last executing test programs: 8.862987418s ago: executing program 0 (id=356): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000040)={[{@journal_ioprio}, {@nouser_xattr}]}, 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 6.250669055s ago: executing program 3 (id=364): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x6, 0x1b, {0x1b, 0x1, "29614b0809b6791991e47034b6886ed70b15d52a5417b8d643"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000080)={0x0, 0x22, 0x19, {[@global=@item_012={0x2, 0x1, 0x1, "f457"}, @local=@item_4={0x3, 0x2, 0x3, "5cdb8574"}, @main=@item_012={0x1, 0x0, 0xc, '{'}, @local=@item_4={0x3, 0x2, 0x4, "c418c600"}, @local=@item_4={0x3, 0x2, 0x8, '{f7g'}, @main=@item_4={0x3, 0x0, 0x9, "58afb98c"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x7, 0x1, {0x22, 0x899}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0xd3, "2657aff90eef01eaa01829de6a673767df2f7b54846721a266ed6cf471f2ad19693956089aee9c5763b8d2223755969801cb5f9920223436d93d17ec381d4d05bcd2ae281abfe57fbae23e74f51dffce2e52fbbf60eef48d970493a2dd7b680e371e9f9cdb43990b76b6503730c6863cf7ad2b9c83ea1313614bd344719b9f088b7873c5126e1264d1b2532ddc9c32c2f7a766ec8deef04c2310db49cffc504cfa92fa5f9431e5cb5915de22275812fe4f59ad6708a569dea380756630eb93856fba69f4decfffade326b33a37fceadce2ad9e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000380)={0x20, 0x1, 0x89, "db95e6cab66c1ea15fc3056e5d6eb90e354076b129e6398123e487e701b0f76c1625c5b6dbb9136a940a05e5f170d0b6581afc7d955558bd3187d372d16ade7f0ec603f5987b711bd1abe3147f5c1fec1d671d4742fd25896b702649aa556c3ebd03de88e9f3aa8a3aa5f3f8f423baf4c818c3c36ebf0c87820a8ea6306b1a7290bbe83d5f76d041b4"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x8}}) 6.017500741s ago: executing program 1 (id=365): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x30, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x43}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 5.690293121s ago: executing program 1 (id=370): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4087, 0xff7) syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x40d, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x400000, 0x375, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x8, 0x0, 0x0, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r1, 0x349e, 0xe5a7, 0x9, 0x0, 0x0) 5.004589295s ago: executing program 1 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x8847, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x500, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.998253293s ago: executing program 4 (id=374): creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x300) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x8000014}) 4.942244813s ago: executing program 0 (id=375): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000200025a729bd7000fddbdf250a0010cdff00000102000100080006000000000014000200000000000000000000000000000000010500150002"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 4.726370743s ago: executing program 0 (id=377): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000000}}, './file0\x00'}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r9, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r7, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 4.662239591s ago: executing program 1 (id=378): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xec0, &(0x7f0000000140)={&(0x7f0000000340)=@setlink={0x15c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0xe8, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET={0x9c, 0x2, 0x0, 0x1, {0x110, 0x1, 0x0, 0x1, [{0xfffffffffffffcba}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0xffffffffffffff40}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x15c}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x317, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x81, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0xcb, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x236}}, {{{0x9, 0x5, 0x81, 0x3, 0x4bd2ebdc9801cc0a, 0x3, 0xff, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x8, 0x4}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x6, 0xd, 0x25, 0x7f, 0xff}, 0x24, &(0x7f0000000540)={0x5, 0xf, 0x24, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x15, 0x7, 0x72, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x3, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xe, 0x20, 0x6, 0x80, 0x4, 0x2}]}, 0x3, [{0x4d, &(0x7f0000000580)=@string={0x4d, 0x3, "410928a96847b47a7a4ea68752699d35ef788195c268c0fee7a2f89c3871acc1749af2c50c85137d572a4a507d459d870bb4272faee0476b8d39405c3673eb14be484df39efe3d3c5462f6"}}, {0x79, &(0x7f0000000600)=@string={0x79, 0x3, "2d435edf7a5568978c721cb949a18d6e2b6f558f9de6a7e8117d6e962479a0ac8328eb62857d8c89d4b239bd26b4dcbb3368f6fc3b88dd8bfd272a6e2d924ef2506d0e7d118de7ed35b5aa18c1b8f621107e248e355b308e3f8139d193162713349aea70b64a7fc010cf04e8ddcfc15ab0eb6547b5becc"}}, {0xc7, &(0x7f0000000680)=@string={0xc7, 0x3, "375a0206ac06ef4f1c0bb15e69c72411b815102652fbc4981362638ce076a934c973d06b695276a75b80379f7ea53a2c7c60a5ac945856f833afc16c0f1c248d381beeaf41c9733e919ae249986e3e739b78840ccdcc6c2d0b1f7c66f9280e293ab905eec028b3e5758a55541430b44a3498ce6282be4838f62884f9aa4ddcc1880c54ea76d5bf39d2e5f56eeff8dd605fbab43f682cbd7f3d92ac0e8d7f5bcc592541798cf94591d06b5ba188b992e37857d3843535172b54a3d91ab46014cb16b5baa82b"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, &(0x7f00000007c0)={0x40, 0xc, 0x86, {0x86, 0x9, "195ace8521731ee92c14c540a1a38dd4ea6dd94391b7ffc347bcedfd9a9f8667c7e7070d5a2e282d6d47b1c249e5e0840d892c38f1d74acae153e100d2a040980a5da1ddff3a96b9bd28009a003951a72a2d6262ea8a22f4716f578c5df01c483930f4870d05fb2e7696714e92915d7c5247af28bde5190c01395874fe5e2ab06b971607"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}, &(0x7f00000008c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x1, "c00079f2"}, @global=@item_4={0x3, 0x1, 0xb, "7a5d130a"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x276}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000980)={0x20, 0x11, 0xd8, "3b2daae86a4684e7b123527458a43f15fffb6c0d742254699296ee3b00943756ddf16e1fdfe3dd33f69c710c40e93f5b03842086429a55284c28a6bceacd177049d31b7a808f2876528979c25c81d393af371daee53ba276b552aecd13e3648753812ba3356d5a6c368da91ec871c94d6494972ee161ea94fb8d7d7d4dd68148120ac4eefe74390ee52ff2230d4f161beb89ca35f040d27ee1f6bb10b875365f8892f12a0b5cc505867ea0918b07b8ef7a73481ed50016536532a9427cc3c408067b848da4db445c3b5e21054e7acc774874705fc9ffe8e2"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x1, 0xb0, "4365e7cc012e37cfc504e919dbb9442f3d73abbbedd8a79caecbc549dffa850ae951991f0fde74f77082c684c61826dee1fc6bbef01fe185b05e9265f4951c9d5c0d6e805716eee50ac1ac31059fd329177602581f2f5579e068e0fc2e6e620423617c379f7b7c24a0fd65b7c31358e1eee22b91f2a67fdbbf653fbec49c0ab294c7b82fdfa812a5b3d0e2f50ae53618e6b13fbac2de35f3c56d267f49f843ac789f4ea4b90247ca8157265036f02079"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30004083}, 0x80) r4 = getpid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) kcmp(r4, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0xe, 0xa08, 0x0, 0xb, 0x441, 0x5, 0x7fff, 0x5, 0x200, 0xd, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.771428437s ago: executing program 4 (id=381): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x30, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x43}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 3.675616399s ago: executing program 0 (id=382): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 3.537783324s ago: executing program 4 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000180)={'wg1\x00', 0x100000000, 0x804}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "914a2b4bb6c1b37345016fa4a7d3514968fd1aac554fd3fbc39ec6fc1ead69f2"}) r3 = syz_open_dev$radio(&(0x7f0000000380), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x5) 3.505121568s ago: executing program 0 (id=384): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x3f, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) renameat2(r4, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6c00) 3.318294353s ago: executing program 4 (id=385): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@creator={'creator', 0x3d, "062d407f"}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@codepage={'codepage', 0x3d, 'iso8859-3'}}]}, 0x5, 0x357, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4087, 0xff7) syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x40d, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x400000, 0x375, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x4000, @fd_index=0x6, 0x8, 0x0, 0x0, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r1, 0x349e, 0xe5a7, 0x9, 0x0, 0x0) 3.178408457s ago: executing program 3 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) 3.054980785s ago: executing program 2 (id=387): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 3.010248666s ago: executing program 3 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r2, &(0x7f0000000580)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x180, 0x0) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r9, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xf1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x1, 0x1ff, 0x7, 0x0, 0xff, 0x8}, {0x40000001, 0xfff, 0x6, 0x10, 0xe, 0x1, 0x2}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) prctl$PR_SET_TSC(0x1a, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x50, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4014855}, 0x4010) 2.426903789s ago: executing program 0 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0002220000008fe0070800be0093000000801b09037a315bc7b83395"], 0x0}, 0x0) syz_emit_ethernet(0x1f, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000240)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 2.322929529s ago: executing program 2 (id=390): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xab0, 0x82180) r5 = memfd_create(&(0x7f0000000740)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE\xf3\xbd\x1d\x01\xcc\xb4<\x00\xddo*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\a\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW\xcb*o\xb6\xb4\xed0\x03\xc6\xcamzq3*(-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdBn8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x10\xce\x8b\x8b\xf4&$\xe4tg\xaa\x1f\x82\xa7\x16\x8c\xdc\xc3Q\\\xdd\xe7\xa6\x91\xa0=B\xff\x87\x94\x96#NjH\xcb(4\xfess3@\xfb5zF6\x82!\x82\f0\x12O\xe7\"|\x16u\xd7\t\xaa\x15<\x17d>\xe8\xaf\xea\xafhvzi4S3\xd5\xda\x19\xdb\xdfT', 0x3) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000180)={{0x2, 0x1, 0x401, 0x28, 'syz0\x00', 0x40}, 0x5, 0x100, 0x5, r1, 0x5, 0x7, 'syz0\x00', &(0x7f0000000040)=['/dev/sg#\x00', '\x00', '/dev/sg#\x00', '/dev/sg#\x00', '\x00'], 0x1d}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xd, 0xbe, 0x287d}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x4000001, 0x8, 0x10, 0x200, &(0x7f00000004c0)="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"}) 2.319874119s ago: executing program 4 (id=391): creat(&(0x7f00000000c0)='./bus\x00', 0x182) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x300) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x8000014}) 2.230234442s ago: executing program 3 (id=392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) io_setup(0x42, &(0x7f0000000100)=0x0) (async) eventfd(0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x21707, 0xc4b0}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x8f}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x44, 0x26, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xc, 0x8}, {0x6, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='e', 0x3f}]) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="c207", 0x2}], 0x1, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 2.024937914s ago: executing program 3 (id=393): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @fwd={0xd}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x61, 0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) 1.945824189s ago: executing program 3 (id=394): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88001, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x8000a0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = signalfd(r2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r5 = io_uring_setup(0x16de, &(0x7f0000000780)={0x0, 0xfa95, 0x20, 0x3, 0x6, 0x0, r3}) r6 = socket$kcm(0x2, 0x4, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_usb_control_io(r4, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="040e01000000027f71"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000740), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='utf8=1,umask=00000010000000000000005,shortname=mixed,utf8=0,uni_xlate=0,nfs=nostale_ro,shortname=win95,shortname=winnt,shortname=mixed,shortname=win95,uni_xlate=1,rodir,nfs,check=normal,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c667466383d312c00fd1dfeece9ad95d74319d33806995a656fa73a40646605628e53d9517dcb7dc1ef390d923a1f51793bb5b77ab4062170e1a6653986b24776c06d0961e966f5fc294026b01aa3a23c98e94eefb17e0271db8c351675d367cb07a26ac359750e74541498207bcbf615be30006f7998dc0340cd833a2c3ebded363070d0fa575f852fbbe1c1"], 0x6, 0x2bf, &(0x7f0000000240)="$eJzs3U9rK1UUAPAzaTKJukgWrkRwQBeuHq9v68IUeQ/ErixZqAsttgVpgtBCwT8Yu3LrxoULP4Eg+EHc+A0Et4I7KxRGZjLTJG0aG2la9f1+m57eOWfm3JlLOy309oMXR4d7WRycfv5LdDpJNPrRj7MketGI2pcxp/91AAD/ZWd5Hr/nE6vUJRHRWV9bAMAarfz9/8e1twQArNnOO+++tbW9/fjtLOvEk9FXJ4PiJ/vi4+T41kF8FMPYj4fRjfOI8kWhFeXbQhE+yfN83MwKvXhlND4ZFJWj93+qzr/1W0RZvxnd6JW/Mbh42yjr39x+vJlNzNSPiz6era7fL+ofRTeevyieq3+0oD4Gabz68kz/D6IbP38YH8cw9sompvVfbGbZG/k3f3z2XtFeUZ+MTwbtMm8q37jrZwMAAAAAAAAAAAAAAAAAAAAAwP/Xg2rvnHaU+/cUQ9X+OxvnxSetyGq9+f15JvVJfaLZ/YHyPB/n8V29v87DLMvyKnFa34wXmtG8n1kDAAAAAAAAAAAAAAAAAADAv8vxJ58e7g6H+0e3EtS7ATQj4s+diH96nv7MyEuxPLldXXN3OGxU4XxOc3YkNuqcJGJpG8Uk5kZev8UbNR88c6XnKvj+h1VP2Pn7nNbia80Erev6uWlQr67D3SQW5rSjHulUi+TbNGKak8YNr5VedyiPVZZfuvBQd+W5p8+VwXhJTiTLGnvt18mdq0aSy7NIy7u6sLxVBTPll9bG4mdxTXD1a0Vitw4AAAAAAAAAAAAAAAAAAFir6R/9Ljh4urS0kbfX1hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Knp//9fIRhXxTdITuPo+J6nCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFPgrwAAAP//iDNcaQ==") write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c3030306c32db2423126f643000342c000000000000000000000000000000f636c6cf0064c57e053ffc93de60f85b9fe2ab2bc16f9a6c632b748bc47ee2dca5a861"]) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000001900)=""/4079, 0xfef, 0x66) r8 = syz_open_procfs(0x0, 0x0) fanotify_init(0x0, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x6ec9, 0x8002) mmap$xdp(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r8, 0x100000000) ioctl$SCSI_IOCTL_START_UNIT(r9, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1.402650709s ago: executing program 2 (id=395): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffc, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x5], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) unshare(0x28000600) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181402, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003fc000/0x3000)=nil, &(0x7f0000978000/0x4000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) 1.308569781s ago: executing program 4 (id=396): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x6, 0x1b, {0x1b, 0x1, "29614b0809b6791991e47034b6886ed70b15d52a5417b8d643"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000080)={0x0, 0x22, 0x19, {[@global=@item_012={0x2, 0x1, 0x1, "f457"}, @local=@item_4={0x3, 0x2, 0x3, "5cdb8574"}, @main=@item_012={0x1, 0x0, 0xc, '{'}, @local=@item_4={0x3, 0x2, 0x4, "c418c600"}, @local=@item_4={0x3, 0x2, 0x8, '{f7g'}, @main=@item_4={0x3, 0x0, 0x9, "58afb98c"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x7, 0x1, {0x22, 0x899}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0xd3, "2657aff90eef01eaa01829de6a673767df2f7b54846721a266ed6cf471f2ad19693956089aee9c5763b8d2223755969801cb5f9920223436d93d17ec381d4d05bcd2ae281abfe57fbae23e74f51dffce2e52fbbf60eef48d970493a2dd7b680e371e9f9cdb43990b76b6503730c6863cf7ad2b9c83ea1313614bd344719b9f088b7873c5126e1264d1b2532ddc9c32c2f7a766ec8deef04c2310db49cffc504cfa92fa5f9431e5cb5915de22275812fe4f59ad6708a569dea380756630eb93856fba69f4decfffade326b33a37fceadce2ad9e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000380)={0x20, 0x1, 0x89, "db95e6cab66c1ea15fc3056e5d6eb90e354076b129e6398123e487e701b0f76c1625c5b6dbb9136a940a05e5f170d0b6581afc7d955558bd3187d372d16ade7f0ec603f5987b711bd1abe3147f5c1fec1d671d4742fd25896b702649aa556c3ebd03de88e9f3aa8a3aa5f3f8f423baf4c818c3c36ebf0c87820a8ea6306b1a7290bbe83d5f76d041b4"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x8}}) 526.415457ms ago: executing program 2 (id=397): r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f000001f600)=""/105, 0x69, &(0x7f0000000240)={&(0x7f000001f680)={'crc32-generic\x00'}}) (fail_nth: 7) 228.661242ms ago: executing program 2 (id=398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 183.109894ms ago: executing program 2 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0], 0x2ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20048001) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x81) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f636b20d354d00d656d00"], 0xc) write$vga_arbiter(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock io\tmem\x00'], 0xe) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x2, 0x3, 0x2003, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000002640)="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", 0x1000}], 0x1}, 0x8001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) pipe(0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6a}, 0x8) utime(&(0x7f0000001380)='./cgroup\x00', 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000140)="3b01", 0x2}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000009000000000000000100000d0000000006c2de66fb1b7488f6fb00cb0000000200000007000000000000080200"], 0x0, 0x41}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008ce, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x9, 0x4432, &(0x7f00000088c0)="$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") bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000001940)=""/244, 0xf4}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000036c0)=""/4110, 0x100e}], 0x8}, 0x40012100) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x4, 0x9, 0x41, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback={0x0, 0x7ffffffe}, 0x8000, 0x20, 0x4, 0x4}}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b39f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0xb164a365f320bd1d) 123.521333ms ago: executing program 1 (id=400): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 0s ago: executing program 1 (id=401): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): [ 57.836783][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.846285][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.856800][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.865531][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.873698][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.882190][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.899673][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.909426][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.918406][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.928800][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.960344][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.971288][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.981268][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.991980][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.004050][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.014511][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.029549][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.049766][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.073577][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.083401][ T4193] device veth1_vlan entered promiscuous mode [ 58.094232][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.104148][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.115410][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.126673][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.136960][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.147901][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 58.154141][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 58.157539][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.170063][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.180700][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.192223][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.227399][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.242622][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 58.252741][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 58.273379][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.281579][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.294907][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 58.300865][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.310410][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.326183][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.341516][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.350636][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.360167][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.395155][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.405542][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.438443][ T4193] device veth0_macvtap entered promiscuous mode [ 58.460297][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.469472][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.479291][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.505958][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.539067][ T4193] device veth1_macvtap entered promiscuous mode [ 58.550694][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.559033][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.564484][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.568067][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.633382][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.643177][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.656491][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.673705][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.681315][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.707994][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.720198][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.731093][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.741615][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.751629][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.762077][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.772190][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.783496][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.796719][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.813105][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.822116][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.848001][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.865504][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.875685][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.886393][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.896468][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.907581][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.917685][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.928581][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.939754][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.959636][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.973224][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.986936][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.999022][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.021840][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.057626][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.091035][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.100820][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.114036][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.589639][ T4285] loop1: detected capacity change from 0 to 2048 [ 60.924469][ T4284] loop2: detected capacity change from 0 to 32768 [ 60.934138][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 60.940286][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 60.946793][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 60.950449][ T4285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.952883][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 60.952938][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 61.232710][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.349997][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.447957][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.457063][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.553607][ T4300] loop0: detected capacity change from 0 to 512 [ 61.565646][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.524344][ T4301] loop4: detected capacity change from 0 to 512 [ 63.469852][ T4296] sched: RT throttling activated [ 63.514877][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.990166][ T4300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.9: bg 0: block 5: invalid block bitmap [ 64.007032][ T4300] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 64.016964][ T4300] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9: invalid indirect mapped block 3 (level 2) [ 64.031933][ T4303] netlink: set zone limit has 4 unknown bytes [ 64.040316][ T4300] EXT4-fs (loop0): 1 orphan inode deleted [ 64.046852][ T4300] EXT4-fs (loop0): 1 truncate cleaned up [ 64.052581][ T4300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.078065][ T4301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5: bg 0: block 5: invalid block bitmap [ 64.092653][ T4301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 64.102114][ T4301] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5: invalid indirect mapped block 3 (level 2) [ 64.116717][ T4301] EXT4-fs (loop4): 1 orphan inode deleted [ 64.122525][ T4301] EXT4-fs (loop4): 1 truncate cleaned up [ 64.128220][ T4301] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.159759][ T4303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.204720][ T4303] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.215826][ T4302] loop2: detected capacity change from 0 to 1024 [ 64.244009][ T4303] loop1: detected capacity change from 0 to 512 [ 64.492247][ T4303] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.11: invalid block [ 64.854447][ T4314] loop3: detected capacity change from 0 to 512 [ 65.044994][ T4303] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.11: invalid indirect mapped block 10 (level 1) [ 65.308235][ T4303] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.11: invalid indirect mapped block 8 (level 1) [ 65.368147][ T4303] EXT4-fs (loop1): 1 truncate cleaned up [ 65.375611][ T4303] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 65.413321][ T4302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 65.618856][ T4314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4: bg 0: block 5: invalid block bitmap [ 65.662905][ T4314] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 65.671896][ T4314] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4: invalid indirect mapped block 3 (level 2) [ 65.692759][ T4314] EXT4-fs (loop3): 1 orphan inode deleted [ 65.698521][ T4314] EXT4-fs (loop3): 1 truncate cleaned up [ 65.704278][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.146456][ T4327] loop4: detected capacity change from 0 to 4096 [ 66.238387][ T4331] hfsplus: b-tree write err: -5, ino 25 [ 66.375497][ T4327] ntfs3: Unknown parameter '/dev/snd/midiC#D#' [ 66.439852][ T4331] hfsplus: b-tree write err: -5, ino 4 [ 66.575280][ T4331] hfsplus: b-tree write err: -5, ino 2 [ 66.743418][ T4331] hfsplus: b-tree write err: -5, ino 26 [ 66.891258][ T4331] hfsplus: b-tree write err: -5, ino 20 [ 67.014837][ T4331] hfsplus: b-tree write err: -5, ino 27 [ 67.039001][ T4340] loop1: detected capacity change from 0 to 128 [ 67.502714][ T4352] loop3: detected capacity change from 0 to 2048 [ 67.561074][ T4352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.230707][ T4356] loop0: detected capacity change from 0 to 32768 [ 68.263343][ T4356] gfs2: Unknown parameter 'port' [ 68.535058][ T4361] loop1: detected capacity change from 0 to 4096 [ 68.692556][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.739672][ T4363] loop4: detected capacity change from 0 to 40427 [ 68.819205][ T4363] F2FS-fs (loop4): invalid crc value [ 68.838587][ T4363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.882904][ T4363] F2FS-fs (loop4): Start checkpoint disabled! [ 68.901798][ T4363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 68.933268][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.955471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.093419][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.179434][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.242857][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 69.372882][ T23] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 69.381901][ T23] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 69.382688][ T4233] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 69.392894][ T23] usb 4-1: config 8 has no interface number 0 [ 69.407994][ T23] usb 4-1: config 8 interface 203 has no altsetting 0 [ 69.433441][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.458074][ T4233] usb 1-1: config 0 descriptor?? [ 69.505899][ T4233] cp210x 1-1:0.0: cp210x converter detected [ 69.658518][ T23] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=fd.7a [ 69.690283][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.772487][ T23] usb 4-1: Product: syz [ 69.782741][ T23] usb 4-1: Manufacturer: syz [ 69.787372][ T23] usb 4-1: SerialNumber: syz [ 69.901711][ T4384] loop2: detected capacity change from 0 to 512 [ 69.942891][ T4233] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 70.197884][ T4356] udc-core: couldn't find an available UDC or it's busy [ 70.205012][ T4356] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.517169][ T4233] usb 1-1: cp210x converter now attached to ttyUSB0 [ 70.556674][ T4386] loop4: detected capacity change from 0 to 4096 [ 70.566477][ T4384] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.26: bg 0: block 5: invalid block bitmap [ 70.580330][ T4384] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 70.589691][ T4384] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.26: invalid indirect mapped block 3 (level 2) [ 70.605910][ T4384] EXT4-fs (loop2): 1 orphan inode deleted [ 70.611657][ T4384] EXT4-fs (loop2): 1 truncate cleaned up [ 70.617442][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.679117][ T4386] ntfs: volume version 3.1. [ 70.712992][ T4233] usb 1-1: USB disconnect, device number 2 [ 70.763904][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 70.773468][ T23] port100 4-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 70.815944][ T4233] cp210x 1-1:0.0: device disconnected [ 70.825228][ T23] usb 4-1: USB disconnect, device number 2 [ 70.878366][ T4386] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 70.965819][ T4386] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 71.025617][ T4393] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 71.277374][ T4398] loop0: detected capacity change from 0 to 128 [ 71.349338][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.356025][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.437134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.446533][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.462453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.471465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.480477][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.489554][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.498587][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 73.529879][ T4401] loop3: detected capacity change from 0 to 4096 [ 73.792946][ T4419] loop2: detected capacity change from 0 to 512 [ 74.523648][ T4419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.34: bg 0: block 5: invalid block bitmap [ 74.540115][ T4419] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 74.576402][ T4419] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.34: invalid indirect mapped block 3 (level 2) [ 74.612738][ T4419] EXT4-fs (loop2): 1 orphan inode deleted [ 74.618501][ T4419] EXT4-fs (loop2): 1 truncate cleaned up [ 74.624483][ T4419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.307464][ T4428] loop4: detected capacity change from 0 to 131072 [ 75.483928][ T4434] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.660711][ T4444] loop3: detected capacity change from 0 to 64 [ 75.801018][ T4446] loop2: detected capacity change from 0 to 128 [ 75.809843][ T4428] F2FS-fs (loop4): Test dummy encryption mode enabled [ 75.841887][ T4428] F2FS-fs (loop4): invalid crc value [ 75.877255][ T4428] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.932579][ T4428] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.386269][ T4459] loop3: detected capacity change from 0 to 512 [ 76.681398][ T4459] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.44: bg 0: block 5: invalid block bitmap [ 76.696572][ T4459] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 76.709510][ T4459] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.44: invalid indirect mapped block 3 (level 2) [ 76.725400][ T4459] EXT4-fs (loop3): 1 orphan inode deleted [ 76.731198][ T4459] EXT4-fs (loop3): 1 truncate cleaned up [ 76.736989][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.905823][ T1107] cfg80211: failed to load regulatory.db [ 76.954416][ T4460] loop2: detected capacity change from 0 to 256 [ 76.961537][ T4460] exfat: Deprecated parameter 'utf8' [ 76.967926][ T4438] loop0: detected capacity change from 0 to 32768 [ 77.065279][ T4460] exfat: Deprecated parameter 'utf8' [ 77.139493][ T4460] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 77.208957][ T4441] loop1: detected capacity change from 0 to 32768 [ 77.354619][ T4466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.364638][ T4466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.402932][ T26] audit: type=1800 audit(1772914493.986:2): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 77.896439][ T4479] loop0: detected capacity change from 0 to 512 [ 78.148807][ T4479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.50: bg 0: block 5: invalid block bitmap [ 78.166863][ T4479] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 78.179154][ T4479] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.50: invalid indirect mapped block 3 (level 2) [ 78.196330][ T4479] EXT4-fs (loop0): 1 orphan inode deleted [ 78.202135][ T4479] EXT4-fs (loop0): 1 truncate cleaned up [ 78.207931][ T4479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.847697][ T4489] netlink: 104 bytes leftover after parsing attributes in process `syz.2.51'. [ 79.056632][ T4494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.53'. [ 79.105478][ T4490] loop0: detected capacity change from 0 to 8192 [ 79.115113][ T4495] ======================================================= [ 79.115113][ T4495] WARNING: The mand mount option has been deprecated and [ 79.115113][ T4495] and is ignored by this kernel. Remove the mand [ 79.115113][ T4495] option from the mount to silence this warning. [ 79.115113][ T4495] ======================================================= [ 79.156184][ T4495] loop2: detected capacity change from 0 to 128 [ 79.176076][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 79.197041][ T4495] EXT4-fs (loop2): Ignoring removed bh option [ 79.234768][ T4495] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 79.245736][ T4495] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.271658][ T4490] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 79.288498][ T26] audit: type=1800 audit(1772914495.876:3): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 79.344799][ T4490] REISERFS (device loop0): using ordered data mode [ 79.351334][ T4490] reiserfs: using flush barriers [ 79.388007][ T4490] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.454930][ T4490] REISERFS (device loop0): checking transaction log (loop0) [ 79.502112][ T4490] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 80.571482][ T4513] set_capacity_and_notify: 1 callbacks suppressed [ 80.571497][ T4513] loop0: detected capacity change from 0 to 131072 [ 80.592759][ T4518] loop4: detected capacity change from 0 to 512 [ 80.686611][ T4513] F2FS-fs (loop0): Test dummy encryption mode enabled [ 80.697676][ T4513] F2FS-fs (loop0): invalid crc value [ 80.741149][ T4518] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.60: bg 0: block 5: invalid block bitmap [ 80.756070][ T4518] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 80.768239][ T4518] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.60: invalid indirect mapped block 3 (level 2) [ 80.784588][ T4518] EXT4-fs (loop4): 1 orphan inode deleted [ 80.790383][ T4518] EXT4-fs (loop4): 1 truncate cleaned up [ 80.796188][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.216685][ T4513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.290296][ T4513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.365733][ T4525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.61'. [ 81.400301][ T4525] FAULT_INJECTION: forcing a failure. [ 81.400301][ T4525] name failslab, interval 1, probability 0, space 0, times 1 [ 81.433374][ T4527] loop4: detected capacity change from 0 to 512 [ 81.490328][ T4525] CPU: 1 PID: 4525 Comm: syz.2.61 Not tainted syzkaller #0 [ 81.497844][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.509229][ T4525] Call Trace: [ 81.512612][ T4525] [ 81.516018][ T4525] dump_stack_lvl+0x188/0x250 [ 81.521093][ T4525] ? show_regs_print_info+0x20/0x20 [ 81.526317][ T4525] ? load_image+0x400/0x400 [ 81.530853][ T4525] ? __might_sleep+0xf0/0xf0 [ 81.535456][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 81.541557][ T4525] should_fail+0x38c/0x4c0 [ 81.545997][ T4525] should_failslab+0x5/0x20 [ 81.550520][ T4525] slab_pre_alloc_hook+0x51/0xc0 [ 81.555510][ T4525] kmem_cache_alloc_node+0x47/0x2d0 [ 81.560730][ T4525] ? __alloc_skb+0xf4/0x750 [ 81.565265][ T4525] __alloc_skb+0xf4/0x750 [ 81.569621][ T4525] netlink_ack+0x372/0xb50 [ 81.574060][ T4525] ? xfrm_netlink_rcv+0x66/0x90 [ 81.578933][ T4525] ? __mutex_lock_common+0x465/0x2400 [ 81.586898][ T4525] ? netlink_dump+0xcf0/0xcf0 [ 81.591723][ T4525] ? __skb_clone+0x480/0x790 [ 81.596443][ T4525] netlink_rcv_skb+0x27a/0x440 [ 81.601226][ T4525] ? xfrm_netlink_rcv+0x90/0x90 [ 81.606093][ T4525] ? netlink_ack+0xb50/0xb50 [ 81.610698][ T4525] ? __lock_acquire+0x7d10/0x7d10 [ 81.615751][ T4525] xfrm_netlink_rcv+0x75/0x90 [ 81.620445][ T4525] netlink_unicast+0x774/0x920 [ 81.625240][ T4525] netlink_sendmsg+0x8ba/0xbe0 [ 81.630026][ T4525] ? netlink_getsockopt+0x570/0x570 [ 81.635241][ T4525] ? aa_sock_msg_perm+0x94/0x150 [ 81.640195][ T4525] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.645509][ T4525] ? security_socket_sendmsg+0x7c/0xa0 [ 81.650987][ T4525] ? netlink_getsockopt+0x570/0x570 [ 81.656203][ T4525] ____sys_sendmsg+0x5b7/0x8f0 [ 81.661090][ T4525] ? __sys_sendmsg_sock+0x30/0x30 [ 81.666138][ T4525] ? import_iovec+0x6f/0xa0 [ 81.670654][ T4525] ___sys_sendmsg+0x236/0x2e0 [ 81.675366][ T4525] ? __sys_sendmsg+0x2a0/0x2a0 [ 81.680188][ T4525] ? vfs_write+0x8b2/0xd60 [ 81.684625][ T4525] __se_sys_sendmsg+0x1af/0x290 [ 81.689479][ T4525] ? __x64_sys_sendmsg+0x80/0x80 [ 81.694406][ T4525] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 81.700380][ T4525] ? lockdep_hardirqs_on+0x94/0x140 [ 81.705670][ T4525] do_syscall_64+0x4c/0xa0 [ 81.710079][ T4525] ? clear_bhb_loop+0x30/0x80 [ 81.714831][ T4525] ? clear_bhb_loop+0x30/0x80 [ 81.719520][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.725411][ T4525] RIP: 0033:0x7fbbc549b799 [ 81.729902][ T4525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.749501][ T4525] RSP: 002b:00007fbbc36f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.757993][ T4525] RAX: ffffffffffffffda RBX: 00007fbbc5714fa0 RCX: 00007fbbc549b799 [ 81.765955][ T4525] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 81.773917][ T4525] RBP: 00007fbbc36f5090 R08: 0000000000000000 R09: 0000000000000000 [ 81.781875][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.789832][ T4525] R13: 00007fbbc5715038 R14: 00007fbbc5714fa0 R15: 00007ffc221ad318 [ 81.797799][ T4525] [ 81.823230][ T4527] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 81.872607][ T4527] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.963285][ T4514] loop1: detected capacity change from 0 to 32768 [ 82.302597][ T13] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 82.406709][ T4540] loop2: detected capacity change from 0 to 128 [ 82.505495][ T13] usb 5-1: device descriptor read/64, error -71 [ 82.559175][ T4538] loop3: detected capacity change from 0 to 40427 [ 82.626367][ T4538] F2FS-fs (loop3): invalid crc value [ 82.662995][ T4538] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.721817][ T4538] F2FS-fs (loop3): Start checkpoint disabled! [ 82.748672][ T4538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 82.792703][ T13] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 82.823831][ T4554] loop0: detected capacity change from 0 to 256 [ 82.922999][ T4554] FAT-fs (loop0): bogus sectors per cluster 30 [ 82.974007][ T4554] FAT-fs (loop0): Can't find a valid FAT filesystem [ 83.002642][ T13] usb 5-1: device descriptor read/64, error -71 [ 83.136018][ T13] usb usb5-port1: attempt power cycle [ 83.359073][ T4556] loop1: detected capacity change from 0 to 4096 [ 83.546384][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 83.572592][ T13] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 83.692841][ T13] usb 5-1: device descriptor read/8, error -71 [ 83.731371][ T4555] loop2: detected capacity change from 0 to 32768 [ 83.807537][ T26] audit: type=1800 audit(1772914500.396:4): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.70" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 83.897860][ T4566] loop3: detected capacity change from 0 to 1024 [ 83.962533][ T13] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 84.052716][ T13] usb 5-1: device descriptor read/8, error -71 [ 84.209064][ T13] usb usb5-port1: unable to enumerate USB device [ 84.721543][ T4566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.747397][ T4570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.921195][ T4581] set_capacity_and_notify: 3 callbacks suppressed [ 85.921210][ T4581] loop0: detected capacity change from 0 to 512 [ 85.996478][ T4583] loop1: detected capacity change from 0 to 128 [ 86.076689][ T4581] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.094590][ T4581] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 86.126577][ T4587] netlink: 'syz.4.83': attribute type 6 has an invalid length. [ 86.140173][ T4587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 86.252991][ T4336] hfsplus: b-tree write err: -5, ino 25 [ 86.258954][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 86.272733][ T4336] hfsplus: b-tree write err: -5, ino 2 [ 86.278414][ T4336] hfsplus: b-tree write err: -5, ino 26 [ 86.285715][ T4336] hfsplus: b-tree write err: -5, ino 20 [ 86.291336][ T4336] hfsplus: b-tree write err: -5, ino 27 [ 86.443091][ T4594] netlink: 104 bytes leftover after parsing attributes in process `syz.4.85'. [ 86.630177][ T4603] loop4: detected capacity change from 0 to 8 [ 86.735361][ T4603] unable to read xattr id index table [ 86.928084][ T4593] loop1: detected capacity change from 0 to 32768 [ 87.068608][ T4607] loop0: detected capacity change from 0 to 2048 [ 87.213719][ T4607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.750612][ T4593] XFS (loop1): Mounting V5 Filesystem [ 88.784441][ T4628] loop3: detected capacity change from 0 to 512 [ 88.800467][ T4627] loop2: detected capacity change from 0 to 512 [ 91.204073][ T4629] loop0: detected capacity change from 0 to 2048 [ 91.213155][ T4593] XFS (loop1): log mount failed [ 91.299054][ T4629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.344299][ T4628] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.90: bg 0: block 5: invalid block bitmap [ 91.344305][ T4627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.89: bg 0: block 5: invalid block bitmap [ 91.363946][ T4627] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 91.370494][ T4628] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 91.378892][ T4627] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.89: invalid indirect mapped block 3 (level 2) [ 91.396986][ T4628] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.90: invalid indirect mapped block 3 (level 2) [ 91.400564][ T4627] EXT4-fs (loop2): 1 orphan inode deleted [ 91.413419][ T4628] EXT4-fs (loop3): 1 orphan inode deleted [ 91.418272][ T4627] EXT4-fs (loop2): 1 truncate cleaned up [ 91.424014][ T4628] EXT4-fs (loop3): 1 truncate cleaned up [ 91.424031][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.446533][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.798664][ T4638] loop4: detected capacity change from 0 to 4096 [ 91.896957][ T4640] loop0: detected capacity change from 0 to 128 [ 91.902612][ T4644] loop3: detected capacity change from 0 to 64 [ 92.015424][ T4646] loop1: detected capacity change from 0 to 1024 [ 92.104053][ T4650] FAULT_INJECTION: forcing a failure. [ 92.104053][ T4650] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.156283][ T4650] CPU: 0 PID: 4650 Comm: syz.0.98 Not tainted syzkaller #0 [ 92.163520][ T4650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.173818][ T4650] Call Trace: [ 92.177116][ T4650] [ 92.180054][ T4650] dump_stack_lvl+0x188/0x250 [ 92.184750][ T4650] ? show_regs_print_info+0x20/0x20 [ 92.189963][ T4650] ? load_image+0x400/0x400 [ 92.194478][ T4650] ? __lock_acquire+0x7d10/0x7d10 [ 92.199521][ T4650] should_fail+0x38c/0x4c0 [ 92.203960][ T4650] _copy_from_user+0x2e/0x170 [ 92.208669][ T4650] __se_sys_memfd_create+0x189/0x450 [ 92.213971][ T4650] ? __x64_sys_memfd_create+0x60/0x60 [ 92.219441][ T4650] ? lockdep_hardirqs_on+0x94/0x140 [ 92.224645][ T4650] do_syscall_64+0x4c/0xa0 [ 92.229062][ T4650] ? clear_bhb_loop+0x30/0x80 [ 92.233737][ T4650] ? clear_bhb_loop+0x30/0x80 [ 92.238413][ T4650] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.244310][ T4650] RIP: 0033:0x7f57c4c6c799 [ 92.248745][ T4650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.268443][ T4650] RSP: 002b:00007f57c2ec5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 92.276875][ T4650] RAX: ffffffffffffffda RBX: 0000000000000327 RCX: 00007f57c4c6c799 [ 92.284868][ T4650] RDX: 00007f57c2ec5ee0 RSI: 0000000000000000 RDI: 00007f57c4d02db9 [ 92.292852][ T4650] RBP: 0000200000000080 R08: 00000000ffffffff R09: 0000000000000000 [ 92.300877][ T4650] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000016c0 [ 92.308861][ T4650] R13: 00007f57c2ec5ee0 R14: 00007f57c2ec5ea0 R15: 0000200000000540 [ 92.316872][ T4650] [ 92.680021][ T4644] cgroup: fork rejected by pids controller in /syz3 [ 92.758103][ T4646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.95'. [ 93.299106][ T4825] loop4: detected capacity change from 0 to 2048 [ 93.393342][ T4829] 9pnet: Insufficient options for proto=fd [ 93.404367][ T4643] loop2: detected capacity change from 0 to 32768 [ 93.411299][ T4336] hfsplus: b-tree write err: -5, ino 25 [ 93.427397][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 93.458820][ T4643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.96 (4643) [ 93.483851][ T4825] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.519970][ T4336] hfsplus: b-tree write err: -5, ino 2 [ 93.526430][ T4336] hfsplus: b-tree write err: -5, ino 26 [ 93.538928][ T4336] hfsplus: b-tree write err: -5, ino 20 [ 93.542603][ T4825] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.544980][ T4336] hfsplus: b-tree write err: -5, ino 27 [ 93.827975][ T4839] loop3: detected capacity change from 0 to 512 [ 94.249152][ T4643] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 94.446916][ T4643] BTRFS error (device loop2): superblock checksum mismatch [ 94.479062][ T4839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.105: bg 0: block 5: invalid block bitmap [ 94.479334][ T4178] udevd[4178]: incorrect btrfs checksum on /dev/loop2 [ 94.493143][ T4839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 94.512937][ T4839] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.105: invalid indirect mapped block 3 (level 2) [ 94.528758][ T4839] EXT4-fs (loop3): 1 orphan inode deleted [ 94.534641][ T4839] EXT4-fs (loop3): 1 truncate cleaned up [ 94.540315][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.572641][ T4643] BTRFS error (device loop2): open_ctree failed: -22 [ 94.945154][ T4848] loop0: detected capacity change from 0 to 2048 [ 95.348710][ T4850] loop1: detected capacity change from 0 to 2048 [ 95.955052][ T4850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.981411][ T4848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.480599][ T4862] set_capacity_and_notify: 1 callbacks suppressed [ 96.480614][ T4862] loop2: detected capacity change from 0 to 64 [ 96.487023][ T4863] loop1: detected capacity change from 0 to 64 [ 96.653444][ T4858] loop3: detected capacity change from 0 to 4096 [ 96.903321][ T4863] cgroup: fork rejected by pids controller in /syz1 [ 97.250820][ T4862] cgroup: fork rejected by pids controller in /syz2 [ 97.605203][ T5097] FAULT_INJECTION: forcing a failure. [ 97.605203][ T5097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.635212][ T5097] CPU: 1 PID: 5097 Comm: syz.4.114 Not tainted syzkaller #0 [ 97.642527][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.652587][ T5097] Call Trace: [ 97.655869][ T5097] [ 97.658794][ T5097] dump_stack_lvl+0x188/0x250 [ 97.663486][ T5097] ? show_regs_print_info+0x20/0x20 [ 97.668705][ T5097] ? load_image+0x400/0x400 [ 97.673214][ T5097] ? __lock_acquire+0x7d10/0x7d10 [ 97.678254][ T5097] should_fail+0x38c/0x4c0 [ 97.682683][ T5097] strncpy_from_user+0x32/0x360 [ 97.687549][ T5097] getname_flags+0xef/0x500 [ 97.692061][ T5097] user_path_at_empty+0x2a/0x190 [ 97.697003][ T5097] __se_sys_mount+0x2a4/0x3d0 [ 97.701687][ T5097] ? __x64_sys_mount+0xc0/0xc0 [ 97.706461][ T5097] ? lockdep_hardirqs_on+0x94/0x140 [ 97.711657][ T5097] ? __x64_sys_mount+0x1c/0xc0 [ 97.716420][ T5097] do_syscall_64+0x4c/0xa0 [ 97.720879][ T5097] ? clear_bhb_loop+0x30/0x80 [ 97.725562][ T5097] ? clear_bhb_loop+0x30/0x80 [ 97.730235][ T5097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.736125][ T5097] RIP: 0033:0x7fcebfa18799 [ 97.740540][ T5097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.760312][ T5097] RSP: 002b:00007fcebdc72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.768731][ T5097] RAX: ffffffffffffffda RBX: 00007fcebfc91fa0 RCX: 00007fcebfa18799 [ 97.776702][ T5097] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 97.784672][ T5097] RBP: 00007fcebdc72090 R08: 0000200000000400 R09: 0000000000000000 [ 97.792634][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.800588][ T5097] R13: 00007fcebfc92038 R14: 00007fcebfc91fa0 R15: 00007ffde8beaf48 [ 97.808557][ T5097] [ 98.372081][ T5103] loop0: detected capacity change from 0 to 2048 [ 98.792813][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.888893][ T5107] loop2: detected capacity change from 0 to 128 [ 98.925682][ T5103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.052528][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 99.082659][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.116817][ T5112] loop4: detected capacity change from 0 to 8 [ 99.182975][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.194695][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.205683][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.215775][ T1325] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 99.225256][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.273022][ T1325] usb 2-1: config 0 descriptor?? [ 99.392588][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 99.463280][ T5125] loop2: detected capacity change from 0 to 64 [ 99.624869][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.637009][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.689883][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.702060][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 99.711187][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.766081][ T1325] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 99.781305][ T23] usb 4-1: config 0 descriptor?? [ 99.791393][ T1325] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 99.799035][ T1325] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 99.806640][ T1325] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 99.815009][ T1325] hid-picolcd 0003:04D8:F002.0001: unknown main item tag 0x0 [ 99.877654][ T5190] loop2: detected capacity change from 0 to 4096 [ 99.892881][ T1325] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 99.916951][ T1325] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 100.172655][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.183070][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.195963][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.205997][ T1107] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 100.215111][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.229164][ T1107] usb 1-1: config 0 descriptor?? [ 100.948700][ T23] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 100.965307][ T23] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 100.973273][ T23] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 100.980478][ T23] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 100.993167][ T23] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 101.002757][ T4233] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 101.017145][ T23] usb 4-1: USB disconnect, device number 3 [ 101.216766][ T1107] hid-rmi 0003:0461:4E72.0003: collection stack underflow [ 101.224477][ T1107] hid-rmi 0003:0461:4E72.0003: item 0 1 0 12 parsing failed [ 101.232224][ T1107] hid-rmi 0003:0461:4E72.0003: parse failed [ 101.238217][ T1107] hid-rmi: probe of 0003:0461:4E72.0003 failed with error -22 [ 101.291358][ T5205] loop2: detected capacity change from 0 to 128 [ 101.386976][ T5206] loop4: detected capacity change from 0 to 512 [ 101.763952][ T5206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.131: bg 0: block 5: invalid block bitmap [ 101.779008][ T5206] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 101.792028][ T5206] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.131: invalid indirect mapped block 3 (level 2) [ 101.807174][ T5206] EXT4-fs (loop4): 1 orphan inode deleted [ 101.813066][ T5206] EXT4-fs (loop4): 1 truncate cleaned up [ 101.818779][ T5206] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.046166][ T5202] fido_id[5202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.302137][ T5216] loop2: detected capacity change from 0 to 4096 [ 103.316764][ T5220] ODEBUG: Out of memory. ODEBUG disabled [ 103.612702][ T13] usb 1-1: USB disconnect, device number 3 [ 103.678438][ T5216] NILFS (loop2): invalid segment: Checksum error in segment payload [ 103.692851][ T5216] NILFS (loop2): trying rollback from an earlier position [ 103.802698][ T5216] NILFS (loop2): invalid segment: Checksum error in segment payload [ 103.831310][ T5216] NILFS (loop2): error -22 while searching super root [ 103.897121][ T5212] loop3: detected capacity change from 0 to 32768 [ 104.062719][ T5227] loop0: detected capacity change from 0 to 2048 [ 104.360352][ T5227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.371500][ T26] audit: type=1800 audit(1772914520.806:5): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 104.612532][ T4233] usb 2-1: device descriptor read/64, error -71 [ 104.741332][ T5212] Zero length message leads to an empty skb [ 104.922594][ T4233] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 104.962717][ T4233] usb 2-1: device reset changed ep0 maxpacket size! [ 105.024024][ T1325] usb 2-1: USB disconnect, device number 2 [ 105.058259][ T5236] loop4: detected capacity change from 0 to 64 [ 105.108432][ T5238] loop3: detected capacity change from 0 to 4096 [ 105.213132][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.325081][ T5238] EXT4-fs (loop3): unsupported descriptor size 0 [ 105.521802][ T5236] cgroup: fork rejected by pids controller in /syz4 [ 105.655909][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 105.863104][ T1325] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.876941][ T1325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.916935][ T5784] loop0: detected capacity change from 0 to 128 [ 105.958666][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.962138][ T5786] damon: min_nr_regions (0) must be at least 3 [ 105.983861][ T1325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.038930][ T1325] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.215416][ T1325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.442028][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.632604][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 106.687981][ T1325] usb 2-1: can't set config #16, error -71 [ 106.717237][ T5786] Bluetooth: hci5: Frame reassembly failed (-84) [ 106.741442][ T5791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 106.768874][ T5790] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 106.781962][ T1325] usb 2-1: USB disconnect, device number 3 [ 106.783936][ T5794] loop4: detected capacity change from 0 to 64 [ 106.830472][ T5797] syz.0.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.909518][ T5791] loop1: detected capacity change from 0 to 4096 [ 106.931274][ T5791] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 106.955726][ T5799] loop0: detected capacity change from 0 to 8 [ 107.007200][ T5799] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 107.045562][ T5799] Please update your kernel [ 107.052728][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.317959][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 107.502694][ T23] usb 3-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 107.523075][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 107.532139][ T23] usb 3-1: config 0 has no interface number 0 [ 107.539316][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.706145][ T23] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 107.715892][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.132994][ T5817] loop4: detected capacity change from 0 to 2048 [ 108.143672][ T1325] Bluetooth: hci5: command 0x1003 tx timeout [ 108.151100][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 108.441759][ T23] usb 3-1: config 0 descriptor?? [ 108.466308][ T5817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.636945][ T23] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 108.739147][ T5824] loop1: detected capacity change from 0 to 64 [ 109.595536][ T5857] loop0: detected capacity change from 0 to 128 [ 109.822876][ C0] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 109.879768][ T5862] capability: warning: `syz.0.162' uses deprecated v2 capabilities in a way that may be insecure [ 109.948267][ T5866] loop0: detected capacity change from 0 to 64 [ 110.204055][ T23] usb 3-1: USB disconnect, device number 2 [ 110.224411][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 110.234569][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 110.251381][ T5864] loop1: detected capacity change from 0 to 32768 [ 110.306211][ T5864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.161 (5864) [ 110.361098][ T5864] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.420735][ T5864] BTRFS info (device loop1): force clearing of disk cache [ 110.467116][ T5864] BTRFS info (device loop1): force zlib compression, level 3 [ 110.476008][ T5864] BTRFS info (device loop1): enabling auto defrag [ 110.500047][ T5864] BTRFS info (device loop1): max_inline at 0 [ 110.526787][ T5864] BTRFS info (device loop1): enabling disk space caching [ 110.557125][ T5864] BTRFS info (device loop1): disk space caching is enabled [ 110.582089][ T5864] BTRFS info (device loop1): has skinny extents [ 110.720816][ T5883] loop4: detected capacity change from 0 to 512 [ 111.061195][ T5883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.166: bg 0: block 5: invalid block bitmap [ 111.076714][ T5883] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 111.087622][ T5883] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.166: invalid indirect mapped block 3 (level 2) [ 111.103636][ T5883] EXT4-fs (loop4): 1 orphan inode deleted [ 111.109430][ T5883] EXT4-fs (loop4): 1 truncate cleaned up [ 111.115186][ T5883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.642570][ T5868] loop2: detected capacity change from 0 to 32768 [ 111.663405][ T5864] BTRFS info (device loop1): enabling ssd optimizations [ 111.740330][ T5906] loop0: detected capacity change from 0 to 512 [ 111.931279][ T5864] BTRFS info (device loop1): clearing free space tree [ 112.416347][ T5864] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.566202][ T5906] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.168: bg 0: block 5: invalid block bitmap [ 112.585937][ T5906] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 112.596058][ T5906] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.168: invalid indirect mapped block 3 (level 2) [ 112.674994][ T5906] EXT4-fs (loop0): 1 orphan inode deleted [ 112.681359][ T5906] EXT4-fs (loop0): 1 truncate cleaned up [ 112.687105][ T5906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.786471][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 112.862769][ T5868] XFS (loop2): Mounting V5 Filesystem [ 112.874729][ T5864] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.046485][ T5920] loop4: detected capacity change from 0 to 64 [ 113.135443][ T5868] XFS (loop2): Ending clean mount [ 113.190816][ T5922] loop0: detected capacity change from 0 to 1024 [ 113.300043][ T5922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.619185][ T5922] cgroup: fork rejected by pids controller in /syz0 [ 113.844222][ T6005] loop1: detected capacity change from 0 to 128 [ 113.858156][ T4196] XFS (loop2): Unmounting Filesystem [ 114.340501][ T6011] loop0: detected capacity change from 0 to 32768 [ 114.412632][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.451246][ T26] audit: type=1800 audit(1772914531.036:6): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.175" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 114.566465][ T4227] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.666473][ T6017] loop0: detected capacity change from 0 to 64 [ 114.692645][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.882639][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.892829][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.904258][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.914480][ T4232] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 114.923605][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.933511][ T4232] usb 5-1: config 0 descriptor?? [ 114.953079][ T4227] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 114.961459][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.981319][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.073079][ T4227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 115.082368][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.093560][ T4227] usb 2-1: SerialNumber: syz [ 115.138890][ T4227] usb 2-1: 0:2 : does not exist [ 115.192905][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.203336][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.214678][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.224578][ T13] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 115.233679][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.243750][ T13] usb 3-1: config 0 descriptor?? [ 115.462682][ T4232] usbhid 5-1:0.0: can't add hid device: -71 [ 115.468742][ T4232] usbhid: probe of 5-1:0.0 failed with error -71 [ 115.472522][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.477740][ T4232] usb 5-1: USB disconnect, device number 6 [ 115.732540][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 115.745168][ T13] hid-rmi 0003:0461:4E72.0004: collection stack underflow [ 115.753151][ T13] hid-rmi 0003:0461:4E72.0004: item 0 1 0 12 parsing failed [ 115.760651][ T13] hid-rmi 0003:0461:4E72.0004: parse failed [ 115.766674][ T13] hid-rmi: probe of 0003:0461:4E72.0004 failed with error -22 [ 115.793143][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 115.805520][ T6020] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.816112][ T6022] udc-core: couldn't find an available UDC or it's busy [ 115.823790][ T6022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.892606][ T4227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.900416][ T4227] usb 1-1: too many configurations: 73, using maximum allowed: 8 [ 116.214114][ T6027] loop0: detected capacity change from 0 to 8192 [ 116.233486][ T4227] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 116.242413][ T4227] usb 1-1: can't read configurations, error -71 [ 116.652158][ T6026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.677343][ T6026] loop0: detected capacity change from 0 to 1764 [ 116.677485][ T1107] usb 3-1: USB disconnect, device number 3 [ 116.920457][ T6034] loop0: detected capacity change from 0 to 512 [ 116.969392][ T4232] usb 2-1: USB disconnect, device number 4 [ 116.975565][ T6034] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.003429][ T6034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.296812][ T6034] EXT4-fs (loop0): 1 orphan inode deleted [ 117.419183][ T6034] EXT4-fs (loop0): 1 truncate cleaned up [ 117.642615][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 117.880812][ T6034] EXT4-fs (loop0): shut down requested (1) [ 118.178019][ T6044] loop1: detected capacity change from 0 to 2048 [ 118.327178][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.716699][ T6031] loop3: detected capacity change from 0 to 32768 [ 118.735511][ T6047] loop2: detected capacity change from 0 to 64 [ 118.757305][ T6034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.818247][ T6031] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.181 (6031) [ 118.842774][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 118.851702][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 119.024540][ T6048] loop4: detected capacity change from 0 to 4096 [ 119.053093][ T6031] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 119.062024][ T6031] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.070325][ T6031] BTRFS info (device loop3): force clearing of disk cache [ 119.077503][ T6031] BTRFS info (device loop3): enabling ssd optimizations [ 119.084679][ T6031] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.092362][ T6031] BTRFS info (device loop3): disabling free space tree [ 119.099666][ T6031] BTRFS info (device loop3): not using ssd optimizations [ 119.108180][ T6031] BTRFS info (device loop3): not using spread ssd allocation scheme [ 119.116346][ T6031] BTRFS info (device loop3): has skinny extents [ 119.146632][ T6051] loop1: detected capacity change from 0 to 1024 [ 119.229962][ T6051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.345907][ T6082] loop0: detected capacity change from 0 to 64 [ 119.963795][ T6031] BTRFS error (device loop3): open_ctree failed: -22 [ 120.371652][ T6405] loop4: detected capacity change from 0 to 8192 [ 120.465172][ T6422] loop0: detected capacity change from 0 to 4096 [ 120.490002][ T6405] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 120.507211][ T6405] REISERFS (device loop4): using ordered data mode [ 120.513881][ T6405] reiserfs: using flush barriers [ 120.520409][ T6405] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.543890][ T6413] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.556100][ T6429] loop1: detected capacity change from 0 to 1024 [ 120.563319][ T6405] REISERFS (device loop4): checking transaction log (loop4) [ 120.605226][ T6429] gfs2: path_lookup on c::: returned error -2 [ 120.768872][ T1157] hfsplus: b-tree write err: -5, ino 25 [ 120.790979][ T1157] hfsplus: b-tree write err: -5, ino 4 [ 120.817431][ T1157] hfsplus: b-tree write err: -5, ino 2 [ 120.831116][ T6405] REISERFS (device loop4): Using r5 hash to sort names [ 120.840736][ T6405] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.934337][ T6437] loop1: detected capacity change from 0 to 64 [ 121.083256][ T6413] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.334261][ T6440] loop2: detected capacity change from 0 to 2048 [ 121.348720][ T6413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.399094][ T6413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.570020][ T6440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.711687][ T6413] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 121.721588][ T6413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.737624][ T6413] usb 4-1: config 0 descriptor?? [ 122.818582][ T6413] usbhid 4-1:0.0: can't add hid device: -71 [ 122.865812][ T6413] usbhid: probe of 4-1:0.0 failed with error -71 [ 122.875866][ T6446] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.890013][ T6446] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 122.899776][ T6446] NILFS (loop0): mounting unchecked fs [ 122.955697][ T6446] NILFS (loop0): recovery complete [ 122.973292][ T6448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.023909][ T6413] usb 4-1: USB disconnect, device number 4 [ 123.176758][ T6452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.235740][ T6473] set_capacity_and_notify: 3 callbacks suppressed [ 125.235751][ T6473] loop0: detected capacity change from 0 to 131072 [ 125.311025][ T6471] FAULT_INJECTION: forcing a failure. [ 125.311025][ T6471] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 125.324952][ T6471] CPU: 0 PID: 6471 Comm: syz.1.205 Not tainted syzkaller #0 [ 125.332249][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.342303][ T6471] Call Trace: [ 125.345587][ T6471] [ 125.348513][ T6471] dump_stack_lvl+0x188/0x250 [ 125.353195][ T6471] ? show_regs_print_info+0x20/0x20 [ 125.358400][ T6471] ? load_image+0x400/0x400 [ 125.362916][ T6471] ? __lock_acquire+0x7d10/0x7d10 [ 125.367946][ T6471] ? mark_lock+0x94/0x320 [ 125.372277][ T6471] should_fail+0x38c/0x4c0 [ 125.376702][ T6471] prepare_alloc_pages+0x1e4/0x5f0 [ 125.381831][ T6471] __alloc_pages+0x11b/0x480 [ 125.386434][ T6471] ? zone_statistics+0x170/0x170 [ 125.391382][ T6471] ? verify_lock_unused+0x140/0x140 [ 125.396582][ T6471] ? __schedule+0x1497/0x43c0 [ 125.401269][ T6471] alloc_pages_vma+0x393/0x7c0 [ 125.406048][ T6471] wp_page_copy+0x24b/0x2050 [ 125.410642][ T6471] ? do_wp_page+0x902/0xad0 [ 125.415152][ T6471] ? insert_page_into_pte_locked+0x480/0x480 [ 125.421129][ T6471] ? do_raw_spin_unlock+0x11d/0x230 [ 125.426328][ T6471] ? _raw_spin_unlock+0x24/0x40 [ 125.431178][ T6471] ? do_wp_page+0x902/0xad0 [ 125.435696][ T6471] handle_mm_fault+0x1f06/0x4410 [ 125.440646][ T6471] ? get_page+0xe0/0xe0 [ 125.444808][ T6471] ? follow_page_mask+0xa6e/0x12d0 [ 125.449934][ T6471] __get_user_pages+0x94b/0x11e0 [ 125.454887][ T6471] ? populate_vma_page_range+0x290/0x290 [ 125.460522][ T6471] ? finish_task_switch+0x1e4/0x640 [ 125.465724][ T6471] ? read_lock_is_recursive+0x10/0x10 [ 125.471111][ T6471] populate_vma_page_range+0x213/0x290 [ 125.476582][ T6471] __mm_populate+0x275/0x3b0 [ 125.481183][ T6471] ? check_vma_flags+0x480/0x480 [ 125.486137][ T6471] ? up_write+0x1bb/0x420 [ 125.490474][ T6471] do_mlock+0x47a/0x530 [ 125.494652][ T6471] __x64_sys_mlock+0x5c/0x70 [ 125.499250][ T6471] do_syscall_64+0x4c/0xa0 [ 125.503666][ T6471] ? clear_bhb_loop+0x30/0x80 [ 125.508340][ T6471] ? clear_bhb_loop+0x30/0x80 [ 125.513017][ T6471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.518909][ T6471] RIP: 0033:0x7ff4ab8d3799 [ 125.523504][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.543297][ T6471] RSP: 002b:00007ff4a9b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 125.551725][ T6471] RAX: ffffffffffffffda RBX: 00007ff4abb4d090 RCX: 00007ff4ab8d3799 [ 125.559696][ T6471] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 125.567667][ T6471] RBP: 00007ff4a9b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 125.575664][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.583685][ T6471] R13: 00007ff4abb4d128 R14: 00007ff4abb4d090 R15: 00007ffc491b5c98 [ 125.591689][ T6471] [ 125.908902][ T6473] F2FS-fs (loop0): Test dummy encryption mode enabled [ 125.923570][ T6473] F2FS-fs (loop0): invalid crc value [ 126.061294][ T6454] loop3: detected capacity change from 0 to 32768 [ 126.096510][ T6473] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.221340][ T6485] loop2: detected capacity change from 0 to 512 [ 126.881704][ T6473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.113727][ T6485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.207: bg 0: block 5: invalid block bitmap [ 127.129877][ T6485] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 127.139308][ T6485] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.207: invalid indirect mapped block 3 (level 2) [ 127.153214][ T6485] EXT4-fs (loop2): 1 orphan inode deleted [ 127.158993][ T6485] EXT4-fs (loop2): 1 truncate cleaned up [ 127.164793][ T6485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.192524][ T6473] fscrypt (loop0, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 127.222817][ T6493] fscrypt (loop0, inode 11): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 128.312615][ T5979] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.474887][ T6516] loop0: detected capacity change from 0 to 2048 [ 128.600511][ T6516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.722969][ T5979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.844580][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.002688][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.022781][ T5979] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 129.042583][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.099545][ T6518] loop2: detected capacity change from 0 to 2048 [ 129.107156][ T5979] usb 2-1: config 0 descriptor?? [ 129.218069][ T6518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.521331][ T6524] loop2: detected capacity change from 0 to 64 [ 129.544175][ T6491] loop3: detected capacity change from 0 to 32768 [ 129.600562][ T6524] attempt to access beyond end of device [ 129.600562][ T6524] loop2: rw=0, want=550, limit=64 [ 129.612018][ T6524] Buffer I/O error on dev loop2, logical block 274, async page read [ 129.623339][ T6524] attempt to access beyond end of device [ 129.623339][ T6524] loop2: rw=0, want=550, limit=64 [ 129.634252][ T6524] Buffer I/O error on dev loop2, logical block 274, async page read [ 129.642517][ T26] audit: type=1800 audit(1772914546.226:7): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.216" name="file3" dev="loop2" ino=6 res=0 errno=0 [ 129.642631][ T5979] usbhid 2-1:0.0: can't add hid device: -71 [ 129.666464][ T6524] Trying to free block not in datazone [ 129.673801][ T6524] Trying to free block not in datazone [ 129.679687][ T6524] Trying to free block not in datazone [ 129.685220][ T6524] Trying to free block not in datazone [ 129.690685][ T6524] Trying to free block not in datazone [ 129.696196][ T6524] minix_free_block (loop2:6): bit already cleared [ 129.703157][ T6524] Trying to free block not in datazone [ 129.708644][ T6524] Trying to free block not in datazone [ 129.751365][ T4177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4177) [ 129.769614][ T5979] usbhid: probe of 2-1:0.0 failed with error -71 [ 129.817859][ T5979] usb 2-1: USB disconnect, device number 5 [ 131.344861][ T6538] netlink: 92 bytes leftover after parsing attributes in process `syz.3.221'. [ 131.785850][ T6531] loop2: detected capacity change from 0 to 512 [ 131.809003][ T6544] loop0: detected capacity change from 0 to 64 [ 131.987966][ T6531] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.217: bg 0: block 5: invalid block bitmap [ 131.990419][ T6540] loop1: detected capacity change from 0 to 32768 [ 132.015186][ T6531] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 132.254969][ T6531] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.217: invalid indirect mapped block 3 (level 2) [ 132.355100][ T6567] loop4: detected capacity change from 0 to 512 [ 132.605823][ T6531] EXT4-fs (loop2): 1 orphan inode deleted [ 132.715049][ T6567] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.223: bg 0: block 5: invalid block bitmap [ 132.733342][ T6567] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 132.745802][ T6567] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.223: invalid indirect mapped block 3 (level 2) [ 132.766597][ T6567] EXT4-fs (loop4): 1 orphan inode deleted [ 132.772402][ T6567] EXT4-fs (loop4): 1 truncate cleaned up [ 132.778191][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.862971][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869302][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879758][ T6569] loop3: detected capacity change from 0 to 128 [ 132.968882][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 132.970742][ T6531] EXT4-fs (loop2): 1 truncate cleaned up [ 132.990003][ T6531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.042892][ T6569] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.769238][ T6578] loop4: detected capacity change from 0 to 512 [ 133.813735][ T6577] loop0: detected capacity change from 0 to 2048 [ 133.994807][ T6577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.379092][ T6578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.227: bg 0: block 5: invalid block bitmap [ 134.394253][ T6578] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 134.403467][ T6578] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.227: invalid indirect mapped block 3 (level 2) [ 134.418024][ T6578] EXT4-fs (loop4): 1 orphan inode deleted [ 134.423834][ T6578] EXT4-fs (loop4): 1 truncate cleaned up [ 134.429486][ T6578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.732402][ T6583] loop0: detected capacity change from 0 to 4096 [ 134.772732][ T6583] EXT4-fs (loop0): inline encryption not supported [ 134.779302][ T6583] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 134.811339][ T6583] EXT4-fs (loop0): Unrecognized mount option "smackfsfloor=))" or missing value [ 135.023787][ T6594] loop2: detected capacity change from 0 to 64 [ 136.117738][ T6601] loop3: detected capacity change from 0 to 512 [ 136.261851][ T6601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.303028][ T6601] EXT4-fs (loop3): 1 orphan inode deleted [ 136.308800][ T6601] EXT4-fs (loop3): 1 truncate cleaned up [ 136.319735][ T6601] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 136.378411][ T6601] EXT4-fs (loop3): shut down requested (1) [ 136.725445][ T6601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.801842][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 136.811049][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 137.258321][ T6603] set_capacity_and_notify: 2 callbacks suppressed [ 137.258336][ T6603] loop4: detected capacity change from 0 to 32768 [ 137.319191][ T6805] loop0: detected capacity change from 0 to 4096 [ 137.340679][ T6807] loop1: detected capacity change from 0 to 64 [ 137.902272][ T6828] loop3: detected capacity change from 0 to 4096 [ 137.988129][ T6810] loop2: detected capacity change from 0 to 2048 [ 138.114436][ T6828] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.129330][ T6828] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 138.139097][ T6828] NILFS (loop3): mounting unchecked fs [ 138.211456][ T6828] NILFS (loop3): recovery complete [ 138.226859][ T6810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.229332][ T6830] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.413038][ T6843] FAULT_INJECTION: forcing a failure. [ 141.413038][ T6843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.426730][ T6840] loop2: detected capacity change from 0 to 512 [ 141.452860][ T6843] CPU: 1 PID: 6843 Comm: syz.3.243 Not tainted syzkaller #0 [ 141.460176][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.470252][ T6843] Call Trace: [ 141.473540][ T6843] [ 141.476472][ T6843] dump_stack_lvl+0x188/0x250 [ 141.481160][ T6843] ? show_regs_print_info+0x20/0x20 [ 141.486368][ T6843] ? load_image+0x400/0x400 [ 141.490880][ T6843] ? __lock_acquire+0x7d10/0x7d10 [ 141.495916][ T6843] ? lockdep_hardirqs_on+0x94/0x140 [ 141.501127][ T6843] should_fail+0x38c/0x4c0 [ 141.505558][ T6843] _copy_from_user+0x2e/0x170 [ 141.510341][ T6843] iovec_from_user+0x142/0x370 [ 141.515114][ T6843] __import_iovec+0x70/0x490 [ 141.519719][ T6843] import_iovec+0x6f/0xa0 [ 141.524066][ T6843] ___sys_sendmsg+0x1fd/0x2e0 [ 141.528763][ T6843] ? __sys_sendmsg+0x2a0/0x2a0 [ 141.533564][ T6843] __se_sys_sendmsg+0x1af/0x290 [ 141.538425][ T6843] ? __x64_sys_sendmsg+0x80/0x80 [ 141.543367][ T6843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 141.549371][ T6843] ? lockdep_hardirqs_on+0x94/0x140 [ 141.554581][ T6843] do_syscall_64+0x4c/0xa0 [ 141.559006][ T6843] ? clear_bhb_loop+0x30/0x80 [ 141.563693][ T6843] ? clear_bhb_loop+0x30/0x80 [ 141.568382][ T6843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.574280][ T6843] RIP: 0033:0x7f1358242799 [ 141.578695][ T6843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.598314][ T6843] RSP: 002b:00007f135649c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.606758][ T6843] RAX: ffffffffffffffda RBX: 00007f13584bbfa0 RCX: 00007f1358242799 [ 141.614741][ T6843] RDX: 0000000000000880 RSI: 0000200000000340 RDI: 0000000000000003 [ 141.622709][ T6843] RBP: 00007f135649c090 R08: 0000000000000000 R09: 0000000000000000 [ 141.630683][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.638656][ T6843] R13: 00007f13584bc038 R14: 00007f13584bbfa0 R15: 00007ffccf367f58 [ 141.646644][ T6843] [ 141.663437][ T6842] loop1: detected capacity change from 0 to 512 [ 141.746049][ T6845] loop4: detected capacity change from 0 to 64 [ 141.822637][ T6842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.241: bg 0: block 5: invalid block bitmap [ 141.841206][ T6842] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 141.850438][ T6842] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.241: invalid indirect mapped block 3 (level 2) [ 141.899174][ T6842] EXT4-fs (loop1): 1 orphan inode deleted [ 141.905359][ T6842] EXT4-fs (loop1): 1 truncate cleaned up [ 141.911018][ T6842] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.290579][ T6856] loop0: detected capacity change from 0 to 512 [ 142.993305][ T6856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.244: bg 0: block 5: invalid block bitmap [ 143.005980][ T6856] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 143.015401][ T6856] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.244: invalid indirect mapped block 3 (level 2) [ 143.028976][ T6856] EXT4-fs (loop0): 1 orphan inode deleted [ 143.034773][ T6856] EXT4-fs (loop0): 1 truncate cleaned up [ 143.040417][ T6856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.168047][ T6859] loop1: detected capacity change from 0 to 512 [ 143.186680][ T6859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.235079][ T6859] EXT4-fs (loop1): 1 orphan inode deleted [ 143.275780][ T6859] EXT4-fs (loop1): 1 truncate cleaned up [ 143.281715][ T6859] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 143.358223][ T6859] EXT4-fs (loop1): shut down requested (1) [ 143.515283][ T6864] loop0: detected capacity change from 0 to 64 [ 143.638743][ T6866] netlink: 220 bytes leftover after parsing attributes in process `syz.4.253'. [ 143.667896][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 143.860495][ T6869] loop4: detected capacity change from 0 to 64 [ 143.862196][ T6854] loop3: detected capacity change from 0 to 32768 [ 143.916267][ T6854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.247 (6854) [ 144.088872][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 144.098034][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 144.116062][ T6854] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 144.207898][ T6854] BTRFS info (device loop3): setting nodatasum [ 144.305903][ T6854] BTRFS info (device loop3): force zlib compression, level 3 [ 144.421414][ T6854] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 144.442626][ T6854] BTRFS info (device loop3): use lzo compression, level 0 [ 144.449784][ T6854] BTRFS info (device loop3): turning on flush-on-commit [ 144.457004][ T6854] BTRFS info (device loop3): enabling auto defrag [ 144.464038][ T6854] BTRFS info (device loop3): max_inline at 4096 [ 144.470650][ T6854] BTRFS info (device loop3): using free space tree [ 144.477257][ T6854] BTRFS info (device loop3): has skinny extents [ 144.777479][ T6862] loop2: detected capacity change from 0 to 32768 [ 144.944368][ T6854] BTRFS info (device loop3): enabling ssd optimizations [ 145.873801][ T6923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.259'. [ 146.047590][ T6925] damon: min_nr_regions (0) must be at least 3 [ 146.220462][ T4334] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.351778][ T6933] loop4: detected capacity change from 0 to 512 [ 146.411021][ T6925] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.634800][ T6933] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.262: bg 0: block 5: invalid block bitmap [ 146.648655][ T6933] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 146.660689][ T6933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.262: invalid indirect mapped block 3 (level 2) [ 146.681516][ T6933] EXT4-fs (loop4): 1 orphan inode deleted [ 146.687357][ T6933] EXT4-fs (loop4): 1 truncate cleaned up [ 146.693115][ T6933] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.259264][ T6906] loop1: detected capacity change from 0 to 131072 [ 147.307553][ T6906] F2FS-fs (loop1): Test dummy encryption mode enabled [ 147.332281][ T6906] F2FS-fs (loop1): invalid crc value [ 147.343009][ T6411] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.352364][ T6944] (syz.4.264,6944,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 147.376777][ T6944] (syz.4.264,6944,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 147.398674][ T6906] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.509067][ T6951] loop3: detected capacity change from 0 to 8 [ 149.009848][ T6411] usb 3-1: Using ep0 maxpacket: 16 [ 149.045860][ T6414] Bluetooth: hci5: command 0x1003 tx timeout [ 149.062615][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 149.090078][ T6951] SQUASHFS error: Corrupted symlink [ 149.217465][ T6955] SQUASHFS error: Corrupted symlink [ 149.373276][ T6411] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.413657][ T6411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.559617][ T6411] usb 3-1: Product: syz [ 149.650918][ T6411] usb 3-1: Manufacturer: syz [ 149.717243][ T6411] usb 3-1: SerialNumber: syz [ 150.428718][ T6411] r8152-cfgselector 3-1: config 0 descriptor?? [ 150.622704][ T6411] r8152-cfgselector 3-1: can't set config #0, error -71 [ 150.648458][ T6963] loop2: detected capacity change from 0 to 64 [ 150.732549][ T6411] r8152-cfgselector 3-1: Unknown version 0x0000 [ 150.756899][ T6411] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 151.893091][ T6413] Bluetooth: hci5: command 0x1001 tx timeout [ 151.899181][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 152.445526][ T6973] loop1: detected capacity change from 0 to 128 [ 152.771708][ T6980] loop1: detected capacity change from 0 to 1024 [ 152.776814][ T6975] loop4: detected capacity change from 0 to 32768 [ 152.810766][ T6975] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.271 (6975) [ 152.829726][ T6975] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 152.839003][ T6975] BTRFS info (device loop4): using free space tree [ 152.845909][ T6975] BTRFS info (device loop4): has skinny extents [ 152.906671][ T6975] BTRFS info (device loop4): enabling ssd optimizations [ 152.956305][ T26] audit: type=1800 audit(1772914569.546:8): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.271" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 152.992939][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 153.111129][ T7008] loop3: detected capacity change from 0 to 64 [ 153.391288][ T7031] loop3: detected capacity change from 0 to 64 [ 153.993237][ T6411] Bluetooth: hci5: command 0x1009 tx timeout [ 154.048404][ T7053] syz.4.276 uses obsolete (PF_INET,SOCK_PACKET) [ 154.096997][ T7040] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 154.237738][ T7059] loop1: detected capacity change from 0 to 8 [ 154.319581][ T7059] SQUASHFS error: Corrupted symlink [ 154.382964][ T7044] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.433690][ T7062] SQUASHFS error: Corrupted symlink [ 154.463252][ T7040] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76 [ 154.497757][ T7040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.632026][ T7040] usb 3-1: config 0 descriptor?? [ 154.642561][ T7044] usb 5-1: Using ep0 maxpacket: 32 [ 154.763406][ T7044] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 154.982101][ T7036] loop2: detected capacity change from 0 to 256 [ 155.023114][ T7044] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 155.072382][ T7044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.107667][ T7040] usb_8dev 3-1:0.0 can0: sending command message failed [ 155.172570][ T7044] usb 5-1: Product: syz [ 155.194352][ T7040] usb_8dev 3-1:0.0 can0: can't get firmware version [ 155.227927][ T7044] usb 5-1: Manufacturer: syz [ 155.282393][ T7044] usb 5-1: SerialNumber: syz [ 155.404457][ T7036] FAT-fs (loop2): Directory bread(block 64) failed [ 155.416863][ T7067] loop3: detected capacity change from 0 to 64 [ 155.476012][ T7036] FAT-fs (loop2): Directory bread(block 65) failed [ 155.482792][ T7036] FAT-fs (loop2): Directory bread(block 66) failed [ 155.496798][ T7036] FAT-fs (loop2): Directory bread(block 67) failed [ 155.509233][ T7036] FAT-fs (loop2): Directory bread(block 68) failed [ 155.516087][ T7036] FAT-fs (loop2): Directory bread(block 69) failed [ 155.522868][ T7036] FAT-fs (loop2): Directory bread(block 70) failed [ 155.529491][ T7036] FAT-fs (loop2): Directory bread(block 71) failed [ 155.536239][ T7036] FAT-fs (loop2): Directory bread(block 72) failed [ 155.542915][ T7036] FAT-fs (loop2): Directory bread(block 73) failed [ 155.573290][ T7040] usb_8dev: probe of 3-1:0.0 failed with error -22 [ 155.655092][ T7040] usb 3-1: USB disconnect, device number 5 [ 155.727260][ T7044] snd-ua101 5-1:1.1: sample format descriptor not found [ 155.759430][ T7044] snd-ua101 5-1:1.0: invalid num_altsetting [ 155.780421][ T7044] usb 5-1: USB disconnect, device number 7 [ 155.959890][ T7073] loop3: detected capacity change from 0 to 128 [ 156.192542][ T6411] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.436444][ T7082] loop4: detected capacity change from 0 to 64 [ 156.593485][ T7085] loop3: detected capacity change from 0 to 2048 [ 156.728220][ T7085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.272806][ T6411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.312855][ T6411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.462573][ T7040] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.503439][ T6411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.514729][ T6411] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 157.524152][ T6411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.544542][ T6411] usb 2-1: config 0 descriptor?? [ 158.011292][ T7099] set_capacity_and_notify: 1 callbacks suppressed [ 158.011311][ T7099] loop3: detected capacity change from 0 to 512 [ 158.212687][ T7040] usb 1-1: config 7 has an invalid interface number: 161 but max is 1 [ 158.261924][ T7040] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 158.287966][ T7099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.292: bg 0: block 5: invalid block bitmap [ 158.303948][ T7099] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 158.316971][ T7099] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.292: invalid indirect mapped block 3 (level 2) [ 158.332844][ T7099] EXT4-fs (loop3): 1 orphan inode deleted [ 158.338686][ T7099] EXT4-fs (loop3): 1 truncate cleaned up [ 158.344473][ T7099] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.644084][ T7040] usb 1-1: config 7 has an invalid descriptor of length 9, skipping remainder of the config [ 158.703051][ T7040] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 158.721947][ T7040] usb 1-1: config 7 has no interface number 0 [ 158.729856][ T7040] usb 1-1: config 7 interface 161 altsetting 154 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 158.741667][ T7040] usb 1-1: config 7 interface 161 altsetting 154 has a duplicate endpoint with address 0xE, skipping [ 158.762736][ T6411] usbhid 2-1:0.0: can't add hid device: -71 [ 158.768110][ T7040] usb 1-1: config 7 interface 161 altsetting 154 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 158.768744][ T6411] usbhid: probe of 2-1:0.0 failed with error -71 [ 158.780193][ T7040] usb 1-1: config 7 interface 161 has no altsetting 0 [ 158.794471][ T7105] (syz.2.293,7105,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 158.806227][ T7105] (syz.2.293,7105,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 158.816789][ T6411] usb 2-1: USB disconnect, device number 6 [ 159.494991][ T7113] loop1: detected capacity change from 0 to 256 [ 159.728717][ T7040] usb 1-1: New USB device found, idVendor=045e, idProduct=0405, bcdDevice=9a.9a [ 159.889845][ T7040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.898024][ T7040] usb 1-1: Product: О [ 159.902225][ T7040] usb 1-1: Manufacturer: а [ 159.906802][ T7040] usb 1-1: SerialNumber: Ў [ 160.091692][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.102290][ T7112] FAT-fs (loop1): Filesystem has been set read-only [ 160.109064][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.119315][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.129659][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.144159][ T7112] netlink: 'syz.1.296': attribute type 3 has an invalid length. [ 160.152464][ T7109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.163003][ T7109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.173657][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.183845][ T7112] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.195006][ T7109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.205303][ T7109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 160.247585][ T26] audit: type=1800 audit(1772914576.676:9): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.296" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 160.262943][ T7040] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 160.288304][ T7040] usb 1-1: no configuration chosen from 1 choice [ 160.360986][ T7121] loop4: detected capacity change from 0 to 8 [ 160.733362][ T7121] SQUASHFS error: Corrupted symlink [ 160.899025][ T7121] SQUASHFS error: Corrupted symlink [ 161.190701][ T7040] usb 1-1: USB disconnect, device number 6 [ 161.263746][ T7129] loop2: detected capacity change from 0 to 128 [ 161.356665][ T7132] loop1: detected capacity change from 0 to 4096 [ 161.825353][ T7141] loop4: detected capacity change from 0 to 8192 [ 161.979084][ T7141] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 161.988769][ T7141] REISERFS (device loop4): using ordered data mode [ 161.995393][ T7141] reiserfs: using flush barriers [ 162.006645][ T6000] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.018427][ T7141] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.038076][ T7141] REISERFS (device loop4): checking transaction log (loop4) [ 162.063040][ T7141] REISERFS (device loop4): Using rupasov hash to sort names [ 162.071511][ T7141] REISERFS (device loop4): using 3.5.x disk format [ 162.081712][ T7141] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.094866][ T7141] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.106519][ T7141] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.117916][ T7141] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 162.133517][ T7141] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 162.264718][ T7141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.432805][ T7140] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.444343][ T7140] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.672500][ T6000] usb 1-1: Using ep0 maxpacket: 32 [ 162.895876][ T7148] loop3: detected capacity change from 0 to 8192 [ 162.922681][ T6000] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 163.402764][ T6000] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 163.453033][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.552577][ T6000] usb 1-1: Product: syz [ 163.577474][ T6000] usb 1-1: Manufacturer: syz [ 163.582107][ T6000] usb 1-1: SerialNumber: syz [ 163.722225][ T7145] loop2: detected capacity change from 0 to 40427 [ 163.769039][ T7145] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 163.778526][ T7145] F2FS-fs (loop2): inline encryption not supported [ 163.789046][ T7145] F2FS-fs (loop2): invalid crc value [ 163.797648][ T7145] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.881559][ T7145] F2FS-fs (loop2): Start checkpoint disabled! [ 163.905237][ T6000] snd-ua101 1-1:1.1: sample format descriptor not found [ 163.915694][ T7145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 163.921194][ T6000] snd-ua101 1-1:1.0: invalid num_altsetting [ 163.986807][ T6000] usb 1-1: USB disconnect, device number 7 [ 164.044259][ T7145] F2FS-fs (loop2) : inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x131/0x14f0 [ 164.098474][ T7155] loop4: detected capacity change from 0 to 32768 [ 164.147876][ T154] attempt to access beyond end of device [ 164.147876][ T154] loop2: rw=2049, want=40976, limit=40427 [ 164.264412][ T7163] loop4: detected capacity change from 0 to 1024 [ 164.282538][ T7040] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.343597][ T7163] hfsplus: bad catalog folder entry [ 164.383133][ T7163] (syz.4.310,7163,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 164.398226][ T7163] (syz.4.310,7163,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 164.719255][ T7171] loop2: detected capacity change from 0 to 512 [ 164.981361][ T7171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.308: bg 0: block 5: invalid block bitmap [ 164.996251][ T7171] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 165.010388][ T7171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.308: invalid indirect mapped block 3 (level 2) [ 165.026571][ T7171] EXT4-fs (loop2): 1 orphan inode deleted [ 165.032476][ T7171] EXT4-fs (loop2): 1 truncate cleaned up [ 165.038189][ T7171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.271081][ T7040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.287271][ T7040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.298211][ T7040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.329214][ T7040] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 165.373875][ T7177] loop0: detected capacity change from 0 to 128 [ 165.382589][ T7040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.392892][ T7040] usb 4-1: config 0 descriptor?? [ 165.519548][ T7181] loop2: detected capacity change from 0 to 64 [ 165.650831][ T7187] loop4: detected capacity change from 0 to 512 [ 165.973728][ T7189] loop0: detected capacity change from 0 to 8192 [ 166.232763][ T7040] usbhid 4-1:0.0: can't add hid device: -71 [ 166.249485][ T7040] usbhid: probe of 4-1:0.0 failed with error -71 [ 166.303535][ T7189] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 166.313235][ T7189] REISERFS (device loop0): using ordered data mode [ 166.319798][ T7189] reiserfs: using flush barriers [ 166.333013][ T7189] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.351408][ T7189] REISERFS (device loop0): checking transaction log (loop0) [ 166.374917][ T7189] REISERFS (device loop0): Using rupasov hash to sort names [ 166.382291][ T7189] REISERFS (device loop0): using 3.5.x disk format [ 166.392216][ T7189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 166.403780][ T7189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 166.415379][ T7189] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 166.426719][ T7189] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 166.441422][ T7189] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 166.554719][ T7189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.662655][ T7040] usb 4-1: USB disconnect, device number 5 [ 166.690161][ T7188] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 166.701362][ T7188] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 168.863386][ T7210] loop3: detected capacity change from 0 to 2048 [ 169.121963][ T7210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.419666][ T7217] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 169.437322][ T7217] netlink: 68 bytes leftover after parsing attributes in process `syz.4.323'. [ 169.636346][ T7223] loop1: detected capacity change from 0 to 512 [ 170.761459][ T7225] loop0: detected capacity change from 0 to 512 [ 172.161912][ T7223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.324: bg 0: block 5: invalid block bitmap [ 172.176437][ T7223] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 172.185912][ T7223] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.324: invalid indirect mapped block 3 (level 2) [ 172.199652][ T7223] EXT4-fs (loop1): 1 orphan inode deleted [ 172.205525][ T7223] EXT4-fs (loop1): 1 truncate cleaned up [ 172.211213][ T7223] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.334711][ T7236] loop4: detected capacity change from 0 to 128 [ 172.355013][ T7225] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.326: bg 0: block 5: invalid block bitmap [ 172.370147][ T7225] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 172.380368][ T7225] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.326: invalid indirect mapped block 3 (level 2) [ 172.412196][ T7225] EXT4-fs (loop0): 1 orphan inode deleted [ 172.418101][ T7225] EXT4-fs (loop0): 1 truncate cleaned up [ 172.423837][ T7225] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.581033][ T7240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.329'. [ 172.683265][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.691279][ T7040] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.952939][ T21] usb 4-1: device descriptor read/64, error -71 [ 173.003555][ T7040] usb 3-1: Using ep0 maxpacket: 32 [ 173.143856][ T7040] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 173.589598][ T6413] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.596447][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.055026][ T7252] loop1: detected capacity change from 0 to 8192 [ 174.064733][ T7040] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 174.142620][ T21] usb 4-1: device descriptor read/64, error -71 [ 174.189821][ T7252] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 174.199469][ T7252] REISERFS (device loop1): using ordered data mode [ 174.206078][ T7252] reiserfs: using flush barriers [ 174.220166][ T7252] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.238694][ T7252] REISERFS (device loop1): checking transaction log (loop1) [ 174.259019][ T7252] REISERFS (device loop1): Using rupasov hash to sort names [ 174.266608][ T7252] REISERFS (device loop1): using 3.5.x disk format [ 174.274355][ T7252] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.285823][ T7252] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.297373][ T7252] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.308803][ T7252] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 174.323064][ T7252] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 174.436026][ T7252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.654920][ T7251] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.656642][ T21] usb usb4-port1: attempt power cycle [ 174.666081][ T7251] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.671751][ T7040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.700228][ T7040] usb 3-1: Product: syz [ 174.704803][ T7040] usb 3-1: Manufacturer: syz [ 174.709643][ T7040] usb 3-1: SerialNumber: syz [ 174.743060][ T7040] usb 3-1: can't set config #1, error -71 [ 174.768228][ T7040] usb 3-1: USB disconnect, device number 6 [ 174.787864][ T6413] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76 [ 174.809779][ T6413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.858972][ T6413] usb 5-1: config 0 descriptor?? [ 174.918108][ T6413] usb_8dev 5-1:0.0 can0: sending command message failed [ 174.930766][ T6413] usb_8dev 5-1:0.0 can0: can't get firmware version [ 175.002791][ T6413] usb_8dev: probe of 5-1:0.0 failed with error -22 [ 175.038595][ T7258] loop1: detected capacity change from 0 to 64 [ 175.704594][ T6000] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.715517][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.765774][ T7242] loop4: detected capacity change from 0 to 256 [ 175.965864][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 175.982315][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 175.996507][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 176.163958][ T21] usb 4-1: device not accepting address 8, error -71 [ 176.189057][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 176.195757][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 176.196100][ T7263] loop2: detected capacity change from 0 to 2048 [ 176.349924][ T7263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.359019][ T7242] FAT-fs (loop4): Directory bread(block 64) failed [ 176.359084][ T7242] FAT-fs (loop4): Directory bread(block 65) failed [ 176.359151][ T7242] FAT-fs (loop4): Directory bread(block 66) failed [ 176.359180][ T7242] FAT-fs (loop4): Directory bread(block 67) failed [ 176.359246][ T7242] FAT-fs (loop4): Directory bread(block 68) failed [ 176.359273][ T7242] FAT-fs (loop4): Directory bread(block 69) failed [ 176.359337][ T7242] FAT-fs (loop4): Directory bread(block 70) failed [ 176.359365][ T7242] FAT-fs (loop4): Directory bread(block 71) failed [ 176.359427][ T7242] FAT-fs (loop4): Directory bread(block 72) failed [ 176.359453][ T7242] FAT-fs (loop4): Directory bread(block 73) failed [ 176.452152][ T6413] usb 5-1: USB disconnect, device number 8 [ 176.462710][ T6000] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.622770][ T6000] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.642897][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 176.658376][ T6000] usb 1-1: Product: syz [ 176.662934][ T6000] usb 1-1: SerialNumber: syz [ 176.802734][ T6000] usb 1-1: can't set config #1, error -71 [ 176.812855][ T6000] usb 1-1: USB disconnect, device number 8 [ 176.814602][ T7972] loop0: detected capacity change from 0 to 1024 [ 176.833929][ T7974] loop2: detected capacity change from 0 to 128 [ 176.900532][ T7972] hfsplus: bad catalog folder entry [ 176.933268][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.996827][ T7977] loop2: detected capacity change from 0 to 4096 [ 177.050420][ T7972] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.065906][ T7972] (syz.0.341,7972,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 177.077686][ T7972] (syz.0.341,7972,0):ocfs2_sb_probe:750 ERROR: status = -5 [ 177.095956][ T7972] (syz.0.341,7972,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 177.109099][ T7972] (syz.0.341,7972,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 177.152641][ T21] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.164993][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.218271][ T21] usb 4-1: config 0 descriptor?? [ 177.284225][ T21] cp210x 4-1:0.0: cp210x converter detected [ 177.360434][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 177.445405][ T7983] loop0: detected capacity change from 0 to 4096 [ 177.485487][ T7967] udc-core: couldn't find an available UDC or it's busy [ 177.516063][ T7967] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.564015][ T21] usb 4-1: cp210x converter now attached to ttyUSB0 [ 177.590416][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.343'. [ 177.688660][ T7988] device hsr0 entered promiscuous mode [ 177.695718][ T7988] device macvtap1 entered promiscuous mode [ 177.917427][ T7967] nft_compat: unsupported protocol 0 [ 177.935411][ T13] usb 4-1: USB disconnect, device number 9 [ 178.027136][ T8000] loop2: detected capacity change from 0 to 512 [ 178.373690][ T8000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.346: bg 0: block 5: invalid block bitmap [ 178.389144][ T8000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 178.400930][ T8000] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.346: invalid indirect mapped block 3 (level 2) [ 178.416303][ T8000] EXT4-fs (loop2): 1 orphan inode deleted [ 178.422578][ T8000] EXT4-fs (loop2): 1 truncate cleaned up [ 178.428447][ T8000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.568259][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.583401][ T13] cp210x 4-1:0.0: device disconnected [ 178.654901][ T8006] loop3: detected capacity change from 0 to 64 [ 178.697580][ T7988] syz.1.345 (7988) used greatest stack depth: 20784 bytes left [ 179.190468][ T8014] set_capacity_and_notify: 1 callbacks suppressed [ 179.190493][ T8014] loop1: detected capacity change from 0 to 128 [ 179.322545][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.206885][ T8115] loop4: detected capacity change from 0 to 512 [ 180.585799][ T8119] loop1: detected capacity change from 0 to 512 [ 180.634393][ T8115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.353: bg 0: block 5: invalid block bitmap [ 180.642874][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.648740][ T8115] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 180.667517][ T8115] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.353: invalid indirect mapped block 3 (level 2) [ 180.686021][ T8115] EXT4-fs (loop4): 1 orphan inode deleted [ 180.691805][ T8115] EXT4-fs (loop4): 1 truncate cleaned up [ 180.697519][ T8115] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.788512][ T8119] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.842713][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.852010][ T21] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 180.861362][ T21] usb 3-1: Product: syz [ 180.865714][ T21] usb 3-1: SerialNumber: syz [ 180.871228][ T8119] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.895052][ T8125] loop0: detected capacity change from 0 to 512 [ 180.973607][ T8125] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 180.973607][ T8125] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 180.973607][ T8125] [ 181.124339][ T8125] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nouser_xattr,,errors=continue. Quota mode: writeback. [ 181.149129][ T8125] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.186989][ T8129] loop1: detected capacity change from 0 to 256 [ 181.207178][ T8129] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 181.487991][ T8138] loop4: detected capacity change from 0 to 512 [ 181.578616][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 181.687141][ T8138] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.358: bg 0: block 5: invalid block bitmap [ 181.706813][ T8138] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 181.717340][ T8138] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.358: invalid indirect mapped block 3 (level 2) [ 181.735721][ T8138] EXT4-fs (loop4): 1 orphan inode deleted [ 181.741566][ T8138] EXT4-fs (loop4): 1 truncate cleaned up [ 181.747413][ T8138] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.008252][ T8011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.351'. [ 182.073140][ T8011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.351'. [ 182.090331][ T8143] udc-core: couldn't find an available UDC or it's busy [ 182.116367][ T8143] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.141486][ T8011] netlink: 152 bytes leftover after parsing attributes in process `syz.2.351'. [ 182.173396][ T8143] Set syz1 is full, maxelem 14 reached [ 182.228562][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.559952][ T8152] loop1: detected capacity change from 0 to 512 [ 182.622566][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 182.693576][ T21] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 182.707800][ T21] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 182.783006][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.798244][ T21] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 182.893803][ T4229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 182.974146][ T21] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 183.081989][ T8156] loop4: detected capacity change from 0 to 512 [ 183.101611][ T21] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 183.113481][ T4229] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 183.138049][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.148531][ T4229] usb 1-1: Product: syz [ 183.173887][ T21] usb 3-1: USB disconnect, device number 7 [ 183.179547][ T8152] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.362: bg 0: block 5: invalid block bitmap [ 183.184045][ T4229] usb 1-1: Manufacturer: syz [ 183.199900][ T8152] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 183.209777][ T8152] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.362: invalid indirect mapped block 3 (level 2) [ 183.210223][ T21] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 183.242150][ T8152] EXT4-fs (loop1): 1 orphan inode deleted [ 183.248051][ T8152] EXT4-fs (loop1): 1 truncate cleaned up [ 183.249796][ T4229] usb 1-1: SerialNumber: syz [ 183.253753][ T8152] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.377305][ T8156] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 183.406595][ T8156] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 183.417644][ T8156] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.361: Failed to acquire dquot type 0 [ 183.461666][ T8156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.361: bg 0: block 64: padding at end of block bitmap is not set [ 183.489465][ T8156] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 183.505939][ T8156] EXT4-fs (loop4): 1 truncate cleaned up [ 183.511910][ T8156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.532680][ T8156] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.628385][ T8011] syz.2.351 (8011) used greatest stack depth: 20304 bytes left [ 183.639085][ T4229] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 183.673262][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.694649][ T4229] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 183.727230][ T8165] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.740341][ T8163] loop1: detected capacity change from 0 to 128 [ 183.746542][ T8165] (syz.2.367,8165,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 183.746599][ T8165] (syz.2.367,8165,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 183.746617][ T8165] (syz.2.367,8165,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 183.746635][ T8165] (syz.2.367,8165,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 183.862704][ T4229] usb 1-1: 2:1 : can't get High Capability descriptor [ 183.892513][ T13] usb 4-1: device descriptor read/64, error -71 [ 183.946542][ T8173] loop4: detected capacity change from 0 to 1024 [ 183.961419][ T8173] hfsplus: unable to parse mount options [ 184.081955][ T4229] usb 1-1: USB disconnect, device number 9 [ 184.102019][ T8172] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 184.120947][ T8175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.152103][ T8172] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 184.220457][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.442964][ T13] usb 4-1: device descriptor read/64, error -71 [ 184.593337][ T13] usb usb4-port1: attempt power cycle [ 184.840538][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 184.953519][ T8331] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.970542][ T8331] (syz.2.379,8331,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 184.980120][ T8331] (syz.2.379,8331,0):ocfs2_sb_probe:750 ERROR: status = -5 [ 184.993640][ T8331] (syz.2.379,8331,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 185.003081][ T8331] (syz.2.379,8331,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 185.042612][ T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.119645][ T8334] set_capacity_and_notify: 3 callbacks suppressed [ 185.119656][ T8334] loop2: detected capacity change from 0 to 2048 [ 185.206078][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 185.870854][ T6414] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.878607][ T13] usb 4-1: device descriptor read/8, error -71 [ 185.897160][ T8337] loop4: detected capacity change from 0 to 128 [ 185.906376][ T8339] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 185.928467][ T8340] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.944759][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.954724][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.022519][ T26] audit: type=1800 audit(1772914602.606:10): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 186.042868][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.108561][ T4248] Bluetooth: (null): Invalid header checksum [ 186.139206][ T4248] Bluetooth: (null): Invalid header checksum [ 186.143490][ T8344] loop0: detected capacity change from 0 to 256 [ 186.162518][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.177569][ T8344] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.215128][ T1157] Bluetooth: (null): Invalid header checksum [ 186.273067][ T13] usb 4-1: device descriptor read/8, error -71 [ 186.302799][ T6414] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.379359][ T8348] loop4: detected capacity change from 0 to 64 [ 186.403871][ T13] usb usb4-port1: unable to enumerate USB device [ 187.104893][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.388'. [ 187.165452][ T6414] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.174662][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 187.194737][ T6414] usb 2-1: Product: syz [ 187.198937][ T6414] usb 2-1: SerialNumber: syz [ 187.401112][ T8511] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 187.584127][ T8518] loop3: detected capacity change from 0 to 128 [ 187.653011][ T4229] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.892640][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 187.894243][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 187.906729][ T8328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.378'. [ 187.915983][ T8328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.378'. [ 187.935731][ T8328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.378'. [ 187.942639][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.963772][ T8328] udc-core: couldn't find an available UDC or it's busy [ 187.970776][ T8328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.980195][ T8328] Set syz1 is full, maxelem 14 reached [ 188.012652][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.026900][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.037078][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.050875][ T4229] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.060283][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.077858][ T4229] usb 1-1: config 0 descriptor?? [ 188.275858][ T8523] input: syz1 as /devices/virtual/input/input7 [ 188.327390][ T8510] loop0: detected capacity change from 0 to 64 [ 188.427087][ T8523] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 188.452864][ T6414] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 188.459850][ T6414] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 188.481863][ T6414] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 188.532645][ T1107] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.565102][ T21] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 188.578667][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.591205][ T21] usb 4-1: Product: syz [ 188.601232][ T21] usb 4-1: Manufacturer: syz [ 188.609934][ T21] usb 4-1: SerialNumber: syz [ 188.625452][ T21] usb 4-1: config 0 descriptor?? [ 188.662584][ T6414] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 188.670530][ T21] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 188.680829][ T6414] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 188.719950][ T6414] usb 2-1: USB disconnect, device number 7 [ 188.726336][ T1107] usb 5-1: device descriptor read/64, error -71 [ 188.741885][ T6414] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 189.002557][ T1107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 189.050015][ T8532] FAULT_INJECTION: forcing a failure. [ 189.050015][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 189.065652][ T8532] CPU: 0 PID: 8532 Comm: syz.2.397 Not tainted syzkaller #0 [ 189.072957][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.083020][ T8532] Call Trace: [ 189.086314][ T8532] [ 189.089243][ T8532] dump_stack_lvl+0x188/0x250 [ 189.093941][ T8532] ? show_regs_print_info+0x20/0x20 [ 189.099148][ T8532] ? load_image+0x400/0x400 [ 189.103660][ T8532] ? __lock_acquire+0x7d10/0x7d10 [ 189.108818][ T8532] should_fail+0x38c/0x4c0 [ 189.113252][ T8532] should_failslab+0x5/0x20 [ 189.117763][ T8532] slab_pre_alloc_hook+0x51/0xc0 [ 189.122706][ T8532] ? dh_data_from_key+0x15e/0x270 [ 189.127732][ T8532] __kmalloc_track_caller+0x69/0x330 [ 189.133022][ T8532] ? dh_data_from_key+0x15e/0x270 [ 189.138061][ T8532] ? slab_free_freelist_hook+0xea/0x170 [ 189.143705][ T8532] kmemdup+0x22/0x50 [ 189.147611][ T8532] dh_data_from_key+0x15e/0x270 [ 189.152466][ T8532] __keyctl_dh_compute+0x351/0xdb0 [ 189.157603][ T8532] ? keyctl_get_persistent+0x760/0x760 [ 189.163087][ T8532] ? __might_fault+0xb3/0x110 [ 189.167767][ T8532] ? _copy_from_user+0x111/0x170 [ 189.172853][ T8532] keyctl_dh_compute+0x121/0x180 [ 189.177803][ T8532] ? keyctl_dh_compute_kdf+0x5e0/0x5e0 [ 189.183281][ T8532] ? __lock_acquire+0x7d10/0x7d10 [ 189.188318][ T8532] __se_sys_keyctl+0x5dc/0xa20 [ 189.193092][ T8532] ? __x64_sys_keyctl+0xc0/0xc0 [ 189.197957][ T8532] ? __context_tracking_exit+0x4c/0x80 [ 189.203432][ T8532] ? __lock_acquire+0x7d10/0x7d10 [ 189.206950][ T1107] usb 5-1: device descriptor read/64, error -71 [ 189.208468][ T8532] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 189.220679][ T8532] ? lock_chain_count+0x20/0x20 [ 189.225541][ T8532] ? vtime_user_exit+0x2c8/0x3e0 [ 189.230490][ T8532] ? lockdep_hardirqs_on+0x94/0x140 [ 189.235699][ T8532] ? __x64_sys_keyctl+0x1c/0xc0 [ 189.240647][ T8532] do_syscall_64+0x4c/0xa0 [ 189.245067][ T8532] ? clear_bhb_loop+0x30/0x80 [ 189.249760][ T8532] ? clear_bhb_loop+0x30/0x80 [ 189.254446][ T8532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.260343][ T8532] RIP: 0033:0x7fbbc549b799 [ 189.264763][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.284375][ T8532] RSP: 002b:00007fbbc36f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 189.292811][ T8532] RAX: ffffffffffffffda RBX: 00007fbbc5714fa0 RCX: 00007fbbc549b799 [ 189.300797][ T8532] RDX: 000020000001f600 RSI: 0000200000000080 RDI: 0000000000000017 [ 189.308781][ T8532] RBP: 00007fbbc36f5090 R08: 0000200000000240 R09: 0000000000000000 [ 189.316767][ T8532] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000001 [ 189.324747][ T8532] R13: 00007fbbc5715038 R14: 00007fbbc5714fa0 R15: 00007ffc221ad318 [ 189.332745][ T8532] [ 189.347556][ T1107] usb usb5-port1: attempt power cycle [ 189.555643][ T8521] loop3: detected capacity change from 0 to 256 [ 189.615539][ T8541] FAULT_INJECTION: forcing a failure. [ 189.615539][ T8541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.651834][ T8510] [ 189.654188][ T8510] ============================================ [ 189.660331][ T8510] WARNING: possible recursive locking detected [ 189.666487][ T8510] syzkaller #0 Not tainted [ 189.670891][ T8510] -------------------------------------------- [ 189.677029][ T8510] syz.0.389/8510 is trying to acquire lock: [ 189.682914][ T8510] ffff8880789260b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 189.692403][ T8510] [ 189.692403][ T8510] but task is already holding lock: [ 189.699769][ T8510] ffff8880789260b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 189.709247][ T8510] [ 189.709247][ T8510] other info that might help us debug this: [ 189.717283][ T8510] Possible unsafe locking scenario: [ 189.717283][ T8510] [ 189.724708][ T8510] CPU0 [ 189.727968][ T8510] ---- [ 189.731226][ T8510] lock(&tree->tree_lock#2/1); [ 189.736076][ T8510] lock(&tree->tree_lock#2/1); [ 189.740915][ T8510] [ 189.740915][ T8510] *** DEADLOCK *** [ 189.740915][ T8510] [ 189.749036][ T8510] May be due to missing lock nesting notation [ 189.749036][ T8510] [ 189.757332][ T8510] 6 locks held by syz.0.389/8510: [ 189.762338][ T8510] #0: ffff88801ef70ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 189.771892][ T8510] #1: ffff888074c32460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 189.780840][ T8510] #2: ffff88802a688fa8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: generic_file_write_iter+0x7e/0x1b0 [ 189.792135][ T8510] #3: ffff88802a688df8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 189.802825][ T8510] #4: ffff8880789260b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 189.812733][ T8510] #5: ffff88802a68b4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 189.823941][ T8510] [ 189.823941][ T8510] stack backtrace: [ 189.829829][ T8510] CPU: 0 PID: 8510 Comm: syz.0.389 Not tainted syzkaller #0 [ 189.837104][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.847146][ T8510] Call Trace: [ 189.850413][ T8510] [ 189.853339][ T8510] dump_stack_lvl+0x188/0x250 [ 189.858009][ T8510] ? show_regs_print_info+0x20/0x20 [ 189.863201][ T8510] ? load_image+0x400/0x400 [ 189.867689][ T8510] __lock_acquire+0x1236/0x7d10 [ 189.872535][ T8510] ? mark_lock+0x94/0x320 [ 189.876847][ T8510] ? verify_lock_unused+0x140/0x140 [ 189.882025][ T8510] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 189.887988][ T8510] ? lock_chain_count+0x20/0x20 [ 189.892819][ T8510] ? __rwlock_init+0x140/0x140 [ 189.897567][ T8510] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 189.903441][ T8510] ? lockdep_hardirqs_on+0x94/0x140 [ 189.908625][ T8510] lock_acquire+0x19e/0x400 [ 189.913115][ T8510] ? hfs_find_init+0x15b/0x1d0 [ 189.917874][ T8510] ? __might_sleep+0xf0/0xf0 [ 189.922445][ T8510] ? read_lock_is_recursive+0x10/0x10 [ 189.927800][ T8510] ? __kasan_kmalloc+0xcc/0xf0 [ 189.932545][ T8510] ? __kasan_kmalloc+0xb5/0xf0 [ 189.937290][ T8510] ? hfs_find_init+0x84/0x1d0 [ 189.941952][ T8510] ? hfs_bmap_reserve+0x103/0x420 [ 189.947043][ T8510] ? __hfs_ext_write_extent+0x1fa/0x470 [ 189.952569][ T8510] ? __hfs_ext_cache_extent+0x6b/0x9b0 [ 189.958012][ T8510] ? hfs_get_block+0x40f/0xc50 [ 189.962758][ T8510] ? hfs_find_init+0x15b/0x1d0 [ 189.967503][ T8510] __mutex_lock_common+0x1e3/0x2400 [ 189.972688][ T8510] ? hfs_find_init+0x15b/0x1d0 [ 189.977440][ T8510] ? mutex_lock_io_nested+0x60/0x60 [ 189.982626][ T8510] mutex_lock_nested+0x17/0x20 [ 189.987374][ T8510] hfs_find_init+0x15b/0x1d0 [ 189.991945][ T8510] hfs_extend_file+0x35d/0x13f0 [ 189.996777][ T8510] ? hfs_bnode_read+0x48d/0x920 [ 190.001613][ T8510] ? hfs_ext_keycmp+0x1c3/0x310 [ 190.006444][ T8510] ? hfs_get_block+0xc50/0xc50 [ 190.011187][ T8510] ? hfs_rename+0x320/0x320 [ 190.015666][ T8510] ? hfs_find_exit+0xa0/0xa0 [ 190.020242][ T8510] ? hfs_brec_find+0x3c9/0x500 [ 190.024989][ T8510] hfs_bmap_reserve+0x103/0x420 [ 190.029825][ T8510] __hfs_ext_write_extent+0x1fa/0x470 [ 190.035183][ T8510] __hfs_ext_cache_extent+0x6b/0x9b0 [ 190.040452][ T8510] ? mutex_lock_nested+0x17/0x20 [ 190.045373][ T8510] ? hfs_find_init+0x15b/0x1d0 [ 190.050121][ T8510] hfs_extend_file+0x39c/0x13f0 [ 190.054957][ T8510] ? hfs_get_block+0xc50/0xc50 [ 190.059703][ T8510] ? hfs_get_block+0x985/0xc50 [ 190.064450][ T8510] ? pagevec_lookup_range+0x30/0x70 [ 190.069630][ T8510] ? clean_bdev_aliases+0x762/0x8a0 [ 190.074810][ T8510] hfs_get_block+0x40f/0xc50 [ 190.079387][ T8510] ? hfs_free_extents+0x430/0x430 [ 190.084391][ T8510] ? do_raw_spin_unlock+0x11d/0x230 [ 190.089666][ T8510] ? create_page_buffers+0x238/0x320 [ 190.094934][ T8510] __block_write_begin_int+0x565/0x15d0 [ 190.100471][ T8510] ? hfs_free_extents+0x430/0x430 [ 190.105476][ T8510] ? page_zero_new_buffers+0x490/0x490 [ 190.110915][ T8510] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.116892][ T8510] ? lock_chain_count+0x20/0x20 [ 190.121726][ T8510] ? do_user_addr_fault+0x694/0xc80 [ 190.127008][ T8510] ? wait_for_stable_page+0xd9/0x110 [ 190.132293][ T8510] cont_write_begin+0x598/0x7b0 [ 190.137144][ T8510] ? lockdep_hardirqs_on+0x94/0x140 [ 190.142356][ T8510] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 190.148242][ T8510] ? __get_user_nocheck_1+0x6/0x10 [ 190.153345][ T8510] hfs_write_begin+0x92/0xe0 [ 190.158036][ T8510] ? hfs_free_extents+0x430/0x430 [ 190.163060][ T8510] generic_perform_write+0x2b6/0x550 [ 190.168340][ T8510] ? grab_cache_page_write_begin+0xa0/0xa0 [ 190.174135][ T8510] ? file_remove_privs+0x5d0/0x5d0 [ 190.179242][ T8510] ? rwsem_write_trylock+0x135/0x1c0 [ 190.184608][ T8510] ? clear_nonspinnable+0x60/0x60 [ 190.189620][ T8510] __generic_file_write_iter+0x25f/0x4e0 [ 190.195247][ T8510] generic_file_write_iter+0xa6/0x1b0 [ 190.200604][ T8510] vfs_write+0x745/0xd60 [ 190.204833][ T8510] ? file_end_write+0x250/0x250 [ 190.209666][ T8510] ? __fget_files+0x40f/0x480 [ 190.214333][ T8510] ? mutex_lock_nested+0x17/0x20 [ 190.219259][ T8510] ? __fdget_pos+0x2bf/0x370 [ 190.223828][ T8510] ? ksys_write+0x71/0x260 [ 190.228226][ T8510] ksys_write+0x152/0x260 [ 190.232543][ T8510] ? __ia32_sys_read+0x80/0x80 [ 190.237289][ T8510] ? lockdep_hardirqs_on+0x94/0x140 [ 190.242472][ T8510] do_syscall_64+0x4c/0xa0 [ 190.246876][ T8510] ? clear_bhb_loop+0x30/0x80 [ 190.251535][ T8510] ? clear_bhb_loop+0x30/0x80 [ 190.256201][ T8510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.262086][ T8510] RIP: 0033:0x7f57c4c6c799 [ 190.266494][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.286101][ T8510] RSP: 002b:00007f57c2ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.294549][ T8510] RAX: ffffffffffffffda RBX: 00007f57c4ee5fa0 RCX: 00007f57c4c6c799 [ 190.302511][ T8510] RDX: 00000000ffffff20 RSI: 00002000000000c0 RDI: 0000000000000005 [ 190.310481][ T8510] RBP: 00007f57c4d02bd9 R08: 0000000000000000 R09: 0000000000000000 [ 190.318431][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.326382][ T8510] R13: 00007f57c4ee6038 R14: 00007f57c4ee5fa0 R15: 00007fffd7f90428 [ 190.334350][ T8510] [ 190.339544][ T21] gspca_sunplus: reg_w_riv err -71 [ 190.358317][ T21] sunplus: probe of 4-1:0.0 failed with error -71 [ 190.358880][ T8541] CPU: 0 PID: 8541 Comm: syz.1.401 Not tainted syzkaller #0 [ 190.368427][ T21] usb 4-1: USB disconnect, device number 14 [ 190.372142][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.372157][ T8541] Call Trace: [ 190.372164][ T8541] [ 190.372171][ T8541] dump_stack_lvl+0x188/0x250 [ 190.398938][ T8541] ? show_regs_print_info+0x20/0x20 [ 190.404150][ T8541] ? load_image+0x400/0x400 [ 190.408666][ T8541] ? __lock_acquire+0x7d10/0x7d10 [ 190.412474][ T1107] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 190.413695][ T8541] should_fail+0x38c/0x4c0 [ 190.413721][ T8541] _copy_from_user+0x2e/0x170 [ 190.430292][ T8541] iovec_from_user+0x142/0x370 [ 190.435065][ T8541] __import_iovec+0x70/0x490 [ 190.439662][ T8541] import_iovec+0x6f/0xa0 [ 190.443996][ T8541] ___sys_sendmsg+0x1fd/0x2e0 [ 190.448680][ T8541] ? __sys_sendmsg+0x2a0/0x2a0 [ 190.453460][ T8541] __sys_sendmmsg+0x2ba/0x500 [ 190.458151][ T8541] ? __ia32_sys_sendmsg+0x80/0x80 [ 190.463178][ T8541] ? __context_tracking_exit+0x4c/0x80 [ 190.468646][ T8541] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.472888][ T8539] loop2: detected capacity change from 0 to 32768 [ 190.474630][ T8541] ? lock_chain_count+0x20/0x20 [ 190.474654][ T8541] ? vtime_user_exit+0x2c8/0x3e0 [ 190.490781][ T8541] __x64_sys_sendmmsg+0x9c/0xb0 [ 190.495632][ T8541] do_syscall_64+0x4c/0xa0 [ 190.500027][ T8541] ? clear_bhb_loop+0x30/0x80 [ 190.504684][ T8541] ? clear_bhb_loop+0x30/0x80 [ 190.504828][ T1107] usb 5-1: device descriptor read/8, error -71 [ 190.509356][ T8541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.521359][ T8541] RIP: 0033:0x7ff4ab8d3799 [ 190.525753][ T8541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.545346][ T8541] RSP: 002b:00007ff4a9b2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.553744][ T8541] RAX: ffffffffffffffda RBX: 00007ff4abb4cfa0 RCX: 00007ff4ab8d3799 [ 190.561700][ T8541] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 190.569655][ T8541] RBP: 00007ff4a9b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 190.577609][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.585572][ T8541] R13: 00007ff4abb4d038 R14: 00007ff4abb4cfa0 R15: 00007ffc491b5c98 [ 190.593626][ T8541] [ 190.662913][ T8539] (syz.2.399,8539,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "coherency=bd" or missing value [ 190.674970][ T8539] (syz.2.399,8539,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 190.698055][ T8539] netlink: 'syz.2.399': attribute type 29 has an invalid length. [ 190.708999][ T8539] netlink: 'syz.2.399': attribute type 29 has an invalid length. [ 190.719176][ T8539] netlink: 'syz.2.399': attribute type 29 has an invalid length. [ 190.786295][ T1107] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.883549][ T1107] usb 5-1: device descriptor read/8, error -71 [ 191.002646][ T1107] usb usb5-port1: unable to enumerate USB device [ 192.223728][ T4248] attempt to access beyond end of device [ 192.223728][ T4248] loop0: rw=1048577, want=66, limit=64 [ 192.234755][ T4248] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 192.243730][ T4248] attempt to access beyond end of device [ 192.243730][ T4248] loop0: rw=1048577, want=67, limit=64 [ 192.254894][ T4248] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 192.263374][ T4248] attempt to access beyond end of device [ 192.263374][ T4248] loop0: rw=1048577, want=68, limit=64 [ 192.274319][ T4248] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 192.282795][ T4248] attempt to access beyond end of device [ 192.282795][ T4248] loop0: rw=1048577, want=69, limit=64 [ 192.293749][ T4248] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 192.302188][ T4248] attempt to access beyond end of device [ 192.302188][ T4248] loop0: rw=1048577, want=73, limit=64 [ 192.313516][ T4248] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 192.321945][ T4248] attempt to access beyond end of device [ 192.321945][ T4248] loop0: rw=1048577, want=74, limit=64 [ 192.332902][ T4248] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 192.341443][ T4248] attempt to access beyond end of device [ 192.341443][ T4248] loop0: rw=1048577, want=77, limit=64 [ 192.352760][ T4248] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 192.361204][ T4248] attempt to access beyond end of device [ 192.361204][ T4248] loop0: rw=1048577, want=78, limit=64 [ 192.372150][ T4248] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 192.381705][ T4248] attempt to access beyond end of device [ 192.381705][ T4248] loop0: rw=1048577, want=2126, limit=64 [ 192.394823][ T4248] attempt to access beyond end of device [ 192.394823][ T4248] loop0: rw=1048577, want=4166, limit=64 [ 192.406547][ T4248] Buffer I/O error on dev loop0, logical block 4166, lost async page write [ 192.415258][ T4248] Buffer I/O error on dev loop0, logical block 4167, lost async page write [ 193.582682][ T4229] usbhid 1-1:0.0: can't add hid device: -32 [ 193.588646][ T4229] usbhid: probe of 1-1:0.0 failed with error -32 [ 194.225128][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231442][ T1422] ieee802154 phy1 wpan1: encryption failed: -22