last executing test programs: 12.39986453s ago: executing program 4 (id=630): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x1000000, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9.323220119s ago: executing program 1 (id=641): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000000c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.401671946s ago: executing program 3 (id=644): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x2) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0xe7, 0x0, {}, 0x0, 0x33}}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000140)={0x20000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 7.876588601s ago: executing program 0 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000e40)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce0600000034d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0dd5c918ae7d3e53f83cab1f56d2260b8d07652376b9f24ee836b43b993ba7668d6b4bae2e974e845a12beaa47f70000", @ANYBLOB="35f99541e81a4d1504af89f97576a2883ca58e9edcde5a834dc0c1ba3e8d696ee2a5645b577792f4475004f54b74b5ff39d031026caa5a197b097947cb45b67ace0876d6196f298848b04b8b25679f524ec779a8211a90d41103a12b3498c8d2971921d52fb30de6abb6c95021031dac25c1ef86ac5ae0d502959bcbc86e5583bc5fb2ced636241e6e6ba2cea7fbe8193d7814", @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES8], 0x1, 0x206, &(0x7f0000000400)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) ftruncate(r3, 0xfffffffffffffffb) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000280)={0x402a, 0x10100002000001, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000002c0)={0x9, 0x0, 'client1\x00', 0x6, "6c3e61975d14946e", "8552ec443610bfe96fd24d16fc98a133e9efb542fa65eb04b4436da878f75658", 0xd18, 0x9}) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xb2) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r10, &(0x7f0000000180)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r11 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r11, 0xc0d05604, &(0x7f0000000440)={0x5, @sliced={0x100, [0x3, 0x3, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xffff, 0x6, 0x8, 0x7, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xe, 0x4, 0x200, 0x4, 0x6, 0x1b65, 0x4, 0x3ff, 0xc15e, 0x6, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0x8, 0xfff, 0x8, 0x15c6], 0x3}}) 7.795738087s ago: executing program 3 (id=647): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054) socket$inet6_udp(0xa, 0x2, 0x0) 7.673849898s ago: executing program 4 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f000000ac40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0}) 6.635824655s ago: executing program 1 (id=650): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 6.590652706s ago: executing program 0 (id=651): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=ANY=[@ANYBLOB="ac00000021f30001000000000000000000000001000000000000000000000000ac1414000000000000000000000000008500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000f200100000000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xac}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair(0x1d, 0x2, 0x6, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000000000000002000003240002800c00028005008100300000001400018008000100ac1414aa08000200a5000001dab81b6fc2cbfec2b64bbf7d67b3f2df3425ad0104000090993d6b14d79c1a4ec0b36525f00cd2e6a23c025cd6ff7890563397b4669279dc4b696d70000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000000)={0xce83a143c5cefeb0, 0x2, 0x18}) sendmsg$nl_route_sched(r2, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000840)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 6.343435477s ago: executing program 3 (id=653): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000040), 0x0, 0x300}) (fail_nth: 1) 5.760179069s ago: executing program 0 (id=655): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.54216961s ago: executing program 0 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x3, 0x1, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 5.361486851s ago: executing program 3 (id=657): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40010, &(0x7f0000000ac0), 0xfe, 0x458, &(0x7f00000001c0)="$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") r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300030300"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x84c}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, 0x0, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0xe0, 0xff, 0xa, '\x00', "54c5db74"}}, 0x0}, 0x0) 5.299516238s ago: executing program 2 (id=658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setresgid(0xee00, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x8000}}], 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r4, r3, 0x0) 4.484522411s ago: executing program 2 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x48) write$char_usb(r1, &(0x7f0000000040)="96ae7ba02edcc729b1c5a83d4f120733e6a77ab2e083c997f3dca4e8aed60189b16dce2b6669af9302199782047cab12", 0x30) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800010000000000000000000a00000000000001"], 0x18}}, 0x0) 4.340178605s ago: executing program 4 (id=660): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c001080080001000a0100fe08000200", @ANYRES32], 0x30}}, 0x0) 4.011404154s ago: executing program 4 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000e40)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce0600000034d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0dd5c918ae7d3e53f83cab1f56d2260b8d07652376b9f24ee836b43b993ba7668d6b4bae2e974e845a12beaa47f70000", @ANYBLOB="35f99541e81a4d1504af89f97576a2883ca58e9edcde5a834dc0c1ba3e8d696ee2a5645b577792f4475004f54b74b5ff39d031026caa5a197b097947cb45b67ace0876d6196f298848b04b8b25679f524ec779a8211a90d41103a12b3498c8d2971921d52fb30de6abb6c95021031dac25c1ef86ac5ae0d502959bcbc86e5583bc5fb2ced636241e6e6ba2cea7fbe8193d7814", @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES8], 0x1, 0x206, &(0x7f0000000400)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) ftruncate(r3, 0xfffffffffffffffb) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000280)={0x402a, 0x10100002000001, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000002c0)={0x9, 0x0, 'client1\x00', 0x6, "6c3e61975d14946e", "8552ec443610bfe96fd24d16fc98a133e9efb542fa65eb04b4436da878f75658", 0xd18, 0x9}) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xb2) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000180)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) ioctl$TIOCNOTTY(r11, 0x5422) r12 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r12, 0xc0d05604, &(0x7f0000000440)={0x5, @sliced={0x100, [0x3, 0x3, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xffff, 0x6, 0x8, 0x7, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xe, 0x4, 0x200, 0x4, 0x6, 0x1b65, 0x4, 0x3ff, 0xc15e, 0x6, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0x8, 0xfff, 0x8, 0x15c6], 0x3}}) 3.950671118s ago: executing program 0 (id=662): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeIit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmftXXv9lthrBz6faDzPM8/L/OaZZ2a866w2wP+t6xfSfJgi1y+8sVzm11Zn22ursy/Uxe0kZbqRNLurFHeT4lEyV5YXfUv61lt8vHjtrc8er33ezTXrpao/tlO7IYbUXamXTNf9TQ9tOb7XXazU4eXFJDfq9aCJvfY1ULEctPP1Go5cZ4uV/TTfz3ULHDO9p1PRfW5uMZWcSDJZ/x6Q+u7QGF2Eh2NfdzkAAAB4Tn1676gjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdP/f3/Rb006nWmU/S+/3+it61OH0Nze6758FDjAAAAAAAAAIDR+PqTPMlyTvbynaL6m/+5KnM6X3SSL+X9PMhC7udiljOfpSzlfi4nmerraGJ5fmnp/uX1lqXhLa8MbXllVEcMAAAAAAAAAP+TfpnWxt//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOCiSse6qWk7X60yl0cxGWVaSfyaZOOp496EYtvHh6OMAAACAZzL5FG2+/CRPspyTvXynqF7zf6V6vTyZ93M3S1nMUtpZyM36NXT5qr+xtjrbXludvVMuZX6w3+//e19hTNQ9jFW5YXs+W9Vo5VYWqy0Xc6MK5mYa3X2fT8724umLq89HZUzF92p7jKxZD2u5s99v9y7CgRh8K6KxQ83WRnDJ+ojM1LGVLU91R6Co3qhJNo/ErmenOZCbqnodX9/T5TTW3/k5fQhjfqJel8fzm0Md8/1aH4lGqpG40pt95TWz80gk3/jrn96+3b777u1bDy4cn0Paxdg22zfPidm+kXjluR6J5j7rz1QjcWY9fz0/yk9yIdN5M/ezmJ9mPktZSKcun6/nc/lzaueRmhvIvblbJBP1eemes73ENJ0fVqn5nKvansxiitzLzSzk9erflVzOt3M1V3Ot7wyf2Tbu6tiqq76x+arvnem/DQ3+/DfrRHl3++3GXW5upyPebnYelO69vxzXU33j2p31j9drneq7Dmb6Ruml3uiMD+38ae6Nza/WiXIfv9rlOTFaU/VIlBdQ7ynRi+7l7kg0q2fR1nn+h07ZLu27nc7t+fe26X9lU/61el1Oq9Wv7Va7Z/ipOFjlfHkpk/WdZHB2lGUvr99l+so6G3O5Wzb4xC3bnanKiqJ3pf4496oJsPVKnah/h9va05Wq7JWhZbNV2dm+soHft3Iv7dwcwfgB8DT+8fZ6cionJlr/an3a+qT169bt1huTP3jhOy+8OpHxv49/tzkz9lrj1eIv+SQ/33j9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL0HH3z47ny7vXB/eKKxfdFAopXNW3breVOiqL/QZ3+tjm9iMsnAlup7jkYeRmtzGFsSnV8kIx+f3pcIDq/zuzLR3DKjhiXmBrb8eWuHH+0zwmJv18UhJhoZ7U7HMnwCHOFNCRiJS0t33rv04IMPv7V4Z/6dhXcW7o5fvXpt5trV12cv3VpsL8x0fx51lMBh2HjoH3UkAAAAAAAAAAAAwF4N+2DAuRd3+9DInj7j4X8WAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfi+oU0H6bI5ZmLM2V+bXW2XS699EbNZpJGIyl+lhSPkrl0l0z1dVfkj4/SGbKfjxevvfXZ47XPN/pqdusnjXq9vZ1Lk6zUS6aTjNXrZzDQ341n7q/4T+8YygH7otPpzD1bfHAw/hsAAP//msX1EQ==") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="8de88ac6d4e719b9c7743ddb167a1b4af5d8e7665b4cd8c464f69fb9283a2b6d118f044e8d685e235002e6ee7df2ffab872eb39d569390d04b3fc9cae136227f204a77361177bd081b386d936f05d2073effb6b554104671511a4fa2ffadb6f768b72992c0f2aa4dc19792401cec3600a419ff376d3e6817b7b697ff4bd80c208689ceb554add7e5e24305a6b26ddccb5532ec", 0x93}, {&(0x7f0000001880)="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", 0x76e}], 0x2) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x2000004) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d00010000000800060009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, &(0x7f0000002100)="cf3a", 0x2, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r4 = userfaultfd(0x80001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000008116b61979e09700000000008000240000000000900010073797a30000000000900020073797a320000000014000000119239d26a7b5b00010000000000000085e37f000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.35012185s ago: executing program 2 (id=663): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xb, 0x9}}}, 0x24}}, 0x20040054) socket$inet6_udp(0xa, 0x2, 0x0) 3.250516817s ago: executing program 4 (id=664): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='^ :\x00', &(0x7f0000000280)='./bus\x00', 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000040)) 2.508778747s ago: executing program 1 (id=665): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.455799732s ago: executing program 4 (id=666): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = gettid() bpf$PROG_LOAD(0x25, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b0002000000000904000545080000000904"], 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.901795907s ago: executing program 1 (id=667): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x3c, 0x1, [@m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.727315727s ago: executing program 2 (id=668): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5ae, &(0x7f0000000180)="$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") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000040)) 1.652488413s ago: executing program 3 (id=669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000e4d020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) 1.301173615s ago: executing program 1 (id=670): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) 1.018333447s ago: executing program 3 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYBLOB="1a02c55eb10cc9d2da2e8c360450ab05ebe36d3f11cc5eeef0f99dc011cc6877fc7b23eae2a4c303046574b1bb518bbe0d088b09f5659201a82e6f99dce71d04699c6bab5310b7f137b70a270cbbec5147972886b2832ca2ba2885e2b5d53c52d6d4dd58b3dcbecfff7a0356ea2bf141748d254900d760a81da3e749c00c4e39732dd0c9afc71eec9dc1b74f", @ANYRES32, @ANYRESOCT], 0xfd, 0x5b01, &(0x7f0000011c00)="$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") r1 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x940020, &(0x7f00000066c0)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64, @ANYBLOB="735f6e46fee1844ad4695ba1f85f5371aa4e7749437e67fc581a8d8983a4f95cc4471ae8a76cf365c4512dd81215cd5e4153586ad440d6403f7da30c61dbfe55d4fdbefbdceda57aaefe6580b8a9bb883042c20075e444bff2f7ef6834b3de98c9d04374735e6ae92874f0d05c6ae5f6b87d0c35081e3eec0e2fc893bc95e8568d709411c676efed00626dbb1875f613cfca3f0b58657c5d223c7137c2ef032583e8217cdd2e799b7e8890dc20b93089", @ANYRES64, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x5, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0xf, 0x7ffc0081}]}) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}]}, 0x54}}, 0x0) 1.005078481s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x3, 0x1, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 879.327708ms ago: executing program 2 (id=673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.538571ms ago: executing program 2 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000e40)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce0600000034d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0dd5c918ae7d3e53f83cab1f56d2260b8d07652376b9f24ee836b43b993ba7668d6b4bae2e974e845a12beaa47f70000", @ANYBLOB="35f99541e81a4d1504af89f97576a2883ca58e9edcde5a834dc0c1ba3e8d696ee2a5645b577792f4475004f54b74b5ff39d031026caa5a197b097947cb45b67ace0876d6196f298848b04b8b25679f524ec779a8211a90d41103a12b3498c8d2971921d52fb30de6abb6c95021031dac25c1ef86ac5ae0d502959bcbc86e5583bc5fb2ced636241e6e6ba2cea7fbe8193d7814", @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES8], 0x1, 0x206, &(0x7f0000000400)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) ftruncate(r3, 0xfffffffffffffffb) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000280)={0x402a, 0x10100002000001, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000002c0)={0x9, 0x0, 'client1\x00', 0x6, "6c3e61975d14946e", "8552ec443610bfe96fd24d16fc98a133e9efb542fa65eb04b4436da878f75658", 0xd18, 0x9}) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0xb2) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000180)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) ioctl$TIOCNOTTY(r11, 0x5422) r12 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r12, 0xc0d05604, &(0x7f0000000440)={0x5, @sliced={0x100, [0x3, 0x3, 0x5, 0x1003, 0xfff1, 0x3, 0x0, 0xe8ac, 0x8, 0x5, 0x0, 0x1e, 0xa82f, 0xffff, 0x6, 0x8, 0x7, 0x3, 0x9, 0x3, 0xfffd, 0x4, 0x1, 0x3, 0x83d9, 0x8, 0x87e, 0xe, 0x4, 0x200, 0x4, 0x6, 0x1b65, 0x4, 0x3ff, 0xc15e, 0x6, 0x0, 0x9, 0xaa, 0xfffc, 0x6, 0x7, 0x3, 0x8, 0xfff, 0x8, 0x15c6], 0x3}}) 0s ago: executing program 0 (id=675): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") kernel console output (not intermixed with test programs): (device loop3): force clearing of disk cache [ 302.699762][ T7011] BTRFS info (device loop3): doing ref verification [ 302.754896][ T11] usb usb2-port1: unable to enumerate USB device [ 302.773796][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 302.806728][ T24] usb 5-1: device descriptor read/8, error -71 [ 302.915171][ T5826] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.928084][ T24] usb usb5-port1: unable to enumerate USB device [ 303.282092][ T7032] loop2: detected capacity change from 0 to 4096 [ 303.397956][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 304.557616][ T7051] loop0: detected capacity change from 0 to 8 [ 304.633699][ T7051] SQUASHFS error: xz decompression failed, data probably corrupt [ 304.641783][ T7051] SQUASHFS error: Failed to read block 0x108: -5 [ 304.650223][ T7051] SQUASHFS error: Unable to read metadata cache entry [106] [ 304.657859][ T7051] SQUASHFS error: Unable to read inode 0x11f [ 304.859625][ T7057] loop4: detected capacity change from 0 to 1024 [ 304.882001][ T7057] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.913362][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 304.944860][ T7057] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.362: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.986773][ T7057] Quota error (device loop4): write_blk: dquota write failed [ 304.994746][ T7057] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 305.005343][ T7057] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.362: Failed to acquire dquot type 0 [ 305.026285][ T7057] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.362: Freeing blocks not in datazone - block = 0, count = 4096 [ 305.049479][ T7057] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.362: Invalid inode bitmap blk 0 in block_group 0 [ 305.067029][ T1816] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 305.091551][ T7057] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 305.101359][ T1816] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 305.110442][ T1816] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 305.139651][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.148643][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.154710][ T7057] EXT4-fs (loop4): 1 orphan inode deleted [ 305.159303][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.168019][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.174474][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.198519][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.233877][ T7057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.236536][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.243795][ T11] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 305.252401][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.253021][ T24] usb 4-1: Product: syz [ 305.272984][ T24] usb 4-1: Manufacturer: syz [ 305.297873][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 305.303484][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 305.312178][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.319176][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 305.354015][ T2060] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.423146][ T11] usb 2-1: device descriptor read/64, error -71 [ 305.523228][ T2060] usb 3-1: Using ep0 maxpacket: 8 [ 305.573442][ T2060] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 305.582906][ T2060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.591141][ T2060] usb 3-1: Product: syz [ 305.595653][ T2060] usb 3-1: Manufacturer: syz [ 305.602474][ T2060] usb 3-1: SerialNumber: syz [ 305.621168][ T2060] usb 3-1: config 0 descriptor?? [ 305.637178][ T7068] loop4: detected capacity change from 0 to 4096 [ 305.673077][ T11] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 305.790566][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 305.833432][ T11] usb 2-1: device descriptor read/64, error -71 [ 305.891317][ T2060] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 305.947030][ T11] usb usb2-port1: attempt power cycle [ 305.957531][ T2060] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 305.990483][ T2060] usb 3-1: USB disconnect, device number 15 [ 306.160120][ T7075] FAULT_INJECTION: forcing a failure. [ 306.160120][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 306.173582][ T7075] CPU: 1 UID: 0 PID: 7075 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(none) [ 306.173728][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.173827][ T7075] Call Trace: [ 306.173908][ T7075] [ 306.173965][ T7075] __dump_stack+0x26/0x30 [ 306.174159][ T7075] dump_stack_lvl+0x1df/0x270 [ 306.174351][ T7075] dump_stack+0x1e/0x25 [ 306.174508][ T7075] should_fail_ex+0x7dc/0x8a0 [ 306.174680][ T7075] should_failslab+0x15b/0x200 [ 306.174857][ T7075] kmem_cache_alloc_lru_noprof+0xf7/0xed0 [ 306.175049][ T7075] ? sock_alloc_inode+0x62/0x160 [ 306.175223][ T7075] ? kmsan_get_metadata+0xfb/0x160 [ 306.175396][ T7075] sock_alloc_inode+0x62/0x160 [ 306.175547][ T7075] ? __pfx_sock_alloc_inode+0x10/0x10 [ 306.175698][ T7075] alloc_inode+0x87/0x4a0 [ 306.175880][ T7075] do_accept+0x117/0xb10 [ 306.176047][ T7075] ? _raw_spin_unlock+0x30/0x50 [ 306.176289][ T7075] ? alloc_fd+0xadb/0xc80 [ 306.176509][ T7075] __sys_accept4+0x19d/0x380 [ 306.176711][ T7075] __x64_sys_accept4+0xc0/0x150 [ 306.176895][ T7075] x64_sys_call+0x3c30/0x3e20 [ 306.177081][ T7075] do_syscall_64+0xd9/0x210 [ 306.177225][ T7075] ? irqentry_exit+0x16/0x60 [ 306.177417][ T7075] ? clear_bhb_loop+0x40/0x90 [ 306.177595][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.177760][ T7075] RIP: 0033:0x7f936058eec9 [ 306.177869][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.177995][ T7075] RSP: 002b:00007f9361505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 306.178132][ T7075] RAX: ffffffffffffffda RBX: 00007f93607e5fa0 RCX: 00007f936058eec9 [ 306.178245][ T7075] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 306.178379][ T7075] RBP: 00007f9361505090 R08: 0000000000000000 R09: 0000000000000000 [ 306.178485][ T7075] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 306.178587][ T7075] R13: 00007f93607e6038 R14: 00007f93607e5fa0 R15: 00007ffcbe8a0238 [ 306.178723][ T7075] [ 306.403071][ T11] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 306.466769][ T11] usb 2-1: device descriptor read/8, error -71 [ 306.724566][ T11] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 306.791326][ T11] usb 2-1: device descriptor read/8, error -71 [ 306.905164][ T11] usb usb2-port1: unable to enumerate USB device [ 307.351076][ T7091] loop0: detected capacity change from 0 to 8 [ 307.386992][ T7091] SQUASHFS error: xz decompression failed, data probably corrupt [ 307.395520][ T7091] SQUASHFS error: Failed to read block 0x108: -5 [ 307.402022][ T7091] SQUASHFS error: Unable to read metadata cache entry [106] [ 307.409765][ T7091] SQUASHFS error: Unable to read inode 0x11f [ 307.718810][ T5904] usb 4-1: USB disconnect, device number 23 [ 307.802894][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.871662][ T7099] FAULT_INJECTION: forcing a failure. [ 307.871662][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.885378][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(none) [ 307.885512][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.885590][ T7099] Call Trace: [ 307.885648][ T7099] [ 307.885700][ T7099] __dump_stack+0x26/0x30 [ 307.885877][ T7099] dump_stack_lvl+0x1df/0x270 [ 307.886046][ T7099] dump_stack+0x1e/0x25 [ 307.886196][ T7099] should_fail_ex+0x7dc/0x8a0 [ 307.886384][ T7099] should_fail+0x2a/0x40 [ 307.886521][ T7099] should_fail_usercopy+0x2e/0x40 [ 307.886679][ T7099] _copy_from_user+0x33/0x100 [ 307.886875][ T7099] ___sys_sendmsg+0x11b/0x3b0 [ 307.887085][ T7099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.887276][ T7099] ? __rcu_read_unlock+0x6d/0xd0 [ 307.887443][ T7099] ? __fget_files+0x3b4/0x4a0 [ 307.887628][ T7099] ? __fget_files+0x3b9/0x4a0 [ 307.887832][ T7099] ? kmsan_get_metadata+0xfb/0x160 [ 307.888025][ T7099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.888219][ T7099] __x64_sys_sendmsg+0x211/0x3e0 [ 307.888416][ T7099] ? fput+0x113/0x160 [ 307.888544][ T7099] ? kmsan_get_metadata+0xfb/0x160 [ 307.888703][ T7099] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 307.888871][ T7099] ? kmsan_get_metadata+0xfb/0x160 [ 307.889050][ T7099] x64_sys_call+0x1dfd/0x3e20 [ 307.889241][ T7099] do_syscall_64+0xd9/0x210 [ 307.889404][ T7099] ? irqentry_exit+0x16/0x60 [ 307.889584][ T7099] ? clear_bhb_loop+0x40/0x90 [ 307.889729][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.889867][ T7099] RIP: 0033:0x7f936058eec9 [ 307.889982][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.890111][ T7099] RSP: 002b:00007f9361505038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.890245][ T7099] RAX: ffffffffffffffda RBX: 00007f93607e5fa0 RCX: 00007f936058eec9 [ 307.890347][ T7099] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 307.890443][ T7099] RBP: 00007f9361505090 R08: 0000000000000000 R09: 0000000000000000 [ 307.890539][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.890622][ T7099] R13: 00007f93607e6038 R14: 00007f93607e5fa0 R15: 00007ffcbe8a0238 [ 307.890765][ T7099] [ 308.298005][ T24] usb 3-1: device descriptor read/64, error -71 [ 308.570023][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.723047][ T24] usb 3-1: device descriptor read/64, error -71 [ 308.850777][ T24] usb usb3-port1: attempt power cycle [ 308.883031][ T11] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 309.043797][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 309.076399][ T11] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 309.086075][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.094469][ T11] usb 2-1: Product: syz [ 309.098805][ T11] usb 2-1: Manufacturer: syz [ 309.103727][ T11] usb 2-1: SerialNumber: syz [ 309.119196][ T7125] loop4: detected capacity change from 0 to 8 [ 309.142713][ T11] usb 2-1: config 0 descriptor?? [ 309.189625][ T7125] SQUASHFS error: xz decompression failed, data probably corrupt [ 309.193241][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 309.198322][ T7125] SQUASHFS error: Failed to read block 0x108: -5 [ 309.212019][ T7125] SQUASHFS error: Unable to read metadata cache entry [106] [ 309.220034][ T7125] SQUASHFS error: Unable to read inode 0x11f [ 309.221271][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.0.391'. [ 309.392120][ T24] usb 3-1: device descriptor read/8, error -71 [ 309.413227][ T42] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 309.613506][ T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 309.622745][ T42] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 309.635351][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 309.645607][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 309.656951][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 309.688915][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 309.751306][ T24] usb 3-1: device descriptor read/8, error -71 [ 309.865611][ T24] usb usb3-port1: unable to enumerate USB device [ 309.899519][ T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 309.909149][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 309.917812][ T42] usb 4-1: Product: syz [ 309.922171][ T42] usb 4-1: Manufacturer: syz [ 310.039866][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 310.049239][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 310.066677][ T7128] loop0: detected capacity change from 0 to 32768 [ 310.078920][ T11] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.090952][ T11] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 310.114173][ T11] usb 2-1: USB disconnect, device number 28 [ 310.122034][ T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 310.128650][ T42] cdc_wdm 4-1:1.0: Unknown control protocol [ 310.243924][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 310.300979][ T7128] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 310.301134][ T7128] allowing incompatible features above 0.0: (unknown version) [ 310.301211][ T7128] features: [ 310.335840][ T7128] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 310.344343][ T7128] bcachefs (loop0): initializing new filesystem [ 310.365933][ T7128] bcachefs (loop0): going read-write [ 310.382369][ T7128] bcachefs (loop0): marking superblocks [ 310.383275][ T24] usb 5-1: device descriptor read/64, error -71 [ 310.437183][ T7128] bcachefs (loop0): initializing freespace [ 310.465828][ T7128] bcachefs (loop0): done initializing freespace [ 310.485608][ T7128] bcachefs (loop0): reading snapshots table [ 310.491883][ T7128] bcachefs (loop0): reading snapshots done [ 310.594215][ T7128] bcachefs (loop0): done starting filesystem [ 310.643792][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 310.760268][ T7139] loop1: detected capacity change from 0 to 4096 [ 310.823141][ T24] usb 5-1: device descriptor read/64, error -71 [ 310.934598][ T24] usb usb5-port1: attempt power cycle [ 310.997842][ T7128] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 311.148792][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 311.223302][ T5827] bcachefs (loop0): shutting down [ 311.228734][ T5827] bcachefs (loop0): going read-only [ 311.234407][ T5827] bcachefs (loop0): finished waiting for writes to stop [ 311.264069][ T5827] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 311.343108][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 311.415606][ T24] usb 5-1: device descriptor read/8, error -71 [ 311.495818][ T5827] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 311.532271][ T5827] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 311.551236][ T5827] bcachefs (loop0): marking filesystem clean [ 311.603310][ T5827] bcachefs (loop0): shutdown complete [ 311.653594][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 311.711576][ T24] usb 5-1: device descriptor read/8, error -71 [ 311.827706][ T24] usb usb5-port1: unable to enumerate USB device [ 312.184255][ T7158] FAULT_INJECTION: forcing a failure. [ 312.184255][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.199314][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(none) [ 312.199446][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.199525][ T7158] Call Trace: [ 312.199569][ T7158] [ 312.199610][ T7158] __dump_stack+0x26/0x30 [ 312.199781][ T7158] dump_stack_lvl+0x1df/0x270 [ 312.199949][ T7158] dump_stack+0x1e/0x25 [ 312.200098][ T7158] should_fail_ex+0x7dc/0x8a0 [ 312.200257][ T7158] should_fail+0x2a/0x40 [ 312.200386][ T7158] should_fail_usercopy+0x2e/0x40 [ 312.200561][ T7158] _copy_from_user+0x33/0x100 [ 312.200726][ T7158] ___sys_sendmsg+0x11b/0x3b0 [ 312.200931][ T7158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 312.201112][ T7158] ? __rcu_read_unlock+0x6d/0xd0 [ 312.201253][ T7158] ? __fget_files+0x3b4/0x4a0 [ 312.201437][ T7158] ? __fget_files+0x3b9/0x4a0 [ 312.201606][ T7158] ? kmsan_get_metadata+0xfb/0x160 [ 312.201762][ T7158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 312.201928][ T7158] __x64_sys_sendmsg+0x211/0x3e0 [ 312.202116][ T7158] ? fput+0x113/0x160 [ 312.202247][ T7158] ? kmsan_get_metadata+0xfb/0x160 [ 312.202403][ T7158] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 312.202565][ T7158] ? kmsan_get_metadata+0xfb/0x160 [ 312.202730][ T7158] x64_sys_call+0x1dfd/0x3e20 [ 312.202913][ T7158] do_syscall_64+0xd9/0x210 [ 312.203069][ T7158] ? irqentry_exit+0x16/0x60 [ 312.203229][ T7158] ? clear_bhb_loop+0x40/0x90 [ 312.203392][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.203564][ T7158] RIP: 0033:0x7fa9b518eec9 [ 312.203673][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.203812][ T7158] RSP: 002b:00007fa9b33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.203949][ T7158] RAX: ffffffffffffffda RBX: 00007fa9b53e5fa0 RCX: 00007fa9b518eec9 [ 312.204055][ T7158] RDX: 0000000020008014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 312.204152][ T7158] RBP: 00007fa9b33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.204245][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.204331][ T7158] R13: 00007fa9b53e6038 R14: 00007fa9b53e5fa0 R15: 00007ffcbbb298b8 [ 312.204470][ T7158] [ 312.509461][ T2060] usb 4-1: USB disconnect, device number 24 [ 313.406252][ T7168] loop2: detected capacity change from 0 to 32768 [ 313.415992][ T7168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.402 (7168) [ 313.439023][ T7168] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.450055][ T7168] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 313.512907][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 313.530886][ T7168] BTRFS info (device loop2): enabling ssd optimizations [ 313.538510][ T7168] BTRFS info (device loop2): enabling free space tree [ 313.554150][ T7168] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.653206][ T24] usb 5-1: device descriptor read/64, error -71 [ 313.893273][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 314.054286][ T24] usb 5-1: device descriptor read/64, error -71 [ 314.082889][ T2060] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 314.164947][ T24] usb usb5-port1: attempt power cycle [ 314.266384][ T2060] usb 4-1: Using ep0 maxpacket: 8 [ 314.317119][ T2060] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 314.326592][ T2060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.334947][ T2060] usb 4-1: Product: syz [ 314.339291][ T2060] usb 4-1: Manufacturer: syz [ 314.346924][ T2060] usb 4-1: SerialNumber: syz [ 314.375368][ T2060] usb 4-1: config 0 descriptor?? [ 314.513311][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 314.566047][ T24] usb 5-1: device descriptor read/8, error -71 [ 314.604207][ T2060] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.664241][ T2060] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 314.695835][ T2060] usb 4-1: USB disconnect, device number 25 [ 314.822979][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 314.869410][ T24] usb 5-1: device descriptor read/8, error -71 [ 314.995983][ T24] usb usb5-port1: unable to enumerate USB device [ 315.295195][ T7200] loop0: detected capacity change from 0 to 512 [ 315.324123][ T7200] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 315.355988][ T7200] EXT4-fs (loop0): invalid journal inode [ 315.362057][ T7200] EXT4-fs (loop0): can't get journal size [ 315.388965][ T7200] EXT4-fs (loop0): 1 truncate cleaned up [ 315.397257][ T7200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.433739][ T7205] netlink: 72 bytes leftover after parsing attributes in process `syz.3.410'. [ 315.748788][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.193411][ T7205] loop3: detected capacity change from 0 to 32768 [ 316.346130][ T7205] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 316.346276][ T7205] allowing incompatible features above 0.0: (unknown version) [ 316.346349][ T7205] features: [ 316.380828][ T7205] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 316.389353][ T7205] bcachefs (loop3): initializing new filesystem [ 316.410624][ T7205] bcachefs (loop3): going read-write [ 316.425906][ T7219] FAULT_INJECTION: forcing a failure. [ 316.425906][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 316.439332][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(none) [ 316.439464][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.439542][ T7219] Call Trace: [ 316.439590][ T7219] [ 316.439640][ T7219] __dump_stack+0x26/0x30 [ 316.439809][ T7219] dump_stack_lvl+0x1df/0x270 [ 316.439994][ T7219] dump_stack+0x1e/0x25 [ 316.440133][ T7219] should_fail_ex+0x7dc/0x8a0 [ 316.440309][ T7219] should_failslab+0x15b/0x200 [ 316.440466][ T7219] __kmalloc_noprof+0x182/0x1310 [ 316.440635][ T7219] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 316.440815][ T7219] ? tomoyo_path_number_perm+0x71/0x7d0 [ 316.440951][ T7219] ? filter_irq_stacks+0x49/0x190 [ 316.441078][ T7219] ? kmsan_get_metadata+0xfb/0x160 [ 316.441251][ T7219] tomoyo_realpath_from_path+0xeb/0x9f0 [ 316.441445][ T7219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.441617][ T7219] ? __srcu_read_lock+0x5e/0xd0 [ 316.441788][ T7219] tomoyo_path_number_perm+0x1d0/0x7d0 [ 316.441936][ T7219] ? stack_depot_save_flags+0x35/0x7b0 [ 316.442093][ T7219] ? kmsan_get_metadata+0xfb/0x160 [ 316.442241][ T7219] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.442447][ T7219] tomoyo_file_ioctl+0x3d/0x50 [ 316.442651][ T7219] security_file_ioctl+0x141/0x590 [ 316.442802][ T7219] __se_sys_ioctl+0xbb/0x400 [ 316.442958][ T7219] __x64_sys_ioctl+0x97/0xe0 [ 316.443101][ T7219] x64_sys_call+0x1cbc/0x3e20 [ 316.443267][ T7219] do_syscall_64+0xd9/0x210 [ 316.443384][ T7219] ? irqentry_exit+0x16/0x60 [ 316.443538][ T7219] ? clear_bhb_loop+0x40/0x90 [ 316.443676][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.443800][ T7219] RIP: 0033:0x7f936058eec9 [ 316.443889][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.443993][ T7219] RSP: 002b:00007f9361505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.444104][ T7219] RAX: ffffffffffffffda RBX: 00007f93607e5fa0 RCX: 00007f936058eec9 [ 316.444190][ T7219] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 316.444266][ T7219] RBP: 00007f9361505090 R08: 0000000000000000 R09: 0000000000000000 [ 316.444339][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.444410][ T7219] R13: 00007f93607e6038 R14: 00007f93607e5fa0 R15: 00007ffcbe8a0238 [ 316.444527][ T7219] [ 316.467124][ T7223] netlink: 72 bytes leftover after parsing attributes in process `syz.1.415'. [ 316.468186][ T7219] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.704616][ T7219] loop2: detected capacity change from 0 to 7 [ 316.713896][ T2060] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.776636][ T7205] bcachefs (loop3): marking superblocks [ 316.840428][ T7205] bcachefs (loop3): initializing freespace [ 316.867186][ T7205] bcachefs (loop3): done initializing freespace [ 316.886490][ T7205] bcachefs (loop3): reading snapshots table [ 316.892868][ T7205] bcachefs (loop3): reading snapshots done [ 317.000851][ T7226] syzkaller0: entered promiscuous mode [ 317.009244][ T7226] syzkaller0: entered allmulticast mode [ 317.021698][ T2060] usb 3-1: device descriptor read/64, error -71 [ 317.255114][ T7230] Zero length message leads to an empty skb [ 317.264203][ T2060] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 317.335133][ T7223] loop1: detected capacity change from 0 to 32768 [ 317.372214][ T7219] Dev loop2: unable to read RDB block 7 [ 317.378233][ T7219] loop2: unable to read partition table [ 317.404190][ T7205] bcachefs (loop3): done starting filesystem [ 317.424946][ T2060] usb 3-1: device descriptor read/64, error -71 [ 317.471129][ T7219] loop2: partition table beyond EOD, truncated [ 317.478030][ T7219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.547815][ T2060] usb usb3-port1: attempt power cycle [ 317.568034][ T7223] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 317.568201][ T7223] allowing incompatible features above 0.0: (unknown version) [ 317.568286][ T7223] features: [ 317.603939][ T7223] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 317.613086][ T7223] bcachefs (loop1): initializing new filesystem [ 317.637356][ T7223] bcachefs (loop1): going read-write [ 317.754144][ T7223] bcachefs (loop1): marking superblocks [ 317.805553][ T7223] bcachefs (loop1): initializing freespace [ 317.845143][ T7205] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 317.848164][ T7223] bcachefs (loop1): done initializing freespace [ 317.875167][ T7223] bcachefs (loop1): reading snapshots table [ 317.881493][ T7223] bcachefs (loop1): reading snapshots done [ 317.999888][ T7223] bcachefs (loop1): done starting filesystem [ 318.044480][ T2060] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 318.087572][ T2060] usb 3-1: device descriptor read/8, error -71 [ 318.286045][ T5826] bcachefs (loop3): shutting down [ 318.291257][ T5826] bcachefs (loop3): going read-only [ 318.297078][ T5826] bcachefs (loop3): finished waiting for writes to stop [ 318.309848][ T5826] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 318.334047][ T2060] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 318.363140][ T5826] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 318.423995][ T2060] usb 3-1: device descriptor read/8, error -71 [ 318.437045][ T5826] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 318.455607][ T5826] bcachefs (loop3): marking filesystem clean [ 318.523152][ T11] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 318.538493][ T2060] usb usb3-port1: unable to enumerate USB device [ 318.610352][ T7223] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 318.639734][ T5826] bcachefs (loop3): shutdown complete [ 318.758235][ T11] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.767982][ T11] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 318.779299][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.788702][ T11] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 318.800735][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 318.813403][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 318.890324][ T11] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.900100][ T11] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.908471][ T11] usb 5-1: Product: syz [ 318.913385][ T11] usb 5-1: Manufacturer: syz [ 318.929926][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 318.935486][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 318.940965][ T11] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 319.039770][ T5818] bcachefs (loop1): shutting down [ 319.045973][ T5818] bcachefs (loop1): going read-only [ 319.051380][ T5818] bcachefs (loop1): finished waiting for writes to stop [ 319.083940][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 319.091120][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 319.097275][ T5818] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 319.107065][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 319.113461][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 319.114387][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 319.179789][ T5818] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5 [ 319.251734][ T5818] bcachefs (loop1): clean shutdown complete, journal seq 6 [ 319.284574][ T5818] bcachefs (loop1): marking filesystem clean [ 319.409693][ T5818] bcachefs (loop1): shutdown complete [ 320.046750][ T11] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 320.192915][ T11] usb 1-1: device descriptor read/64, error -71 [ 320.453062][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 320.612871][ T11] usb 1-1: device descriptor read/64, error -71 [ 320.723888][ T11] usb usb1-port1: attempt power cycle [ 320.776640][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 320.956861][ T42] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 320.966200][ T42] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 320.976706][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.027026][ T42] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.036943][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.045353][ T42] usb 4-1: Product: syz [ 321.049690][ T42] usb 4-1: Manufacturer: syz [ 321.054638][ T42] usb 4-1: SerialNumber: syz [ 321.065066][ T11] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 321.127819][ T11] usb 1-1: device descriptor read/8, error -71 [ 321.383192][ T11] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 321.435823][ T11] usb 1-1: device descriptor read/8, error -71 [ 321.491616][ T24] usb 5-1: USB disconnect, device number 33 [ 321.523126][ T7264] FAULT_INJECTION: forcing a failure. [ 321.523126][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.536940][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.1.423 Not tainted syzkaller #0 PREEMPT(none) [ 321.537081][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.537163][ T7264] Call Trace: [ 321.537230][ T7264] [ 321.537281][ T7264] __dump_stack+0x26/0x30 [ 321.537472][ T7264] dump_stack_lvl+0x1df/0x270 [ 321.537659][ T7264] dump_stack+0x1e/0x25 [ 321.537824][ T7264] should_fail_ex+0x7dc/0x8a0 [ 321.538002][ T7264] should_fail+0x2a/0x40 [ 321.538145][ T7264] should_fail_usercopy+0x2e/0x40 [ 321.538317][ T7264] _copy_to_user+0x35/0x120 [ 321.538505][ T7264] simple_read_from_buffer+0x1b2/0x340 [ 321.538697][ T7264] proc_fail_nth_read+0x1e0/0x2d0 [ 321.538863][ T7264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.539019][ T7264] vfs_read+0x279/0xf90 [ 321.539200][ T7264] ? stack_depot_save_flags+0x35/0x7b0 [ 321.539361][ T7264] ? kmsan_get_metadata+0xfb/0x160 [ 321.539551][ T7264] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 321.539737][ T7264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 321.539926][ T7264] __x64_sys_read+0x1fb/0x4d0 [ 321.540124][ T7264] x64_sys_call+0x2f9c/0x3e20 [ 321.540322][ T7264] do_syscall_64+0xd9/0x210 [ 321.540468][ T7264] ? irqentry_exit+0x16/0x60 [ 321.540652][ T7264] ? clear_bhb_loop+0x40/0x90 [ 321.540815][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.540981][ T7264] RIP: 0033:0x7fa9b518d8dc [ 321.541085][ T7264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.541213][ T7264] RSP: 002b:00007fa9b33f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.541354][ T7264] RAX: ffffffffffffffda RBX: 00007fa9b53e5fa0 RCX: 00007fa9b518d8dc [ 321.541457][ T7264] RDX: 000000000000000f RSI: 00007fa9b33f60a0 RDI: 0000000000000004 [ 321.541545][ T7264] RBP: 00007fa9b33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 321.541630][ T7264] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 321.541718][ T7264] R13: 00007fa9b53e6038 R14: 00007fa9b53e5fa0 R15: 00007ffcbbb298b8 [ 321.541850][ T7264] [ 321.564442][ T11] usb usb1-port1: unable to enumerate USB device [ 321.679156][ T7262] loop3: detected capacity change from 0 to 2048 [ 321.849602][ T7262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.020268][ T7268] syzkaller0: entered promiscuous mode [ 322.029616][ T7268] syzkaller0: entered allmulticast mode [ 322.292060][ T7274] netlink: 72 bytes leftover after parsing attributes in process `syz.1.430'. [ 323.038165][ T7274] loop1: detected capacity change from 0 to 32768 [ 323.197613][ T7274] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 323.197779][ T7274] allowing incompatible features above 0.0: (unknown version) [ 323.197864][ T7274] features: [ 323.232356][ T7274] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 323.240885][ T7274] bcachefs (loop1): initializing new filesystem [ 323.259227][ T7274] bcachefs (loop1): going read-write [ 323.288423][ T7274] bcachefs (loop1): marking superblocks [ 323.349264][ T7274] bcachefs (loop1): initializing freespace [ 323.359328][ T7262] capability: warning: `syz.3.420' uses 32-bit capabilities (legacy support in use) [ 323.379093][ T7274] bcachefs (loop1): done initializing freespace [ 323.404118][ T7274] bcachefs (loop1): reading snapshots table [ 323.410395][ T7274] bcachefs (loop1): reading snapshots done [ 323.529981][ T7274] bcachefs (loop1): done starting filesystem [ 323.741357][ T42] usb 4-1: 0:2 : does not exist [ 323.864600][ T7274] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 323.901757][ T42] usb 4-1: USB disconnect, device number 26 [ 324.203129][ T5818] bcachefs (loop1): shutting down [ 324.208378][ T5818] bcachefs (loop1): going read-only [ 324.214317][ T5818] bcachefs (loop1): finished waiting for writes to stop [ 324.285686][ T5818] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 324.344837][ T7301] fuse: Unknown parameter 'fd0x0000000000000003' [ 324.588276][ T5818] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5 [ 324.601320][ T5818] bcachefs (loop1): clean shutdown complete, journal seq 6 [ 324.606158][ T5818] bcachefs (loop1): marking filesystem clean [ 324.763735][ T11] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 324.871693][ T5818] bcachefs (loop1): shutdown complete [ 324.933531][ T7308] loop3: detected capacity change from 0 to 1024 [ 324.940854][ T7308] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.971817][ T11] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.971952][ T11] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 324.972074][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.972244][ T11] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 324.972404][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 324.977844][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 324.995015][ T7308] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.438: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.996989][ T7308] Quota error (device loop3): write_blk: dquota write failed [ 324.997164][ T7308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 324.997420][ T7308] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.438: Failed to acquire dquot type 0 [ 324.999155][ T7308] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.438: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.000612][ T7308] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.438: Invalid inode bitmap blk 0 in block_group 0 [ 325.001570][ T7308] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 325.005120][ T7308] EXT4-fs (loop3): 1 orphan inode deleted [ 325.008762][ T7308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.013964][ T3876] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.016546][ T11] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.016710][ T11] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.016831][ T11] usb 5-1: Product: syz [ 325.016926][ T11] usb 5-1: Manufacturer: syz [ 325.019459][ T3876] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 325.019624][ T3876] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 325.057341][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 325.057442][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 325.057708][ T11] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 325.120772][ T7308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.460717][ T7315] syzkaller0: entered promiscuous mode [ 325.602649][ T7315] syzkaller0: entered allmulticast mode [ 325.797061][ T7322] FAULT_INJECTION: forcing a failure. [ 325.797061][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.812999][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(none) [ 325.813156][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.813236][ T7322] Call Trace: [ 325.813349][ T7322] [ 325.813402][ T7322] __dump_stack+0x26/0x30 [ 325.813610][ T7322] dump_stack_lvl+0x1df/0x270 [ 325.813807][ T7322] dump_stack+0x1e/0x25 [ 325.813988][ T7322] should_fail_ex+0x7dc/0x8a0 [ 325.814176][ T7322] should_fail+0x2a/0x40 [ 325.814314][ T7322] should_fail_usercopy+0x2e/0x40 [ 325.814478][ T7322] _copy_from_user+0x33/0x100 [ 325.814669][ T7322] ucma_write+0x156/0x5b0 [ 325.814821][ T7322] ? kmsan_get_metadata+0xfb/0x160 [ 325.815015][ T7322] ? __pfx_ucma_write+0x10/0x10 [ 325.815167][ T7322] vfs_writev+0xb34/0x1500 [ 325.815308][ T7322] ? __pfx_ucma_write+0x10/0x10 [ 325.815496][ T7322] ? kmsan_get_metadata+0xfb/0x160 [ 325.815646][ T7322] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.815816][ T7322] do_writev+0x1b5/0x580 [ 325.815933][ T7322] ? kmsan_get_metadata+0xfb/0x160 [ 325.816125][ T7322] __x64_sys_writev+0x99/0xf0 [ 325.816320][ T7322] x64_sys_call+0x24b1/0x3e20 [ 325.816513][ T7322] do_syscall_64+0xd9/0x210 [ 325.816653][ T7322] ? irqentry_exit+0x16/0x60 [ 325.816835][ T7322] ? clear_bhb_loop+0x40/0x90 [ 325.816998][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.817151][ T7322] RIP: 0033:0x7f01f658eec9 [ 325.817256][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.817386][ T7322] RSP: 002b:00007f01f73e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 325.817517][ T7322] RAX: ffffffffffffffda RBX: 00007f01f67e5fa0 RCX: 00007f01f658eec9 [ 325.817620][ T7322] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 325.817712][ T7322] RBP: 00007f01f73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.817802][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.817887][ T7322] R13: 00007f01f67e6038 R14: 00007f01f67e5fa0 R15: 00007ffe29194358 [ 325.818028][ T7322] [ 326.241038][ T7327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.444'. [ 327.004251][ T7327] loop2: detected capacity change from 0 to 32768 [ 327.176859][ T7327] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 327.177016][ T7327] allowing incompatible features above 0.0: (unknown version) [ 327.177094][ T7327] features: [ 327.211441][ T7327] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 327.220013][ T7327] bcachefs (loop2): initializing new filesystem [ 327.239862][ T7327] bcachefs (loop2): going read-write [ 327.267524][ T7327] bcachefs (loop2): marking superblocks [ 327.318215][ T7327] bcachefs (loop2): initializing freespace [ 327.345800][ T7327] bcachefs (loop2): done initializing freespace [ 327.368169][ T7327] bcachefs (loop2): reading snapshots table [ 327.374688][ T7327] bcachefs (loop2): reading snapshots done [ 327.468073][ T7327] bcachefs (loop2): done starting filesystem [ 327.838901][ T42] usb 5-1: USB disconnect, device number 34 [ 328.059568][ T7327] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 328.367098][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 328.531736][ T5815] bcachefs (loop2): shutting down [ 328.537280][ T5815] bcachefs (loop2): going read-only [ 328.542892][ T5815] bcachefs (loop2): finished waiting for writes to stop [ 328.584787][ T42] usb 1-1: config 255 has an invalid interface number: 181 but max is 0 [ 328.594047][ T42] usb 1-1: config 255 has no interface number 0 [ 328.600517][ T42] usb 1-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 328.612176][ T42] usb 1-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 328.646717][ T5815] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 328.657979][ T42] usb 1-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 328.667792][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.676303][ T42] usb 1-1: Product: syz [ 328.682914][ T42] usb 1-1: Manufacturer: syz [ 328.687693][ T42] usb 1-1: SerialNumber: syz [ 328.737900][ T7351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.791427][ T5815] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 328.818804][ T5815] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 328.863791][ T5815] bcachefs (loop2): marking filesystem clean [ 328.954439][ T5815] bcachefs (loop2): shutdown complete [ 329.102155][ T42] ti_usb_3410_5052 1-1:255.181: TI USB 3410 1 port adapter converter detected [ 329.112038][ T42] ti_usb_3410_5052 1-1:255.181: missing endpoints [ 329.169295][ T42] usb 1-1: USB disconnect, device number 21 [ 329.207210][ T7358] loop4: detected capacity change from 0 to 1024 [ 329.292146][ T7358] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.385646][ T7358] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.451: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.447321][ T7363] syzkaller0: entered promiscuous mode [ 329.453100][ T7363] syzkaller0: entered allmulticast mode [ 329.460182][ T7358] Quota error (device loop4): write_blk: dquota write failed [ 329.468249][ T7358] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 329.479402][ T7358] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.451: Failed to acquire dquot type 0 [ 329.557388][ T7358] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.451: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.597432][ T7358] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.451: Invalid inode bitmap blk 0 in block_group 0 [ 329.709735][ T7358] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 329.756407][ T7358] EXT4-fs (loop4): 1 orphan inode deleted [ 329.764600][ T7358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.246056][ T7365] loop1: detected capacity change from 0 to 32768 [ 330.261798][ T7365] bcachefs (/dev/loop1): error reading default superblock: Unsupported superblock version_min 0.2: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 330.282872][ T7365] bcachefs (/dev/loop1): error validating superblock: Not a bcachefs superblock (got magic 00000000-0000-0000-0000-000000000000)Bad sb offset (got 288230376151715840, read from 4096) [ 330.294311][ T35] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.302000][ T7365] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 330.396111][ T35] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 330.405240][ T35] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 330.530566][ T7358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.795405][ T7365] comedi comedi0: Cannot bond this driver to itself! [ 331.133162][ T7379] netlink: 72 bytes leftover after parsing attributes in process `syz.3.459'. [ 331.580803][ T7380] fuse: Bad value for 'rootmode' [ 331.922954][ T7379] loop3: detected capacity change from 0 to 32768 [ 331.934487][ T2060] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 332.186342][ T7379] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 332.186502][ T7379] allowing incompatible features above 0.0: (unknown version) [ 332.186584][ T7379] features: [ 332.221840][ T7379] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 332.230296][ T7379] bcachefs (loop3): initializing new filesystem [ 332.250915][ T7379] bcachefs (loop3): going read-write [ 332.280352][ T2060] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.289298][ T2060] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 332.299799][ T2060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.309106][ T2060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 332.320475][ T2060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 332.348599][ T7379] bcachefs (loop3): marking superblocks [ 332.402801][ T7379] bcachefs (loop3): initializing freespace [ 332.430496][ T7379] bcachefs (loop3): done initializing freespace [ 332.450492][ T7379] bcachefs (loop3): reading snapshots table [ 332.456909][ T7379] bcachefs (loop3): reading snapshots done [ 332.531173][ T2060] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.540772][ T2060] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.549259][ T2060] usb 5-1: Product: syz [ 332.553799][ T2060] usb 5-1: Manufacturer: syz [ 332.618723][ T2060] cdc_wdm 5-1:1.0: skipping garbage [ 332.624287][ T2060] cdc_wdm 5-1:1.0: skipping garbage [ 332.643143][ T2060] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 332.649264][ T2060] cdc_wdm 5-1:1.0: Unknown control protocol [ 332.681772][ T7379] bcachefs (loop3): done starting filesystem [ 333.222867][ T7379] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 333.279640][ T7406] loop1: detected capacity change from 0 to 8 [ 333.719295][ T5826] bcachefs (loop3): shutting down [ 333.725953][ T5826] bcachefs (loop3): going read-only [ 333.731394][ T5826] bcachefs (loop3): finished waiting for writes to stop [ 333.787941][ T5826] bcachefs (loop3): flushing journal and stopping allocators, journal seq 6 [ 333.970513][ T5826] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 6 [ 334.017258][ T5826] bcachefs (loop3): clean shutdown complete, journal seq 7 [ 334.031761][ T5826] bcachefs (loop3): marking filesystem clean [ 334.136717][ T5826] bcachefs (loop3): shutdown complete [ 334.493546][ T2060] usb 5-1: USB disconnect, device number 35 [ 334.963413][ T2060] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 335.033137][ T42] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 335.159357][ T2060] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.168589][ T2060] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.179106][ T2060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.188537][ T2060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.199842][ T2060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.203623][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 335.264370][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 335.281959][ T2060] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.291813][ T2060] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.300117][ T2060] usb 5-1: Product: syz [ 335.304616][ T2060] usb 5-1: Manufacturer: syz [ 335.349420][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.352801][ T2060] cdc_wdm 5-1:1.0: skipping garbage [ 335.359106][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.364115][ T2060] cdc_wdm 5-1:1.0: skipping garbage [ 335.377977][ T42] usb 2-1: Product: syz [ 335.382320][ T42] usb 2-1: Manufacturer: syz [ 335.387325][ T42] usb 2-1: SerialNumber: syz [ 335.396799][ T2060] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 335.403164][ T2060] cdc_wdm 5-1:1.0: Unknown control protocol [ 335.509960][ T7424] FAULT_INJECTION: forcing a failure. [ 335.509960][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.523952][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(none) [ 335.524083][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.524156][ T7424] Call Trace: [ 335.524203][ T7424] [ 335.524248][ T7424] __dump_stack+0x26/0x30 [ 335.524402][ T7424] dump_stack_lvl+0x1df/0x270 [ 335.524569][ T7424] dump_stack+0x1e/0x25 [ 335.524716][ T7424] should_fail_ex+0x7dc/0x8a0 [ 335.524891][ T7424] should_fail+0x2a/0x40 [ 335.525027][ T7424] should_fail_usercopy+0x2e/0x40 [ 335.525184][ T7424] _copy_from_user+0x33/0x100 [ 335.525346][ T7424] do_sock_getsockopt+0x1d0/0x580 [ 335.525574][ T7424] __x64_sys_getsockopt+0x32e/0x520 [ 335.525758][ T7424] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 335.525956][ T7424] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 335.526134][ T7424] x64_sys_call+0x36e0/0x3e20 [ 335.526328][ T7424] do_syscall_64+0xd9/0x210 [ 335.526481][ T7424] ? clear_bhb_loop+0x40/0x90 [ 335.526632][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.526783][ T7424] RIP: 0033:0x7f01f658eec9 [ 335.526884][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.527010][ T7424] RSP: 002b:00007f01f73e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 335.527153][ T7424] RAX: ffffffffffffffda RBX: 00007f01f67e5fa0 RCX: 00007f01f658eec9 [ 335.527257][ T7424] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 335.527341][ T7424] RBP: 00007f01f73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.527452][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.527546][ T7424] R13: 00007f01f67e6038 R14: 00007f01f67e5fa0 R15: 00007ffe29194358 [ 335.527684][ T7424] [ 335.739267][ T42] cdc_ncm 2-1:1.0: bind() failure [ 335.759985][ T42] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 335.767325][ T42] cdc_ncm 2-1:1.1: bind() failure [ 335.834658][ T42] usb 2-1: USB disconnect, device number 29 [ 336.732147][ T7430] fuse: Bad value for 'rootmode' [ 337.325806][ T42] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 337.361809][ T7438] netlink: 72 bytes leftover after parsing attributes in process `syz.0.475'. [ 337.533557][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.544701][ T42] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 337.554288][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.705240][ T42] usb 4-1: config 0 descriptor?? [ 337.789018][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 338.143798][ T7438] loop0: detected capacity change from 0 to 32768 [ 338.200824][ T5904] usb 5-1: USB disconnect, device number 36 [ 338.230256][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 338.272456][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 338.313948][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 338.318856][ T7438] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 338.343347][ T7438] allowing incompatible features above 0.0: (unknown version) [ 338.351136][ T7438] features: [ 338.354995][ T7438] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 338.369631][ T7438] bcachefs (loop0): initializing new filesystem [ 338.376272][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 338.388454][ T7438] bcachefs (loop0): going read-write [ 338.415752][ T7438] bcachefs (loop0): marking superblocks [ 338.416223][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 338.466348][ T7438] bcachefs (loop0): initializing freespace [ 338.482893][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 338.494460][ T7438] bcachefs (loop0): done initializing freespace [ 338.496291][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 338.517522][ T7438] bcachefs (loop0): reading snapshots table [ 338.523904][ T7438] bcachefs (loop0): reading snapshots done [ 338.558960][ T24] usb 2-1: descriptor type invalid, skip [ 338.565077][ T24] usb 2-1: descriptor type invalid, skip [ 338.607910][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 338.616201][ T7438] bcachefs (loop0): done starting filesystem [ 338.652462][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.663220][ T24] usb 2-1: config 0 has no interfaces? [ 338.696787][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 338.728687][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 338.738447][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.746962][ T24] usb 2-1: Product: syz [ 338.751303][ T24] usb 2-1: Manufacturer: syz [ 338.756249][ T24] usb 2-1: SerialNumber: syz [ 338.773547][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 338.802403][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 338.812009][ T42] pwc: recv_control_msg error -32 req 02 val 2500 [ 338.827520][ T24] usb 2-1: config 0 descriptor?? [ 338.836456][ T42] pwc: recv_control_msg error -32 req 02 val 2400 [ 338.849274][ T42] pwc: recv_control_msg error -32 req 02 val 2600 [ 338.903342][ T42] pwc: recv_control_msg error -32 req 02 val 2900 [ 338.984307][ T7438] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 339.119851][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.135779][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.147476][ T42] pwc: Registered as video103. [ 339.155046][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 339.175424][ T42] usb 4-1: USB disconnect, device number 27 [ 339.326861][ T24] usb 2-1: USB disconnect, device number 30 [ 339.346725][ T5827] bcachefs (loop0): shutting down [ 339.352020][ T5827] bcachefs (loop0): going read-only [ 339.358466][ T5827] bcachefs (loop0): finished waiting for writes to stop [ 339.380191][ T5827] bcachefs (loop0): flushing journal and stopping allocators, journal seq 5 [ 339.503190][ T5827] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 339.515781][ T5827] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 339.528729][ T5827] bcachefs (loop0): marking filesystem clean [ 339.574343][ T5827] bcachefs (loop0): shutdown complete [ 340.621793][ T2060] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.833892][ T2060] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.844347][ T2060] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.854793][ T2060] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.866055][ T2060] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.877211][ T2060] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.114937][ T7478] fuse: Bad value for 'rootmode' [ 341.115133][ T2060] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.129671][ T2060] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.138081][ T2060] usb 2-1: Product: syz [ 341.142416][ T2060] usb 2-1: Manufacturer: syz [ 341.196352][ T2060] cdc_wdm 2-1:1.0: skipping garbage [ 341.201762][ T2060] cdc_wdm 2-1:1.0: skipping garbage [ 341.214898][ T2060] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 341.221092][ T2060] cdc_wdm 2-1:1.0: Unknown control protocol [ 342.114273][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 342.169534][ T7487] loop4: detected capacity change from 0 to 2048 [ 342.180680][ T7487] nilfs2: Unknown parameter '0x0000000000000000' [ 342.339530][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.349312][ T24] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 342.356946][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.366324][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.455300][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.465254][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.473675][ T24] usb 3-1: Product: syz [ 342.478012][ T24] usb 3-1: Manufacturer: syz [ 342.533406][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 342.538875][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 342.696143][ T7489] process 'syz.0.481' launched './file0' with NULL argv: empty string added [ 342.846377][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 342.869662][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 342.901579][ C1] hrtimer: interrupt took 221834 ns [ 342.955738][ T7489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 343.036272][ T7487] loop4: detected capacity change from 0 to 32768 [ 343.053349][ T7487] btrfs: Unknown parameter 'inode_cache' [ 343.525427][ T7487] loop4: detected capacity change from 0 to 22 [ 343.544797][ T7487] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 343.625851][ T2060] usb 2-1: USB disconnect, device number 31 [ 343.759832][ T7500] FAULT_INJECTION: forcing a failure. [ 343.759832][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 343.773496][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(none) [ 343.773621][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.773696][ T7500] Call Trace: [ 343.773742][ T7500] [ 343.773786][ T7500] __dump_stack+0x26/0x30 [ 343.773941][ T7500] dump_stack_lvl+0x1df/0x270 [ 343.774102][ T7500] dump_stack+0x1e/0x25 [ 343.774242][ T7500] should_fail_ex+0x7dc/0x8a0 [ 343.774392][ T7500] should_failslab+0x15b/0x200 [ 343.774586][ T7500] __kvmalloc_node_noprof+0x24c/0x1530 [ 343.774779][ T7500] ? seq_read_iter+0x4a0/0x2200 [ 343.774919][ T7500] ? kmsan_get_metadata+0xfb/0x160 [ 343.775085][ T7500] seq_read_iter+0x4a0/0x2200 [ 343.775216][ T7500] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 343.775358][ T7500] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 343.775513][ T7500] ? kmsan_get_metadata+0xfb/0x160 [ 343.775668][ T7500] seq_read+0x592/0x670 [ 343.775819][ T7500] ? __pfx_seq_read+0x10/0x10 [ 343.775934][ T7500] full_proxy_read+0x1a7/0x380 [ 343.776074][ T7500] ? __pfx_full_proxy_read+0x10/0x10 [ 343.776199][ T7500] vfs_read+0x279/0xf90 [ 343.776332][ T7500] ? stack_depot_save_flags+0x35/0x7b0 [ 343.776471][ T7500] ? kmsan_get_metadata+0xfb/0x160 [ 343.776619][ T7500] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 343.776785][ T7500] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 343.776980][ T7500] __x64_sys_read+0x1fb/0x4d0 [ 343.777194][ T7500] x64_sys_call+0x2f9c/0x3e20 [ 343.777394][ T7500] do_syscall_64+0xd9/0x210 [ 343.777588][ T7500] ? irqentry_exit+0x16/0x60 [ 343.777774][ T7500] ? clear_bhb_loop+0x40/0x90 [ 343.777932][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.778088][ T7500] RIP: 0033:0x7f3e4ad8eec9 [ 343.778203][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.778335][ T7500] RSP: 002b:00007f3e4bcff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.778521][ T7500] RAX: ffffffffffffffda RBX: 00007f3e4afe5fa0 RCX: 00007f3e4ad8eec9 [ 343.778641][ T7500] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000003 [ 343.778733][ T7500] RBP: 00007f3e4bcff090 R08: 0000000000000000 R09: 0000000000000000 [ 343.778828][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.778915][ T7500] R13: 00007f3e4afe6038 R14: 00007f3e4afe5fa0 R15: 00007ffc976290f8 [ 343.779052][ T7500] [ 344.329190][ T7506] loop3: detected capacity change from 0 to 128 [ 344.340176][ T7506] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 345.279642][ T24] usb 3-1: USB disconnect, device number 24 [ 345.497323][ T7517] fuse: Unknown parameter 'use00000000000000000000' [ 345.786689][ T7528] FAULT_INJECTION: forcing a failure. [ 345.786689][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.800473][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.2.504 Not tainted syzkaller #0 PREEMPT(none) [ 345.800618][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.800697][ T7528] Call Trace: [ 345.800744][ T7528] [ 345.800794][ T7528] __dump_stack+0x26/0x30 [ 345.800962][ T7528] dump_stack_lvl+0x1df/0x270 [ 345.801133][ T7528] dump_stack+0x1e/0x25 [ 345.801284][ T7528] should_fail_ex+0x7dc/0x8a0 [ 345.801443][ T7528] should_fail+0x2a/0x40 [ 345.801578][ T7528] should_fail_usercopy+0x2e/0x40 [ 345.801727][ T7528] _copy_from_user+0x33/0x100 [ 345.801887][ T7528] ___sys_sendmsg+0x11b/0x3b0 [ 345.802072][ T7528] ? kmsan_get_metadata+0xfb/0x160 [ 345.802229][ T7528] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.802399][ T7528] ? __rcu_read_unlock+0x6d/0xd0 [ 345.802546][ T7528] ? __fget_files+0x3b4/0x4a0 [ 345.802715][ T7528] ? __fget_files+0x3b9/0x4a0 [ 345.802887][ T7528] ? kmsan_get_metadata+0xfb/0x160 [ 345.803038][ T7528] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.803204][ T7528] __sys_sendmmsg+0x2d9/0x7c0 [ 345.803379][ T7528] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 345.803535][ T7528] ? vfs_write+0x13e2/0x15d0 [ 345.803689][ T7528] ? kmsan_get_metadata+0xfb/0x160 [ 345.803842][ T7528] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 345.803994][ T7528] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 345.804174][ T7528] __x64_sys_sendmmsg+0xc6/0x150 [ 345.804374][ T7528] x64_sys_call+0x21de/0x3e20 [ 345.804563][ T7528] do_syscall_64+0xd9/0x210 [ 345.804707][ T7528] ? irqentry_exit+0x16/0x60 [ 345.804878][ T7528] ? clear_bhb_loop+0x40/0x90 [ 345.805020][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.805176][ T7528] RIP: 0033:0x7f01f658eec9 [ 345.805273][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.805392][ T7528] RSP: 002b:00007f01f73e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.805527][ T7528] RAX: ffffffffffffffda RBX: 00007f01f67e5fa0 RCX: 00007f01f658eec9 [ 345.805619][ T7528] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 345.805721][ T7528] RBP: 00007f01f73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 345.805814][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.805888][ T7528] R13: 00007f01f67e6038 R14: 00007f01f67e5fa0 R15: 00007ffe29194358 [ 345.806007][ T7528] [ 346.252843][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 346.390522][ T7537] FAULT_INJECTION: forcing a failure. [ 346.390522][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 346.406231][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz.1.508 Not tainted syzkaller #0 PREEMPT(none) [ 346.406357][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.406432][ T7537] Call Trace: [ 346.406475][ T7537] [ 346.406529][ T7537] __dump_stack+0x26/0x30 [ 346.406683][ T7537] dump_stack_lvl+0x1df/0x270 [ 346.406844][ T7537] dump_stack+0x1e/0x25 [ 346.406987][ T7537] should_fail_ex+0x7dc/0x8a0 [ 346.407153][ T7537] should_failslab+0x15b/0x200 [ 346.407316][ T7537] __kmalloc_noprof+0x182/0x1310 [ 346.407517][ T7537] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 346.407708][ T7537] ? tomoyo_path_number_perm+0x71/0x7d0 [ 346.407860][ T7537] ? filter_irq_stacks+0x49/0x190 [ 346.407990][ T7537] ? kmsan_get_metadata+0xfb/0x160 [ 346.408185][ T7537] tomoyo_realpath_from_path+0xeb/0x9f0 [ 346.408385][ T7537] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.408589][ T7537] ? __srcu_read_lock+0x5e/0xd0 [ 346.408767][ T7537] tomoyo_path_number_perm+0x1d0/0x7d0 [ 346.408916][ T7537] ? stack_depot_save_flags+0x35/0x7b0 [ 346.409072][ T7537] ? kmsan_get_metadata+0xfb/0x160 [ 346.409221][ T7537] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 346.409429][ T7537] tomoyo_file_ioctl+0x3d/0x50 [ 346.409627][ T7537] security_file_ioctl+0x141/0x590 [ 346.409771][ T7537] __se_sys_ioctl+0xbb/0x400 [ 346.409930][ T7537] __x64_sys_ioctl+0x97/0xe0 [ 346.410078][ T7537] x64_sys_call+0x1cbc/0x3e20 [ 346.410255][ T7537] do_syscall_64+0xd9/0x210 [ 346.410396][ T7537] ? irqentry_exit+0x16/0x60 [ 346.410567][ T7537] ? clear_bhb_loop+0x40/0x90 [ 346.410704][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.410860][ T7537] RIP: 0033:0x7fa9b518eec9 [ 346.410965][ T7537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.411109][ T7537] RSP: 002b:00007fa9b33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.411230][ T7537] RAX: ffffffffffffffda RBX: 00007fa9b53e5fa0 RCX: 00007fa9b518eec9 [ 346.411342][ T7537] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000004 [ 346.411421][ T7537] RBP: 00007fa9b33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 346.411513][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.411593][ T7537] R13: 00007fa9b53e6038 R14: 00007fa9b53e5fa0 R15: 00007ffcbbb298b8 [ 346.411750][ T7537] [ 346.411796][ T7537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.699070][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.710196][ T24] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 346.721364][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.730777][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 346.742187][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 346.764585][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.774176][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.782390][ T24] usb 5-1: Product: syz [ 346.787117][ T24] usb 5-1: Manufacturer: syz [ 346.808914][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 346.814632][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 346.820116][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 346.897309][ T7541] loop0: detected capacity change from 0 to 128 [ 346.908768][ T7541] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 347.289313][ T7549] FAULT_INJECTION: forcing a failure. [ 347.289313][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 347.302868][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.0.514 Not tainted syzkaller #0 PREEMPT(none) [ 347.303000][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.303082][ T7549] Call Trace: [ 347.303129][ T7549] [ 347.303185][ T7549] __dump_stack+0x26/0x30 [ 347.303346][ T7549] dump_stack_lvl+0x1df/0x270 [ 347.303543][ T7549] dump_stack+0x1e/0x25 [ 347.303707][ T7549] should_fail_ex+0x7dc/0x8a0 [ 347.303903][ T7549] should_failslab+0x15b/0x200 [ 347.304078][ T7549] __kmalloc_noprof+0x182/0x1310 [ 347.304267][ T7549] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 347.304449][ T7549] ? tomoyo_path_number_perm+0x71/0x7d0 [ 347.304604][ T7549] ? filter_irq_stacks+0x49/0x190 [ 347.304729][ T7549] ? kmsan_get_metadata+0xfb/0x160 [ 347.304903][ T7549] tomoyo_realpath_from_path+0xeb/0x9f0 [ 347.305110][ T7549] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.305301][ T7549] ? __srcu_read_lock+0x5e/0xd0 [ 347.305477][ T7549] tomoyo_path_number_perm+0x1d0/0x7d0 [ 347.305638][ T7549] ? stack_depot_save_flags+0x35/0x7b0 [ 347.305794][ T7549] ? kmsan_get_metadata+0xfb/0x160 [ 347.305948][ T7549] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 347.306178][ T7549] tomoyo_file_ioctl+0x3d/0x50 [ 347.306374][ T7549] security_file_ioctl+0x141/0x590 [ 347.306516][ T7549] __se_sys_ioctl+0xbb/0x400 [ 347.306672][ T7549] __x64_sys_ioctl+0x97/0xe0 [ 347.306822][ T7549] x64_sys_call+0x1cbc/0x3e20 [ 347.307018][ T7549] do_syscall_64+0xd9/0x210 [ 347.307196][ T7549] ? irqentry_exit+0x16/0x60 [ 347.307398][ T7549] ? clear_bhb_loop+0x40/0x90 [ 347.307567][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.307722][ T7549] RIP: 0033:0x7f936058eec9 [ 347.307832][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.307961][ T7549] RSP: 002b:00007f9361505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.308101][ T7549] RAX: ffffffffffffffda RBX: 00007f93607e5fa0 RCX: 00007f936058eec9 [ 347.308214][ T7549] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 347.308308][ T7549] RBP: 00007f9361505090 R08: 0000000000000000 R09: 0000000000000000 [ 347.308399][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.308504][ T7549] R13: 00007f93607e6038 R14: 00007f93607e5fa0 R15: 00007ffcbe8a0238 [ 347.308646][ T7549] [ 347.308696][ T7549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.589837][ T7566] loop1: detected capacity change from 0 to 8 [ 348.787750][ T24] usb 5-1: USB disconnect, device number 37 [ 348.871373][ T7571] loop0: detected capacity change from 0 to 128 [ 348.880379][ T7571] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 349.168848][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 350.340269][ T7586] loop3: detected capacity change from 0 to 32768 [ 350.356050][ T2060] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 350.608675][ T2060] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.617857][ T2060] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 350.628609][ T2060] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.637977][ T2060] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.837198][ T7586] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 350.837395][ T7586] allowing incompatible features above 0.0: (unknown version) [ 350.837495][ T7586] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 350.886258][ T7586] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 350.894981][ T7586] bcachefs (loop3): initializing new filesystem [ 350.914904][ T7586] bcachefs (loop3): going read-write [ 350.977138][ T7586] bcachefs (loop3): marking superblocks [ 351.031610][ T7586] bcachefs (loop3): initializing freespace [ 351.060584][ T7586] bcachefs (loop3): done initializing freespace [ 351.081194][ T7586] bcachefs (loop3): reading snapshots table [ 351.087706][ T7586] bcachefs (loop3): reading snapshots done [ 351.152946][ T2060] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.164932][ T2060] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.173399][ T2060] usb 2-1: Product: syz [ 351.185775][ T2060] usb 2-1: Manufacturer: syz [ 351.225431][ T2060] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 351.246107][ T7586] bcachefs (loop3): done starting filesystem [ 351.367760][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 351.621323][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.630473][ T24] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 351.641191][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.650538][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 351.661845][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 351.760154][ T5826] bcachefs (loop3): shutting down [ 351.765551][ T5826] bcachefs (loop3): going read-only [ 351.770981][ T5826] bcachefs (loop3): finished waiting for writes to stop [ 351.787311][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.794195][ T5826] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 351.797347][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.814117][ T24] usb 5-1: Product: syz [ 351.818751][ T24] usb 5-1: Manufacturer: syz [ 351.849442][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 351.855326][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 351.860810][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 351.963916][ T5826] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 351.967773][ T7620] FAULT_INJECTION: forcing a failure. [ 351.967773][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 351.975108][ T2060] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 351.986911][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT(none) [ 351.987073][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.987168][ T7620] Call Trace: [ 351.987228][ T7620] [ 351.987286][ T7620] __dump_stack+0x26/0x30 [ 351.987505][ T7620] dump_stack_lvl+0x1df/0x270 [ 351.987716][ T7620] dump_stack+0x1e/0x25 [ 351.987902][ T7620] should_fail_ex+0x7dc/0x8a0 [ 351.988132][ T7620] should_failslab+0x15b/0x200 [ 351.988351][ T7620] __kmalloc_noprof+0x182/0x1310 [ 351.988569][ T7620] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 351.988764][ T7620] ? tomoyo_path_number_perm+0x71/0x7d0 [ 351.988917][ T7620] ? filter_irq_stacks+0x49/0x190 [ 351.989069][ T7620] ? kmsan_get_metadata+0xfb/0x160 [ 351.989293][ T7620] tomoyo_realpath_from_path+0xeb/0x9f0 [ 351.989509][ T7620] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.989713][ T7620] ? __srcu_read_lock+0x5e/0xd0 [ 351.989904][ T7620] tomoyo_path_number_perm+0x1d0/0x7d0 [ 351.990091][ T7620] ? stack_depot_save_flags+0x35/0x7b0 [ 351.990285][ T7620] ? kmsan_get_metadata+0xfb/0x160 [ 351.990465][ T7620] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.990679][ T7620] tomoyo_file_ioctl+0x3d/0x50 [ 351.990882][ T7620] security_file_ioctl+0x141/0x590 [ 351.991042][ T7620] __se_sys_ioctl+0xbb/0x400 [ 351.991229][ T7620] __x64_sys_ioctl+0x97/0xe0 [ 351.991392][ T7620] x64_sys_call+0x1cbc/0x3e20 [ 351.991576][ T7620] do_syscall_64+0xd9/0x210 [ 351.991741][ T7620] ? clear_bhb_loop+0x40/0x90 [ 351.991923][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.992110][ T7620] RIP: 0033:0x7f936058eec9 [ 351.992219][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.992352][ T7620] RSP: 002b:00007f9361505038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.992493][ T7620] RAX: ffffffffffffffda RBX: 00007f93607e5fa0 RCX: 00007f936058eec9 [ 351.992608][ T7620] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000004 [ 351.992699][ T7620] RBP: 00007f9361505090 R08: 0000000000000000 R09: 0000000000000000 [ 351.992792][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.992888][ T7620] R13: 00007f93607e6038 R14: 00007f93607e5fa0 R15: 00007ffcbe8a0238 [ 351.993030][ T7620] [ 351.993383][ T7620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.061765][ T5826] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 352.253645][ T5826] bcachefs (loop3): marking filesystem clean [ 352.297612][ T5826] bcachefs (loop3): shutdown complete [ 352.355582][ T2060] usb 3-1: config 12 has an invalid interface number: 234 but max is 0 [ 352.364381][ T2060] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 352.376002][ T2060] usb 3-1: config 12 has no interface number 0 [ 352.382359][ T2060] usb 3-1: config 12 interface 234 has no altsetting 0 [ 352.419739][ T2060] usb 3-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=f0.0e [ 352.429298][ T2060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.450143][ T2060] usb 3-1: Product: syz [ 352.459604][ T2060] usb 3-1: Manufacturer: syz [ 352.464988][ T2060] usb 3-1: SerialNumber: syz [ 352.475018][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.481738][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.520085][ T2060] rndis_host 3-1:12.234: More than one union descriptor, skipping ... [ 352.528700][ T2060] usb 3-1: bad CDC descriptors [ 352.535449][ T2060] cdc_acm 3-1:12.234: More than one union descriptor, skipping ... [ 352.856491][ T7626] loop2: detected capacity change from 0 to 256 [ 352.918805][ T7626] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 353.039216][ T2060] usb 2-1: USB disconnect, device number 32 [ 353.179323][ T7617] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.189063][ T7617] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880143d03f0 iblock : 8, err : -5) [ 353.208361][ T7617] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.282126][ T7617] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.291944][ T7617] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880143d03f0 iblock : 8, err : -5) [ 353.315894][ T7617] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.325566][ T7617] exFAT-fs (loop2): write: fail to zero from 4096 to 21522(-5) [ 353.362815][ T7626] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 353.509527][ T24] usb 3-1: USB disconnect, device number 25 [ 354.086192][ T2060] usb 5-1: USB disconnect, device number 38 [ 355.153813][ T2060] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 355.204234][ T7659] devtmpfs: Cannot disable swap on remount [ 355.298057][ T7660] loop0: detected capacity change from 0 to 1024 [ 355.343044][ T2060] usb 3-1: Using ep0 maxpacket: 8 [ 355.365213][ T2060] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.375946][ T7660] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.412310][ T2060] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 355.421832][ T2060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.430159][ T2060] usb 3-1: Product: syz [ 355.434655][ T2060] usb 3-1: Manufacturer: syz [ 355.439440][ T2060] usb 3-1: SerialNumber: syz [ 355.481191][ T7660] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.551: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.535179][ T7660] Quota error (device loop0): write_blk: dquota write failed [ 355.547504][ T7660] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 355.558104][ T7660] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.551: Failed to acquire dquot type 0 [ 355.562827][ T2060] usb 3-1: config 0 descriptor?? [ 355.629737][ T7660] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.551: Freeing blocks not in datazone - block = 0, count = 4096 [ 355.669807][ T7660] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.551: Invalid inode bitmap blk 0 in block_group 0 [ 355.684448][ T1816] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.735909][ T1816] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 355.743646][ T7660] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 355.744780][ T1816] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 355.769181][ T7660] EXT4-fs (loop0): 1 orphan inode deleted [ 355.777824][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.812179][ T2060] usb 3-1: USB disconnect, device number 26 [ 355.875918][ T7660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.033430][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.044580][ T42] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 356.212925][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 356.227445][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 356.239265][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 356.249805][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.260021][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.273613][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.282982][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.298599][ T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.307712][ T42] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 356.318337][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.329923][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 356.341991][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 356.366256][ T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.375829][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.384483][ T42] usb 4-1: Product: syz [ 356.389064][ T42] usb 4-1: Manufacturer: syz [ 356.448560][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 356.454299][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 356.460012][ T42] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 356.483210][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 356.491649][ T5904] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 356.580051][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 356.586131][ T24] usbtmc 2-1:16.0: can't read capabilities [ 356.668853][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 356.693011][ T5879] usb 1-1: config 12 has an invalid interface number: 234 but max is 0 [ 356.701573][ T5879] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 356.712213][ T5879] usb 1-1: config 12 has no interface number 0 [ 356.718804][ T5879] usb 1-1: config 12 interface 234 has no altsetting 0 [ 356.749204][ T5904] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 356.760966][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 356.771477][ T5904] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.781790][ T5904] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.787674][ T2060] usb 2-1: USB disconnect, device number 33 [ 356.795347][ T5904] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.810634][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.834615][ T5879] usb 1-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=f0.0e [ 356.846483][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.855465][ T5879] usb 1-1: Product: syz [ 356.859821][ T5879] usb 1-1: Manufacturer: syz [ 356.864774][ T5879] usb 1-1: SerialNumber: syz [ 356.935621][ T5879] rndis_host 1-1:12.234: More than one union descriptor, skipping ... [ 356.947761][ T5879] usb 1-1: bad CDC descriptors [ 356.956954][ T5879] cdc_acm 1-1:12.234: More than one union descriptor, skipping ... [ 357.114276][ T5904] usb 5-1: GET_CAPABILITIES returned 0 [ 357.120334][ T5904] usbtmc 5-1:16.0: can't read capabilities [ 357.240739][ T7686] loop0: detected capacity change from 0 to 256 [ 357.299242][ T7686] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 357.351537][ T2060] usb 5-1: USB disconnect, device number 39 [ 357.529163][ T7678] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 357.538950][ T7678] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880143d0a70 iblock : 8, err : -5) [ 357.581775][ T7678] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 357.594500][ T7686] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 357.606122][ T7686] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880143d0a70 iblock : 8, err : -5) [ 357.646577][ T7686] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 357.656717][ T7686] exFAT-fs (loop0): write: fail to zero from 4096 to 21522(-5) [ 357.684083][ T7688] loop1: detected capacity change from 0 to 8 [ 357.709293][ T5904] usb 1-1: USB disconnect, device number 22 [ 357.751310][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 358.729914][ T7708] loop2: detected capacity change from 0 to 256 [ 358.748454][ T7708] exfat: Unknown parameter 'exfat' [ 358.826305][ T7710] loop0: detected capacity change from 0 to 512 [ 358.847668][ T7710] EXT4-fs: Ignoring removed nobh option [ 358.876887][ T7710] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 358.960330][ T2060] usb 4-1: USB disconnect, device number 28 [ 359.076544][ T7716] loop4: detected capacity change from 0 to 128 [ 359.086197][ T7716] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 359.089884][ T7710] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.567: corrupted inode contents [ 359.124809][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 359.132328][ T7710] EXT4-fs (loop0): 1 truncate cleaned up [ 359.140717][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.153968][ T7710] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.170499][ T5103] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.181416][ T5103] Quota error (device loop0): write_blk: dquota write failed [ 359.189187][ T5103] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 359.202880][ T5103] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 359.214985][ T5103] Quota error (device loop0): write_blk: dquota write failed [ 359.222707][ T5103] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 359.233303][ T5103] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 359.243682][ T5103] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 359.253197][ T5103] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.450827][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 360.150295][ T7722] loop2: detected capacity change from 0 to 32768 [ 360.257329][ T7722] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.283426][ T2060] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 360.429123][ T7722] XFS (loop2): Ending clean mount [ 360.478370][ T2060] usb 1-1: Using ep0 maxpacket: 8 [ 360.535900][ T2060] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 360.547433][ T2060] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 360.557891][ T2060] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.568168][ T2060] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.581721][ T2060] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.591283][ T2060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.786418][ T5815] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.838518][ T2060] usb 1-1: GET_CAPABILITIES returned 0 [ 360.844555][ T2060] usbtmc 1-1:16.0: can't read capabilities [ 360.993697][ T11] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 361.144014][ T7748] vlan2: entered promiscuous mode [ 361.149297][ T7748] macvtap0: entered promiscuous mode [ 361.199568][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.210287][ T11] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.220213][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.255709][ T11] usb 4-1: config 0 descriptor?? [ 361.283841][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 361.694467][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 361.706712][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 361.732466][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 361.750966][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 361.772988][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 361.784714][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 361.794123][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 361.806022][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 361.825020][ T11] pwc: recv_control_msg error -32 req 04 val 1500 [ 361.841452][ T11] pwc: recv_control_msg error -32 req 02 val 2500 [ 361.850949][ T11] pwc: recv_control_msg error -32 req 02 val 2400 [ 361.867733][ T11] pwc: recv_control_msg error -32 req 02 val 2600 [ 361.877470][ T11] pwc: recv_control_msg error -32 req 02 val 2900 [ 361.913273][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 362.067324][ T7755] loop1: detected capacity change from 0 to 2048 [ 362.090470][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 362.100123][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 362.110160][ T11] pwc: Registered as video103. [ 362.117644][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 362.123246][ T5904] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.136511][ T5904] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 362.140202][ T11] usb 4-1: USB disconnect, device number 29 [ 362.147031][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.147184][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 362.147352][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 362.219951][ T7755] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 362.253304][ T5904] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.262998][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.273307][ T5904] usb 5-1: Product: syz [ 362.277651][ T5904] usb 5-1: Manufacturer: syz [ 362.337899][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 362.344879][ T5904] cdc_wdm 5-1:1.0: skipping garbage [ 362.350415][ T5904] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 362.380909][ T7755] Bluetooth: MGMT ver 1.23 [ 362.428296][ T5878] usb 1-1: USB disconnect, device number 23 [ 362.519280][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.745137][ T7763] loop1: detected capacity change from 0 to 128 [ 362.774450][ T7763] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 362.963444][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 363.193914][ T5904] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.203000][ T5904] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 363.213799][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.223103][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 363.234521][ T5904] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 363.266254][ T5904] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.275987][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.284379][ T5904] usb 1-1: Product: syz [ 363.288745][ T5904] usb 1-1: Manufacturer: syz [ 363.340895][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 363.348058][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 363.378348][ T5904] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 363.385268][ T5904] cdc_wdm 1-1:1.0: Unknown control protocol [ 363.837788][ T7778] loop3: detected capacity change from 0 to 512 [ 364.173032][ T5878] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 364.252904][ T11] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 364.265625][ T7791] tipc: Started in network mode [ 364.270769][ T7791] tipc: Node identity 12a00f0d7e7f, cluster identity 4711 [ 364.279323][ T7791] tipc: Enabled bearer , priority 0 [ 364.353713][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 364.367818][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.378466][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.427958][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.440839][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.449315][ T5878] usb 4-1: Product: syz [ 364.453815][ T5878] usb 4-1: Manufacturer: syz [ 364.458610][ T5878] usb 4-1: SerialNumber: syz [ 364.480342][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.490958][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 364.501046][ T11] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 364.510455][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.551402][ T11] usb 3-1: config 0 descriptor?? [ 365.403505][ T7795] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.411050][ T5904] tipc: Node number set to 1826557709 [ 365.424604][ T5878] usb 4-1: 0:2 : does not exist [ 366.034020][ T7787] loop2: detected capacity change from 0 to 32768 [ 366.066315][ T11] ath6kl: Failed to submit usb control message: -110 [ 366.073514][ T11] ath6kl: unable to send the bmi data to the device: -110 [ 366.081227][ T11] ath6kl: Unable to send get target info: -110 [ 366.121627][ T11] ath6kl: Failed to init ath6kl core: -110 [ 366.130327][ T11] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 366.161860][ T7787] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 366.270076][ T5904] usb 5-1: USB disconnect, device number 40 [ 366.273791][ T7787] XFS (loop2): Ending clean mount [ 366.343848][ T11] usb 1-1: USB disconnect, device number 24 [ 366.471589][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 366.884530][ T5904] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 367.096443][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.108278][ T5904] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 367.118679][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.176465][ T5904] usb 5-1: config 0 descriptor?? [ 367.196934][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 367.419194][ T11] usb 3-1: USB disconnect, device number 27 [ 367.605049][ T5815] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 367.698747][ T11] usb 4-1: USB disconnect, device number 30 [ 367.705295][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 367.708496][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 367.761768][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 367.800286][ T7822] loop1: detected capacity change from 0 to 128 [ 367.814356][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 367.837518][ T7822] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 367.848242][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 367.888011][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 367.924082][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 367.933692][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 367.960306][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 367.969991][ T5904] pwc: recv_control_msg error -32 req 02 val 2500 [ 367.993916][ T5904] pwc: recv_control_msg error -32 req 02 val 2400 [ 368.009345][ T5904] pwc: recv_control_msg error -32 req 02 val 2600 [ 368.033322][ T5904] pwc: recv_control_msg error -32 req 02 val 2900 [ 368.267301][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 368.293136][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 368.355488][ T5904] pwc: Registered as video103. [ 368.362970][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 368.445116][ T5904] usb 5-1: USB disconnect, device number 41 [ 369.175187][ T7844] tipc: Started in network mode [ 369.180444][ T7844] tipc: Node identity 0ac5afd6ee85, cluster identity 4711 [ 369.189862][ T7844] tipc: Enabled bearer , priority 0 [ 369.242760][ T7848] syzkaller0: entered promiscuous mode [ 369.248507][ T7848] syzkaller0: entered allmulticast mode [ 369.309015][ T7844] tipc: Resetting bearer [ 369.385470][ T7842] tipc: Resetting bearer [ 369.392865][ T11] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 369.429056][ T7842] tipc: Disabling bearer [ 369.505965][ T7850] loop0: detected capacity change from 0 to 1024 [ 369.558641][ T7855] loop2: detected capacity change from 0 to 8 [ 369.573754][ T5878] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 369.594236][ T11] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.603761][ T11] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 369.614331][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.623720][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.705465][ T7850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.718741][ T7850] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.809137][ T11] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.819086][ T11] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.827518][ T11] usb 2-1: Product: syz [ 369.831881][ T11] usb 2-1: Manufacturer: syz [ 369.862226][ T5878] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.871509][ T5878] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 369.882117][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.891490][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 369.903030][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 369.934344][ T11] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 369.996234][ T7850] trusted_key: syz.0.607 sent an empty control message without MSG_MORE. [ 370.009434][ T5878] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.019824][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.028291][ T5878] usb 5-1: Product: syz [ 370.032748][ T5878] usb 5-1: Manufacturer: syz [ 370.070695][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 370.076280][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 370.081885][ T5878] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 370.133956][ T7860] openvswitch: netlink: IPv4 tunnel dst address is zero [ 370.304265][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.471936][ T7868] loop3: detected capacity change from 0 to 512 [ 370.503372][ T7870] loop0: detected capacity change from 0 to 512 [ 370.512458][ T7870] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.527238][ T7870] EXT4-fs: Mount option(s) incompatible with ext3 [ 370.753362][ T5879] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 370.913641][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 370.948369][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.959323][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.981433][ T5879] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.991085][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.999530][ T5879] usb 4-1: Product: syz [ 371.004119][ T5879] usb 4-1: Manufacturer: syz [ 371.008880][ T5879] usb 4-1: SerialNumber: syz [ 371.330421][ T7884] loop2: detected capacity change from 0 to 128 [ 371.340810][ T7884] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 371.439196][ T5879] usb 4-1: 0:2 : does not exist [ 371.963120][ T7895] tipc: Started in network mode [ 371.968388][ T7895] tipc: Node identity 726933f4c1b4, cluster identity 4711 [ 371.976596][ T7895] tipc: Enabled bearer , priority 0 [ 371.992195][ T7895] syzkaller0: entered promiscuous mode [ 372.001014][ T7895] syzkaller0: entered allmulticast mode [ 372.033558][ T7895] tipc: Resetting bearer [ 372.044365][ T7894] tipc: Resetting bearer [ 372.058861][ T7894] tipc: Disabling bearer [ 372.191729][ T5879] usb 2-1: USB disconnect, device number 34 [ 372.294980][ T7897] loop1: detected capacity change from 0 to 8 [ 372.481698][ T7897] 9pnet_fd: Insufficient options for proto=fd [ 372.597019][ T5879] usb 5-1: USB disconnect, device number 42 [ 372.682272][ T7902] openvswitch: netlink: IPv4 tunnel dst address is zero [ 372.941929][ T7904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.622'. [ 373.245633][ T7900] loop2: detected capacity change from 0 to 32768 [ 373.279337][ T7900] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.620 (7900) [ 373.739897][ T7904] loop4: detected capacity change from 0 to 32768 [ 373.760757][ T5878] usb 4-1: USB disconnect, device number 31 [ 373.774307][ T7900] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 373.788916][ T7900] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 374.002732][ T7904] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 374.002895][ T7904] allowing incompatible features above 0.0: (unknown version) [ 374.002975][ T7904] features: [ 374.038604][ T7904] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 374.049746][ T7904] bcachefs (loop4): initializing new filesystem [ 374.069513][ T7904] bcachefs (loop4): going read-write [ 374.101875][ T7904] bcachefs (loop4): marking superblocks [ 374.156197][ T7904] bcachefs (loop4): initializing freespace [ 374.182895][ T7904] bcachefs (loop4): done initializing freespace [ 374.201521][ T7904] bcachefs (loop4): reading snapshots table [ 374.207981][ T7904] bcachefs (loop4): reading snapshots done [ 374.320120][ T7904] bcachefs (loop4): done starting filesystem [ 374.360136][ T7900] BTRFS info (device loop2): enabling ssd optimizations [ 374.367728][ T7900] BTRFS info (device loop2): enabling free space tree [ 374.421730][ T7900] BTRFS info (device loop2): balance: start -f -susage=3,usage=3..0,stripes=1023..2 [ 374.433005][ T7900] BTRFS info (device loop2): balance: ended with status: 0 [ 374.456773][ T5878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 374.491086][ T7900] BTRFS info (device loop2): balance: start -s [ 374.498310][ T7900] BTRFS info (device loop2): balance: ended with status: 0 [ 374.620831][ T5815] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 374.692771][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 374.720054][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 374.938725][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.948306][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.957352][ T5878] usb 2-1: Product: syz [ 374.961703][ T5878] usb 2-1: Manufacturer: syz [ 374.967933][ T5878] usb 2-1: SerialNumber: syz [ 375.147266][ T7904] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 375.213955][ T5878] cdc_ncm 2-1:1.0: bind() failure [ 375.230331][ T5878] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 375.237659][ T5878] cdc_ncm 2-1:1.1: bind() failure [ 375.266729][ T5878] usb 2-1: USB disconnect, device number 35 [ 375.502815][ T11] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.515023][ T5822] bcachefs (loop4): shutting down [ 375.520217][ T5822] bcachefs (loop4): going read-only [ 375.526160][ T5822] bcachefs (loop4): finished waiting for writes to stop [ 375.563925][ T5822] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4 [ 375.689733][ T11] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.698800][ T11] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 375.709824][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.719178][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.785900][ T11] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.795494][ T11] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.803902][ T11] usb 4-1: Product: syz [ 375.808245][ T11] usb 4-1: Manufacturer: syz [ 375.824739][ T5822] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 375.871588][ T11] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 375.890594][ T5822] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 375.900263][ T5822] bcachefs (loop4): marking filesystem clean [ 375.934551][ T7947] tipc: Enabled bearer , priority 0 [ 375.985151][ T7947] syzkaller0: entered promiscuous mode [ 375.992395][ T7947] syzkaller0: entered allmulticast mode [ 376.020146][ T5822] bcachefs (loop4): shutdown complete [ 376.135249][ T7947] tipc: Resetting bearer [ 376.183391][ T7946] tipc: Resetting bearer [ 376.216462][ T7946] tipc: Disabling bearer [ 376.574214][ T7957] loop1: detected capacity change from 0 to 8 [ 376.713477][ T7960] loop0: detected capacity change from 0 to 512 [ 376.755329][ T7962] 9pnet_fd: Insufficient options for proto=fd [ 377.082845][ T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 377.253051][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 377.280926][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.291537][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.350086][ T11] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.359737][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.368326][ T11] usb 1-1: Product: syz [ 377.372802][ T11] usb 1-1: Manufacturer: syz [ 377.377594][ T11] usb 1-1: SerialNumber: syz [ 377.515849][ T7966] overlayfs: empty lowerdir [ 377.827581][ T11] usb 1-1: 0:2 : does not exist [ 378.062253][ T7971] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 378.422974][ T11] usb 4-1: USB disconnect, device number 32 [ 378.690047][ T7979] loop3: detected capacity change from 0 to 128 [ 378.833647][ T7979] syz.3.640: attempt to access beyond end of device [ 378.833647][ T7979] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 378.848887][ T7979] syz.3.640: attempt to access beyond end of device [ 378.848887][ T7979] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 378.866492][ T7979] syz.3.640: attempt to access beyond end of device [ 378.866492][ T7979] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 378.891603][ T7979] syz.3.640: attempt to access beyond end of device [ 378.891603][ T7979] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 378.928471][ T7979] syz.3.640: attempt to access beyond end of device [ 378.928471][ T7979] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 378.976358][ T5879] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 379.106579][ T7983] loop4: detected capacity change from 0 to 128 [ 379.126340][ T7983] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 379.180855][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.191524][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.201092][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.239647][ T5879] usb 2-1: config 0 descriptor?? [ 379.258417][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 379.681923][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 379.714454][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.731812][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 379.750892][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 379.760963][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 379.787428][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 379.798659][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 379.809581][ T5879] pwc: recv_control_msg error -32 req 02 val 2100 [ 379.826836][ T5879] pwc: recv_control_msg error -32 req 04 val 1500 [ 379.836592][ T5879] pwc: recv_control_msg error -32 req 02 val 2500 [ 379.847948][ T5879] pwc: recv_control_msg error -32 req 02 val 2400 [ 379.857659][ T5879] pwc: recv_control_msg error -32 req 02 val 2600 [ 379.868943][ T5879] pwc: recv_control_msg error -32 req 02 val 2900 [ 379.954277][ T11] usb 1-1: USB disconnect, device number 25 [ 380.087848][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 380.114471][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 380.163404][ T5879] pwc: Registered as video103. [ 380.170737][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 380.227860][ T5879] usb 2-1: USB disconnect, device number 36 [ 380.270205][ T7998] loop0: detected capacity change from 0 to 8 [ 380.452331][ T7998] 9pnet_fd: Insufficient options for proto=fd [ 381.299925][ T8006] loop4: detected capacity change from 0 to 32768 [ 381.314425][ T8006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.648 (8006) [ 381.354351][ T8006] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.354578][ T8006] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 381.558578][ T8015] FAULT_INJECTION: forcing a failure. [ 381.558578][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 381.573447][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.2.652 Not tainted syzkaller #0 PREEMPT(none) [ 381.573592][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.573677][ T8015] Call Trace: [ 381.573727][ T8015] [ 381.573780][ T8015] __dump_stack+0x26/0x30 [ 381.573955][ T8015] dump_stack_lvl+0x1df/0x270 [ 381.574139][ T8015] dump_stack+0x1e/0x25 [ 381.574300][ T8015] should_fail_ex+0x7dc/0x8a0 [ 381.574480][ T8015] should_failslab+0x15b/0x200 [ 381.574656][ T8015] __kmalloc_noprof+0x182/0x1310 [ 381.574842][ T8015] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 381.575031][ T8015] ? tomoyo_path_number_perm+0x71/0x7d0 [ 381.575177][ T8015] ? filter_irq_stacks+0x49/0x190 [ 381.575320][ T8015] ? kmsan_get_metadata+0xfb/0x160 [ 381.575487][ T8015] tomoyo_realpath_from_path+0xeb/0x9f0 [ 381.575664][ T8015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 381.575836][ T8015] ? __srcu_read_lock+0x5e/0xd0 [ 381.576017][ T8015] tomoyo_path_number_perm+0x1d0/0x7d0 [ 381.576164][ T8015] ? stack_depot_save_flags+0x35/0x7b0 [ 381.576319][ T8015] ? kmsan_get_metadata+0xfb/0x160 [ 381.576470][ T8015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 381.576674][ T8015] tomoyo_file_ioctl+0x3d/0x50 [ 381.576851][ T8015] security_file_ioctl+0x141/0x590 [ 381.576996][ T8015] __se_sys_ioctl+0xbb/0x400 [ 381.577152][ T8015] __x64_sys_ioctl+0x97/0xe0 [ 381.577325][ T8015] x64_sys_call+0x1cbc/0x3e20 [ 381.577537][ T8015] do_syscall_64+0xd9/0x210 [ 381.577685][ T8015] ? irqentry_exit+0x16/0x60 [ 381.577890][ T8015] ? clear_bhb_loop+0x40/0x90 [ 381.578050][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.578203][ T8015] RIP: 0033:0x7f01f658eec9 [ 381.578307][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.578440][ T8015] RSP: 002b:00007f01f73e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.578571][ T8015] RAX: ffffffffffffffda RBX: 00007f01f67e5fa0 RCX: 00007f01f658eec9 [ 381.578673][ T8015] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000008 [ 381.578772][ T8015] RBP: 00007f01f73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 381.578862][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.578952][ T8015] R13: 00007f01f67e6038 R14: 00007f01f67e5fa0 R15: 00007ffe29194358 [ 381.579088][ T8015] [ 381.579140][ T8015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.723633][ T11] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 381.870637][ T8023] FAULT_INJECTION: forcing a failure. [ 381.870637][ T8023] name failslab, interval 1, probability 0, space 0, times 0 [ 381.884407][ T8023] CPU: 0 UID: 0 PID: 8023 Comm: syz.3.653 Not tainted syzkaller #0 PREEMPT(none) [ 381.884541][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.884619][ T8023] Call Trace: [ 381.884668][ T8023] [ 381.884715][ T8023] __dump_stack+0x26/0x30 [ 381.884887][ T8023] dump_stack_lvl+0x1df/0x270 [ 381.885040][ T8023] dump_stack+0x1e/0x25 [ 381.885186][ T8023] should_fail_ex+0x7dc/0x8a0 [ 381.885343][ T8023] should_failslab+0x15b/0x200 [ 381.885510][ T8023] __kmalloc_noprof+0x182/0x1310 [ 381.885680][ T8023] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 381.885863][ T8023] ? tomoyo_path_number_perm+0x71/0x7d0 [ 381.886003][ T8023] ? filter_irq_stacks+0x49/0x190 [ 381.886129][ T8023] ? kmsan_get_metadata+0xfb/0x160 [ 381.886297][ T8023] tomoyo_realpath_from_path+0xeb/0x9f0 [ 381.886483][ T8023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 381.886643][ T8023] ? __srcu_read_lock+0x5e/0xd0 [ 381.886817][ T8023] tomoyo_path_number_perm+0x1d0/0x7d0 [ 381.886971][ T8023] ? stack_depot_save_flags+0x35/0x7b0 [ 381.887129][ T8023] ? kmsan_get_metadata+0xfb/0x160 [ 381.887307][ T8023] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 381.887561][ T8023] tomoyo_file_ioctl+0x3d/0x50 [ 381.887758][ T8023] security_file_ioctl+0x141/0x590 [ 381.887923][ T8023] __se_sys_ioctl+0xbb/0x400 [ 381.888099][ T8023] __x64_sys_ioctl+0x97/0xe0 [ 381.888271][ T8023] x64_sys_call+0x1cbc/0x3e20 [ 381.888480][ T8023] do_syscall_64+0xd9/0x210 [ 381.888647][ T8023] ? clear_bhb_loop+0x40/0x90 [ 381.888827][ T8023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.888974][ T8023] RIP: 0033:0x7f3e4ad8eec9 [ 381.889071][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.889195][ T8023] RSP: 002b:00007f3e4bcff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.889315][ T8023] RAX: ffffffffffffffda RBX: 00007f3e4afe5fa0 RCX: 00007f3e4ad8eec9 [ 381.889405][ T8023] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 381.889487][ T8023] RBP: 00007f3e4bcff090 R08: 0000000000000000 R09: 0000000000000000 [ 381.889568][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.889665][ T8023] R13: 00007f3e4afe6038 R14: 00007f3e4afe5fa0 R15: 00007ffc976290f8 [ 381.889791][ T8023] [ 381.889840][ T8023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.237095][ T8006] BTRFS info (device loop4): enabling ssd optimizations [ 382.244421][ T8006] BTRFS info (device loop4): enabling free space tree [ 382.270286][ T8006] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 382.825651][ T11] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.835160][ T11] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 382.842857][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.853646][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.068204][ T11] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.078287][ T11] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.086753][ T11] usb 2-1: Product: syz [ 383.091104][ T11] usb 2-1: Manufacturer: syz [ 383.111520][ T8041] loop3: detected capacity change from 0 to 512 [ 383.284477][ T8043] fuse: Bad value for 'fd' [ 383.317142][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 383.322989][ T11] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 383.932906][ T5878] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 384.033325][ T8051] loop4: detected capacity change from 0 to 8 [ 384.093043][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 384.112817][ T5878] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 384.120449][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.184680][ T5878] usb 4-1: Dual-Role OTG device on HNP port [ 384.204460][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.214153][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.222651][ T5878] usb 4-1: Product: syz [ 384.228483][ T5878] usb 4-1: Manufacturer: syz [ 384.233464][ T5878] usb 4-1: SerialNumber: syz [ 384.302932][ T8053] loop0: detected capacity change from 0 to 1024 [ 385.254797][ T5878] usb 4-1: 0:2 : does not exist [ 385.254944][ T5878] usb 4-1: unit 113 not found! [ 385.294451][ T5879] usb 2-1: USB disconnect, device number 37 [ 386.178665][ T11] usb 4-1: USB disconnect, device number 33 [ 386.190864][ T5878] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 386.373908][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 386.405324][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 386.414862][ T5878] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 386.429509][ T5878] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 386.444415][ T5878] usb 5-1: config 0 interface 0 has no altsetting 1 [ 386.468692][ T8072] loop2: detected capacity change from 0 to 1024 [ 386.522106][ T5878] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 386.525421][ T8072] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 386.532326][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.545290][ T8072] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 386.569907][ T5878] usb 5-1: SerialNumber: syz [ 386.622921][ T8072] EXT4-fs (loop2): invalid journal inode [ 386.628828][ T8072] EXT4-fs (loop2): can't get journal size [ 386.699174][ T5878] usb 5-1: config 0 descriptor?? [ 386.730085][ T5878] usb-storage 5-1:0.0: USB Mass Storage device detected [ 386.751216][ T8072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.856586][ T5878] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 386.924570][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.590131][ T8088] binder_alloc: 8087: binder_alloc_buf, no vma [ 387.785260][ T8089] fuse: Bad value for 'fd' [ 387.859763][ T3591] ===================================================== [ 387.873362][ T3591] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 387.881406][ T3591] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 387.887294][ T3591] hfs_find_rec_by_key+0xab/0x240 [ 387.892623][ T3591] __hfsplus_brec_find+0x274/0x840 [ 387.897920][ T3591] hfsplus_brec_find+0x4df/0x9f0 [ 387.904528][ T3591] hfsplus_brec_read+0x46/0x1f0 [ 387.909527][ T3591] hfsplus_find_cat+0xb5/0x4f0 [ 387.915298][ T3591] hfsplus_cat_write_inode+0x2ca/0xe20 [ 387.920957][ T3591] hfsplus_write_inode+0x178/0x960 [ 387.926624][ T3591] __writeback_single_inode+0x88f/0x1190 [ 387.932451][ T3591] writeback_sb_inodes+0xac1/0x1cb0 [ 387.938027][ T3591] wb_writeback+0x4ce/0xc00 [ 387.942906][ T3591] wb_workfn+0x397/0x1910 [ 387.947446][ T3591] process_scheduled_works+0xb91/0x1d80 [ 387.953344][ T3591] worker_thread+0xedf/0x1590 [ 387.958271][ T3591] kthread+0xd5c/0xf00 [ 387.964619][ T3591] ret_from_fork+0x233/0x380 [ 387.971292][ T3591] ret_from_fork_asm+0x1a/0x30 [ 387.976415][ T3591] [ 387.978826][ T3591] Uninit was created at: [ 387.983451][ T3591] __kmalloc_noprof+0x95f/0x1310 [ 387.988587][ T3591] hfsplus_find_init+0x90/0x1d0 [ 387.993931][ T3591] hfsplus_cat_write_inode+0x1a8/0xe20 [ 387.999582][ T3591] hfsplus_write_inode+0x178/0x960 [ 388.004982][ T3591] __writeback_single_inode+0x88f/0x1190 [ 388.010805][ T3591] writeback_sb_inodes+0xac1/0x1cb0 [ 388.016341][ T3591] wb_writeback+0x4ce/0xc00 [ 388.021015][ T3591] wb_workfn+0x397/0x1910 [ 388.025777][ T3591] process_scheduled_works+0xb91/0x1d80 [ 388.031545][ T3591] worker_thread+0xedf/0x1590 [ 388.037264][ T3591] kthread+0xd5c/0xf00 [ 388.041566][ T3591] ret_from_fork+0x233/0x380 [ 388.046522][ T3591] ret_from_fork_asm+0x1a/0x30 [ 388.051498][ T3591] [ 388.054495][ T3591] CPU: 0 UID: 0 PID: 3591 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(none) [ 388.064362][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.076705][ T3591] Workqueue: writeback wb_workfn (flush-7:0) [ 388.083385][ T3591] ===================================================== [ 388.090434][ T3591] Disabling lock debugging due to kernel taint [ 388.096950][ T3591] Kernel panic - not syncing: kmsan.panic set ... [ 388.103511][ T3591] CPU: 0 UID: 0 PID: 3591 Comm: kworker/u8:14 Tainted: G B syzkaller #0 PREEMPT(none) [ 388.114795][ T3591] Tainted: [B]=BAD_PAGE [ 388.119023][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.129207][ T3591] Workqueue: writeback wb_workfn (flush-7:0) [ 388.135500][ T3591] Call Trace: [ 388.138892][ T3591] [ 388.141903][ T3591] __dump_stack+0x26/0x30 [ 388.146455][ T3591] dump_stack_lvl+0x53/0x270 [ 388.151259][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.157293][ T3591] dump_stack+0x1e/0x25 [ 388.161668][ T3591] vpanic+0x361/0xc50 [ 388.165867][ T3591] panic+0x15d/0x160 [ 388.169993][ T3591] kmsan_report+0x31c/0x320 [ 388.174679][ T3591] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.180969][ T3591] ? __msan_warning+0x1b/0x30 [ 388.185800][ T3591] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 388.191637][ T3591] ? hfs_find_rec_by_key+0xab/0x240 [ 388.197008][ T3591] ? __hfsplus_brec_find+0x274/0x840 [ 388.202456][ T3591] ? hfsplus_brec_find+0x4df/0x9f0 [ 388.207728][ T3591] ? hfsplus_brec_read+0x46/0x1f0 [ 388.212912][ T3591] ? hfsplus_find_cat+0xb5/0x4f0 [ 388.218017][ T3591] ? hfsplus_cat_write_inode+0x2ca/0xe20 [ 388.223839][ T3591] ? hfsplus_write_inode+0x178/0x960 [ 388.229274][ T3591] ? __writeback_single_inode+0x88f/0x1190 [ 388.235292][ T3591] ? writeback_sb_inodes+0xac1/0x1cb0 [ 388.240831][ T3591] ? wb_writeback+0x4ce/0xc00 [ 388.245660][ T3591] ? wb_workfn+0x397/0x1910 [ 388.250378][ T3591] ? process_scheduled_works+0xb91/0x1d80 [ 388.256367][ T3591] ? worker_thread+0xedf/0x1590 [ 388.261455][ T3591] ? kthread+0xd5c/0xf00 [ 388.265860][ T3591] ? ret_from_fork+0x233/0x380 [ 388.270802][ T3591] ? ret_from_fork_asm+0x1a/0x30 [ 388.275941][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.281236][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.287251][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.292589][ T3591] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 388.299024][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.304324][ T3591] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 388.310747][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.316073][ T3591] __msan_warning+0x1b/0x30 [ 388.320793][ T3591] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 388.326489][ T3591] hfs_find_rec_by_key+0xab/0x240 [ 388.331694][ T3591] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 388.337988][ T3591] __hfsplus_brec_find+0x274/0x840 [ 388.343276][ T3591] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 388.349111][ T3591] hfsplus_brec_find+0x4df/0x9f0 [ 388.354223][ T3591] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 388.360076][ T3591] hfsplus_brec_read+0x46/0x1f0 [ 388.365103][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.371147][ T3591] hfsplus_find_cat+0xb5/0x4f0 [ 388.376092][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.381411][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.387465][ T3591] ? should_fail_ex+0x45/0x8a0 [ 388.392415][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.397723][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.403037][ T3591] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 388.409564][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.414901][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.420919][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.426223][ T3591] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 388.432755][ T3591] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 388.439005][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.445027][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.450332][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.456400][ T3591] hfsplus_cat_write_inode+0x2ca/0xe20 [ 388.462087][ T3591] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 388.468345][ T3591] ? _raw_spin_unlock+0x30/0x50 [ 388.473447][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.478738][ T3591] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 388.484724][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.490009][ T3591] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 388.496536][ T3591] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 388.502787][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.508109][ T3591] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 388.514642][ T3591] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 388.520879][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.526923][ T3591] hfsplus_write_inode+0x178/0x960 [ 388.532228][ T3591] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 388.538752][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.544055][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.549378][ T3591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.555410][ T3591] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 388.561307][ T3591] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 388.567122][ T3591] __writeback_single_inode+0x88f/0x1190 [ 388.572982][ T3591] writeback_sb_inodes+0xac1/0x1cb0 [ 388.578676][ T3591] wb_writeback+0x4ce/0xc00 [ 388.583384][ T3591] ? queue_io+0x431/0x790 [ 388.587889][ T3591] wb_workfn+0x397/0x1910 [ 388.592449][ T3591] ? kmsan_get_metadata+0xfb/0x160 [ 388.597785][ T3591] ? __pfx_wb_workfn+0x10/0x10 [ 388.602775][ T3591] process_scheduled_works+0xb91/0x1d80 [ 388.608656][ T3591] worker_thread+0xedf/0x1590 [ 388.613609][ T3591] kthread+0xd5c/0xf00 [ 388.617851][ T3591] ? __pfx_worker_thread+0x10/0x10 [ 388.623239][ T3591] ? __pfx_kthread+0x10/0x10 [ 388.628032][ T3591] ret_from_fork+0x233/0x380 [ 388.632811][ T3591] ? __pfx_kthread+0x10/0x10 [ 388.637590][ T3591] ret_from_fork_asm+0x1a/0x30 [ 388.642611][ T3591] [ 388.646197][ T3591] Kernel Offset: disabled [ 388.650589][ T3591] Rebooting in 86400 seconds..