424] __msan_warning+0x95/0x120 [ 619.893083][ T4424] deflate_fast+0xfe1/0x2f70 [ 619.897949][ T4424] ? filemap_get_entry+0x67d/0x6c0 [ 619.903353][ T4424] ? kmsan_get_metadata+0x146/0x1d0 [ 619.908816][ T4424] ? __pfx_deflate_fast+0x10/0x10 [ 619.914094][ T4424] zlib_deflate+0x1d14/0x2920 [ 619.919038][ T4424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 619.925146][ T4424] zlib_compress_pages+0xd89/0x2020 [ 619.930746][ T4424] btrfs_compress_pages+0x2aa/0x460 [ 619.936230][ T4424] compress_file_range+0xf50/0x25d0 [ 619.941804][ T4424] ? __pfx_compress_file_range+0x10/0x10 [ 619.947742][ T4424] btrfs_work_helper+0x52f/0x18d0 [ 619.953068][ T4424] ? kmsan_get_metadata+0x146/0x1d0 [ 619.958533][ T4424] ? __pfx_submit_compressed_extents+0x10/0x10 [ 619.965019][ T4424] ? btrfs_init_work+0xc0/0x100 [ 619.970148][ T4424] ? __pfx_btrfs_work_helper+0x10/0x10 [ 619.976092][ T4424] process_scheduled_works+0xa81/0x1bd0 [ 619.982679][ T4424] worker_thread+0xea5/0x1560 [ 619.987709][ T4424] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 619.993845][ T4424] kthread+0x3e2/0x540 [ 619.998453][ T4424] ? __pfx_worker_thread+0x10/0x10 [ 620.003929][ T4424] ? __pfx_kthread+0x10/0x10 [ 620.008830][ T4424] ret_from_fork+0x6d/0x90 [ 620.013524][ T4424] ? __pfx_kthread+0x10/0x10 [ 620.018434][ T4424] ret_from_fork_asm+0x1a/0x30 [ 620.023494][ T4424] [ 620.026924][ T4424] Kernel Offset: disabled [ 620.031346][ T4424] Rebooting in 86400 seconds..