last executing test programs: 5m23.987684553s ago: executing program 4 (id=98): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_names\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x1, 0x3) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x7, @sliced={0x1, [0x8, 0xaeb, 0xf8e0, 0x4, 0x7, 0x7ff, 0x1, 0x1ff, 0x8003, 0xbe, 0x8, 0x7, 0xf801, 0xd7d9, 0x9, 0x7, 0x531a, 0xff, 0xfffd, 0xe, 0xd2, 0x6, 0x6, 0x5, 0x6fec, 0x3, 0xfffb, 0x5420, 0x4, 0x2, 0x1, 0x4, 0x0, 0xc, 0x1ab, 0xf5, 0x0, 0x7, 0x9, 0x7, 0x2, 0xffff, 0x4c, 0x2, 0x1, 0xff96, 0x9, 0x1a8a], 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x3, r1, 'id0\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x3, 0x8, 0x106, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r4}) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xa1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x2}, 0xe) 5m22.752025357s ago: executing program 4 (id=102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x38, 0x28, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {0xf}, {0xa, 0x1}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_netem={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4c044) r0 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,maY_read=0x0000000000000401,blksize=0x0000000000001000,max_read=0x0000000000008000,default_permissions,max_read=0xffffffffffffffff,blksize=0x0000000000000000,dirsync,func=BPRM_CHECK,appraise_type=imasig,subj_user=N\'$,appraise_type=imasig,appraise_type=imasig,seclabel,euid>', @ANYRESDEC, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f00000003c0)="5e6521f3fa84b0290ce312d2610c40912cc0f3e32cf7c6e54d9a6db3d776308ee79c99e405d23c35fb9be542fed5") mknodat(r0, &(0x7f0000000400)='./file0\x00', 0x21c0, 0x103) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) ioctl(0xffffffffffffffff, 0x541b, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pselect6(0x40, &(0x7f0000000040)={0x55bd, 0xcfb, 0x3, 0x8, 0x4, 0xff, 0x3, 0x1}, &(0x7f0000000440)={0x401, 0x3039, 0x0, 0x99da, 0xfff, 0x400, 0xfffffffffffffff8, 0x2}, &(0x7f0000000500)={0x10, 0x400000000000, 0xe775, 0x8, 0x4, 0x9, 0x2}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1, 0x3]}, 0x8}) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9", 0x34, r2) r3 = io_uring_setup(0x868, &(0x7f0000000480)={0x0, 0x6091, 0x1000, 0x2, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, 0xffffffffffffffff, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket(0x22, 0x7, 0x10000000000002) ioctl(0xffffffffffffffff, 0x5451, 0x0) 5m21.787070527s ago: executing program 4 (id=104): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) 5m19.360410136s ago: executing program 4 (id=111): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000010000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="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", 0xffd}, {&(0x7f0000001880)="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", 0x651}], 0x2}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x200000, 0x0, 0x1, 0x1, 0x0, 0x3a}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x8}, 0x5b) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x20, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r9 = openat$dsp1(0xffffff9c, &(0x7f0000000580), 0x101000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r9, 0x80044dff, &(0x7f00000005c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r10, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) read$sequencer(r1, &(0x7f00000000c0)=""/112, 0x70) 5m14.773737736s ago: executing program 4 (id=121): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.529924105s ago: executing program 4 (id=127): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m9.62950701s ago: executing program 32 (id=127): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 56.662891089s ago: executing program 3 (id=710): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$OSF_MSG_REMOVE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x175c, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x9}, 0x9, 0x7, 0x3, 0x72c, 0x0, 'syz0\x00', "c1f2eb036bb979372e109a5da5116c2c7890d9ff26fcf6c759720cb91860219c", "0ca28119df5bb290dda89f25ef2778dc817bda777c878825847f02250f28e45a", [{0x100, 0xfffc, {0x2, 0x2}}, {0x0, 0x800, {0x0, 0x2}}, {0x100, 0xcbb6, {0x3, 0xfb8}}, {0x10, 0x2, {0x1, 0x36}}, {0x0, 0x0, {0x1, 0x7}}, {0x2, 0xfff9, {0x2, 0x27}}, {0x8, 0x1fe, {0x2, 0x3d}}, {0x3, 0x2abe, {0x2, 0x4}}, {0x401, 0xffff, {0x0, 0x45b}}, {0x7, 0x1cc, {0x0, 0x4}}, {0x5, 0x7fff, {0x1, 0x95}}, {0x5, 0xfff8, {0x0, 0x1}}, {0x9, 0x1, {0x731beac3634abdb, 0x401}}, {0x2, 0x0, {0x3, 0xc7f6}}, {0xff, 0x2, {0x1, 0x10}}, {0x1000, 0x5, {0x5, 0x1ff}}, {0x8, 0x7ff, {0x0, 0x6}}, {0x401, 0x1, {0x2, 0x1}}, {0x2, 0x1, {0x3, 0x66}}, {0x360, 0xfffd, {0x3, 0xc5}}, {0x401, 0x6, {0x0, 0x40}}, {0xa, 0x6, {0x1, 0xfffffff3}}, {0x8001, 0x8, {0x0, 0xfc}}, {0x8001, 0xd, {0x2, 0x6}}, {0x81, 0x401, {0x1, 0xffffffd2}}, {0x0, 0xb, {0x2, 0x25d1}}, {0x6, 0x4, {0x2, 0x1}}, {0x6, 0x1, {0x1, 0xfffffffb}}, {0x401, 0xb, {0x1, 0x3}}, {0xcff5, 0x6, {0x0, 0x2}}, {0x800, 0x1, {0x2, 0x520}}, {0x2000, 0x8, {0x3, 0x8001}}, {0x97ea, 0x9, {0x1, 0x9}}, {0x5d0, 0x2, {0x3, 0xffffffff}}, {0x8, 0x0, {0x3, 0x4}}, {0x5e5, 0x7, {0x2, 0x4}}, {0x2, 0x9, {0x3, 0xfffffff8}}, {0x0, 0x1000, {0x2, 0x7e}}, {0xff, 0x7, {0x3, 0xfffff800}}, {0x7, 0x7ff, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x1, 0x1, 0xc, 0x1b, 'syz1\x00', "2c2ab4d3dd31b49cf02ce9427abfe4621f75102e271e84246d9a56f9942b2dcd", "0160d107ad0330e39d3639a9419c926192c56afe282eee7e7d8094fef80304e5", [{0xfffd, 0x14a0, {0x1, 0x9}}, {0x3}, {0x9, 0x20, {0x0, 0x4}}, {0x3, 0x0, {0x1, 0x4}}, {0x9, 0x2, {0x2, 0x2}}, {0x1, 0x696a, {0x3, 0x8}}, {0x0, 0x6, {0x1, 0xfff}}, {0x89f6, 0x1, {0x7, 0x5}}, {0x6, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x3, 0x6}}, {0xb, 0xb0a0, {0x0, 0x3}}, {0x3, 0x9, {0x2, 0xd8e}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xe, 0x2, {0x0, 0xc}}, {0x4, 0x9, {0x3}}, {0x3, 0x1, {0x3, 0x8}}, {0x101, 0x5, {0x2, 0x6}}, {0x7, 0x1000, {0x2, 0x460}}, {0x20e, 0x5, {0x0, 0x7fff}}, {0xbc9, 0xb, {0x1, 0xff}}, {0x0, 0x1, {0x2, 0xb}}, {0x7, 0x401, {0x3, 0x5}}, {0x5, 0x10, {0x0, 0x10001}}, {0x8, 0x0, {0x3, 0xae}}, {0x80, 0x9, {0x2, 0x6}}, {0x7fc0, 0x7, {0x2, 0x3}}, {0x101, 0x101, {0x2, 0x3}}, {0x1, 0xfff9, {0x2, 0x4}}, {0x7, 0x400, {0x2}}, {0x9, 0xb0, {0x1, 0x4}}, {0x7ff, 0xb438, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x5}}, {0xa0e, 0x6, {0x1, 0x2}}, {0x4, 0x7, {0x2, 0x3}}, {0x9, 0x0, {0x0, 0x5}}, {0x768f, 0xd, {0x0, 0x1}}, {0x200, 0x0, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x8}}, {0xa8d8, 0x800, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x2, 0x5, 0x39, 0x800, 0x6, 'syz1\x00', "9fc52f6daecb2651ede80bfbaf0169f27357dfaf59e3f49647fda1a9d37843fc", "559bbf6debe2ebfdd525ea32a68c5783d8996045641a1172c381199cf4a1a5d1", [{0x1800, 0x2, {0x3, 0x8bf1}}, {0x4, 0x5}, {0x8, 0x2, {0x3}}, {0x3, 0x8, {0x1, 0xd}}, {0x6, 0x2, {0x0, 0x5}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x7, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x1}}, {0x7, 0x8, {0x1, 0x3}}, {0x3, 0x3, {0x2, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x3}}, {0x800, 0x0, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0x1}}, {0x60c2, 0x3, {0x1, 0x1ff}}, {0x3, 0x6, {0x2, 0xa0d}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x5}}, {0xb3, 0x8, {0x2, 0x4332d02f}}, {0x3, 0x29, {0x1, 0xfffffffa}}, {0x2, 0x0, {0x1, 0x100}}, {0x7, 0x2, {0x0, 0x101}}, {0xfff8, 0x6, {0x1, 0xc}}, {0x3ff, 0x6, {0x0, 0x2}}, {0xd, 0x5, {0x0, 0x7}}, {0x2, 0x7, {0x1, 0x800000}}, {0xa2, 0x4, {0x3, 0x1ff}}, {0x56, 0x7, {0x1, 0x87b2}}, {0x5, 0x5, {0x2}}, {0xffff, 0x800, {0x0, 0x100}}, {0x5, 0x1, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x7e70}}, {0x4, 0x9088, {0x3, 0xb31}}, {0x7fff, 0x2, {0x0, 0x2}}, {0x2, 0x535, {0x1, 0x7}}, {0x81, 0x9f, {0x0, 0x8d2}}, {0x25a0, 0xfc5b, {0x2, 0x1}}, {0x100, 0xfffb, {0x1}}, {0x9, 0x80, {0x0, 0x2}}, {0x9, 0x8, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xb249}, 0xe, 0x3, 0xffff, 0x3fe1, 0x1e, 'syz1\x00', "9adaa18042571dea59f5204a8800ce87b0b7e7afb9f4dc385a5a8ebf9f8dce8a", "79f5a09f8ca8fec775d971787dc27a5510fa497f9c6fbd78cc2f86f2f3a27f3b", [{0x8, 0x7, {0x1, 0x2c00}}, {0x100, 0x4180, {0x3, 0x1000}}, {0x4, 0x9, {0x0, 0x81}}, {0x100, 0x3, {0x0, 0x4}}, {0x9a, 0x0, {0x1}}, {0x7ff, 0xfff, {0x3, 0x100}}, {0x2c00, 0x0, {0x3, 0x9}}, {0x3, 0x3bbf, {0x0, 0x9}}, {0x7, 0x117, {0x2, 0x7fffffff}}, {0x2, 0x4, {0x0, 0x7}}, {0x76, 0x0, {0x0, 0x400}}, {0x81, 0x121, {0x3, 0x8e}}, {0x1, 0x0, {0x3, 0x6}}, {0x0, 0x4, {0x3, 0x9}}, {0xfffd, 0x4120}, {0x1ff, 0xa18c, {0x1, 0xa}}, {0x9, 0x0, {0x2, 0xd0000000}}, {0x3183, 0x400, {0x1, 0x8}}, {0xffff, 0x17f5, {0x0, 0x8c45}}, {0x46b, 0x3ff, {0x0, 0x41806f89}}, {0x1, 0x2, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x800000}}, {0x2, 0x200, {0x1, 0x3}}, {0x7, 0xa, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x926a}}, {0x5, 0x0, {0x3, 0x767}}, {0x6, 0x7f, {0x3, 0x3}}, {0x5, 0x1, {0x2}}, {0x6, 0x9, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0x502, {0x0, 0x5}}, {0x9, 0x80, {0x3, 0x9}}, {0x6, 0xbe, {0x0, 0x4}}, {0x800, 0x4, {0x3, 0x8000}}, {0x7fff, 0xc}, {0xb, 0xfff8, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x9, 0xdf, {0x3, 0x3}}, {0x8, 0x1, {0x3, 0xffffffff}}, {0x3, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xfe, 0x3, 0x9c25, 0x8, 0x26, 'syz0\x00', "4886d29e77655b438621e28bc67f52dab4cc155bac1840a853b099076563ea73", "2dac0df0cdd4197241fab61e2c24aa339c6bdcbc99501e276caf677cd82587c8", [{0x800, 0x7ff, {0x2, 0x1}}, {0x8, 0x7, {0x1, 0x5}}, {0xff68, 0x217f, {0x3, 0x7f}}, {0x5c, 0x5, {0x0, 0x6}}, {0x8001, 0x3, {0x1}}, {0x6, 0xa, {0x1, 0xf0000000}}, {0x81, 0xfffd, {0x2, 0x5}}, {0x1, 0x0, {0x2, 0xfae}}, {0x9, 0x8, {0xd14d209d1884419, 0x4}}, {0x50a2, 0x0, {0x0, 0x6}}, {0x9, 0x5, {0x3, 0x6}}, {0x1ce5, 0x1, {0x1, 0x8}}, {0x1, 0x4ce, {0x1, 0x1}}, {0xe317, 0x6, {0x1, 0x1a}}, {0x769d, 0x0, {0x0, 0x7fff}}, {0x5, 0x0, {0x0, 0xb4c9}}, {0x87f, 0x40, {0x3}}, {0x2, 0x100, {0x3, 0x5}}, {0x8, 0x9, {0x2, 0x5}}, {0x101, 0x6, {0x1, 0x6}}, {0x2, 0x101, {0x3, 0x40}}, {0x485e, 0x7, {0x0, 0x4}}, {0x5, 0x8000, {0x3, 0x3712}}, {0x3, 0xd8, {0x1, 0xc}}, {0x0, 0x3, {0x0, 0x875}}, {0xc, 0x200, {0x3, 0x8}}, {0x5, 0xfffa, {0x0, 0x7ff}}, {0x0, 0xcc1, {0x2, 0x2}}, {0x90fc, 0x9, {0x2, 0xffffffff}}, {0x7, 0x1, {0x2, 0x1}}, {0xa, 0x0, {0x3, 0xd}}, {0x9, 0xfffd, {0x2, 0x1}}, {0x9, 0x0, {0xd20c460d8476fc89, 0xfffffffd}}, {0xce, 0x0, {0x3, 0x9}}, {0x5, 0x4, {0x3, 0x7}}, {0x2e, 0x205a, {0x0, 0x1}}, {0x2, 0x3, {0x3, 0xc}}, {0x8, 0x8, {0x3, 0x7}}, {0x4, 0xb, {0x1, 0x4}}, {0xfff9, 0x0, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x7, 0x4, 0xd, 0xe, 'syz1\x00', "378c9251613448636ec37d8d9dd05e6ec1013de1c3ad37742b3ae1f74d7a483d", "16b067138357e0909d50f56156f63a1595678155f0da62a386d9e43d80cc7ea1", [{0x101, 0x4, {0x0, 0x1}}, {0x7f, 0xad, {0x2, 0x7}}, {0xfffa, 0x3, {0x0, 0x1}}, {0x3ff, 0xa, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x7f}}, {0x9, 0x9, {0x0, 0x9}}, {0x0, 0x9, {0x2, 0x5}}, {0x5, 0x3, {0x0, 0x5}}, {0x101, 0xfff, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x7}}, {0x4, 0xbf2, {0x3, 0x8}}, {0xa0, 0x9, {0x1, 0x3ff}}, {0x4, 0x3, {0x3, 0x3}}, {0x7, 0x401, {0x1, 0x31}}, {0x2, 0x5, {0x3, 0x6a9f}}, {0x9, 0x2, {0x1, 0x9}}, {0x8, 0x2, {0x0, 0xe}}, {0xfff9, 0xf982, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x8e9}}, {0xeb, 0x9001, {0x0, 0x6}}, {0xffff, 0xe1, {0xfb554788f9dac68d}}, {0x7f, 0x3, {0x0, 0x603}}, {0x6, 0x4, {0x3, 0x800}}, {0x5, 0x81, {0x3, 0x8}}, {0x8, 0x523e, {0x3, 0x2}}, {0x8, 0x9b6, {0x0, 0x4ec0}}, {0x5, 0x3, {0x2, 0x200}}, {0xecf, 0x4, {0x2, 0x2}}, {0x8, 0xffff, {0x0, 0x800}}, {0x6, 0xc000, {0x0, 0x2412}}, {0x9, 0x5, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xfffc, {0x1, 0xd}}, {0x7, 0x3, {0x1, 0x81}}, {0xa, 0x4, {0x2, 0x800}}, {0xde0f, 0x3, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0xea26}}, {0xb999, 0x800, {0x7c48ba8a6319ef8e, 0x8}}, {0x2, 0x7, {0x2, 0x8}}, {0x0, 0x1ff, {0x4, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xff, 0x3, 0x1, 0x75c0, 0x12, 'syz1\x00', "27c357d600d6e0ce33e318b4a9445dc21dd01a1a893f7cafddf3ab22c7654ac5", "502e137d0dcce16db6a5db2b658b3e81cdce03f39f972ebf9d7668c80d5124b3", [{0x7ff, 0x8000, {0x1, 0x3}}, {0x6, 0x7, {0x0, 0x8000}}, {0x80, 0x3, {0x3, 0x2}}, {0x9, 0x10, {0x3, 0x8}}, {0x4, 0x5, {0x2, 0xfd2}}, {0x2, 0x7fff, {0x2, 0x3}}, {0xffff, 0xf, {0x3, 0x4}}, {0x7db, 0x8001, {0x0, 0x40}}, {0x8, 0x100, {0x0, 0x3}}, {0x7, 0x80f, {0x2, 0x1ff}}, {0x9, 0x2, {0x3, 0xffffffbe}}, {0xcc66, 0x6, {0x9fc5eccf7c7a9e07, 0x4}}, {0x5, 0x6, {0x3, 0x3}}, {0xfffb, 0x6, {0x0, 0x1000}}, {0xb, 0x1, {0x0, 0x4}}, {0xf, 0xff, {0x2, 0x80000000}}, {0x2, 0x8, {0x3, 0xfffffffa}}, {0xc, 0x1000, {0x2, 0x9}}, {0x8, 0x9598, {0x3, 0x5}}, {0x5, 0x10, {0x1, 0x101}}, {0x9, 0x2, {0x1, 0x73d}}, {0xbf6e, 0x7ff, {0x0, 0x8e}}, {0x3, 0xa, {0x1, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x9}}, {0x400, 0xf800, {0x2, 0x7}}, {0x4, 0x8000, {0x0, 0x6}}, {0x1, 0x1, {0x2, 0x6}}, {0x4, 0x5f83, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0xc8}}, {0x9dc, 0xbdc, {0x2, 0x7}}, {0x41fa, 0xf, {0x1, 0x9a}}, {0x3, 0x5, {0x2, 0x144}}, {0xfffd, 0xe, {0x3, 0x10001}}, {0x9, 0xc, {0x2, 0xb}}, {0x0, 0xfff8, {0x1, 0x1}}, {0xa, 0x101, {0x3, 0xfff}}, {0x8, 0x7, {0x2, 0x1}}, {0xe, 0x0, {0x2, 0x7ff}}, {0x7f17, 0x6, {0x1, 0x81}}, {0x295, 0x11, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x40b4}, 0x40, 0xb, 0x2, 0x8, 0x15, 'syz0\x00', "d87f3eba32db69e75efbee28a08cc128db73a387206beb408720a810453e9647", "23e26a05842faf629ba616fe3e6072d5c3f9d05ecf26692ec898ccda1575db65", [{0x6, 0x8000, {0x0, 0x5}}, {0x5, 0x9, {0x0, 0xe0}}, {0x6, 0x200, {0x2, 0x5}}, {0x6cd6, 0x401, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0xfffffffc}}, {0x6fe1, 0x6, {0x0, 0x6}}, {0x0, 0x94, {0x2, 0x1}}, {0x1, 0x6, {0x3, 0x400}}, {0xf800, 0x100, {0x0, 0x6}}, {0x8, 0x200, {0x1}}, {0x3, 0x83, {0x3, 0x2}}, {0x831b, 0x5, {0x1, 0xc5d8}}, {0x2, 0xf, {0x3, 0x7}}, {0xe, 0x1ff, {0x1, 0x9}}, {0x5, 0x9}, {0x401, 0x3, {0x3, 0xf}}, {0x10, 0x5, {0x0, 0xff}}, {0xd454, 0x1000, {0x1, 0x5}}, {0x772, 0x6, {0x3, 0x4}}, {0x7ff, 0x8000, {0x3, 0x9}}, {0xde6e, 0x1, {0x2, 0x80}}, {0x0, 0x1, {0x0, 0x4}}, {0x4, 0x5, {0x0, 0x7fffffff}}, {0x4, 0x2, {0x2, 0x9}}, {0xbd82, 0x0, {0x2, 0x9}}, {0xfc01, 0x6, {0x3, 0x8}}, {0x1, 0x5b1c, {0x3, 0xffffcfd0}}, {0x5, 0x8, {0x1, 0x6}}, {0x9, 0x5, {0x1, 0xfffffffd}}, {0x3ff, 0x7, {0x2, 0x101}}, {0x7fff, 0x2, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x3a, 0x7, {0x1, 0x200000}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x8}}, {0xf, 0x5acf, {0x3}}, {0x5, 0x5, {0x0, 0xbec}}, {0x2, 0x1, {0x2, 0x3ff}}, {0x3e, 0xff96, {0x3, 0xa6e}}, {0xa, 0x4, {0x1, 0x100}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x5, 0xf7, 0x691, 0x1, 0x24, 'syz0\x00', "0ce49199bc82ed5d11140ca6c16756c2ac9e589211c032479334e80446a05786", "ca162a19c3255c23dca9a13f911ce4bb9a195787ca0713d9e9a9c7e8efc7ec5a", [{0x1, 0x7, {0x3, 0x2}}, {0x6, 0x401, {0x2, 0x6}}, {0x2eb, 0x9d27, {0x3, 0x8}}, {0x3, 0x56, {0x1, 0x4}}, {0x4, 0xa59d, {0x1, 0xe46}}, {0xfffd, 0xf77c, {0x0, 0xa}}, {0xfffc, 0x3eef, {0x2, 0x4}}, {0x7, 0x9, {0x1, 0x9}}, {0x2, 0xfff, {0x1, 0xfffffff7}}, {0x5, 0xffff, {0x1, 0xb03a}}, {0x7ff, 0xff, {0x0, 0x8}}, {0x5, 0x8, {0x0, 0x8001}}, {0x3, 0x2, {0x1, 0x4}}, {0x7, 0x401, {0x0, 0x7fffffff}}, {0x1, 0x5, {0x1, 0x7}}, {0x149, 0x6}, {0x8001, 0x8, {0x1, 0x7fff}}, {0x0, 0x4, {0x3}}, {0x4, 0x6, {0x1}}, {0x3, 0x9, {0x2, 0x2}}, {0x8e3, 0x7fff, {0x2, 0x38}}, {0xfffa, 0x1, {0x0, 0x8}}, {0x2, 0x3, {0x1, 0x77}}, {0x100, 0xec4, {0x387ab4415f93248f, 0x9}}, {0x3, 0x2, {0x1, 0x9}}, {0x4, 0x4, {0x3, 0xfff}}, {0x4, 0x1, {0x2}}, {0x101, 0xa, {0x2, 0x100}}, {0x6, 0x9, {0x2, 0x8}}, {0x365e, 0xffff, {0x2, 0x7}}, {0x4, 0x3, {0x3, 0x9}}, {0x7, 0xbd1, {0x2, 0x7}}, {0x2, 0x8000, {0x3, 0x5}}, {0x6, 0xff, {0x2, 0x7}}, {0x240, 0x7, {0x1, 0xc3}}, {0x4087, 0x10, {0x3, 0x2}}, {0xc, 0x800, {0x0, 0x367}}, {0xfff7, 0xf, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0xc525}}, {0x0, 0x0, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x8, 0x1, 0x9, 0x7, 0x26, 'syz1\x00', "01b022b776924a7d9f233f423e0033e91c9774478cabe0f0514b59a9e1580c12", "9e2f42fbe6c1937e283d9f0581250ffe2b1e2c9e7055e984c83887ff46ba5fbf", [{0x4, 0x2143, {0x2, 0x7}}, {0x65a, 0x40, {0x3, 0x10000}}, {0x9711, 0x7, {0x0, 0xff}}, {0x9, 0x40, {0x1, 0x6}}, {0x0, 0x9, {0x3, 0x3}}, {0x800, 0x0, {0x2, 0x7}}, {0x3, 0x8000, {0x2, 0xffff0000}}, {0x6, 0xe9be, {0x2, 0xfffffffb}}, {0x4250, 0x5, {0x0, 0x1f}}, {0x5, 0x8001, {0x0, 0x7}}, {0x5, 0x2, {0x0, 0xffffffff}}, {0x7, 0xd, {0x3, 0xfffffff9}}, {0x150, 0x89a, {0x1, 0x9}}, {0x6, 0x5, {0x1, 0x6}}, {0x5, 0xc, {0x2, 0xfffffff7}}, {0x401, 0x81, {0x1, 0x101}}, {0x7ff, 0x3, {0x2, 0x7c}}, {0x6aae, 0x1, {0x2, 0x2}}, {0x5, 0x81, {0x4, 0x2}}, {0x2, 0x98f, {0x3, 0x2c1}}, {0x0, 0x9, {0x1, 0x1ff}}, {0x7f, 0x7, {0x0, 0x8}}, {0xff, 0x80, {0x3, 0x5}}, {0x8, 0x6, {0x1, 0x5}}, {0x40, 0x7, {0x1, 0x400}}, {0x1000, 0x7, {0x1, 0xb}}, {0x6, 0x101, {0x1, 0xf}}, {0x8, 0xfbb, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x8000}}, {0x9, 0x6, {0x3, 0x3ff}}, {0xf, 0xfffc, {0x2, 0x2c2}}, {0x9, 0x2, {0x2, 0x4}}, {0xff9d, 0x9, {0x3, 0x3}}, {0x5, 0xdcc, {0x2, 0xe}}, {0x9, 0x0, {0x2, 0xe}}, {0xb, 0x0, {0x1, 0x101}}, {0x40, 0x4, {0x1, 0x6}}, {0x9, 0x8, {0x2, 0xff}}, {0x9, 0x9, {0x2, 0x81}}, {0x3, 0x3, {0x2, 0x20002000}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) 54.735038508s ago: executing program 3 (id=711): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) 53.095285232s ago: executing program 3 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r6}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000180)={0x8, r6}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) mount(0x0, &(0x7f0000000740)='./file1/file0\x00', 0x0, 0x2208004, 0x0) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) 48.185771747s ago: executing program 3 (id=723): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000005140)="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", 0x464}, {0x0}], 0x2}}], 0x1, 0x4400) 47.478381311s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b80000000b76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0ae4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 46.155492835s ago: executing program 3 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRESOCT=r8, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES64=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 30.694701908s ago: executing program 33 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) shutdown(r6, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRESOCT=r8, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES64=r7], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) 26.762204577s ago: executing program 1 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@rescan_uuid_tree}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") setreuid(0xee00, 0xee00) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 18.522585772s ago: executing program 1 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400c1}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.357057577s ago: executing program 1 (id=766): r0 = syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @empty}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./bus\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x8, 0xad, &(0x7f0000000600)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 14.927100987s ago: executing program 1 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be83", 0x20, r5) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 14.666907384s ago: executing program 5 (id=770): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fff9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 8.834791435s ago: executing program 5 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0xffff, 0xb, 0x2200, 0xffff, 0x0, 0x0, 0x4, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r2, 0x401070c9, &(0x7f0000000000)) 7.962445701s ago: executing program 5 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) 7.90586502s ago: executing program 0 (id=775): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket$inet(0x2, 0x3, 0xa) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) 7.275931061s ago: executing program 0 (id=778): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) 6.606779405s ago: executing program 2 (id=779): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.220050003s ago: executing program 1 (id=780): syz_mount_image$ntfs3(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB='dmask=00000000000000000000007,force,iocharset=cp850,showmeta,discard,fmask=00000000000000000000002,acl,discard,prealloc,discard,fmask=00000000000004,iocharset=cp437,discard,\x00'], 0x1, 0x1f7da, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r3, &(0x7f0000000140)=""/50, 0xffa3) 5.79800163s ago: executing program 0 (id=781): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40810) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x80000000000000, 0x900) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0xa8, 0x0, 0x10000000, 0x2, 0x1}) r3 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) 4.525187832s ago: executing program 2 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xa, 0xffffffff, 0x3, 0x5, 0xc9e6}}, 0x11c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x2, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044044}, 0x40080c0) 4.287456819s ago: executing program 0 (id=783): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0x8, 0x1, 0x0, 0x7f}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1, 0x9, 0x0) fcntl$getown(r4, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r8 = syz_open_procfs$namespace(0x0, 0x0) setns(r8, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) 3.588455876s ago: executing program 5 (id=784): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000010}) 3.365825888s ago: executing program 2 (id=785): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x1a4, &(0x7f0000000540)="$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") lstat(&(0x7f0000000700)='./file2\x00', 0x0) 2.915568378s ago: executing program 5 (id=786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.749707695s ago: executing program 0 (id=787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r1 = open(&(0x7f0000000000)='./file1\x00', 0x103102, 0x80) ftruncate(r1, 0x2007ffb) 2.649748957s ago: executing program 2 (id=788): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.79479279s ago: executing program 1 (id=789): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x800) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xb, 0x52, 0x97, 0x8, 0xe41, 0x4142, 0xd46e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400), &(0x7f00000001c0)) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000002c0)="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", 0x14d, 0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c6d000000000000000000000000000000000000000000000000000002"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002000080029bd7000fddbdf250a0000cdff000001020001000800060000000000050016003c00000091d0a7ec6c8d8870e30c8523c7c24656dcc8c21396fdcb1a15c2c078eff1"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x24044045) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, r6) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x7) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xf9) keyctl$setperm(0x5, r6, 0x2000) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.732334061s ago: executing program 2 (id=790): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) 1.151465692s ago: executing program 0 (id=791): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0x0, 0x0, 0x0) 1.020797175s ago: executing program 5 (id=792): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 0s ago: executing program 2 (id=793): creat(0x0, 0xecf86c37d53049cc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) kernel console output (not intermixed with test programs): usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 332.967653][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.005403][ T30] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 333.035069][ T794] usb 6-1: Product: syz [ 333.059589][ T794] usb 6-1: Manufacturer: syz [ 333.103349][ T794] usb 6-1: SerialNumber: syz [ 333.742196][ T7079] FAULT_INJECTION: forcing a failure. [ 333.742196][ T7079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.862761][ T30] usb 4-1: config 0 has no interfaces? [ 334.160982][ T794] usb 6-1: config 0 descriptor?? [ 335.176121][ T7079] CPU: 1 UID: 0 PID: 7079 Comm: syz.0.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.176281][ T7079] Tainted: [L]=SOFTLOCKUP [ 335.176329][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.176400][ T7079] Call Trace: [ 335.176446][ T7079] [ 335.176500][ T7079] __dump_stack+0x26/0x30 [ 335.176650][ T7079] dump_stack_lvl+0x14c/0x1c0 [ 335.176801][ T7079] dump_stack+0x1e/0x25 [ 335.176942][ T7079] should_fail_ex+0x7e2/0x8c0 [ 335.177101][ T7079] should_fail+0x2a/0x40 [ 335.177226][ T7079] should_fail_usercopy+0x2e/0x40 [ 335.177372][ T7079] _copy_from_user+0x33/0x100 [ 335.177518][ T7079] kstrtouint_from_user+0x75/0x140 [ 335.177685][ T7079] ? kmsan_get_metadata+0xf1/0x160 [ 335.177859][ T7079] ? proc_fail_nth_write+0x43/0x300 [ 335.177982][ T7079] ? vfs_write+0x48a/0x15c0 [ 335.178153][ T7079] proc_fail_nth_write+0x61/0x300 [ 335.178282][ T7079] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 335.178465][ T7079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 335.178634][ T7079] vfs_write+0x48a/0x15c0 [ 335.178785][ T7079] ? stack_depot_save_flags+0x35/0x790 [ 335.178918][ T7079] ? kmsan_get_metadata+0xf1/0x160 [ 335.179084][ T7079] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 335.179252][ T7079] ? kmsan_get_metadata+0xf1/0x160 [ 335.179438][ T7079] ksys_write+0x1d9/0x470 [ 335.179619][ T7079] __ia32_sys_write+0x9a/0xf0 [ 335.179788][ T7079] ia32_sys_call+0x37a7/0x4360 [ 335.179910][ T7079] do_int80_emulation+0x15a/0x330 [ 335.180045][ T7079] ? clear_bhb_loop+0x50/0xa0 [ 335.180174][ T7079] ? clear_bhb_loop+0x50/0xa0 [ 335.180313][ T7079] asm_int80_emulation+0x1f/0x30 [ 335.180437][ T7079] RIP: 0023:0xf71d5cab [ 335.180538][ T7079] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 335.180650][ T7079] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 335.180771][ T7079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54755d0 [ 335.180859][ T7079] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.180938][ T7079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.181014][ T7079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.181093][ T7079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.181205][ T7079] [ 335.640473][ T30] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 335.649909][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.658576][ T30] usb 4-1: Product: syz [ 335.688019][ T30] usb 4-1: config 0 descriptor?? [ 335.696008][ T30] usb 4-1: can't set config #0, error -71 [ 335.714084][ T30] usb 4-1: USB disconnect, device number 12 [ 335.907358][ T794] usb 6-1: can't set config #0, error -71 [ 335.917108][ T794] usb 6-1: USB disconnect, device number 9 [ 336.182759][ T7083] binder: 7082:7083 ioctl c0306201 0 returned -14 [ 336.991014][ T7091] loop3: detected capacity change from 0 to 1024 [ 337.217195][ T7091] hfsplus: bad catalog entry type [ 337.374519][ T7098] hfsplus: b-tree write err: -5, ino 2 [ 337.442557][ T7091] overlay: filesystem on ./bus not supported [ 338.784178][ T794] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 338.864772][ T53] hfsplus: b-tree write err: -5, ino 25 [ 338.895401][ T53] hfsplus: b-tree write err: -5, ino 4 [ 338.913013][ T53] hfsplus: b-tree write err: -5, ino 2 [ 338.949973][ T53] hfsplus: b-tree write err: -5, ino 26 [ 338.966026][ T794] usb 6-1: device descriptor read/64, error -71 [ 339.012727][ T53] hfsplus: b-tree write err: -5, ino 20 [ 339.205827][ T794] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 339.352925][ T7114] loop1: detected capacity change from 0 to 16 [ 339.423461][ T794] usb 6-1: device descriptor read/64, error -71 [ 339.576759][ T794] usb usb6-port1: attempt power cycle [ 339.694634][ T7117] FAULT_INJECTION: forcing a failure. [ 339.694634][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 339.752847][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.3.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.753007][ T7117] Tainted: [L]=SOFTLOCKUP [ 339.753054][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.753123][ T7117] Call Trace: [ 339.753174][ T7117] [ 339.753220][ T7117] __dump_stack+0x26/0x30 [ 339.753363][ T7117] dump_stack_lvl+0x14c/0x1c0 [ 339.753507][ T7117] dump_stack+0x1e/0x25 [ 339.753640][ T7117] should_fail_ex+0x7e2/0x8c0 [ 339.753797][ T7117] should_failslab+0x158/0x200 [ 339.753925][ T7117] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 339.754063][ T7117] ? kmsan_get_metadata+0xf1/0x160 [ 339.754237][ T7117] ? __alloc_skb+0x744/0x1190 [ 339.754406][ T7117] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.754587][ T7117] __alloc_skb+0x744/0x1190 [ 339.754770][ T7117] ? __alloc_skb+0x35e/0x1190 [ 339.754921][ T7117] ? netlink_autobind+0x3b0/0x430 [ 339.755067][ T7117] netlink_alloc_large_skb+0xa5/0x290 [ 339.755255][ T7117] netlink_sendmsg+0xae9/0x1250 [ 339.755413][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.755540][ T7117] ____sys_sendmsg+0xf37/0xfd0 [ 339.755694][ T7117] ___sys_sendmsg+0x271/0x3b0 [ 339.755812][ T7117] ? kmsan_get_metadata+0xf1/0x160 [ 339.755991][ T7117] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.756179][ T7117] ? __rcu_read_unlock+0x6c/0xd0 [ 339.756344][ T7117] ? __fget_files+0x3b4/0x4a0 [ 339.756470][ T7117] ? __fget_files+0x3b9/0x4a0 [ 339.756608][ T7117] ? kmsan_get_metadata+0xf1/0x160 [ 339.756780][ T7117] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 339.756970][ T7117] __sys_sendmsg+0x1aa/0x300 [ 339.757121][ T7117] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 339.757272][ T7117] ia32_sys_call+0x1e4a/0x4360 [ 339.757395][ T7117] __do_fast_syscall_32+0x17f/0x3f0 [ 339.757546][ T7117] do_fast_syscall_32+0x37/0x80 [ 339.757683][ T7117] do_SYSENTER_32+0x1f/0x30 [ 339.757808][ T7117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.757967][ T7117] RIP: 0023:0xf708ef6c [ 339.758063][ T7117] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 339.758178][ T7117] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 339.758300][ T7117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 339.758386][ T7117] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.758466][ T7117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.758542][ T7117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 339.758618][ T7117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.758729][ T7117] [ 340.173622][ T794] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 340.437361][ T7125] loop2: detected capacity change from 0 to 16 [ 340.463791][ T794] usb 6-1: device not accepting address 12, error -71 [ 340.645845][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 341.125447][ T5839] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 341.178135][ T7134] FAULT_INJECTION: forcing a failure. [ 341.178135][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 341.312198][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.5.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.312359][ T7134] Tainted: [L]=SOFTLOCKUP [ 341.312405][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.312487][ T7134] Call Trace: [ 341.312532][ T7134] [ 341.312580][ T7134] __dump_stack+0x26/0x30 [ 341.312725][ T7134] dump_stack_lvl+0x14c/0x1c0 [ 341.312875][ T7134] dump_stack+0x1e/0x25 [ 341.313004][ T7134] should_fail_ex+0x7e2/0x8c0 [ 341.313164][ T7134] should_failslab+0x158/0x200 [ 341.313295][ T7134] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 341.313510][ T7134] ? kmsan_get_metadata+0xf1/0x160 [ 341.313682][ T7134] ? __alloc_skb+0x744/0x1190 [ 341.313851][ T7134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.314038][ T7134] __alloc_skb+0x744/0x1190 [ 341.314196][ T7134] ? __alloc_skb+0x35e/0x1190 [ 341.314359][ T7134] netlink_alloc_large_skb+0xa5/0x290 [ 341.314545][ T7134] netlink_sendmsg+0xae9/0x1250 [ 341.314706][ T7134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.314842][ T7134] ____sys_sendmsg+0xf37/0xfd0 [ 341.315008][ T7134] ___sys_sendmsg+0x271/0x3b0 [ 341.315125][ T7134] ? kmsan_get_metadata+0xf1/0x160 [ 341.315308][ T7134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.315500][ T7134] ? __rcu_read_unlock+0x6c/0xd0 [ 341.315654][ T7134] ? __fget_files+0x3b4/0x4a0 [ 341.315786][ T7134] ? __fget_files+0x3b9/0x4a0 [ 341.315920][ T7134] ? kmsan_get_metadata+0xf1/0x160 [ 341.316091][ T7134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.316281][ T7134] __sys_sendmsg+0x1aa/0x300 [ 341.316441][ T7134] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 341.316587][ T7134] ia32_sys_call+0x1e4a/0x4360 [ 341.316710][ T7134] __do_fast_syscall_32+0x17f/0x3f0 [ 341.316865][ T7134] do_fast_syscall_32+0x37/0x80 [ 341.317001][ T7134] do_SYSENTER_32+0x1f/0x30 [ 341.317128][ T7134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.317279][ T7134] RIP: 0023:0xf6feef6c [ 341.317370][ T7134] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 341.317477][ T7134] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 341.317592][ T7134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001040 [ 341.317672][ T7134] RDX: 0000000060000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.317743][ T7134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.317811][ T7134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.317878][ T7134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.317978][ T7134] [ 341.550488][ T7138] 9p: Bad value for 'wfdno' [ 341.672013][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.695507][ T5839] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 341.705014][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.713368][ T5839] usb 4-1: Product: syz [ 341.720653][ T5839] usb 4-1: Manufacturer: syz [ 341.725546][ T5839] usb 4-1: SerialNumber: syz [ 341.736137][ T5839] usb 4-1: config 0 descriptor?? [ 341.895384][ T7140] binder: 7139:7140 ioctl c0306201 0 returned -14 [ 341.957816][ T30] usb 4-1: USB disconnect, device number 13 [ 342.002954][ T7138] loop1: detected capacity change from 0 to 4096 [ 342.160313][ T7137] 9p: Could not find request transport: f [ 342.770666][ T7137] ntfs3(loop1): failed to convert "0080" to maciceland [ 342.823406][ T7137] ntfs3(loop1): failed to convert name for inode 1e. [ 342.882490][ T7137] ntfs3(loop1): ino=1f, mi_enum_attr [ 342.916766][ T7137] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 344.140916][ T7157] netlink: 64 bytes leftover after parsing attributes in process `syz.3.273'. [ 345.435272][ T794] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 345.719385][ T794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.749406][ T794] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.887723][ T794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.918453][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.943530][ T794] usb 2-1: Product: syz [ 345.947902][ T794] usb 2-1: Manufacturer: syz [ 345.988732][ T794] usb 2-1: SerialNumber: syz [ 346.155010][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 346.216367][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 346.269207][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.286708][ T7179] loop0: detected capacity change from 0 to 512 [ 346.310030][ T7179] EXT4-fs: inline encryption not supported [ 346.318108][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.336432][ T7179] EXT4-fs: Ignoring removed i_version option [ 346.383398][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.425827][ T7179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e09d, mo2=0002] [ 346.461532][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.477383][ T7179] System zones: 1-12 [ 346.596902][ T7179] EXT4-fs (loop0): 1 orphan inode deleted [ 346.625383][ T794] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 346.626836][ T7179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.706532][ T794] usb 2-1: USB disconnect, device number 16 [ 346.753602][ T5839] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 346.987717][ T5839] usb 6-1: device descriptor read/64, error -71 [ 347.104939][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.213540][ T794] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 347.283677][ T5839] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 347.398403][ T7191] binder: 7190:7191 ioctl c0306201 0 returned -14 [ 347.442920][ T794] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 347.489899][ T794] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 347.542104][ T794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.586050][ T794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 347.628072][ T794] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.672630][ T794] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.706032][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.129486][ T7197] loop2: detected capacity change from 0 to 8 [ 348.202898][ T794] usb 2-1: usb_control_msg returned -71 [ 348.244147][ T794] usbtmc 2-1:16.0: can't read capabilities [ 348.344405][ T794] usb 2-1: USB disconnect, device number 17 [ 348.465361][ T7197] process 'syz.2.284' launched './file2' with NULL argv: empty string added [ 348.549208][ T7197] cramfs: bad data blocksize 4293972856 [ 348.573793][ T7197] cramfs: bad data blocksize 4293972856 [ 348.927749][ T794] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 349.083756][ T794] usb 2-1: device descriptor read/64, error -71 [ 349.833432][ T794] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 350.033580][ T794] usb 2-1: device descriptor read/64, error -71 [ 351.260291][ T794] usb usb2-port1: attempt power cycle [ 351.623385][ T794] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 351.704655][ T794] usb 2-1: device descriptor read/8, error -71 [ 351.749614][ T7220] loop5: detected capacity change from 0 to 256 [ 351.972174][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 351.972244][ T29] audit: type=1804 audit(2000000007.729:161): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.291" name="/newroot/13/file0/file0" dev="loop5" ino=1048610 res=1 errno=0 [ 352.013573][ T29] audit: type=1804 audit(2000000007.769:162): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.291" name="/newroot/13/file0/file0" dev="loop5" ino=1048610 res=1 errno=0 [ 352.313892][ T30] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 352.507456][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 352.595776][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.669292][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 352.794561][ T30] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 352.813782][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.863609][ T30] usb 6-1: Product: syz [ 352.868159][ T30] usb 6-1: Manufacturer: syz [ 352.894424][ T30] usb 6-1: SerialNumber: syz [ 352.908637][ T30] usb 6-1: config 0 descriptor?? [ 352.989057][ T7220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 353.139715][ T7235] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 353.184206][ T7235] nvme_fabrics: unknown parameter or missing value 'e.' in ctrl creation request [ 353.360656][ T7239] binder: 7236:7239 ioctl c0306201 0 returned -14 [ 353.837820][ T30] usb 6-1: USB disconnect, device number 16 [ 354.574754][ T7249] FAULT_INJECTION: forcing a failure. [ 354.574754][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 354.644449][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.5.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.644556][ T7249] Tainted: [L]=SOFTLOCKUP [ 354.644589][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.644637][ T7249] Call Trace: [ 354.644669][ T7249] [ 354.644704][ T7249] __dump_stack+0x26/0x30 [ 354.644862][ T7249] dump_stack_lvl+0x14c/0x1c0 [ 354.644959][ T7249] dump_stack+0x1e/0x25 [ 354.645045][ T7249] should_fail_ex+0x7e2/0x8c0 [ 354.645227][ T7249] should_failslab+0x158/0x200 [ 354.645360][ T7249] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 354.645472][ T7249] ? kmsan_get_metadata+0xf1/0x160 [ 354.645600][ T7249] ? __alloc_skb+0x744/0x1190 [ 354.645779][ T7249] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.645899][ T7249] __alloc_skb+0x744/0x1190 [ 354.646001][ T7249] ? __alloc_skb+0x35e/0x1190 [ 354.646096][ T7249] ? netlink_autobind+0x3b0/0x430 [ 354.646240][ T7249] netlink_alloc_large_skb+0xa5/0x290 [ 354.646382][ T7249] netlink_sendmsg+0xae9/0x1250 [ 354.646486][ T7249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.646567][ T7249] ____sys_sendmsg+0xf37/0xfd0 [ 354.646693][ T7249] ___sys_sendmsg+0x271/0x3b0 [ 354.646768][ T7249] ? kmsan_get_metadata+0xf1/0x160 [ 354.646884][ T7249] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.647004][ T7249] ? __rcu_read_unlock+0x6c/0xd0 [ 354.647161][ T7249] ? __fget_files+0x3b4/0x4a0 [ 354.647274][ T7249] ? __fget_files+0x3b9/0x4a0 [ 354.647365][ T7249] ? kmsan_get_metadata+0xf1/0x160 [ 354.647476][ T7249] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.647595][ T7249] __sys_sendmsg+0x1aa/0x300 [ 354.647694][ T7249] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 354.647811][ T7249] ia32_sys_call+0x1e4a/0x4360 [ 354.647895][ T7249] __do_fast_syscall_32+0x17f/0x3f0 [ 354.648042][ T7249] do_fast_syscall_32+0x37/0x80 [ 354.648129][ T7249] do_SYSENTER_32+0x1f/0x30 [ 354.648210][ T7249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.648313][ T7249] RIP: 0023:0xf6feef6c [ 354.648377][ T7249] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 354.648450][ T7249] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 354.648528][ T7249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 354.648585][ T7249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.648635][ T7249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.648683][ T7249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 354.648732][ T7249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.648803][ T7249] [ 355.114048][ T7251] loop1: detected capacity change from 0 to 16 [ 355.193411][ T794] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 355.311441][ T7253] loop5: detected capacity change from 0 to 2048 [ 355.371279][ T794] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.432586][ T7253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.467881][ T794] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 355.509898][ T794] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.556402][ T7253] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 355.590786][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.632638][ T7253] UDF-fs: error (device loop5): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 355.675180][ T7238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 355.836275][ T794] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.024372][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.109213][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.350970][ T7258] FAULT_INJECTION: forcing a failure. [ 356.350970][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 356.489201][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.489310][ T7258] Tainted: [L]=SOFTLOCKUP [ 356.489342][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.489392][ T7258] Call Trace: [ 356.489424][ T7258] [ 356.489454][ T7258] __dump_stack+0x26/0x30 [ 356.489556][ T7258] dump_stack_lvl+0x14c/0x1c0 [ 356.489654][ T7258] dump_stack+0x1e/0x25 [ 356.489738][ T7258] should_fail_ex+0x7e2/0x8c0 [ 356.489849][ T7258] should_failslab+0x158/0x200 [ 356.489932][ T7258] kmem_cache_alloc_node_noprof+0x14c/0x12d0 [ 356.490021][ T7258] ? kmsan_get_metadata+0xf1/0x160 [ 356.490134][ T7258] ? __alloc_skb+0x744/0x1190 [ 356.490244][ T7258] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.490365][ T7258] __alloc_skb+0x744/0x1190 [ 356.490466][ T7258] ? __alloc_skb+0x35e/0x1190 [ 356.490563][ T7258] ? netlink_autobind+0x3b0/0x430 [ 356.490655][ T7258] netlink_alloc_large_skb+0xa5/0x290 [ 356.490772][ T7258] netlink_sendmsg+0xae9/0x1250 [ 356.490880][ T7258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.490967][ T7258] ____sys_sendmsg+0xf37/0xfd0 [ 356.491071][ T7258] ___sys_sendmsg+0x271/0x3b0 [ 356.491145][ T7258] ? kmsan_get_metadata+0xf1/0x160 [ 356.491261][ T7258] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.491381][ T7258] ? __rcu_read_unlock+0x6c/0xd0 [ 356.491485][ T7258] ? __fget_files+0x3b4/0x4a0 [ 356.491570][ T7258] ? __fget_files+0x3b9/0x4a0 [ 356.491657][ T7258] ? kmsan_get_metadata+0xf1/0x160 [ 356.491765][ T7258] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 356.491890][ T7258] __sys_sendmsg+0x1aa/0x300 [ 356.491986][ T7258] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 356.492079][ T7258] ia32_sys_call+0x1e4a/0x4360 [ 356.492157][ T7258] __do_fast_syscall_32+0x17f/0x3f0 [ 356.492255][ T7258] do_fast_syscall_32+0x37/0x80 [ 356.492341][ T7258] do_SYSENTER_32+0x1f/0x30 [ 356.492422][ T7258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.492524][ T7258] RIP: 0023:0xf70cef6c [ 356.492582][ T7258] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 356.492655][ T7258] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 356.492734][ T7258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 356.492793][ T7258] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.492844][ T7258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.492893][ T7258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 356.492942][ T7258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.493013][ T7258] [ 357.054185][ T30] usb 3-1: USB disconnect, device number 15 [ 357.174341][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.462793][ T7263] netlink: 52 bytes leftover after parsing attributes in process `syz.5.305'. [ 357.553800][ T7263] bridge_slave_1: left allmulticast mode [ 357.620841][ T7263] bridge_slave_1: left promiscuous mode [ 357.660077][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.809586][ T7263] bridge_slave_0: left allmulticast mode [ 357.904756][ T7263] bridge_slave_0: left promiscuous mode [ 357.911433][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.890611][ T7278] loop0: detected capacity change from 0 to 2048 [ 358.947464][ T7279] loop1: detected capacity change from 0 to 2048 [ 358.975862][ T7278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.058178][ T7279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.070181][ T7278] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 359.119178][ T7278] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 359.200323][ T7279] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 359.250679][ T7279] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 359.551619][ T7288] loop3: detected capacity change from 0 to 16 [ 360.303515][ T5853] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 360.390999][ T7293] loop2: detected capacity change from 0 to 2048 [ 360.524445][ T7293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.608403][ T5853] usb 6-1: config 0 has no interfaces? [ 360.627197][ T7293] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 360.673804][ T794] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 360.730841][ T7293] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 360.785930][ T5853] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 360.865627][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.882292][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.913409][ T5853] usb 6-1: Product: syz [ 360.923271][ T5853] usb 6-1: Manufacturer: syz [ 360.924488][ T794] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.950218][ T5853] usb 6-1: SerialNumber: syz [ 361.052591][ T5853] usb 6-1: config 0 descriptor?? [ 361.061164][ T794] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 361.127547][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.153363][ T794] usb 2-1: Product: syz [ 361.157820][ T794] usb 2-1: Manufacturer: syz [ 361.162681][ T794] usb 2-1: SerialNumber: syz [ 362.062045][ T794] usb 2-1: config 0 descriptor?? [ 362.344177][ T5853] usb 2-1: USB disconnect, device number 22 [ 362.390508][ T7306] vlan2: entered promiscuous mode [ 362.426900][ T30] usb 6-1: USB disconnect, device number 17 [ 362.487741][ T7306] bond0: entered promiscuous mode [ 362.564473][ T7306] bond_slave_0: entered promiscuous mode [ 362.571306][ T7306] bond_slave_1: entered promiscuous mode [ 363.339898][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 363.535271][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 363.835132][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.434221][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.715773][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.769930][ T30] usb 4-1: SerialNumber: syz [ 364.878269][ T7326] loop1: detected capacity change from 0 to 256 [ 364.878900][ T30] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 365.077565][ T7310] loop3: detected capacity change from 0 to 256 [ 365.182558][ T29] audit: type=1800 audit(2000000020.939:163): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="file2" dev="loop1" ino=1048612 res=0 errno=0 [ 365.240588][ T7326] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 365.323823][ T7326] FAT-fs (loop1): Filesystem has been set read-only [ 365.330826][ T7326] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 365.399447][ T7326] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 365.575539][ T7335] loop0: detected capacity change from 0 to 16 [ 365.640012][ T7332] loop5: detected capacity change from 0 to 2048 [ 365.674152][ T7332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.721020][ T7332] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 365.755469][ T7332] UDF-fs: error (device loop5): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 366.064460][ T7340] loop2: detected capacity change from 0 to 1024 [ 366.279673][ T7340] hfsplus: bad catalog entry type [ 366.367395][ T5853] usb 4-1: USB disconnect, device number 14 [ 366.476324][ T7340] hfsplus: b-tree write err: -5, ino 2 [ 366.536332][ T7340] overlay: filesystem on ./bus not supported [ 367.075405][ T6428] hfsplus: b-tree write err: -5, ino 25 [ 367.124701][ T6428] hfsplus: b-tree write err: -5, ino 4 [ 367.151503][ T7345] loop1: detected capacity change from 0 to 2048 [ 367.170059][ T6428] hfsplus: b-tree write err: -5, ino 2 [ 367.235629][ T6428] hfsplus: b-tree write err: -5, ino 26 [ 367.241559][ T6428] hfsplus: b-tree write err: -5, ino 20 [ 367.391096][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.554641][ T7345] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 367.662905][ T7345] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 369.192292][ T5853] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 369.617598][ T5853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.679843][ T5853] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.750266][ T5853] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 369.819210][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.713447][ T5853] usb 6-1: Product: syz [ 370.717830][ T5853] usb 6-1: Manufacturer: syz [ 370.722592][ T5853] usb 6-1: SerialNumber: syz [ 370.734614][ T5853] usb 6-1: config 0 descriptor?? [ 370.949136][ T794] usb 6-1: USB disconnect, device number 18 [ 371.474055][ T7382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 371.568960][ T7381] tmpfs: Bad value for 'nr_blocks' [ 371.949004][ T7387] 9p: Bad value for 'rfdno' [ 372.170601][ T7388] loop3: detected capacity change from 0 to 2048 [ 372.245235][ T7388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.366493][ T7388] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 372.412557][ T7388] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 372.653287][ T7397] 9p: Bad value for 'rfdno' [ 373.325787][ T7394] loop1: detected capacity change from 0 to 2048 [ 373.510084][ T7394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.633909][ T7394] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 373.685648][ T7394] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 376.435069][ T794] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 376.535995][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 376.668016][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.702566][ T794] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.761487][ T9] usb 4-1: config 0 has no interfaces? [ 376.796281][ T794] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 376.808147][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.839888][ T9] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 376.864585][ T794] usb 3-1: Product: syz [ 376.868947][ T794] usb 3-1: Manufacturer: syz [ 376.882830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.920495][ T794] usb 3-1: SerialNumber: syz [ 376.953419][ T9] usb 4-1: Product: syz [ 376.957792][ T9] usb 4-1: Manufacturer: syz [ 376.962591][ T9] usb 4-1: SerialNumber: syz [ 376.998016][ T794] usb 3-1: config 0 descriptor?? [ 377.056038][ T9] usb 4-1: config 0 descriptor?? [ 377.140713][ T7434] 9p: Bad value for 'rfdno' [ 377.249187][ T9] usb 3-1: USB disconnect, device number 16 [ 377.754420][ T7439] netlink: 52 bytes leftover after parsing attributes in process `syz.0.359'. [ 378.140661][ T7439] bridge_slave_1: left allmulticast mode [ 378.533901][ T7439] bridge_slave_1: left promiscuous mode [ 378.708029][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.790160][ T9] usb 4-1: USB disconnect, device number 15 [ 379.450626][ T7439] bridge_slave_0: left allmulticast mode [ 379.525509][ T7448] 9p: Bad value for 'rfdno' [ 379.557411][ T7439] bridge_slave_0: left promiscuous mode [ 379.766077][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.028795][ T7451] loop2: detected capacity change from 0 to 2048 [ 380.310610][ T7453] loop1: detected capacity change from 0 to 4096 [ 380.375831][ T7451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.388272][ T7453] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 380.551000][ T7453] ntfs3(loop1): ino=0, mi_enum_attr [ 380.773958][ T7453] ntfs3(loop1): ino=0, mi_enum_attr [ 380.779822][ T7453] ntfs3(loop1): Failed to load $MFT (-2). [ 380.816404][ T7455] loop3: detected capacity change from 0 to 2048 [ 380.930761][ T7455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.037943][ T7455] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 381.100317][ T7455] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 382.101938][ T7464] loop2: detected capacity change from 0 to 16 [ 383.888945][ T7481] loop3: detected capacity change from 0 to 16 [ 383.999124][ T5839] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 384.200136][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.254732][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.363635][ T5839] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 384.388258][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.452384][ T7482] loop0: detected capacity change from 0 to 4096 [ 384.469784][ T5839] usb 2-1: Product: syz [ 384.533989][ T5839] usb 2-1: Manufacturer: syz [ 384.556901][ T5839] usb 2-1: SerialNumber: syz [ 384.579334][ T7482] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 384.594504][ T5839] usb 2-1: config 0 descriptor?? [ 384.712825][ T7482] ntfs3(loop0): ino=0, mi_enum_attr [ 384.812144][ T5839] usb 2-1: USB disconnect, device number 23 [ 384.899440][ T7482] ntfs3(loop0): ino=0, mi_enum_attr [ 384.922364][ T7482] ntfs3(loop0): Failed to load $MFT (-2). [ 386.113411][ T5853] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 386.359567][ T7482] loop0: detected capacity change from 0 to 1024 [ 386.428716][ T5853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.487584][ T7482] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.602138][ T7482] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 386.697411][ T7482] EXT4-fs (loop0): orphan cleanup on readonly fs [ 386.765639][ T5853] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 386.784442][ T7502] loop1: detected capacity change from 0 to 16 [ 386.804215][ T7482] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.373: Invalid inode table block 0 in block_group 0 [ 386.822578][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.882202][ T5853] usb 6-1: Product: syz [ 386.918524][ T5853] usb 6-1: Manufacturer: syz [ 386.926099][ T7482] loop0: lost filesystem error report for type 5 error -117 [ 386.943691][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 386.950521][ C1] EXT4-fs (loop0): initial error at time 2000000042: __ext4_get_inode_loc:4782 [ 386.959769][ C1] EXT4-fs (loop0): last error at time 2000000042: __ext4_get_inode_loc:4782 [ 386.974041][ T7482] EXT4-fs (loop0): Remounting filesystem read-only [ 386.992427][ T5853] usb 6-1: SerialNumber: syz [ 387.027040][ T7499] loop3: detected capacity change from 0 to 2048 [ 387.034485][ T7482] Quota error (device loop0): write_blk: dquota write failed [ 387.046893][ T5853] usb 6-1: config 0 descriptor?? [ 387.086548][ T7482] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 387.135013][ T5853] usb 6-1: USB disconnect, device number 19 [ 387.153875][ T7482] EXT4-fs (loop0): 1 truncate cleaned up [ 387.212771][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.214910][ T7499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.367158][ T7499] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 387.446522][ T7499] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 388.385969][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.392588][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.459300][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.812037][ T7521] loop1: detected capacity change from 0 to 16 [ 390.373805][ T7525] loop5: detected capacity change from 0 to 16 [ 390.893665][ T794] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 391.158506][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.220567][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 391.244366][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 391.262726][ T794] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.334224][ T794] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 391.345536][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.388703][ T794] usb 3-1: Product: syz [ 391.488550][ T794] usb 3-1: Manufacturer: syz [ 391.494562][ T794] usb 3-1: SerialNumber: syz [ 391.503861][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 391.548636][ T5839] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 391.567174][ T794] usb 3-1: config 0 descriptor?? [ 391.637314][ T5839] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 391.691769][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.733739][ T5839] usb 2-1: Product: syz [ 391.752291][ T5839] usb 2-1: Manufacturer: syz [ 391.771613][ T5839] usb 2-1: SerialNumber: syz [ 391.815300][ T5839] usb 2-1: config 0 descriptor?? [ 391.834594][ T5839] usb 2-1: bad CDC descriptors [ 391.852023][ T794] usb 3-1: USB disconnect, device number 17 [ 391.859381][ T5839] usb 2-1: unsupported MDLM descriptors [ 392.163524][ T30] usb 2-1: USB disconnect, device number 24 [ 392.429652][ T7544] loop3: detected capacity change from 0 to 2048 [ 392.542557][ T7544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.593903][ T7544] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 392.683620][ T7544] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 394.955467][ T7554] loop1: detected capacity change from 0 to 4096 [ 395.023521][ T7554] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 395.123712][ T7561] loop5: detected capacity change from 0 to 1024 [ 395.123877][ T7554] ntfs3(loop1): ino=0, mi_enum_attr [ 395.235713][ T7554] ntfs3(loop1): ino=0, mi_enum_attr [ 395.251309][ T7561] hfsplus: bad catalog entry type [ 395.265577][ T7554] ntfs3(loop1): Failed to load $MFT (-2). [ 395.308695][ T7566] netlink: 52 bytes leftover after parsing attributes in process `syz.2.402'. [ 395.322693][ T7567] loop3: detected capacity change from 0 to 1024 [ 395.364138][ T7566] bridge_slave_1: left allmulticast mode [ 395.429999][ T7566] bridge_slave_1: left promiscuous mode [ 395.475021][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 395.494261][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 395.505499][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.569640][ T7566] bridge_slave_0: left allmulticast mode [ 395.577322][ T7566] bridge_slave_0: left promiscuous mode [ 395.590905][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.595717][ T7567] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.632976][ T6431] hfsplus: b-tree write err: -5, ino 25 [ 395.639240][ T6431] hfsplus: b-tree write err: -5, ino 4 [ 395.718103][ T6431] hfsplus: b-tree write err: -5, ino 2 [ 395.722927][ T29] audit: type=1800 audit(2000000051.479:164): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 395.744609][ T6431] hfsplus: b-tree write err: -5, ino 20 [ 395.809241][ T7554] loop1: detected capacity change from 0 to 1024 [ 395.831117][ T7567] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 6) [ 395.873266][ T29] audit: type=1800 audit(2000000051.589:165): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 395.932134][ T7554] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.980612][ T7567] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.403: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 395.991863][ T7554] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 396.008579][ T7554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 396.028946][ T7554] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.397: Invalid inode table block 0 in block_group 0 [ 396.112504][ T7571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 396.139381][ T7554] loop1: lost filesystem error report for type 5 error -117 [ 396.143228][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 396.157570][ C0] EXT4-fs (loop1): initial error at time 2000000051: __ext4_get_inode_loc:4782 [ 396.167102][ C0] EXT4-fs (loop1): last error at time 2000000051: __ext4_get_inode_loc:4782 [ 396.177281][ T7554] EXT4-fs (loop1): Remounting filesystem read-only [ 396.184684][ T7554] Quota error (device loop1): write_blk: dquota write failed [ 396.193186][ T7554] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 396.207642][ T7554] EXT4-fs (loop1): 1 truncate cleaned up [ 396.226143][ T7554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.459667][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 396.551792][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 396.732901][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.112298][ T7580] loop2: detected capacity change from 0 to 1024 [ 397.269961][ T7580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 397.347048][ T7580] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.519858][ T29] audit: type=1800 audit(2000000053.279:166): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 397.546560][ T7580] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.407: lblock 0 mapped to illegal pblock 0 (length 6) [ 397.608820][ T7582] loop1: detected capacity change from 0 to 2048 [ 397.632616][ T29] audit: type=1800 audit(2000000053.299:167): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.407" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 397.682840][ T7580] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 397.692572][ T7582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.790661][ T794] libceph: connect (1)[c::]:6789 error -101 [ 397.812039][ T794] libceph: mon0 (1)[c::]:6789 connect error [ 397.870407][ T7595] forcing mempool usage for fserror_report+0x33c/0xbd0 [ 397.875799][ T7582] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 397.897276][ T5853] libceph: connect (1)[b::]:6789 error -101 [ 397.934152][ T5853] libceph: mon0 (1)[b::]:6789 connect error [ 397.963947][ T7582] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 398.126839][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 398.135988][ T7590] ceph: No mds server is up or the cluster is laggy [ 398.136036][ T7592] ceph: No mds server is up or the cluster is laggy [ 398.163381][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 398.204417][ T5853] libceph: connect (1)[b::]:6789 error -101 [ 398.210810][ T5853] libceph: mon0 (1)[b::]:6789 connect error [ 398.278860][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 399.141708][ T7614] 9p: Bad value for 'wfdno' [ 399.593349][ T5853] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 399.937669][ T7610] 9p: Could not find request transport: f [ 400.631853][ T7616] loop1: detected capacity change from 0 to 4096 [ 400.659421][ T7623] loop3: detected capacity change from 0 to 256 [ 400.747972][ T5853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.835294][ T29] audit: type=1804 audit(2000000056.579:168): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.416" name="/newroot/94/file0/file0" dev="loop3" ino=1048613 res=1 errno=0 [ 400.878939][ T30] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 400.947403][ T5853] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 400.988111][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.034194][ T5853] usb 6-1: Product: syz [ 401.049857][ T5853] usb 6-1: Manufacturer: syz [ 401.081530][ T5853] usb 6-1: SerialNumber: syz [ 401.166601][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 401.180299][ T7628] netlink: 52 bytes leftover after parsing attributes in process `syz.0.417'. [ 401.206021][ T5853] usb 6-1: config 0 descriptor?? [ 401.225794][ T29] audit: type=1804 audit(2000000056.619:169): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.416" name="/newroot/94/file0/file0" dev="loop3" ino=1048613 res=1 errno=0 [ 401.268677][ T30] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 401.332333][ T5853] usb 6-1: can't set config #0, error -71 [ 401.383429][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.392066][ T30] usb 3-1: Product: syz [ 401.409737][ T5853] usb 6-1: USB disconnect, device number 20 [ 401.451534][ T7610] ntfs3(loop1): failed to convert "0080" to maciceland [ 401.496901][ T30] usb 3-1: Manufacturer: syz [ 401.574519][ T30] usb 3-1: SerialNumber: syz [ 401.642600][ T7610] ntfs3(loop1): failed to convert name for inode 1e. [ 401.713905][ T30] usb 3-1: config 0 descriptor?? [ 401.751263][ T7610] ntfs3(loop1): ino=1f, mi_enum_attr [ 401.817808][ T7610] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 401.857661][ T30] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 402.008116][ T30] usb 3-1: USB disconnect, device number 18 [ 402.769533][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 402.807674][ T7633] loop3: detected capacity change from 0 to 4096 [ 402.933461][ T7633] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 403.086579][ T7633] ntfs3(loop3): ino=0, mi_enum_attr [ 403.233940][ T7633] ntfs3(loop3): ino=0, mi_enum_attr [ 403.278536][ T7633] ntfs3(loop3): Failed to load $MFT (-2). [ 403.532044][ T7644] loop0: detected capacity change from 0 to 2048 [ 403.611699][ T7644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.634522][ T7633] loop3: detected capacity change from 0 to 1024 [ 403.714416][ T7633] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.729695][ T7644] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 403.759696][ T7633] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 403.904123][ T7644] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 403.907284][ T7646] loop2: detected capacity change from 0 to 1024 [ 403.922933][ T7633] EXT4-fs (loop3): orphan cleanup on readonly fs [ 404.021488][ T7633] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.418: Invalid inode table block 0 in block_group 0 [ 404.084453][ T7633] loop3: lost filesystem error report for type 5 error -117 [ 404.087010][ T7633] EXT4-fs (loop3): Remounting filesystem read-only [ 404.095031][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 404.095122][ C0] EXT4-fs (loop3): initial error at time 2000000059: __ext4_get_inode_loc:4782 [ 404.095239][ C0] EXT4-fs (loop3): last error at time 2000000059: __ext4_get_inode_loc:4782 [ 404.255906][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 404.353484][ T7633] Quota error (device loop3): write_blk: dquota write failed [ 404.361379][ T7633] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 404.379125][ T7646] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.454586][ T7633] EXT4-fs (loop3): 1 truncate cleaned up [ 404.510105][ T7633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.573242][ T29] audit: type=1800 audit(2000000060.319:170): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 404.689563][ T29] audit: type=1800 audit(2000000060.319:171): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 404.886506][ T5839] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 405.093585][ T794] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 405.110669][ T7660] loop0: detected capacity change from 0 to 256 [ 405.113389][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 405.215762][ T5839] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 405.262263][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.301444][ T5839] usb 3-1: Product: syz [ 405.317406][ T5839] usb 3-1: Manufacturer: syz [ 405.322201][ T5839] usb 3-1: SerialNumber: syz [ 405.348060][ T5839] usb 3-1: config 0 descriptor?? [ 405.425713][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.443922][ T5839] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 405.552653][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 405.598597][ T7646] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.425: lblock 0 mapped to illegal pblock 0 (length 6) [ 405.646004][ T7646] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 405.729584][ T7660] FAT-fs (loop0): Directory bread(block 64) failed [ 405.729662][ T794] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 405.775284][ T7660] FAT-fs (loop0): Directory bread(block 65) failed [ 405.817561][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.830960][ T7660] FAT-fs (loop0): Directory bread(block 66) failed [ 405.854713][ T30] usb 3-1: USB disconnect, device number 19 [ 405.863440][ T794] usb 2-1: Product: syz [ 405.867799][ T794] usb 2-1: Manufacturer: syz [ 405.875933][ T7660] FAT-fs (loop0): Directory bread(block 67) failed [ 405.903338][ T794] usb 2-1: SerialNumber: syz [ 405.955033][ T794] usb 2-1: config 0 descriptor?? [ 405.960874][ T7660] FAT-fs (loop0): Directory bread(block 68) failed [ 406.018759][ T7664] loop5: detected capacity change from 0 to 16 [ 406.027105][ T7660] FAT-fs (loop0): Directory bread(block 69) failed [ 406.027518][ T7660] FAT-fs (loop0): Directory bread(block 70) failed [ 406.027629][ T7660] FAT-fs (loop0): Directory bread(block 71) failed [ 406.027856][ T7660] FAT-fs (loop0): Directory bread(block 72) failed [ 406.027956][ T7660] FAT-fs (loop0): Directory bread(block 73) failed [ 406.066461][ T794] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 406.533930][ T7655] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 408.036653][ T30] usb 2-1: USB disconnect, device number 25 [ 408.117588][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.453764][ T7674] loop0: detected capacity change from 0 to 1024 [ 408.699356][ T7674] hfsplus: bad catalog entry type [ 409.026564][ T7683] 9p: Bad value for 'wfdno' [ 409.104977][ T7687] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 409.236968][ T7677] 9p: Could not find request transport: f [ 409.326381][ T82] hfsplus: b-tree write err: -5, ino 25 [ 409.383720][ T82] hfsplus: b-tree write err: -5, ino 4 [ 409.412877][ T82] hfsplus: b-tree write err: -5, ino 2 [ 409.436167][ T82] hfsplus: b-tree write err: -5, ino 20 [ 409.989733][ T7683] loop5: detected capacity change from 0 to 4096 [ 410.262276][ T7693] loop1: detected capacity change from 0 to 2048 [ 410.305865][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 410.406858][ T7693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.560770][ T7677] ntfs3(loop5): failed to convert "0080" to maciceland [ 410.563263][ T7693] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 410.626770][ T7677] ntfs3(loop5): failed to convert name for inode 1e. [ 410.652752][ T7693] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 410.743423][ T7677] ntfs3(loop5): ino=1f, mi_enum_attr [ 410.769779][ T7677] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 411.227872][ T7696] loop2: detected capacity change from 0 to 4096 [ 411.347686][ T7696] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 411.437295][ T7696] ntfs3(loop2): ino=0, mi_enum_attr [ 411.538425][ T7696] ntfs3(loop2): ino=0, mi_enum_attr [ 411.560831][ T7696] ntfs3(loop2): Failed to load $MFT (-2). [ 411.874791][ T7703] loop3: detected capacity change from 0 to 1024 [ 411.992751][ T7703] hfsplus: bad catalog entry type [ 412.090361][ T7707] FAULT_INJECTION: forcing a failure. [ 412.090361][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.164213][ T7707] CPU: 0 UID: 0 PID: 7707 Comm: syz.5.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.164386][ T7707] Tainted: [L]=SOFTLOCKUP [ 412.164434][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.164511][ T7707] Call Trace: [ 412.164557][ T7707] [ 412.164603][ T7707] __dump_stack+0x26/0x30 [ 412.164757][ T7707] dump_stack_lvl+0x14c/0x1c0 [ 412.164908][ T7707] dump_stack+0x1e/0x25 [ 412.165045][ T7707] should_fail_ex+0x7e2/0x8c0 [ 412.165209][ T7707] should_fail+0x2a/0x40 [ 412.165341][ T7707] should_fail_usercopy+0x2e/0x40 [ 412.165488][ T7707] _copy_to_user+0x35/0x120 [ 412.165732][ T7707] simple_read_from_buffer+0x1b2/0x340 [ 412.165955][ T7707] proc_fail_nth_read+0x1e0/0x2d0 [ 412.166160][ T7707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.166300][ T7707] vfs_read+0x27c/0xf90 [ 412.166487][ T7707] ? stack_depot_save_flags+0x35/0x790 [ 412.166630][ T7707] ? kmsan_get_metadata+0xf1/0x160 [ 412.166803][ T7707] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 412.166974][ T7707] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 412.167149][ T7707] ksys_read+0x1d9/0x470 [ 412.167320][ T7707] __ia32_sys_read+0x9a/0xf0 [ 412.167476][ T7707] ia32_sys_call+0x1914/0x4360 [ 412.167592][ T7707] do_int80_emulation+0x15a/0x330 [ 412.167725][ T7707] ? clear_bhb_loop+0x50/0xa0 [ 412.167852][ T7707] ? clear_bhb_loop+0x50/0xa0 [ 412.167985][ T7707] asm_int80_emulation+0x1f/0x30 [ 412.168109][ T7707] RIP: 0023:0xf7125cab [ 412.168198][ T7707] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 412.168311][ T7707] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 412.168433][ T7707] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 412.168521][ T7707] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 412.168595][ T7707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.168673][ T7707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 412.168751][ T7707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.168860][ T7707] [ 412.522115][ T6427] hfsplus: b-tree write err: -5, ino 25 [ 412.529080][ T6427] hfsplus: b-tree write err: -5, ino 4 [ 412.535074][ T6427] hfsplus: b-tree write err: -5, ino 2 [ 412.541149][ T6427] hfsplus: b-tree write err: -5, ino 20 [ 413.258033][ T7718] loop3: detected capacity change from 0 to 1024 [ 413.359714][ T7718] hfsplus: bad catalog entry type [ 413.816739][ T6427] hfsplus: b-tree write err: -5, ino 25 [ 413.822698][ T6427] hfsplus: b-tree write err: -5, ino 4 [ 413.849967][ T6427] hfsplus: b-tree write err: -5, ino 2 [ 413.915357][ T794] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 414.052392][ T7723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.448'. [ 414.080192][ T7723] bridge_slave_1: left allmulticast mode [ 414.128962][ T7723] bridge_slave_1: left promiscuous mode [ 414.157842][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 414.210502][ T794] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 414.230586][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.294935][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.337657][ T7723] bridge_slave_0: left allmulticast mode [ 414.341761][ T794] usb 3-1: Product: syz [ 414.344660][ T7723] bridge_slave_0: left promiscuous mode [ 414.363278][ T794] usb 3-1: Manufacturer: syz [ 414.368119][ T794] usb 3-1: SerialNumber: syz [ 414.372768][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.477102][ T794] usb 3-1: config 0 descriptor?? [ 414.561898][ T794] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 414.616423][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 415.386563][ T7734] 9p: Bad value for 'wfdno' [ 415.819651][ T7732] 9p: Could not find request transport: f [ 416.151027][ T7737] loop1: detected capacity change from 0 to 2048 [ 416.234019][ T794] usb 3-1: USB disconnect, device number 20 [ 416.239034][ T7734] loop0: detected capacity change from 0 to 4096 [ 416.346635][ T7737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.454066][ T7737] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 416.519263][ T7737] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 416.706512][ T7741] loop3: detected capacity change from 0 to 4096 [ 416.764296][ T7741] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 416.877978][ T7741] ntfs3(loop3): ino=0, mi_enum_attr [ 416.907937][ T7732] ntfs3(loop0): failed to convert "0080" to maciceland [ 416.952507][ T7732] ntfs3(loop0): failed to convert name for inode 1e. [ 416.969155][ T7741] ntfs3(loop3): ino=0, mi_enum_attr [ 416.995663][ T7741] ntfs3(loop3): Failed to load $MFT (-2). [ 417.013408][ T7732] ntfs3(loop0): ino=1f, mi_enum_attr [ 417.022810][ T7732] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 417.780221][ T7741] loop3: detected capacity change from 0 to 1024 [ 417.882975][ T7741] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 417.962989][ T7741] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 418.012245][ T7741] EXT4-fs (loop3): orphan cleanup on readonly fs [ 418.104592][ T7741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.455: Invalid inode table block 0 in block_group 0 [ 418.128719][ T7741] loop3: lost filesystem error report for type 5 error -117 [ 418.129515][ T7741] EXT4-fs (loop3): Remounting filesystem read-only [ 418.137603][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 418.137692][ C0] EXT4-fs (loop3): initial error at time 2000000073: __ext4_get_inode_loc:4782 [ 418.137810][ C0] EXT4-fs (loop3): last error at time 2000000073: __ext4_get_inode_loc:4782 [ 418.176702][ T7754] loop2: detected capacity change from 0 to 1024 [ 418.237126][ T7741] Quota error (device loop3): write_blk: dquota write failed [ 418.368103][ T7741] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 418.512394][ T7741] EXT4-fs (loop3): 1 truncate cleaned up [ 418.711063][ T7741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.201469][ T7754] hfsplus: bad catalog entry type [ 419.795556][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.068930][ T7759] loop5: detected capacity change from 0 to 1024 [ 420.370676][ T53] hfsplus: b-tree write err: -5, ino 25 [ 420.391508][ T7759] hfsplus: bad catalog entry type [ 420.423702][ T53] hfsplus: b-tree write err: -5, ino 4 [ 420.466380][ T53] hfsplus: b-tree write err: -5, ino 2 [ 420.528141][ T7763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.463'. [ 420.605235][ T7763] bridge_slave_1: left allmulticast mode [ 420.684521][ T7763] bridge_slave_1: left promiscuous mode [ 420.691579][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.724375][ T7763] bridge_slave_0: left allmulticast mode [ 420.800834][ T7763] bridge_slave_0: left promiscuous mode [ 420.864310][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.200843][ T264] hfsplus: b-tree write err: -5, ino 25 [ 421.235040][ T264] hfsplus: b-tree write err: -5, ino 4 [ 421.240836][ T264] hfsplus: b-tree write err: -5, ino 2 [ 421.377967][ T264] hfsplus: b-tree write err: -5, ino 20 [ 421.766365][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 423.186327][ T7786] loop1: detected capacity change from 0 to 2048 [ 423.468935][ T7786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.629845][ T7786] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 423.677373][ T7792] 9p: Bad value for 'wfdno' [ 423.707294][ T7786] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 424.117855][ T7791] 9p: Could not find request transport: f [ 424.780698][ T7792] loop2: detected capacity change from 0 to 4096 [ 426.028055][ T7791] ntfs3(loop2): failed to convert "0080" to maciceland [ 426.121698][ T7791] ntfs3(loop2): failed to convert name for inode 1e. [ 426.267952][ T7791] ntfs3(loop2): ino=1f, mi_enum_attr [ 426.268884][ T794] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 426.308396][ T7791] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 426.539452][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 426.629449][ T794] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 426.646887][ T7808] loop0: detected capacity change from 0 to 1024 [ 426.655457][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.686851][ T794] usb 6-1: Product: syz [ 426.725430][ T794] usb 6-1: Manufacturer: syz [ 426.742712][ T794] usb 6-1: SerialNumber: syz [ 426.868973][ T794] usb 6-1: config 0 descriptor?? [ 426.939262][ T7808] hfsplus: bad catalog entry type [ 426.962346][ T794] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 427.105414][ T30] usb 6-1: USB disconnect, device number 21 [ 427.327807][ T794] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 427.481183][ T6434] hfsplus: b-tree write err: -5, ino 25 [ 427.543548][ T6434] hfsplus: b-tree write err: -5, ino 4 [ 427.555730][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 427.587737][ T6434] hfsplus: b-tree write err: -5, ino 2 [ 427.655367][ T7815] loop2: detected capacity change from 0 to 256 [ 427.780770][ T794] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 427.846867][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.913319][ T794] usb 2-1: Product: syz [ 427.917949][ T794] usb 2-1: Manufacturer: syz [ 427.922796][ T794] usb 2-1: SerialNumber: syz [ 428.032257][ T794] usb 2-1: config 0 descriptor?? [ 428.102442][ T794] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 428.517950][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 428.767217][ T7825] netlink: 52 bytes leftover after parsing attributes in process `syz.5.480'. [ 429.379390][ T794] usb 2-1: USB disconnect, device number 26 [ 430.744843][ T7835] 9p: Bad value for 'rfdno' [ 431.389122][ T7840] loop1: detected capacity change from 0 to 256 [ 431.586821][ T7846] 9p: Bad value for 'wfdno' [ 432.266685][ T7843] 9p: Could not find request transport: f [ 433.064369][ T7846] loop0: detected capacity change from 0 to 4096 [ 433.155203][ T7855] 9p: Bad value for 'wfdno' [ 433.336881][ T7852] 9p: Could not find request transport: f [ 433.792089][ T7843] ntfs3(loop0): failed to convert "0080" to maciceland [ 433.820683][ T7860] loop2: detected capacity change from 0 to 1024 [ 433.900309][ T7843] ntfs3(loop0): failed to convert name for inode 1e. [ 434.004073][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 434.158046][ T7843] ntfs3(loop0): ino=1f, mi_enum_attr [ 434.237058][ T7860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 434.270898][ T7855] loop5: detected capacity change from 0 to 4096 [ 434.334275][ T7843] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 434.363226][ T7860] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.542750][ T29] audit: type=1800 audit(2000000090.299:172): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 434.614905][ T29] audit: type=1800 audit(2000000090.339:173): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 434.869162][ T7852] ntfs3(loop5): failed to convert "0080" to maciceland [ 434.890238][ T7852] ntfs3(loop5): failed to convert name for inode 1e. [ 434.897235][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 435.064787][ T7852] ntfs3(loop5): ino=1f, mi_enum_attr [ 435.083499][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 435.104268][ T7852] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 435.200493][ T30] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 435.224355][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.235066][ T30] usb 3-1: Product: syz [ 435.239434][ T30] usb 3-1: Manufacturer: syz [ 435.273465][ T30] usb 3-1: SerialNumber: syz [ 435.291966][ T30] usb 3-1: config 0 descriptor?? [ 435.399011][ T30] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 435.524571][ T7874] loop3: detected capacity change from 0 to 256 [ 435.596277][ T7860] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.492: lblock 0 mapped to illegal pblock 0 (length 6) [ 435.725370][ T7883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.496'. [ 435.763368][ T7860] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.492: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 435.864974][ T29] audit: type=1800 audit(2000000091.629:174): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.495" name="file2" dev="loop3" ino=1048619 res=0 errno=0 [ 435.909297][ T7885] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 435.976137][ T794] usb 3-1: USB disconnect, device number 21 [ 436.015201][ T7885] FAT-fs (loop3): Filesystem has been set read-only [ 436.072344][ T7885] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 436.138288][ T7885] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 436.881897][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.429637][ T7896] loop0: detected capacity change from 0 to 1024 [ 437.697111][ T7896] hfsplus: bad catalog entry type [ 437.787872][ T7898] loop1: detected capacity change from 0 to 256 [ 438.027368][ T29] audit: type=1800 audit(2000000093.779:175): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file2" dev="loop1" ino=1048620 res=0 errno=0 [ 438.070986][ T7909] 9p: Bad value for 'wfdno' [ 438.143475][ T7908] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 438.183700][ T7908] FAT-fs (loop1): Filesystem has been set read-only [ 438.190698][ T7908] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 438.207558][ T264] hfsplus: b-tree write err: -5, ino 25 [ 438.231063][ T264] hfsplus: b-tree write err: -5, ino 4 [ 438.267056][ T264] hfsplus: b-tree write err: -5, ino 2 [ 438.272950][ T264] hfsplus: b-tree write err: -5, ino 20 [ 438.298649][ T7908] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 438.422851][ T7913] loop5: detected capacity change from 0 to 256 [ 438.634380][ T7905] 9p: Could not find request transport: f [ 438.774487][ T29] audit: type=1800 audit(2000000094.529:176): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.503" name="file2" dev="loop5" ino=1048621 res=0 errno=0 [ 439.076465][ T7909] loop3: detected capacity change from 0 to 4096 [ 439.385962][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 439.583367][ T7923] loop2: detected capacity change from 0 to 256 [ 440.152829][ T7905] ntfs3(loop3): failed to convert "0080" to maciceland [ 440.201560][ T7905] ntfs3(loop3): failed to convert name for inode 1e. [ 440.255729][ T7905] ntfs3(loop3): ino=1f, mi_enum_attr [ 440.261262][ T7905] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 441.750710][ T7932] loop0: detected capacity change from 0 to 1024 [ 442.198976][ T7932] hfsplus: bad catalog entry type [ 442.419615][ T7943] netlink: 52 bytes leftover after parsing attributes in process `syz.3.511'. [ 442.856313][ T1080] hfsplus: b-tree write err: -5, ino 25 [ 442.862448][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 442.989490][ T1080] hfsplus: b-tree write err: -5, ino 2 [ 443.000601][ T1080] hfsplus: b-tree write err: -5, ino 20 [ 443.327818][ T7948] loop1: detected capacity change from 0 to 2048 [ 443.531455][ T7948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.651896][ T7948] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 443.741941][ T7948] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 443.776617][ T7953] loop0: detected capacity change from 0 to 1024 [ 443.924122][ T7961] loop3: detected capacity change from 0 to 16 [ 443.980570][ T7953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 444.007018][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 444.155267][ T7953] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.585991][ T29] audit: type=1800 audit(2000000100.329:177): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.517" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 444.872011][ T29] audit: type=1800 audit(2000000100.419:178): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.517" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 445.393561][ T7967] loop1: detected capacity change from 0 to 256 [ 445.482402][ T7971] loop2: detected capacity change from 0 to 256 [ 445.646111][ T29] audit: type=1800 audit(2000000101.409:179): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.521" name="file2" dev="loop1" ino=1048623 res=0 errno=0 [ 445.689418][ T7967] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 445.708178][ T29] audit: type=1800 audit(2000000101.469:180): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.522" name="file2" dev="loop2" ino=1048624 res=0 errno=0 [ 445.745483][ T7967] FAT-fs (loop1): Filesystem has been set read-only [ 445.769487][ T7971] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 445.783650][ T7967] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 445.794502][ T7971] FAT-fs (loop2): Filesystem has been set read-only [ 445.801438][ T7971] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 445.812046][ T7967] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 445.833428][ T7971] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 446.890246][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.158457][ T7992] netlink: 52 bytes leftover after parsing attributes in process `syz.2.528'. [ 447.223287][ T794] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.404735][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.474664][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.537193][ T794] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 447.819223][ T7997] loop3: detected capacity change from 0 to 2048 [ 448.257771][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.332873][ T7997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.370957][ T794] usb 2-1: config 0 descriptor?? [ 448.482314][ T7997] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 448.564565][ T7997] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 448.839830][ T794] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 448.898692][ T794] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 449.023416][ T794] hid-led 0003:1D34:000A.0003: unknown main item tag 0x0 [ 449.089502][ T794] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 449.126657][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 449.269224][ T794] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 449.593393][ T794] usb 2-1: USB disconnect, device number 27 [ 449.760338][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.768577][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.126994][ T8009] fido_id[8009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 451.405171][ T8019] loop5: detected capacity change from 0 to 16 [ 451.632817][ T8021] loop1: detected capacity change from 0 to 256 [ 451.866115][ T29] audit: type=1800 audit(2000000107.629:181): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file2" dev="loop1" ino=1048625 res=0 errno=0 [ 452.250537][ T8033] loop2: detected capacity change from 0 to 1024 [ 452.564186][ T8033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.648591][ T8033] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.793689][ T29] audit: type=1800 audit(2000000108.549:182): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.539" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 452.992345][ T29] audit: type=1800 audit(2000000108.609:183): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.539" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 453.133377][ T794] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 453.362192][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 453.416391][ T8046] loop1: detected capacity change from 0 to 256 [ 453.454289][ T794] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 453.489565][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.519554][ T794] usb 3-1: Product: syz [ 453.530672][ T794] usb 3-1: Manufacturer: syz [ 453.563527][ T794] usb 3-1: SerialNumber: syz [ 453.602966][ T794] usb 3-1: config 0 descriptor?? [ 453.681829][ T794] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 453.888082][ T8033] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.539: lblock 0 mapped to illegal pblock 0 (length 6) [ 453.976069][ T8033] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.539: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 454.114234][ T794] usb 3-1: USB disconnect, device number 22 [ 454.178846][ T8050] netlink: 52 bytes leftover after parsing attributes in process `syz.5.543'. [ 454.718551][ T8041] loop3: detected capacity change from 0 to 512 [ 454.810966][ T8041] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 454.841550][ T8041] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.540: invalid indirect mapped block 256 (level 1) [ 454.937880][ T8054] loop1: detected capacity change from 0 to 2048 [ 454.986003][ T8041] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 454.987149][ T8041] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.540: invalid indirect mapped block 2683928664 (level 1) [ 454.996741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 454.996839][ C1] EXT4-fs (loop3): initial error at time 2000000110: ext4_free_branches:1023: inode 13 [ 454.996993][ C1] EXT4-fs (loop3): last error at time 2000000110: ext4_free_branches:1023: inode 13 [ 455.067772][ T8041] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 455.071169][ T8041] EXT4-fs (loop3): 1 truncate cleaned up [ 455.122457][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 455.135215][ T8041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.268723][ T8054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.448085][ T8054] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 455.523895][ T8054] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 455.529295][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'. [ 455.573612][ T8039] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 455.582782][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'. [ 455.657660][ T8039] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 455.720960][ T8061] netlink: 232 bytes leftover after parsing attributes in process `syz.5.546'. [ 455.818115][ T8061] netlink: 232 bytes leftover after parsing attributes in process `syz.5.546'. [ 456.078272][ T8063] loop5: detected capacity change from 0 to 1024 [ 457.197450][ T8071] netlink: 100 bytes leftover after parsing attributes in process `syz.2.550'. [ 457.245677][ T8063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.287831][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 457.338267][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'. [ 457.399811][ T8058] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 457.425459][ T8058] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 457.530268][ T8058] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 457.612077][ T8058] EXT4-fs (loop5): This should not happen!! Data will be lost [ 457.612077][ T8058] [ 457.655885][ T8058] EXT4-fs (loop5): Total free blocks count 0 [ 457.710777][ T8058] EXT4-fs (loop5): Free/Dirty block details [ 457.746396][ T8058] EXT4-fs (loop5): free_blocks=20480 [ 457.752429][ T8058] EXT4-fs (loop5): dirty_blocks=80 [ 457.773185][ T8058] EXT4-fs (loop5): Block reservation details [ 457.779569][ T8058] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 457.796570][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.104037][ T6428] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 459.196474][ T8083] loop3: detected capacity change from 0 to 256 [ 459.358324][ T29] audit: type=1800 audit(2000000115.119:184): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.553" name="file2" dev="loop3" ino=1048627 res=0 errno=0 [ 459.404402][ T8083] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 459.437242][ T8087] loop1: detected capacity change from 0 to 2048 [ 459.443658][ T8083] FAT-fs (loop3): Filesystem has been set read-only [ 459.450570][ T8083] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 459.515854][ T8083] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 459.563606][ T8087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.596944][ T8089] loop5: detected capacity change from 0 to 256 [ 459.680099][ T8084] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 459.734062][ T8084] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 459.864451][ T8094] loop2: detected capacity change from 0 to 16 [ 461.646725][ T8105] netlink: 52 bytes leftover after parsing attributes in process `syz.5.558'. [ 462.156787][ T8113] loop0: detected capacity change from 0 to 1024 [ 462.403611][ T8113] hfsplus: bad catalog entry type [ 462.526936][ T8113] hfsplus: b-tree write err: -5, ino 2 [ 462.577860][ T8113] overlay: filesystem on ./bus not supported [ 462.664390][ T8118] netlink: 100 bytes leftover after parsing attributes in process `syz.2.562'. [ 462.745358][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 462.790019][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.562'. [ 462.824282][ T794] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 463.207571][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 463.628699][ T6432] hfsplus: b-tree write err: -5, ino 25 [ 463.642731][ T6432] hfsplus: b-tree write err: -5, ino 4 [ 463.687350][ T794] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 463.751297][ T6432] hfsplus: b-tree write err: -5, ino 2 [ 463.769060][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.785002][ T6432] hfsplus: b-tree write err: -5, ino 26 [ 463.812725][ T6432] hfsplus: b-tree write err: -5, ino 20 [ 463.821512][ T794] usb 2-1: Product: syz [ 463.885273][ T794] usb 2-1: Manufacturer: syz [ 463.931323][ T794] usb 2-1: SerialNumber: syz [ 463.952164][ T794] usb 2-1: config 0 descriptor?? [ 464.019856][ T794] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 465.243611][ T8136] 9p: Bad value for 'wfdno' [ 465.349647][ T8130] 9p: Could not find request transport: f [ 465.568616][ T794] usb 2-1: USB disconnect, device number 28 [ 465.995650][ T8137] 9p: Bad value for 'rfdno' [ 466.746673][ T8141] loop2: detected capacity change from 0 to 256 [ 466.942203][ T8146] loop5: detected capacity change from 0 to 256 [ 467.075467][ T29] audit: type=1800 audit(2000000122.839:185): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file2" dev="loop5" ino=1048630 res=0 errno=0 [ 467.095067][ T8130] loop0: detected capacity change from 0 to 4096 [ 467.106773][ T8143] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 467.106900][ T8143] FAT-fs (loop5): Filesystem has been set read-only [ 467.107103][ T8143] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 467.107231][ T8143] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 467.360190][ T8150] loop3: detected capacity change from 0 to 1024 [ 467.472905][ T8130] ntfs3(loop0): Failed to read $UpCase (-4). [ 467.492518][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.627179][ T8150] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.731007][ T29] audit: type=1800 audit(2000000123.489:186): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.572" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 467.812619][ T29] audit: type=1800 audit(2000000123.569:187): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.572" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 468.093686][ T794] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 468.290935][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 468.336497][ T794] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 468.382712][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.414387][ T8160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.574'. [ 468.449383][ T794] usb 4-1: Product: syz [ 468.506255][ T794] usb 4-1: Manufacturer: syz [ 468.540542][ T794] usb 4-1: SerialNumber: syz [ 468.599837][ T794] usb 4-1: config 0 descriptor?? [ 468.787784][ T794] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 468.871835][ T8165] loop0: detected capacity change from 0 to 16 [ 468.954543][ T8150] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.572: lblock 0 mapped to illegal pblock 0 (length 6) [ 469.021933][ T8150] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.572: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 469.097331][ T8168] netlink: 100 bytes leftover after parsing attributes in process `syz.1.576'. [ 469.204519][ T30] usb 4-1: USB disconnect, device number 16 [ 469.233626][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 469.242761][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'. [ 470.093385][ T794] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 470.192381][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 470.358707][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 470.544654][ T794] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 470.701187][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.857107][ T794] usb 6-1: Product: syz [ 470.939829][ T794] usb 6-1: Manufacturer: syz [ 471.018378][ T8179] 9p: Bad value for 'rfdno' [ 471.068920][ T794] usb 6-1: SerialNumber: syz [ 471.375007][ T794] usb 6-1: config 0 descriptor?? [ 471.544591][ T794] usb 6-1: can't set config #0, error -71 [ 472.191496][ T794] usb 6-1: USB disconnect, device number 22 [ 472.318802][ T8196] loop5: detected capacity change from 0 to 256 [ 472.984016][ T794] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 473.224017][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 473.332786][ T794] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 473.361317][ T8204] loop0: detected capacity change from 0 to 256 [ 473.369219][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.369349][ T794] usb 3-1: Product: syz [ 473.369444][ T794] usb 3-1: Manufacturer: syz [ 473.369537][ T794] usb 3-1: SerialNumber: syz [ 473.399731][ T794] usb 3-1: config 0 descriptor?? [ 473.535531][ T794] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 473.563631][ T8213] netlink: 100 bytes leftover after parsing attributes in process `syz.3.588'. [ 473.672796][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 473.683941][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 473.850016][ T8216] netlink: 52 bytes leftover after parsing attributes in process `syz.5.587'. [ 473.864284][ T29] audit: type=1800 audit(2000000129.629:188): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.585" name="file2" dev="loop0" ino=1048632 res=0 errno=0 [ 473.899198][ T8204] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 473.948711][ T8204] FAT-fs (loop0): Filesystem has been set read-only [ 473.975627][ T8204] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 474.183634][ T8204] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 474.769078][ T30] usb 3-1: USB disconnect, device number 23 [ 475.263586][ T794] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 475.489424][ T8224] loop5: detected capacity change from 0 to 1024 [ 475.558749][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 475.620119][ T8224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 475.693797][ T794] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 475.876237][ T8224] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.254904][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.730562][ T794] usb 2-1: Product: syz [ 476.735482][ T794] usb 2-1: Manufacturer: syz [ 476.740438][ T794] usb 2-1: SerialNumber: syz [ 476.757881][ T794] usb 2-1: config 0 descriptor?? [ 476.775081][ T794] usb 2-1: can't set config #0, error -71 [ 476.843290][ T29] audit: type=1800 audit(2000000132.529:189): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.590" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 476.922958][ T794] usb 2-1: USB disconnect, device number 29 [ 477.033287][ T29] audit: type=1800 audit(2000000132.539:190): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.590" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 477.088528][ T5839] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 477.293345][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 477.406599][ T5839] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 477.443179][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.451404][ T5839] usb 6-1: Product: syz [ 477.523725][ T5839] usb 6-1: Manufacturer: syz [ 477.528526][ T5839] usb 6-1: SerialNumber: syz [ 477.629875][ T5839] usb 6-1: config 0 descriptor?? [ 478.146193][ T8246] 9p: Bad value for 'rfdno' [ 478.497264][ T5839] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 478.518796][ T8233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 478.721111][ T5853] usb 6-1: USB disconnect, device number 23 [ 478.862143][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 478.873481][ T8253] loop2: detected capacity change from 0 to 256 [ 479.707156][ T8267] netlink: 52 bytes leftover after parsing attributes in process `syz.5.600'. [ 480.199339][ T8271] 9p: Bad value for 'wfdno' [ 480.646666][ T5853] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 480.649201][ T8270] 9p: Could not find request transport: f [ 480.971990][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.181107][ T5853] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 481.255497][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.305720][ T5853] usb 4-1: Product: syz [ 481.321242][ T5853] usb 4-1: Manufacturer: syz [ 481.348211][ T5853] usb 4-1: SerialNumber: syz [ 481.427845][ T5853] usb 4-1: config 0 descriptor?? [ 481.588107][ T8275] loop2: detected capacity change from 0 to 4096 [ 482.468687][ T8288] 9p: Bad value for 'wfdno' [ 482.777824][ T5853] usb 4-1: USB disconnect, device number 17 [ 482.852328][ T8275] ntfs3(loop2): Failed to read $UpCase (-4). [ 483.331806][ T8294] 9p: Bad value for 'rfdno' [ 484.197982][ T8298] loop5: detected capacity change from 0 to 4096 [ 484.311604][ T8298] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 484.429384][ T8298] ntfs3(loop5): ino=0, mi_enum_attr [ 484.600405][ T8298] ntfs3(loop5): ino=0, mi_enum_attr [ 484.651976][ T8298] ntfs3(loop5): Failed to load $MFT (-2). [ 485.933697][ T8298] loop5: detected capacity change from 0 to 1024 [ 486.043662][ T8298] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 486.183522][ T8298] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 486.191946][ T8298] EXT4-fs (loop5): orphan cleanup on readonly fs [ 486.332490][ T8298] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.609: Invalid inode table block 0 in block_group 0 [ 486.388833][ T8298] loop5: lost filesystem error report for type 5 error -117 [ 486.389557][ T8298] EXT4-fs (loop5): Remounting filesystem read-only [ 486.397255][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 486.397342][ C0] EXT4-fs (loop5): initial error at time 2000000142: __ext4_get_inode_loc:4782 [ 486.397459][ C0] EXT4-fs (loop5): last error at time 2000000142: __ext4_get_inode_loc:4782 [ 486.576089][ T8298] Quota error (device loop5): write_blk: dquota write failed [ 486.643879][ T8298] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 486.704382][ T8298] EXT4-fs (loop5): 1 truncate cleaned up [ 486.798908][ T8321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.615'. [ 486.855377][ T8298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.881852][ T8319] loop0: detected capacity change from 0 to 1024 [ 487.296846][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.443508][ T82] hfsplus: b-tree write err: -5, ino 25 [ 487.470631][ T82] hfsplus: b-tree write err: -5, ino 4 [ 487.503451][ T82] hfsplus: b-tree write err: -5, ino 2 [ 492.141305][ T794] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 492.282896][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 492.811479][ T8374] loop5: detected capacity change from 0 to 256 [ 492.971335][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 493.149187][ T29] audit: type=1804 audit(2000000148.909:191): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.633" name="/newroot/84/file0/file0" dev="loop5" ino=1048634 res=1 errno=0 [ 493.268071][ T794] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 493.333683][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.342078][ T794] usb 3-1: Product: syz [ 493.411240][ T794] usb 3-1: Manufacturer: syz [ 493.421429][ T794] usb 3-1: SerialNumber: syz [ 493.485494][ T794] usb 3-1: config 0 descriptor?? [ 493.540883][ T794] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 493.728988][ T5853] usb 3-1: USB disconnect, device number 24 [ 494.299342][ T8378] loop1: detected capacity change from 0 to 2048 [ 494.846732][ T8378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.030138][ T8378] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 495.119955][ T8378] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 496.394676][ T8397] 9p: Bad value for 'rfdno' [ 497.269792][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 498.223407][ T8412] loop2: detected capacity change from 0 to 256 [ 498.273581][ T29] audit: type=1804 audit(2000000154.039:192): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.648" name="/newroot/134/file0/file0" dev="loop2" ino=1048635 res=1 errno=0 [ 498.519342][ T8414] loop0: detected capacity change from 0 to 2048 [ 498.632715][ T8414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.724628][ T8414] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 498.766432][ T8414] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 500.551717][ T8436] loop1: detected capacity change from 0 to 1024 [ 500.600187][ T8438] loop2: detected capacity change from 0 to 1024 [ 500.895909][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 500.963911][ T1080] hfsplus: b-tree write err: -5, ino 25 [ 500.970220][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 500.986325][ T8438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 501.083691][ T8438] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.169464][ T8445] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 501.169620][ T1080] hfsplus: b-tree write err: -5, ino 2 [ 501.335812][ T29] audit: type=1800 audit(2000000157.099:193): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 501.528519][ T29] audit: type=1800 audit(2000000157.129:194): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 501.674042][ T794] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 501.883438][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 501.924220][ T794] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 501.963205][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.971501][ T794] usb 3-1: Product: syz [ 502.017769][ T794] usb 3-1: Manufacturer: syz [ 502.022573][ T794] usb 3-1: SerialNumber: syz [ 502.058491][ T794] usb 3-1: config 0 descriptor?? [ 502.121015][ T8456] loop0: detected capacity change from 0 to 256 [ 502.144505][ T794] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 503.241067][ T8438] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.658: lblock 0 mapped to illegal pblock 0 (length 6) [ 503.594883][ T8438] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.658: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 503.957038][ T794] usb 3-1: USB disconnect, device number 25 [ 504.256427][ T8469] loop3: detected capacity change from 0 to 2048 [ 504.490002][ T8469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.708313][ T8469] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 504.793434][ T8469] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 504.979152][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 505.626954][ T8480] loop1: detected capacity change from 0 to 1024 [ 505.716583][ T8482] 9p: Bad value for 'wfdno' [ 505.859553][ T8480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 505.879788][ T8480] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.911164][ T29] audit: type=1800 audit(2000000161.669:195): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.671" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 506.084146][ T29] audit: type=1800 audit(2000000161.669:196): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.671" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 506.213365][ T5853] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 506.413304][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 506.495902][ T5853] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 506.532913][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.564619][ T5853] usb 2-1: Product: syz [ 506.568982][ T5853] usb 2-1: Manufacturer: syz [ 506.597455][ T5853] usb 2-1: SerialNumber: syz [ 506.650384][ T8498] loop3: detected capacity change from 0 to 256 [ 506.658830][ T5853] usb 2-1: config 0 descriptor?? [ 506.716817][ T5853] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 506.966074][ T8480] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.671: lblock 0 mapped to illegal pblock 0 (length 6) [ 507.052209][ T8480] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.671: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 507.187668][ T794] usb 2-1: USB disconnect, device number 30 [ 507.827245][ T8496] loop2: detected capacity change from 0 to 4096 [ 507.944598][ T8496] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 508.063167][ T8496] ntfs3(loop2): ino=0, mi_enum_attr [ 508.153359][ T8496] ntfs3(loop2): ino=0, mi_enum_attr [ 508.209462][ T8496] ntfs3(loop2): Failed to load $MFT (-2). [ 508.262292][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 509.511241][ T8510] loop0: detected capacity change from 0 to 1024 [ 509.658024][ T8512] FAULT_INJECTION: forcing a failure. [ 509.658024][ T8512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.741137][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.1.678 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.741296][ T8512] Tainted: [L]=SOFTLOCKUP [ 509.741344][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.741418][ T8512] Call Trace: [ 509.741462][ T8512] [ 509.741506][ T8512] __dump_stack+0x26/0x30 [ 509.741783][ T8512] dump_stack_lvl+0x14c/0x1c0 [ 509.741925][ T8512] dump_stack+0x1e/0x25 [ 509.742051][ T8512] should_fail_ex+0x7e2/0x8c0 [ 509.742210][ T8512] should_fail+0x2a/0x40 [ 509.742326][ T8512] should_fail_usercopy+0x2e/0x40 [ 509.742467][ T8512] _copy_to_user+0x35/0x120 [ 509.742613][ T8512] simple_read_from_buffer+0x1b2/0x340 [ 509.742808][ T8512] proc_fail_nth_read+0x1e0/0x2d0 [ 509.742965][ T8512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.743093][ T8512] vfs_read+0x27c/0xf90 [ 509.743237][ T8512] ? stack_depot_save_flags+0x35/0x790 [ 509.743371][ T8512] ? kmsan_get_metadata+0xf1/0x160 [ 509.743549][ T8512] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 509.743729][ T8512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.743918][ T8512] ksys_read+0x1d9/0x470 [ 509.744087][ T8512] __ia32_sys_read+0x9a/0xf0 [ 509.744253][ T8512] ia32_sys_call+0x1914/0x4360 [ 509.744376][ T8512] do_int80_emulation+0x15a/0x330 [ 509.744522][ T8512] ? clear_bhb_loop+0x50/0xa0 [ 509.744654][ T8512] ? clear_bhb_loop+0x50/0xa0 [ 509.744787][ T8512] asm_int80_emulation+0x1f/0x30 [ 509.744919][ T8512] RIP: 0023:0xf7205cab [ 509.745012][ T8512] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 509.745124][ T8512] RSP: 002b:00000000f54bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 509.745241][ T8512] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00000000f54bd5d0 [ 509.745325][ T8512] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 509.745397][ T8512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.745472][ T8512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 509.745556][ T8512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.745675][ T8512] [ 510.194979][ T8510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 510.242712][ T8510] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.433219][ T29] audit: type=1800 audit(2000000166.179:197): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.679" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 510.572757][ T8520] loop3: detected capacity change from 0 to 2048 [ 510.577569][ T29] audit: type=1800 audit(2000000166.189:198): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.679" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 510.686736][ T8520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.710170][ T8520] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 510.726713][ T8520] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 511.188801][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.200822][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.363196][ T8530] 9p: Bad value for 'wfdno' [ 512.962493][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 514.317330][ T8552] 9p: Bad value for 'wfdno' [ 515.133854][ T794] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 515.548255][ T8561] loop0: detected capacity change from 0 to 256 [ 515.638573][ T8550] 9p: Could not find request transport: f [ 515.659530][ T794] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 515.667713][ T794] usb 2-1: can't read configurations, error -71 [ 515.868338][ T29] audit: type=1800 audit(2000000171.629:199): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.690" name="file2" dev="loop0" ino=1048637 res=0 errno=0 [ 516.030286][ T8561] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 516.087835][ T8561] FAT-fs (loop0): Filesystem has been set read-only [ 516.161767][ T8561] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 516.242440][ T8561] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 516.293897][ T8552] loop3: detected capacity change from 0 to 4096 [ 516.960583][ T8550] ntfs3(loop3): failed to convert "0080" to maciceland [ 517.048036][ T8550] ntfs3(loop3): failed to convert name for inode 1e. [ 517.173627][ T8550] ntfs3(loop3): ino=1f, mi_enum_attr [ 517.222598][ T8550] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 521.072206][ T8593] syz.3.705 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 521.261016][ T8593] loop3: detected capacity change from 0 to 1024 [ 521.285036][ T8593] EXT4-fs: Ignoring removed orlov option [ 521.428260][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.519567][ T29] audit: type=1800 audit(2000000177.259:200): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.705" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 522.109868][ T8593] Trying to write to read-only block-device loop3 [ 522.137370][ T8601] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 522.305365][ T8603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 522.363602][ T8603] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 522.452022][ T8603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.517121][ T8603] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 522.597603][ T8603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.629607][ T8603] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 522.917651][ T8603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.943513][ T8603] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 523.237020][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.516697][ T8603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.522871][ T8603] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 525.426193][ T8625] syz.3.711 uses obsolete (PF_INET,SOCK_PACKET) [ 526.088610][ T8633] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 527.177449][ T8644] binder: 8642:8644 ioctl c0306201 0 returned -14 [ 530.893243][ T5853] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 531.105628][ T5853] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.173481][ T5853] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 531.203267][ T5853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.253386][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.324638][ T5853] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.375752][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.444184][ T5853] usb 3-1: Product: syz [ 531.448463][ T5853] usb 3-1: Manufacturer: syz [ 531.515726][ T5853] cdc_wdm 3-1:1.0: skipping garbage [ 531.555243][ T5853] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 531.785832][ T794] usb 3-1: USB disconnect, device number 26 [ 540.322809][ T8722] loop0: detected capacity change from 0 to 256 [ 540.701458][ T8722] FAT-fs (loop0): Directory bread(block 64) failed [ 540.753431][ T8722] FAT-fs (loop0): Directory bread(block 65) failed [ 540.808995][ T8722] FAT-fs (loop0): Directory bread(block 66) failed [ 540.860203][ T8722] FAT-fs (loop0): Directory bread(block 67) failed [ 540.899326][ T8722] FAT-fs (loop0): Directory bread(block 68) failed [ 540.960422][ T8722] FAT-fs (loop0): Directory bread(block 69) failed [ 541.039260][ T8722] FAT-fs (loop0): Directory bread(block 70) failed [ 541.089623][ T8722] FAT-fs (loop0): Directory bread(block 71) failed [ 541.164894][ T8722] FAT-fs (loop0): Directory bread(block 72) failed [ 541.171887][ T8722] FAT-fs (loop0): Directory bread(block 73) failed [ 546.392686][ T8738] usb usb8: usbfs: process 8738 (syz.1.739) did not claim interface 0 before use [ 550.406241][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.418092][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.436341][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.450514][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.461841][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.513965][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 550.523640][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 550.538528][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 550.684682][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 550.705271][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.158995][ T8790] syz_tun: entered promiscuous mode [ 552.195471][ T8790] vlan2: entered promiscuous mode [ 552.781439][ T5784] Bluetooth: hci5: command tx timeout [ 553.032868][ T8796] loop2: detected capacity change from 0 to 8 [ 553.232809][ T5839] IPVS: starting estimator thread 0... [ 553.274570][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 553.352899][ T8729] udevd[8729]: incorrect cramfs checksum on /dev/loop2 [ 553.383767][ T8800] IPVS: using max 240 ests per chain, 12000 per kthread [ 553.572717][ T8729] udevd[8729]: incorrect cramfs checksum on /dev/loop2 [ 554.857737][ T5784] Bluetooth: hci5: command tx timeout [ 555.753303][ T8819] loop0: detected capacity change from 0 to 2048 [ 555.805668][ T8819] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 555.913423][ T8823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.719307][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.748515][ T5784] Bluetooth: hci5: command tx timeout [ 558.763633][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.791583][ T8775] bridge_slave_0: entered allmulticast mode [ 558.814153][ T8775] bridge_slave_0: entered promiscuous mode [ 558.868372][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.949821][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.073800][ T8775] bridge_slave_1: entered allmulticast mode [ 559.178717][ T8775] bridge_slave_1: entered promiscuous mode [ 559.916049][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.149390][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.262572][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.379223][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.566452][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.773723][ T5784] Bluetooth: hci5: command tx timeout [ 560.889030][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.251829][ T8775] team0: Port device team_slave_0 added [ 561.318969][ T8775] team0: Port device team_slave_1 added [ 561.412276][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.759'. [ 561.631783][ T8851] loop0: detected capacity change from 0 to 256 [ 561.731416][ T8850] tipc: Started in network mode [ 561.865189][ T8850] tipc: Node identity 0a270049990f, cluster identity 4711 [ 561.934567][ T8850] tipc: Enabled bearer , priority 0 [ 561.973215][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.980638][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.096317][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.278250][ T8851] FAT-fs (loop0): Directory bread(block 64) failed [ 562.306154][ T8851] FAT-fs (loop0): Directory bread(block 65) failed [ 562.336201][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.369996][ T8851] FAT-fs (loop0): Directory bread(block 66) failed [ 562.382104][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.441622][ T8851] FAT-fs (loop0): Directory bread(block 67) failed [ 562.476802][ T8851] FAT-fs (loop0): Directory bread(block 68) failed [ 562.504181][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.523508][ T8851] FAT-fs (loop0): Directory bread(block 69) failed [ 562.553404][ T8851] FAT-fs (loop0): Directory bread(block 70) failed [ 562.573259][ T8851] FAT-fs (loop0): Directory bread(block 71) failed [ 562.614888][ T8851] FAT-fs (loop0): Directory bread(block 72) failed [ 562.621559][ T8851] FAT-fs (loop0): Directory bread(block 73) failed [ 562.648173][ T8848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.761'. [ 562.680642][ T8850] tipc: Resetting bearer [ 562.898513][ T8841] tipc: Disabling bearer [ 563.650355][ T8868] loop1: detected capacity change from 0 to 2048 [ 563.693897][ T8868] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 563.841057][ T8869] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.111700][ T8871] loop5: detected capacity change from 0 to 1024 [ 564.198429][ T8871] EXT4-fs: Ignoring removed orlov option [ 564.244010][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.373990][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.501468][ T57] bond0 (unregistering): Released all slaves [ 564.505901][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.713597][ T8775] hsr_slave_0: entered promiscuous mode [ 564.749838][ T8775] hsr_slave_1: entered promiscuous mode [ 564.803518][ T8775] debugfs: 'hsr0' already exists in 'hsr' [ 564.859386][ T8775] Cannot create hsr debugfs directory [ 565.047609][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.345107][ T57] hsr_slave_0: left promiscuous mode [ 566.381801][ T57] hsr_slave_1: left promiscuous mode [ 566.403243][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.410797][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.491488][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.520794][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.669275][ T57] veth1_macvtap: left promiscuous mode [ 566.713406][ T57] veth0_macvtap: left promiscuous mode [ 566.720146][ T57] veth1_vlan: left promiscuous mode [ 566.745084][ T57] veth0_vlan: left promiscuous mode [ 569.394873][ T57] team0 (unregistering): Port device team_slave_1 removed [ 569.543516][ T57] team0 (unregistering): Port device team_slave_0 removed [ 571.770060][ T8775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 571.869856][ T8775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 571.956925][ T8775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 572.048844][ T8775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 572.632814][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.645545][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.921697][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.948357][ T8934] loop2: detected capacity change from 0 to 1024 [ 573.974380][ T8934] EXT4-fs: Ignoring removed orlov option [ 574.150549][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.166497][ T8934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.267246][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.274910][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.357575][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.365036][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.727173][ T8937] loop1: detected capacity change from 0 to 4096 [ 574.872661][ T8937] ntfs3(loop1): ino=3, Correct links count -> 2. [ 575.221742][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.619345][ T8963] loop2: detected capacity change from 0 to 8 [ 577.934021][ T8972] loop0: detected capacity change from 0 to 2048 [ 578.117830][ T8972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.519903][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.327783][ T8982] loop5: detected capacity change from 0 to 1024 [ 579.343738][ T8982] EXT4-fs: Ignoring removed orlov option [ 579.353486][ T30] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 579.487893][ T8982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.598505][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 579.673673][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.714926][ T30] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.787999][ T30] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 579.821738][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.866405][ T30] usb 2-1: Product: syz [ 579.901515][ T30] usb 2-1: Manufacturer: syz [ 579.924009][ T30] usb 2-1: SerialNumber: syz [ 579.981246][ T30] usb 2-1: config 0 descriptor?? [ 580.419371][ T8995] ===================================================== [ 580.427274][ T8995] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 580.435265][ T8995] _copy_to_iter+0xef3/0x3400 [ 580.440153][ T8995] __skb_datagram_iter+0x18f/0x12b0 [ 580.446036][ T8995] skb_copy_datagram_iter+0x5b/0x240 [ 580.451585][ T8995] netlink_recvmsg+0x4bb/0xfe0 [ 580.456893][ T8995] sock_recvmsg+0x27b/0x310 [ 580.461611][ T8995] __sys_recvfrom+0x282/0x550 [ 580.466654][ T8995] __ia32_compat_sys_socketcall+0xb4a/0x1b70 [ 580.473481][ T8995] ia32_sys_call+0x2c57/0x4360 [ 580.478498][ T8995] do_int80_emulation+0x15a/0x330 [ 580.483957][ T8995] asm_int80_emulation+0x1f/0x30 [ 580.489072][ T8995] [ 580.491507][ T8995] Uninit was created at: [ 580.496086][ T8995] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 580.502682][ T8995] __alloc_skb+0x90d/0x1190 [ 580.507482][ T8995] netlink_dump+0x248/0x1800 [ 580.512165][ T8995] __netlink_dump_start+0x716/0xd60 [ 580.517576][ T8995] rtnetlink_rcv_msg+0x1262/0x14b0 [ 580.522837][ T8995] netlink_rcv_skb+0x54d/0x680 [ 580.527856][ T8995] rtnetlink_rcv+0x35/0x40 [ 580.532353][ T8995] netlink_unicast+0xf04/0x12b0 [ 580.537438][ T8995] netlink_sendmsg+0x10b2/0x1250 [ 580.542542][ T8995] ____sys_sendmsg+0xf37/0xfd0 [ 580.547527][ T8995] ___sys_sendmsg+0x271/0x3b0 [ 580.552276][ T8995] __sys_sendmsg+0x1aa/0x300 [ 580.557087][ T8995] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 580.562710][ T8995] ia32_sys_call+0x1e4a/0x4360 [ 580.568173][ T8995] __do_fast_syscall_32+0x17f/0x3f0 [ 580.573581][ T8995] do_fast_syscall_32+0x37/0x80 [ 580.578508][ T8995] do_SYSENTER_32+0x1f/0x30 [ 580.583272][ T8995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.589834][ T8995] [ 580.592184][ T8995] Bytes 32-35 of 44 are uninitialized [ 580.597772][ T8995] Memory access of size 44 starts at ffff888018a0f000 [ 580.604867][ T8995] Data copied to user address 00000000f549c510 [ 580.611099][ T8995] [ 580.613793][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.2.793 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.624851][ T8995] Tainted: [L]=SOFTLOCKUP [ 580.629228][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.639466][ T8995] ===================================================== [ 580.646734][ T8995] Disabling lock debugging due to kernel taint [ 580.760887][ T9000] Option '[y$ [ 580.760887][ T9000] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 580.790745][ T8995] Kernel panic - not syncing: kmsan.panic set ... [ 580.797365][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.2.793 Tainted: G B L syzkaller #0 PREEMPT(full) [ 580.808402][ T8995] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 580.814048][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.824353][ T8995] Call Trace: [ 580.827905][ T8995] [ 580.831396][ T8995] __dump_stack+0x26/0x30 [ 580.836080][ T8995] dump_stack_lvl+0x50/0x1c0 [ 580.840778][ T8995] ? dump_stack+0x12/0x25 [ 580.845241][ T8995] dump_stack+0x1e/0x25 [ 580.849567][ T8995] vpanic+0x7b4/0x1430 [ 580.853782][ T8995] panic+0x15d/0x160 [ 580.858307][ T8995] kmsan_report+0x31a/0x320 [ 580.863072][ T8995] ? __rcu_read_unlock+0x6c/0xd0 [ 580.868468][ T8995] ? kmsan_internal_check_memory+0x166/0x240 [ 580.874591][ T8995] ? kmsan_copy_to_user+0xef/0x190 [ 580.879836][ T8995] ? _copy_to_iter+0xef3/0x3400 [ 580.884833][ T8995] ? __skb_datagram_iter+0x18f/0x12b0 [ 580.890343][ T8995] ? skb_copy_datagram_iter+0x5b/0x240 [ 580.896008][ T8995] ? netlink_recvmsg+0x4bb/0xfe0 [ 580.901280][ T8995] ? sock_recvmsg+0x27b/0x310 [ 580.906149][ T8995] ? __sys_recvfrom+0x282/0x550 [ 580.911283][ T8995] ? __ia32_compat_sys_socketcall+0xb4a/0x1b70 [ 580.917605][ T8995] ? ia32_sys_call+0x2c57/0x4360 [ 580.922723][ T8995] ? do_int80_emulation+0x15a/0x330 [ 580.928273][ T8995] ? asm_int80_emulation+0x1f/0x30 [ 580.933515][ T8995] ? kernel_text_address+0x10e/0x1a0 [ 580.939108][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 580.944340][ T8995] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 580.950266][ T8995] ? do_int80_emulation+0x131/0x330 [ 580.955739][ T8995] ? filter_irq_stacks+0x49/0x190 [ 580.961218][ T8995] ? stack_depot_save_flags+0x35/0x790 [ 580.966956][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 580.972594][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 580.977934][ T8995] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 580.983889][ T8995] kmsan_internal_check_memory+0x166/0x240 [ 580.990100][ T8995] kmsan_copy_to_user+0xef/0x190 [ 580.995165][ T8995] _copy_to_iter+0xef3/0x3400 [ 580.999954][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 581.005189][ T8995] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 581.011626][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 581.016860][ T8995] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.022823][ T8995] ? kmsan_get_metadata+0xf1/0x160 [ 581.028105][ T8995] __skb_datagram_iter+0x18f/0x12b0 [ 581.033430][ T8995] ? __skb_try_recv_datagram+0x5f1/0x6e0 [ 581.039190][ T8995] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 581.044893][ T8995] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 581.050418][ T8995] skb_copy_datagram_iter+0x5b/0x240 [ 581.055789][ T8995] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.061745][ T8995] netlink_recvmsg+0x4bb/0xfe0 [ 581.066646][ T8995] ? aa_sock_msg_perm+0x284/0x2e0 [ 581.071849][ T8995] ? __pfx_netlink_recvmsg+0x10/0x10 [ 581.077441][ T8995] sock_recvmsg+0x27b/0x310 [ 581.082056][ T8995] __sys_recvfrom+0x282/0x550 [ 581.086845][ T8995] ? filter_irq_stacks+0x13f/0x190 [ 581.092171][ T8995] ? stack_depot_save_flags+0x35/0x790 [ 581.097789][ T8995] __ia32_compat_sys_socketcall+0xb4a/0x1b70 [ 581.103881][ T8995] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 581.110408][ T8995] ia32_sys_call+0x2c57/0x4360 [ 581.115332][ T8995] do_int80_emulation+0x15a/0x330 [ 581.120438][ T8995] ? clear_bhb_loop+0x50/0xa0 [ 581.125190][ T8995] ? clear_bhb_loop+0x50/0xa0 [ 581.129949][ T8995] asm_int80_emulation+0x1f/0x30 [ 581.134959][ T8995] RIP: 0023:0xf71e5cab [ 581.139076][ T8995] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 581.158938][ T8995] RSP: 002b:00000000f549c35c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 581.167438][ T8995] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f549c40c [ 581.175478][ T8995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.183505][ T8995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.191631][ T8995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.199933][ T8995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.207997][ T8995] [ 581.211426][ T8995] Kernel Offset: disabled [ 581.215796][ T8995] Rebooting in 86400 seconds..