, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 00:44:16 executing program 5: r0 = msgget(0x2, 0x67) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/99) r1 = msgget(0x1, 0x28e) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/160) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0xfc, &(0x7f00000001c0)=""/252, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x2, 0x3}, 0x10}, 0x80) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000003c0)=r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x0, 0x30, 0x28, &(0x7f0000000400)="55ec63985343c89913d4f2fbc685fc834b59109856c23846b4ce9efc551a6153615f83745596228193bf3f2a864d54b8", &(0x7f0000000440)=""/40, 0x0, 0x0, 0x1000, 0xf, &(0x7f0000000480)="b6fe341123f933bc7460ba9cf4e09e05aa0b21805085c68353be9a6a5c7178f3b90e69dbb64d07ef49aa40dab3b4f96dd8d7bb4cbe5658bf04dede13c498f798a4a30296abe4955594c9a5e5063ba38f81910040d382fc27f00cb97c8e9c0aeb1d11ba44597608ab68e5564bc800952128d7027d399855c71e2e320453baae02af4af4b96fdfa49262d210c620962b10fe81be2eb9b1a07ab5419391902d21d7d503782093a575efc4d5b12ee4e3d3dccbed8ac9cd44e9ae308a42fd167bef6721d5e6b72188ed382dd40d7379df496f0d9fe7be3ef2a4d3b9924c4c67557f6843c101e2d7291fbbc179fcaec0f7817cbb7ee968586c29426c93df3c81dd7dce243109e6a45a426b14f3755b00d0e72d0502bc256a132ec528e5f738db3a5a693bb2b5624970676d001ae05a71e135376026352903609a8e8ac55f96f9c0c4a7f6ce1ddb06eb5f3b3f7fd96f4ea4933320b3782d3258bcc7e9840527e5b52c909d2b7a3d9861da75105acded501dfe2921f23d5c70848e18d09bc3804bac870290d0a29343cfdcef4e549fe812e35c7d47e8638fff88434b87341ccb2c39c9217e6c6708e2e5e11b7dca1d2c15c9843e57020c1961c3884ff76d34ed0d11ad68489f5bd5ed91e93a8aac078206923aeaa1dbdd000043e623e40103f676d8361b6be3a91139ae0f347801ed10e6eec09dec23df30cc78718b522aa29ebb7d9a885ee16a32ef5aa054916927a825bdf1e190fbe4fb464e3bb0e1424ea4002870064b62321111cdac8208f07f0a0ccd3621ef373601bb5a09bd2f3961942910dd8b52c27a978986d5ef24ad47f25538ea4bf54b87b8712e2dac5e0cd3ced093d7493155c49b2766143127a320fa0783bbd69cbeabcbc25fe52d34abc52a5ec911b8378acef4a97773d7c31076763545195fda4c1d60ea9b8fe0ce2c686480097c0120497e0f7494ded8142c1a2207cfc84bb27eac3a8bde0cd1283747acc920b5a14f124665906a6ef1344db9fdeda233d6404a1d946e43580769bcb15b3db594ea3495944ce0a5d548f5f4c8248ca1e8359d2a1262c2d928c4750b937d3d08c596a0654372d642683660035987828f596576e8ab3776d808d1ded3673e24152412b777b2068334876984efb6c7834a987ea633207104b6a16515553ce6608b3679e2f11a0d2bda15cb362be7228caa8c99093b2bd203b2c8418303e9c8d0d3070f7cfe312b13b39a41a0d468d49eb7c1dd4ced7a2eaf562b3d171fdcfb3562edf6895220f53b29cce6481405370c940072de6db4d2544405fd9d23a76f37f9ec102ef727234c49d7cf60a79cb608143c9cb49976b168315bc85c1a54ffd8336065762cbc459c65531c2cf52498c9c849d6948d6eb6e91e823e8cf8ce04a975a5c3a6e2de60644a32a75c08a5c33e9a32dbd2982594d523f05d7d12c0f45d55c267a10433f447a3f5a68f9338a847c1461d98ac7fa4365f915fa395f066992ff7a105d1be98c85f13937ee5566ed05fffc6ee9577b3496a576b6b88e62da0ba6504624f445a1f14ea1967036523d52129239dc222e7869c6667f5d9caa39f2632eb7b736d1b2da4075aababac0f86c1b4980a61fa787a4f637c84ee7869fd0ebe0c3f7ffe8cfc5bd8342d962ae8c96b84dc2ebf53dc4f45e7fb1fa9a92e47ea1f523559053d592a3329aae415fca82145e15bb5b0985179f635dc33766d4ae05e6ef178349d177c63836b7c145b82940afd2422f87fa4819288c8f1208361db8080616281182d5cf6464f036f0349c3d48010c443c9fcf42b00d4c46c25cdba9b532450a79a28b4fc04899735c8c426a175e54e3ebed253751dddd73f02c8fc62962fdf120f0ea450c6ad5c92de09cc0537ec22652cdb21677c502f4193236549345c83e257581fb34d6033ac72ce89ef032f74b1073448d95f25fa81a32b9ab8c989e035f929eed3c66b4e614c32f98ca8d426abe4f33576e52d13e9d024abd36b0fbd677dac02b8e76b3ab5fbb3958d644060f003429ec0ee896a7c8a74ffe566ce49cd7fb765101e2707cb35d8d483298e612c08f0216bb62c94ade6cfaf31c2e08de1c44cebbb9609440714250bbdaa5b6ca7e4f442ba7aa247784abe708b934f451833a97167da9ccd282c17624d5fee1534d65c325a9369f673a6fd36d3027837e79013d3c38ca7707b753a0a564fec9b0110cc847c581fdd970dfb248c18a2a293db242670a113016f08ca12d3f6239e95fb2e91e3dcbf7b613b53ae90ac1acb83ca770dc8c385f5f37f2d55411bcc8217b87b497c305f21270ac891f091076268f9ab29ef69f25ea3c86472b8517608856b58bb4e765b5bb5fa7b2a9b917992be744407c8f4cb8481ba302471c2008671b1e8036e236f516756b5199aefb484bb10182cb728f1ef8e51ac9d238229f030531b1dcd06f7f1aa6b5c0ac0fe9dfb7c59adf77c1762d9a333a784473c24da055b13af683f8481ae0523e317fd295af8a43fcc77e710cd3042b6424cb952a3226879906c878445fb701637b583b8f3538d01905c04777ff31cc842172fb829d0390a09099fbf1eddc556987848c82139198d2f07e8d5343919a20621b03a9a21385cb6ae39933384d1e44a923559a5b6c25824d833e02f7eaafe272fa0715e9480bea30e9d88f21bc13ac9a9666c741c406c774d06c894e9eb306907d5df46203a4d2047cc4031606cc5c708e73088179410a882fbd3ed3abec7816287b3dfbf9a95ab8318240c18a51f7a58cd45e3dec9d09b51ce571cc436dfa51cc963658bef59f18cdd227392b9ec6467ac635ee95942efe43955593ddd64e8b3942548e0708e23ddaa2b4baac8de7bf057fa8b58b15ecc97d37a3a7d619ab148585e195d3a4200bb01528d58a5429ca91b021f22d9cd8aae948e507bd4459a6143e4e4fb43af6d4789982566c3ccf905f8bc99ed1c25c5a013e4c73302d01442d3b46f052d5c47a9aa304e7ef88a2d9971f652cecaa9c4914a06bc609c3332a9814b8d7c13f5b2b8422953d57be0d12aa7d859eea754822fb60d036755cc911895016e84e9c4e9d06de45fa2e510bd81a97773214461bec25aceb03a2a7e98be2c85c5844525f485417634298d6d572e7c5337aa36a85e6f080e188c45fb6096254f5c9b59124cccb0ef7f268dc8cf36232bcb5f3719485a7f3bc63bf72ca5b5ddb4e8ca4115906540940a53b908ff7a2d27e3bc24775718a82ead06daec503df1de6b3d40b5ccef0725e290337a35a0fcdc192a7566fa28adf0e0df0443651fd20b33733ef79b91a68539bbd7df0599fe3f613da83b2b84a9623c580d47143629d2c1f501cc8d05249592cc57e6e8116b2eac1344fad32eba776090343ad7e6ec1518ba475b164c1690022c77d3e8b562749e1b7da352b72fc11c6f9dbef801e2d0a893f8b15d22efd4eac9bded44d9e0b73a871118cbd1a6a11d7944eb326ebc4399ac7efb0ff7568e53811e7411ce17d23c88dd6afe276570f5df27b59cf89fdbe8b769d9b6fbf7fb29d9c60fa4c7029a6c9c07d160539445d96b57f7cfa416694c06ac5760159bb09b3301be348ce566cc7cdbea978c392ecec81a3b6a872e0ce67e52d0fb703cb546522554451d83d4bc350ddc069a4723ea186fd897ff036268098467f3d74b20829acc68aa118231f58db52ddcd4e6ffc31620c09299be471fd1cccc18d5aff50c043789376b30b52b7253cd64617f5f12f467082e4070858be75644b5d48148cf06d2d1e4f2e90b37f288d10aaada660cd77111342b9a4670e2caeaebdb505427df3b97c3f0bd7bbdc5b8bd517107b707ed9ad22f188e50bc68e459c27601f41f16037185a3640f116456438d5afd12eeefb4501e9219a54e507e8f224050b84670c0f9df43d0f8c98f0beb096c09fa627ea5582739c8711f5561f1a1cd37f4e7be7b1479781c8a8b91676b1abae44cebc5b1997d6112aaea11a2cf6fd9036e575c367269e7da65b71c26b13f037f54428c4d86ea6b6de06f16485aa8b78ac64977e13e0fba2bcfc19f22cdc27213125c79c6711e88c66bfc36a246931c69f1537d1f1f3abfc0a204444824e4c1045dfbe6f187c729499cf26c281fbd6b8761ef456f9da82a1d8ab0014e506d63c56127d44938f0b7fd1d7f76ea2462b1301321e4b677ab336bfb83191df66f943e8dad352750ceecc37e71bf9146c3760699845ed382e39b463b640162b7877ded62855451da5871b87dc958bf6c8fa3eb003e65c39d068007b7c0ccf3d04752016d28e42eb9fac214798bc241690ef840f4c3206bea3108f003f9316e2cc2486f556e2caaad8335bcb536098d7762704837cd0a3ac26895334f32c77ba0f6d44af84e7f11d26a09c2c21c20f6dcad36ffa82e099bf14ded06d97d77e8a8ad3dfc6431a16eb0e3252477d56ef783e25d23ae455d38fbfe03ee92e7d7203ad3cd4a38ba6db889a768cca7205615439520764aaf213b37a54afd06d100482fba048e717a5f1e069cab8c869334684128b88347fcf33df44972e9f2aa34a3c6f849b1f42a42a44910697a8bcc50e535cc1f894b91e4be5fbbfea1eff1c48cf5a842d5198eeb6601c35421d222ba46188c09c5bd68582535cd427df06f522aca166909f7d7b077f8c9a0c7779a8bb7dfac98a7294d647cf1aab73ed23e448092da15b048e15df29b02bf58ad6cdd8a31a2c43c8e6b729e2f51e845cd198c4c1ad160823727825b5955813b829fb0579ee0478d91690e78f1163b018c52280c0049b6316126d461c32b165e252fde688a76e532e423adb5e72900b0af093dd9123ec7a90e74f6f7b65c11aed9a38aa69014d63ba294f0e0227082ce83c3470854471475b9d7fca825a3122a6d1d195af0e645cad8e85b9e2dc1c77b4d26b6012bb33bcadfc1c2655b7c10dde5294c7b37e2623a04714961df09d10b7ecf1574c9f6d07c8432836c8688059b945b19e449612fa4c45ffd890f2be1ded2d4700bb37c516aed91b29015edca5ffc6659768d7b477d2bdb8d27222b349c4a90b7812773ea25545f74b44ade6e36af91d08b4308e1af34a6b5e0d63749fabcaece9512af9026c2e3bc4df6a10a650f26d9f8dbbebc60c19cea1f61d95c39fc4e93819ff0e2b4b67597c873b32ab48d4e93911af889abf58292be93cb1c1958569e0b2bd2e53aa011cd5a391de5b5e6b996b43b8386fe7718aeb95f4b9060e1a11f2b9d645ecf8a21a6c34a2b3345eba4ba23b68b46bca4c273eef513a9eca7e405c2082ee3a9fc79570c8153e63f50bc1d39e488d6ea0f3cfabe635e6ba2c5bc4a874e042d9af4722ad30948d5782cd5e45909ea6d1b2ba66dbb11d0860b6c94a3489e4ef0a11f247d0425bab86871063db2346cff9966e1cea6da88d6bd09310a1f6fd72c3ba86d80d7388ba5bf699b76ec4d46fd35b6391ed47049805d27731dc53485ddfa3d200db6a42a581c1d77f5e7211b754e8f1a09f21a391efad56151a30f45c8b3377114e2e902a0d3d38706722d37980c011af289722bf2fcf3d2ce266c2fa8d18c53752dc15223c98535e1d0adef0f74a513affdac2262b3cf7305b1859b06be26fa73070ee086120091f8be0be4f1ef38989a97d9862dbf9813b0ba6c6dbca8e2782436190c72cf1c854d8f38ed60c7cca92f3f36810395488d953077ac32e55e0633b01a740c44455063da9b2440cf2fe4524c448b16593c73de39a01e6027f2284e935e23faf32886ef942fe319c88a7bc2abc5ed36058e280868656f37df5b29462a23ea66bbe756ac4202d21131adf2cf5fe00a9724", &(0x7f0000001480)="40e31ec282673aa5a45d75e414b940", 0x1, 0xfffffff8}, 0x48) msgsnd(r0, &(0x7f0000001540)={0x3, "df41ab1fdfe5981b612ed8de1f57c2f38fc599360e1d9eeb648b092de6185cec6b76cf3c67e061a18dc35d112e4ddedd7842334c650b4de07854cbf37f3e16d1586261a69eb68871d9a96ce06f42fcc75b1019d5e16b"}, 0x5e, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000029c0)={0xffffffffffffffff, 0xe0, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000027c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002800), &(0x7f0000002840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002880)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x7, 0x10000, 0x5, 0x800, 0x86, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=@base={0x12, 0x0, 0x9, 0xfffffffd, 0x12, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002cc0)={r3}, 0x4) [ 244.646714][ T5759] loop3: detected capacity change from 0 to 32766 00:44:16 executing program 4: socket$inet6(0xa, 0x0, 0xf43b) 00:44:16 executing program 1: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 00:44:16 executing program 0: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) 00:44:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc00caee0, 0x0) 00:44:16 executing program 0: syz_clone(0x100000, 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000016c0)="1a") 00:44:16 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) keyctl$clear(0x7, 0x0) syz_clone(0xd4229080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 245.460403][ T5785] loop3: detected capacity change from 0 to 32766 00:44:17 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, 0x0) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:17 executing program 1: keyctl$link(0x3, 0x0, 0xfffffffffffffffe) 00:44:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 00:44:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x0, 0xf4240, &(0x7f0000002240)=@raw=[@map_idx], &(0x7f00000022c0)='syzkaller\x00', 0x0, 0xd8, &(0x7f0000002300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002400), 0x8, 0x10, &(0x7f0000002440), 0x10}, 0x80) 00:44:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000052009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a90004000022e387110081085dfa51030030a53e92f7011fa4200816dbba5733b0214dc8a6f3d3d1894932be5f80a550e9a277e00541c8e2cef3f191181ca393ff10a04385cb20c5fce3220d0f198c8145a612ce2700a269e1d4659f16e1989dd3f4ecd7e404424a22c6ea8d65cec54d226681d306414d83d2c0cfac3fb2593337879324e2ff27529d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='br_fdb_update\x00', r2}, 0x10) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x2}, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 00:44:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x401eb94) 00:44:17 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/225, 0xe1}], 0x1, 0x7, 0x0) [ 245.637922][ T28] audit: type=1400 audit(1655253857.335:258): avc: denied { connect } for pid=5801 comm="syz-executor.4" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:44:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan0\x00'}) 00:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000004680)={&(0x7f0000004580), 0xc, &(0x7f0000004640)={&(0x7f00000045c0)={0x14, 0x0, 0x404}, 0x14}}, 0x0) 00:44:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) accept(r0, 0x0, 0x0) 00:44:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2001}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0/../file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) 00:44:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x34, 0x0, 0x0, 0x300}]}, 0x10) [ 245.969170][ T5819] loop5: detected capacity change from 0 to 4096 [ 245.980628][ T28] audit: type=1400 audit(1655253857.675:259): avc: denied { accept } for pid=5818 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.035764][ T5819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 246.037725][ T28] audit: type=1400 audit(1655253857.735:260): avc: denied { mount } for pid=5815 comm="syz-executor.5" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 246.053543][ T28] audit: type=1400 audit(1655253857.745:261): avc: denied { write } for pid=5815 comm="syz-executor.5" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.057732][ T28] audit: type=1400 audit(1655253857.755:262): avc: denied { add_name } for pid=5815 comm="syz-executor.5" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.058007][ T28] audit: type=1400 audit(1655253857.755:263): avc: denied { create } for pid=5815 comm="syz-executor.5" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 246.072615][ T28] audit: type=1400 audit(1655253857.765:264): avc: denied { append open } for pid=5815 comm="syz-executor.5" path="/root/syzkaller-testdir1043444869/syzkaller.EaqbwJ/173/file0/cpuset.effective_cpus" dev="loop5" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 246.113025][ T28] audit: type=1400 audit(1655253857.805:265): avc: denied { unmount } for pid=3636 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 246.157667][ T3636] EXT4-fs (loop5): unmounting filesystem. 00:44:18 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, 0x0) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:18 executing program 4: bpf$BPF_GET_MAP_INFO(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='~', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001400)='\r', 0x1}], 0x1, &(0x7f0000003ec0)=ANY=[@ANYBLOB="10"], 0x38}}], 0x2, 0x0) 00:44:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000200)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{0x0, 0x0, &(0x7f0000001900)=[{0xffffffffffffffff}], 0x1}}], 0x2, 0x0) 00:44:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000052009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a90004000022e387110081085dfa51030030a53e92f7011fa4200816dbba5733b0214dc8a6f3d3d1894932be5f80a550e9a277e00541c8e2cef3f191181ca393ff10a04385cb20c5fce3220d0f198c8145a612ce2700a269e1d4659f16e1989dd3f4ecd7e404424a22c6ea8d65cec54d226681d306414d83d2c0cfac3fb2593337879324e2ff27529d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='br_fdb_update\x00', r2}, 0x10) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x2}, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 00:44:18 executing program 5: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 00:44:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/exe\x00', 0x151080, 0x0) finit_module(r0, 0x0, 0x0) [ 246.638994][ T28] audit: type=1400 audit(1655253858.335:266): avc: denied { create } for pid=5825 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:44:18 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 00:44:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0}}) 00:44:18 executing program 5: r0 = socket(0xa, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:44:18 executing program 4: syz_genetlink_get_family_id$team(&(0x7f0000001b00), 0xffffffffffffffff) 00:44:18 executing program 0: bpf$BPF_GET_MAP_INFO(0x1e, 0x0, 0x0) [ 247.233096][ T5835] loop3: detected capacity change from 0 to 32766 00:44:19 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) 00:44:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 00:44:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000001580)="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", 0x101, 0x400}], 0x0, &(0x7f0000000040)=ANY=[]) [ 247.343443][ T5853] loop4: detected capacity change from 0 to 4 [ 247.354117][ T5853] Dev loop4: unable to read RDB block 4 [ 247.354155][ T5853] loop4: unable to read partition table [ 247.354381][ T5853] loop4: partition table beyond EOD, truncated [ 247.355706][ T5853] EXT4-fs (loop4): Encoding requested by superblock is unknown 00:44:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x30a2, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:44:19 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 00:44:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private}, 0x10) 00:44:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 00:44:19 executing program 2: syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) 00:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) 00:44:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:44:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7860, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/59, 0x3b) [ 247.874726][ T5882] ======================================================= [ 247.874726][ T5882] WARNING: The mand mount option has been deprecated and [ 247.874726][ T5882] and is ignored by this kernel. Remove the mand [ 247.874726][ T5882] option from the mount to silence this warning. [ 247.874726][ T5882] ======================================================= [ 248.075212][ T5856] loop3: detected capacity change from 0 to 32766 00:44:19 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:19 executing program 2: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) getgroups(0x0, 0x0) 00:44:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000300)={'icmp\x00'}, &(0x7f0000000340)=0x1e) 00:44:19 executing program 0: bpf$BPF_GET_MAP_INFO(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:44:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x30a2, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:44:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7860, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/59, 0x3b) 00:44:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/arp\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/208, 0xd0}], 0x1, 0x4f, 0x0) 00:44:20 executing program 2: bpf$BPF_GET_MAP_INFO(0xa, 0x0, 0x0) 00:44:20 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 00:44:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) accept(r0, 0x0, 0x0) 00:44:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="7e291b0eafba50c14469b4a35d945c1a", 0x10}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000003c0)="8a", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000b80)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000c40)="a9", 0x1}], 0x1, &(0x7f00000012c0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev}}}], 0x38}}, {{&(0x7f00000013c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000003ec0)=ANY=[], 0x38}}], 0x4, 0x0) [ 248.627494][ T5905] loop0: detected capacity change from 0 to 360 [ 248.997322][ T5892] loop3: detected capacity change from 0 to 32766 00:44:20 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100), 0x4) 00:44:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'}) 00:44:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000140)="d2ad39ac3e072398148189e993efe22ba09eb518172dd9f3da295bdcaca8fde33193c574a92ea52254fc096b9d3228127774916126fd46633eeb38a67d3ac98bb96947576bd6b90eee6e58efde65867ba9e60ae028e12ea498b9638b4a77fb0e52ca8033a46fdfb24dbdbb8ceb3074ebbfe3de371e35509caf8e61914904d9bf58c188ad801207ef21ccf6fff90c046842852b4f3876", 0x96}, {&(0x7f0000000840)="b624af53b82dd33d59466d119053160b67ff59079b37792d7191e90859fd63c56413bb325b0f4ecd3812af4a5419dd630a9687", 0x33}], 0x2) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x348, 0x11, 0x0, 0x27) 00:44:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000200)="0f", 0x1}], 0x1}}], 0x1, 0x0) 00:44:20 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x2ed0, 0x1) 00:44:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000200)="0f", 0x1}], 0x1}}], 0x1, 0x0) 00:44:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0) [ 249.169413][ T5925] loop0: detected capacity change from 0 to 360 00:44:20 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x404002) 00:44:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000200)="0f", 0x1}], 0x1}}], 0x1, 0x4000) [ 249.381782][ T5935] loop0: detected capacity change from 0 to 360 [ 249.914255][ T5939] loop3: detected capacity change from 0 to 32766 00:44:21 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 00:44:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 00:44:21 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000540)={0x0, 'hsr0\x00'}) 00:44:21 executing program 5: syz_emit_ethernet(0xa6, &(0x7f00000000c0)=ANY=[], 0x0) 00:44:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='~', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}], 0x2, 0x0) 00:44:21 executing program 5: syz_open_dev$vcsu(&(0x7f00000007c0), 0x0, 0x2c2140) 00:44:21 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:44:21 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x0, 0x0) 00:44:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) [ 250.116218][ T5949] 8021q: VLANs not supported on hsr0 [ 250.123923][ T5947] loop0: detected capacity change from 0 to 360 00:44:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x84}, 0x48) [ 250.325602][ T5961] loop0: detected capacity change from 0 to 360 [ 250.813600][ T5964] loop3: detected capacity change from 0 to 32766 00:44:22 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 00:44:22 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xbc0, 0x0) 00:44:22 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fdatasync(r0) 00:44:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x0) 00:44:22 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000280)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:44:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000040)=0xfffffffffffffcd3) 00:44:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) 00:44:22 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 250.973453][ T5975] loop0: detected capacity change from 0 to 360 00:44:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000280)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:44:22 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)={0x400, 0x11, 0x0, 0x0, 0x0, "", [@generic="db6e6c8d5e85080045f00d80724e06d569116e3a1ce41e2a56692d44b2b103d10e3e40feef2bafca", @nested={0x145, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="f5891f012108c9a7de98e2973c1c4eed1a983de9b2d11dc1a3c2ba9465f4b7", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="e42036ea378b7ec723d8a17b8fa7ac22cef0a3e9e2f7cd1be27a79146ba448ba155988a22bcaa6ea268219be63c2b2d04a073afcc441ba4812ee7a8026bc9e78063588fd7fbe830139abd47b371162d3cc2771f9de19c6ab6a1f0e258ab84831b104902ecc5da40f1e99760c07f82976ed68ab2244169dc47fb2231455b2098c0bbc7c", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="ade81586cb3a1afc1f1a4c7111d957a349f3e491958e71ac82a1148028f1be2303e7e0d62120dfea3ab59743b2b90513e8de0b02a3b1eee515f256d4844a6800db801bf07209f6fa2d5024e5c24ce44e920fb5167ac608ad144c54af98b621ec8af9eb9074c197b15a3634d2228adc"]}, @generic="2b3bac56bc52560cf4709dcabf5d770db330ea1fcbd12d974bc794eab85101f8fc5cdf78642e56db909df0210d0fca0251706015a567bfe3b128df2b6692170b4788522b216624b8864abf3beb07046cbb21", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="583c23521a7c04b266594975dc4e3462b743c765aa53016630236e30576236f92bb550e79cedcad880b679", @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x1d9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x4}, @typed={0x4}, @generic="bddacfba5b857fece43aa19df3b9d366df08e96bab1b1530dbb7b905d5a93777bf9165cdb80f55135cbc09555cc4b19929e8243e4761b724a216a4c1baffdf11aa50f12d3a44a71f833f06b2e4898c6aa84ddef3400e0d768f7c267f66223949a98b71dbe996c34a31a97bd23ea9c99d8ef3b1668030d24a8f262a2955bb6e451481e42f9f8ce0ffd023011ab3c4b8979792b99fb7bb1a9f1742db018957db9119de0ab4f08f3d70d870f97b458a43c9794e5ebde911d2b789477ef034e30f62f8b7328a5216e2", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="82a96fc4eae3562380dc5664f7a8e7f364c7abf2c6012b6196585828c62722a544ca75427ca2152d1ae9467edf072af2c2613e75da856501d9bfeee5b1eead3096eba56e02f71365cf349936b322804d598c141e95c97dabbbddf5788dd937f3d66b5c89aeefec4580a57794535528c16cd60238c8b210fcc91bc35ad1906fb36df857b4dd86e84920b20c491b9faa66b089354a6874aaaabe30d89acc48ec2a5d100eea49f051f0b914188b39b61d0aca11312dc17690516f9a50e2e5728373d27030c9e31afed72e91e3cc10f73ef231bfdfb3f0b02507f52d3e17a8d204d602c4fbe275aeb2f9d0b195b714c6229e2535"]}]}, 0x400}], 0x1}, 0x0) 00:44:22 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$FUSE_LK(r0, 0x0, 0x0) [ 251.124727][ T5984] loop0: detected capacity change from 0 to 360 [ 251.559406][ T5989] loop3: detected capacity change from 0 to 32766 00:44:23 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 00:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x115}, 0x24}}, 0x0) 00:44:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0), 0x4) 00:44:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:23 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)={0x400, 0x11, 0x0, 0x0, 0x0, "", [@generic="db6e6c8d5e85080045f00d80724e06d569116e3a1ce41e2a56692d44b2b103d10e3e40feef2bafca", @nested={0x145, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="f5891f012108c9a7de98e2973c1c4eed1a983de9b2d11dc1a3c2ba9465f4b7", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="e42036ea378b7ec723d8a17b8fa7ac22cef0a3e9e2f7cd1be27a79146ba448ba155988a22bcaa6ea268219be63c2b2d04a073afcc441ba4812ee7a8026bc9e78063588fd7fbe830139abd47b371162d3cc2771f9de19c6ab6a1f0e258ab84831b104902ecc5da40f1e99760c07f82976ed68ab2244169dc47fb2231455b2098c0bbc7c", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="ade81586cb3a1afc1f1a4c7111d957a349f3e491958e71ac82a1148028f1be2303e7e0d62120dfea3ab59743b2b90513e8de0b02a3b1eee515f256d4844a6800db801bf07209f6fa2d5024e5c24ce44e920fb5167ac608ad144c54af98b621ec8af9eb9074c197b15a3634d2228adc"]}, @generic="2b3bac56bc52560cf4709dcabf5d770db330ea1fcbd12d974bc794eab85101f8fc5cdf78642e56db909df0210d0fca0251706015a567bfe3b128df2b6692170b4788522b216624b8864abf3beb07046cbb21", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="583c23521a7c04b266594975dc4e3462b743c765aa53016630236e30576236f92bb550e79cedcad880b679", @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x1d9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x4}, @typed={0x4}, @generic="bddacfba5b857fece43aa19df3b9d366df08e96bab1b1530dbb7b905d5a93777bf9165cdb80f55135cbc09555cc4b19929e8243e4761b724a216a4c1baffdf11aa50f12d3a44a71f833f06b2e4898c6aa84ddef3400e0d768f7c267f66223949a98b71dbe996c34a31a97bd23ea9c99d8ef3b1668030d24a8f262a2955bb6e451481e42f9f8ce0ffd023011ab3c4b8979792b99fb7bb1a9f1742db018957db9119de0ab4f08f3d70d870f97b458a43c9794e5ebde911d2b789477ef034e30f62f8b7328a5216e2", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="82a96fc4eae3562380dc5664f7a8e7f364c7abf2c6012b6196585828c62722a544ca75427ca2152d1ae9467edf072af2c2613e75da856501d9bfeee5b1eead3096eba56e02f71365cf349936b322804d598c141e95c97dabbbddf5788dd937f3d66b5c89aeefec4580a57794535528c16cd60238c8b210fcc91bc35ad1906fb36df857b4dd86e84920b20c491b9faa66b089354a6874aaaabe30d89acc48ec2a5d100eea49f051f0b914188b39b61d0aca11312dc17690516f9a50e2e5728373d27030c9e31afed72e91e3cc10f73ef231bfdfb3f0b02507f52d3e17a8d204d602c4fbe275aeb2f9d0b195b714c6229e2535"]}]}, 0x400}], 0x1}, 0x0) 00:44:23 executing program 5: unshare(0x40000400) socket(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0xffffff96, 0x44, 0x0, 0x0) 00:44:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 00:44:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) 00:44:23 executing program 4: socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f000000cf40)='ns/ipc\x00') [ 251.719403][ T6000] loop0: detected capacity change from 0 to 360 00:44:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0x10}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 251.805684][ T6007] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:44:23 executing program 4: bpf$BPF_GET_MAP_INFO(0x14, 0x0, 0x0) [ 251.849474][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 251.849490][ T28] audit: type=1400 audit(1655253863.545:277): avc: denied { create } for pid=6002 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.890773][ T6011] loop0: detected capacity change from 0 to 360 [ 251.957616][ T3925] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.957649][ T3925] Buffer I/O error on dev loop0, logical block 0, async page read [ 251.957720][ T3925] ldm_validate_partition_table(): Disk read failed. [ 251.957740][ T3925] Dev loop0: unable to read RDB block 0 [ 251.957760][ T3925] loop0: unable to read partition table [ 251.957895][ T3925] loop0: partition table beyond EOD, truncated [ 251.971651][ T6014] loop1: detected capacity change from 0 to 360 [ 252.416426][ T6017] loop3: detected capacity change from 0 to 32766 00:44:24 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000001a40)) 00:44:24 executing program 2: bpf$BPF_GET_MAP_INFO(0x9, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:44:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:24 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "5b68bb5ed3d799764beff7872e595c114c330876bbb83cd8ea8f362eb4c9dd65fbf67a32052fb326b212f17d4f23a22d04a417c2c8a4e8ee7aef06ef9fd57146"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x220008) keyctl$chown(0x4, r0, 0xee01, 0xee00) 00:44:24 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r0, 0x0) 00:44:24 executing program 5: unshare(0x40000400) socket(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0xffffff96, 0x44, 0x0, 0x0) 00:44:24 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:44:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) [ 252.618077][ T28] audit: type=1400 audit(1655253864.315:278): avc: denied { shutdown } for pid=6023 comm="syz-executor.1" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:44:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="17", 0x1}], 0x1}, 0x0) 00:44:24 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) 00:44:24 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 252.620128][ T6027] loop0: detected capacity change from 0 to 360 [ 252.741564][ T28] audit: type=1400 audit(1655253864.435:279): avc: denied { write } for pid=6029 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.406401][ T6045] loop3: detected capacity change from 0 to 32766 00:44:25 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000001a40)) 00:44:25 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/block/nbd0', 0x0, 0x0) 00:44:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:25 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2c37, &(0x7f0000000440), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x2c37, &(0x7f0000000440), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 00:44:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000480), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000600)=@multiplanar_fd={0x0, 0xb, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5a28268b"}, 0x0, 0x4, {0x0}}) 00:44:25 executing program 5: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) 00:44:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 00:44:25 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') 00:44:25 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 00:44:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:25 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x40) 00:44:25 executing program 2: syz_io_uring_setup(0x60a4, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6aa2, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f00000001c0)}], 0x3) [ 254.289275][ T6070] loop3: detected capacity change from 0 to 32766 00:44:26 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000001a40)) 00:44:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:26 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) 00:44:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 00:44:26 executing program 1: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000340)={0x7}, &(0x7f00000003c0)={0x0, r0/1000+60000}) 00:44:26 executing program 2: syz_io_uring_setup(0x60a4, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6aa2, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f00000001c0)}], 0x3) 00:44:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x44, 0xffffffffffffffff, 0xece}, 0x48) 00:44:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 254.460473][ T6081] loop0: detected capacity change from 0 to 360 [ 254.483409][ T28] audit: type=1400 audit(1655253866.175:280): avc: denied { mount } for pid=6072 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 00:44:26 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x3ff, &(0x7f0000000040)) io_setup(0x1ff, &(0x7f0000000080)) 00:44:26 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 00:44:26 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@overlay={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9caefec3"}}) [ 254.516255][ T28] audit: type=1400 audit(1655253866.215:281): avc: denied { unmount } for pid=3638 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 00:44:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 254.520077][ T28] audit: type=1400 audit(1655253866.215:282): avc: denied { rename } for pid=2962 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.520118][ T28] audit: type=1400 audit(1655253866.215:283): avc: denied { unlink } for pid=2962 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.520154][ T28] audit: type=1400 audit(1655253866.215:284): avc: denied { create } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.610408][ T6086] loop0: detected capacity change from 0 to 360 [ 254.669764][ T28] audit: type=1400 audit(1655253866.365:285): avc: denied { create } for pid=6087 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.670717][ T28] audit: type=1400 audit(1655253866.365:286): avc: denied { ioctl } for pid=6087 comm="syz-executor.5" path="socket:[39531]" dev="sockfs" ino=39531 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.810545][ T6093] loop0: detected capacity change from 0 to 360 [ 255.338708][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.425616][ T6095] loop3: detected capacity change from 0 to 32766 00:44:27 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[0x0]) 00:44:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000001000)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 00:44:27 executing program 1: syz_open_dev$media(&(0x7f0000000100), 0x0, 0x27032e18890129e9) 00:44:27 executing program 2: syz_io_uring_setup(0x2c37, &(0x7f0000000440), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x178a, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:44:27 executing program 4: syz_open_dev$vcsu(&(0x7f0000006400), 0xffffffffffffffff, 0xc40) 00:44:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {0x0, 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:27 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)={0x1150c0}, 0x18) 00:44:27 executing program 4: io_setup(0x9, &(0x7f0000000080)) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 00:44:27 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68e7f426"}}) 00:44:27 executing program 2: inotify_init1(0x40c00) [ 255.758403][ T6106] loop0: detected capacity change from 0 to 360 00:44:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {0x0, 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:27 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) [ 255.960654][ T6118] loop0: detected capacity change from 0 to 360 [ 256.502537][ T6120] loop3: detected capacity change from 0 to 32766 00:44:28 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[0x0]) 00:44:28 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x442, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 00:44:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101441, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 00:44:28 executing program 2: pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, &(0x7f0000000ac0)={0x9}, 0x9) 00:44:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {0x0, 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:28 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 00:44:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_userptr={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7c1987b"}, 0x0, 0x2, {0x0}}) [ 256.685259][ T6131] loop0: detected capacity change from 0 to 360 00:44:28 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) 00:44:28 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:44:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080), 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:28 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) 00:44:28 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) [ 256.887798][ T6141] loop0: detected capacity change from 0 to 360 [ 256.903164][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 256.903178][ T28] audit: type=1400 audit(1655253868.595:289): avc: denied { map } for pid=6139 comm="syz-executor.2" path="/dev/nvme-fabrics" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.409119][ T6145] loop3: detected capacity change from 0 to 32766 00:44:29 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[0x0]) 00:44:29 executing program 1: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000280)="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", 0x201}]) 00:44:29 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/161, 0xa1) 00:44:29 executing program 2: getresuid(0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bond_slave_1\x00'}) syz_open_dev$vcsu(0x0, 0x0, 0x0) 00:44:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080), 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:29 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000a80), 0x84800) 00:44:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 00:44:29 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(0x0, 0x5, 0x230802) io_setup(0x0, &(0x7f0000000180)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x9) r3 = syz_open_dev$vcsn(0x0, 0x5, 0x230802) io_setup(0x0, &(0x7f0000000180)=0x0) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000280)) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000013c0)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x5e5) r5 = syz_open_dev$vcsn(0x0, 0x5, 0x230802) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x38, 0x1, @thr={&(0x7f00000002c0)="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", &(0x7f00000012c0)="acc72efc6e3ef1fa26b123d5d53c44ce7381bc14916b66e2ebbb63cea822837b74c21cd81cf7ac67b348f499923f96e87fb1ee42a9e9dfef2395ccee4ae5ac404d88e135d933194fb85535f020b4f003899c7713cf1bcb30acc73f52693f6ca8dda8955bed4243cb9c00af4fb39096476be8b6899eb0fb13f6130bbe656e339d0be3c3a5716d309b8d42cf97978d2f45b5206e87bb7796e54542ef00151a0931db0d210085a6ba8c893704d9b6dbc4d4eade24f6b12573ee4d64a55b1661445f5d7c2d82939ff212671d24084f8d8eed85"}}) 00:44:29 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000b00)=""/14) [ 257.590578][ T6154] loop0: detected capacity change from 0 to 360 00:44:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080), 0x0, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:29 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x242) 00:44:29 executing program 4: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f00000000c0)}]) [ 257.813187][ T6167] loop0: detected capacity change from 0 to 360 [ 258.328799][ T6170] loop3: detected capacity change from 0 to 32766 00:44:30 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:30 executing program 5: syz_clone(0x9c020000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:44:30 executing program 2: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x20}]) 00:44:30 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) 00:44:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:30 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:44:30 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) [ 258.516288][ T6179] loop0: detected capacity change from 0 to 360 00:44:30 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:44:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_FLOW={0x8}, @FRA_TUN_ID={0xc}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x38}}, 0x0) 00:44:30 executing program 2: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000240), 0x8) 00:44:30 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) [ 258.581783][ T28] audit: type=1400 audit(1655253870.275:290): avc: denied { map } for pid=6183 comm="syz-executor.4" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 00:44:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 258.711065][ T28] audit: type=1400 audit(1655253870.405:291): avc: denied { read } for pid=6186 comm="syz-executor.5" name="loop-control" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.717293][ T28] audit: type=1400 audit(1655253870.415:292): avc: denied { open } for pid=6186 comm="syz-executor.5" path="/dev/loop-control" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 258.718348][ T6194] loop0: detected capacity change from 0 to 360 [ 258.718352][ T28] audit: type=1400 audit(1655253870.415:293): avc: denied { ioctl } for pid=6186 comm="syz-executor.5" path="/dev/loop-control" dev="devtmpfs" ino=643 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 259.119167][ T6196] loop3: detected capacity change from 0 to 32766 00:44:30 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:30 executing program 2: setitimer(0x1, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 00:44:30 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x11d040, 0x0) 00:44:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 00:44:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:30 executing program 1: r0 = socket(0x2, 0x3, 0x36) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) 00:44:31 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68e7f426"}}) 00:44:31 executing program 2: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) 00:44:31 executing program 5: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}) 00:44:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={0x14}, 0x14}}, 0x0) [ 259.287199][ T6202] loop0: detected capacity change from 0 to 360 00:44:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:31 executing program 1: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) [ 259.811421][ T6222] loop3: detected capacity change from 0 to 32766 00:44:31 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:44:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, 0x0) 00:44:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x28281) 00:44:31 executing program 4: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_userptr={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7c1987b"}, 0x0, 0x2, {0x0}, 0xfffff3f2}) 00:44:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:31 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:31 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 00:44:31 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x7) [ 259.971470][ T28] audit: type=1400 audit(1655253871.665:294): avc: denied { write } for pid=6225 comm="syz-executor.5" name="sg0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 00:44:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000025a41b"], 0xa8}}, 0x0) 00:44:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:31 executing program 5: io_setup(0x7, &(0x7f0000000000)) io_setup(0x401, &(0x7f0000000040)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) 00:44:31 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) [ 260.016923][ T28] audit: type=1400 audit(1655253871.715:295): avc: denied { open } for pid=6225 comm="syz-executor.5" path="/dev/sg0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 260.180239][ T6242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42021 sclass=netlink_route_socket pid=6242 comm=syz-executor.1 [ 260.530855][ T6249] loop3: detected capacity change from 0 to 32766 00:44:32 executing program 1: socketpair(0x0, 0x80b, 0x0, &(0x7f0000000040)) 00:44:32 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_open_dev$vcsn(0x0, 0x0, 0x230802) io_setup(0x0, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x5e5) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000280)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={&(0x7f00000002c0), 0x0}}) 00:44:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:32 executing program 4: io_uring_setup(0x60d4, &(0x7f0000000040)={0x0, 0x0, 0x4}) 00:44:32 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) 00:44:32 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) geteuid() statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2900, 0x4, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80841, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x81, 0xfa, 0x5, 0x0, @empty, @private1, 0x20, 0x10, 0x3, 0x1}}) getdents(0xffffffffffffff9c, &(0x7f0000000300)=""/140, 0x8c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@delnexthop={0x20, 0x69, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008090) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_delrule={0x38, 0x21, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x1, 0x7f, 0x0, 0x0, 0x3, 0x10}, [@FRA_FLOW={0x8, 0xb, 0x7}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x8000, 0x10, 0xe0a, 0xfffffffc, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @local, {[@ssrr={0x89, 0x1b, 0x2b, [@remote, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102, @multicast2]}, @noop, @noop]}}}}}) 00:44:32 executing program 1: rt_sigaction(0x2c, &(0x7f00000002c0)={&(0x7f0000000200)="440f18d43e660f3807bac8000000c461595fcdc4c1c572e10f8f497c8060006666400f757a3fc4a2a5bd22400ff8dec4a3ad7d7e358f65f2430f7ca02f000000", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 00:44:32 executing program 4: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) [ 260.688101][ T28] audit: type=1400 audit(1655253872.385:296): avc: denied { write } for pid=6254 comm="syz-executor.5" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 00:44:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:32 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x2000) 00:44:32 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:44:32 executing program 4: syz_open_dev$ndb(&(0x7f00000008c0), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), 0xffffffffffffffff) 00:44:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 00:44:32 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40002000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 00:44:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 261.118796][ T6289] loop0: detected capacity change from 0 to 360 [ 261.390543][ T6273] loop3: detected capacity change from 0 to 32766 00:44:33 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) 00:44:33 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x100}, 0x0, 0x0) 00:44:33 executing program 2: clock_gettime(0x0, &(0x7f00000015c0)) 00:44:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x2c}}, 0x0) 00:44:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 00:44:33 executing program 1: pselect6(0xffffffffffffff0f, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) 00:44:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x400) 00:44:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8902, &(0x7f00000004c0)) 00:44:33 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) [ 261.556472][ T28] audit: type=1400 audit(1655253873.245:297): avc: denied { write } for pid=6297 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:44:33 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x4000, 0x0) 00:44:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 261.566323][ T6300] loop0: detected capacity change from 0 to 360 [ 261.744267][ T6313] loop0: detected capacity change from 0 to 360 [ 262.095245][ T6315] loop3: detected capacity change from 0 to 32766 00:44:33 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) 00:44:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001400)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:44:33 executing program 1: io_setup(0x3ff, &(0x7f0000000180)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:44:33 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:44:33 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1000, 0x103) 00:44:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:34 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0xffffffff}, 0x8) 00:44:34 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)) 00:44:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0, 0xe00000000}) [ 262.273928][ T6323] loop0: detected capacity change from 0 to 360 00:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:34 executing program 1: io_pgetevents(0x0, 0x0, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000180), 0xfffffffffffffe0c}) 00:44:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) [ 262.408967][ T6334] loop0: detected capacity change from 0 to 360 [ 262.726657][ T921] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 262.966609][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 262.997377][ T6341] loop3: detected capacity change from 0 to 32766 00:44:34 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:44:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c"], 0x33}}, 0x0) 00:44:34 executing program 5: getgroups(0x1, &(0x7f0000000000)=[0xee00]) 00:44:34 executing program 1: setitimer(0x1, 0x0, &(0x7f0000000540)) 00:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 263.090831][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 263.090849][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:44:34 executing program 1: setitimer(0x1, 0x0, &(0x7f0000000540)) 00:44:34 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/cmtp', 0x430002, 0x0) 00:44:34 executing program 5: prctl$PR_GET_TSC(0x19, &(0x7f00000003c0)) [ 263.092339][ T921] usb 3-1: config 0 descriptor?? [ 263.152766][ T6345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6345 comm=syz-executor.4 00:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:35 executing program 5: socket$nl_route(0x10, 0x3, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) [ 263.155020][ T6350] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 00:44:35 executing program 4: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x9b2}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) syz_usbip_server_init(0x0) [ 263.161503][ T6347] loop0: detected capacity change from 0 to 360 [ 263.346818][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 263.352548][ T6358] loop0: detected capacity change from 0 to 360 [ 263.421599][ T5002] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421630][ T5002] Buffer I/O error on dev loop0, logical block 1, async page read [ 263.421684][ T5002] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421710][ T5002] Buffer I/O error on dev loop0, logical block 2, async page read [ 263.421754][ T5002] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421780][ T5002] Buffer I/O error on dev loop0, logical block 3, async page read [ 263.421824][ T5002] I/O error, dev loop0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421849][ T5002] Buffer I/O error on dev loop0, logical block 4, async page read [ 263.421893][ T5002] I/O error, dev loop0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421918][ T5002] Buffer I/O error on dev loop0, logical block 5, async page read [ 263.421963][ T5002] I/O error, dev loop0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.421988][ T5002] Buffer I/O error on dev loop0, logical block 6, async page read [ 263.422032][ T5002] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.422057][ T5002] Buffer I/O error on dev loop0, logical block 7, async page read [ 263.927929][ T6364] loop3: detected capacity change from 0 to 32766 [ 264.706626][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 264.712649][ T921] usb 3-1: USB disconnect, device number 7 00:44:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000008c0), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000900)) 00:44:36 executing program 1: io_setup(0x6, &(0x7f0000000500)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:44:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:36 executing program 4: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x9, [0x3, 0x1000], [{0x2, 0x401, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x3ff, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x7fffffff, 0x0, 0x1, 0x1}, {0x1000, 0xfffffc01, 0x0, 0x1, 0x0, 0x1}, {0x10001, 0x4, 0x1, 0x0, 0x1}, {0x66e6550, 0x3, 0x1, 0x1, 0x1}, {0x1000, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x1, 0x1, 0x1}, {0x5652, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x1, 0x0, 0x1, 0x1}, {0x1133000, 0x10000, 0x1, 0x1}], 0x100}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x10b000) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x3, '\x00', 0x9}, 0x6, 0x20000000, 0x0, 0x0, 0x3, 0x10001, 'syz0\x00', &(0x7f0000000200)=['))@\x00', '/dev/loop#\x00', '*)-&+(*$.{,}\x00'], 0x1c, '\x00', [0x80, 0x1712, 0x9, 0x4ce]}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), 0xffffffffffffffff) 00:44:36 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:44:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) 00:44:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@can_delroute={0x14, 0x19, 0x1}, 0x14}}, 0x0) [ 265.200339][ T6375] loop0: detected capacity change from 0 to 360 00:44:36 executing program 5: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x810) 00:44:36 executing program 1: io_setup(0x6, &(0x7f0000000500)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:44:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14}, 0x14}}, 0x0) 00:44:37 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000480), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7c97b5d3"}, 0x0, 0x1, {0x0}}) [ 265.360686][ T6386] loop0: detected capacity change from 0 to 360 00:44:37 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{0x0}, 0x0}, 0x20) 00:44:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c", 0x2}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 265.418480][ T3925] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.418514][ T3925] Buffer I/O error on dev loop0, logical block 1, async page read 00:44:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc, 0x1}, 0x48) 00:44:37 executing program 4: openat$incfs(0xffffffffffffffff, &(0x7f0000000840)='.log\x00', 0x240000, 0x0) [ 265.418569][ T3925] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.418595][ T3925] Buffer I/O error on dev loop0, logical block 2, async page read [ 265.418639][ T3925] I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.418665][ T3925] Buffer I/O error on dev loop0, logical block 3, async page read [ 265.505593][ T28] audit: type=1400 audit(1655253877.195:298): avc: denied { setopt } for pid=6392 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.526575][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 265.535941][ T6395] loop0: detected capacity change from 0 to 360 [ 265.766684][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 265.859331][ T6373] loop3: detected capacity change from 0 to 32766 [ 265.886797][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 265.886828][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.888918][ T27] usb 3-1: config 0 descriptor?? 00:44:37 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 266.146800][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 266.275768][ T6401] loop3: detected capacity change from 0 to 32766 [ 267.506801][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 267.515348][ T27] usb 3-1: USB disconnect, device number 8 00:44:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) 00:44:39 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 00:44:39 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:44:39 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 00:44:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c", 0x2}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:39 executing program 5: pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000440)={0x7373}, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0xffff]}, 0x8}) 00:44:39 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0) 00:44:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0xff600000}, 0x0) [ 268.001408][ T6410] loop0: detected capacity change from 0 to 360 [ 268.015201][ T28] audit: type=1400 audit(1655253879.705:299): avc: denied { read } for pid=6404 comm="syz-executor.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:44:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c", 0x2}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) 00:44:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:39 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"768aefdeca9bfa43d0cce5b7e2104af9"}}, 0x0) [ 268.144958][ T6420] loop0: detected capacity change from 0 to 360 [ 268.228533][ T6426] loop3: detected capacity change from 0 to 6 [ 268.239016][ T6426] Dev loop3: unable to read RDB block 6 [ 268.239050][ T6426] loop3: unable to read partition table [ 268.239191][ T6426] loop3: partition table beyond EOD, truncated [ 268.261702][ T6426] FAT-fs (loop3): Directory bread(block 6) failed [ 268.316719][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 268.556657][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 268.676682][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 268.676713][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.679030][ T27] usb 3-1: config 0 descriptor?? [ 268.936840][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 270.286734][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 270.293036][ T27] usb 3-1: USB disconnect, device number 9 00:44:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) 00:44:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) 00:44:42 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)) 00:44:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x0, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:42 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"768aefdeca9bfa43d0cce5b7e2104af9"}}, 0x0) 00:44:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 00:44:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) [ 270.781113][ T6434] loop3: detected capacity change from 0 to 6 [ 270.796665][ T6433] loop0: detected capacity change from 0 to 360 [ 270.804256][ T6434] Dev loop3: unable to read RDB block 6 00:44:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) 00:44:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x0, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 270.804295][ T6434] loop3: unable to read partition table 00:44:42 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"768aefdeca9bfa43d0cce5b7e2104af9"}}, 0x0) 00:44:42 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x72) [ 270.804428][ T6434] loop3: partition table beyond EOD, truncated [ 270.814519][ T6433] FAT-fs (loop0): bogus number of reserved sectors 00:44:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) [ 270.814536][ T6433] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 270.814552][ T6433] FAT-fs (loop0): Can't find a valid FAT filesystem [ 270.818778][ T6434] FAT-fs (loop3): Directory bread(block 6) failed [ 270.943931][ T6443] loop0: detected capacity change from 0 to 360 [ 270.955835][ T6443] FAT-fs (loop0): bogus number of reserved sectors [ 270.955853][ T6443] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 270.955869][ T6443] FAT-fs (loop0): Can't find a valid FAT filesystem [ 270.970525][ T28] audit: type=1400 audit(1655253882.665:300): avc: denied { read } for pid=6444 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 270.970574][ T28] audit: type=1400 audit(1655253882.665:301): avc: denied { open } for pid=6444 comm="syz-executor.1" path="/dev/nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 271.005702][ T6449] loop3: detected capacity change from 0 to 6 [ 271.015369][ T6449] FAT-fs (loop3): Directory bread(block 6) failed [ 271.206767][ T3658] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 271.456595][ T3658] usb 3-1: Using ep0 maxpacket: 16 [ 271.580687][ T3658] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 271.580720][ T3658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.584966][ T3658] usb 3-1: config 0 descriptor?? [ 271.836744][ T3658] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 273.206706][ T3658] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 273.216045][ T3658] usb 3-1: USB disconnect, device number 10 00:44:45 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001c00), 0x88040, 0x0) 00:44:45 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0x97d, 0x341100) 00:44:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x0, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:44:45 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 00:44:45 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"768aefdeca9bfa43d0cce5b7e2104af9"}}, 0x0) 00:44:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:44:45 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x200002) pselect6(0x40, &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0, 0x0) 00:44:45 executing program 5: msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/70}, 0x4e, 0x0, 0x800) r0 = msgget(0x2, 0x400) msgsnd(r0, &(0x7f0000000080)={0x4eb5b98f2711fe6c, "72385f72828be89b03c4185ddf1455182b092523db2dc45bb96e9a11d17219ee5dc38dfb33c11e2fb16fbfdb231faff4666ad31842483ba3ad5f84196867c4626e1bbf65f333ac406a224c88e3847a9a95c0b4a3de3371ac9501d3bc723f52fe5e047308e0ea8cc6508e3b14f0ae73fef2a30f87a4790041fb6af7781c764b044a1f427923f6d6d493341952433bc40f5aceaf26979dcd4239e1c7d7433ec5a4c7c5d3a3b240ec9a0a25aff12dbf34ca169de020f5844350aaa5621c9cf388c5baafe1332d8b6a23873aff4af9733ec34ba3e98e6037c2edb0855a285c5ac6c86deeda4b0d92afe5b14d65721f560ae1bc4b9bc2986c7f197d5e7d45460b3e36901bb0fccb5614960a5be5c79897e9f601c52b5b53ea9412dcddad48ebc0a29b83b8c8d2111f9224e2b389769e2ece859befab596e88222fa80d0f435617f234cee9e2e1d3baa916f9feb07fdf5bf1425e0c2954c656115fda13d1c38a202e59b5b4e7f917d695690999722d0e0b9a5d4dfd00fcbd0afb3dc17edeb28a72b96df83c756396b18b17b08ca05407fbedac950d27956e1291c8535e35b6a7cbd7663718f7902ba593991ed85abd5b9191ec21a146d392ca246c3a50cedf729e91217f013d2c565b7299a2f7ebacebabec5742b830441f89108bcb7c98aceac76eafab0daa31699ddaa5f304358bd38c12817e51513a338bf7f54e105bb35dedecca1706e518e55899753f73e2eef5cf2826b352e5e5ded30815a1b09ed74a07962c1dda04f064ab24cc4710a00bfe765fac6ec9c8fa0c9a74125d2936ca4e0ef555d7fe663374a9a877cea2bd160a52b35e0be52a26482d9010f9106b3f6853f2637abd7eabe0aff11424f271b1d8df395963dbd8c226dc324fd7a4ab449f27faf720daf834bedb3aadac815a02d1396620d7cb54b7abd254387634a509bccb5e5cc854731bc91b53fbea9fe7183a22666d26ebbbd6c49c51289bf195ccfdad90f0f094a927bd1e9174fb7664bf8ee69d84c58e88e1a5569d6e049a6f072237af36778532543bf55da4c0e4cfdbe8afd7c97e5a3342cf36df1486bbdb78ca9930d94651f5047b2025011bfe02897392b80268f826da9d28a9441aa28f7fe27d94e2d59586127148f68f4fa1fa984b89cae2d0066965282698d451a239fc66c53fcd9b4914d58dbb802660c29c562058efb2a172c0ff9ff4c226d54be8032248894379bbe2f57d5cc39b6cded803d75249f429a618d29574c1cdf2d13b5c717a7abc122cade9e1b8001502611a49726dad96e6cc3366bce00be2bbbcc5b019c36e3509baac277255e84e3727b48564ad0dbc69f1a93971da7a2d0fbc637139687c1b210de4d3ac59065bc20d1fa4d8970adeedf1916631b95c53f2d928ef32485395c03af11f93316e4efaa4ee770310e444449f1aa066ccbeb103f59a77a7bf150fe175ea5fe763cffdece078370a5c85527b8d2487cf9f8c6052eade742805b33804a5247d3610c24b3b054e7b2acfd5d79b06daa59b81d4c10ce84de560ba3975ef7a38d20202cc8cd9862e0d887846be1eec84476185b1cf36bb76f9430d2307b8868ba65839690199b83aded24a6e3c965ea1c0c98572654b0bb6220b6e7e67ce2e967c7dba4108de92dd3ad3d127e985db26b98356cb5e3e392b685767c384954dffa80f6458d98578d2cf02cc22791a34e1f4550265e25fa3671dd85611887ae79d89e863ef9f20806d3b5072c2e0f6fad00ab0dfa9ddff6e51beccd28e2bb8e6254f426c6608d44cdcf92898682b6114f29df1e76ae482a0adab43626cac98b7bae3bbbac7a851ea0dd59a0d2c3cfa9d4baffc398c6bef82ad76e59a4c75e724b4e2a5601487d6b7aa6c5bc68979c68c87cad3d37ec6e5ab0d71b2d9054d5ccd5a159bf92694a6dbc436943883b7d023bd0809e2165247b5fff8a6b9528c0f14f0ff678786cdcd3945e98bfc0f8c00df6129cf017d84a329371c5b672c44d21c711208c015c10646a301acd5504e6e3893bfa3168f92aa188f44ff139ec23399b1b475037c2b20db8f4cc1471964f7554c9f9cd28b2e246e7bf4178b109b35fc2a5e51189dd2c037a73e6f224b3b2e92ba33feaa31e1705bdcdfb6cb2ed50ca3e3b1c2b0f5ab3e19b7c42b796975f7ec4de1304d4e21c59afdf6bd96ce72e50d3c64f2da36a10b37261259511fd59e42f12cbd36e7d665b45b473e17284e4ade70f80802944f780f27850df0783a66788be59c01b30761ffa6dcb4af5b49b4b8ac1afc4121796bd4231181971d4aec776dc1e15aaa298a41536bf5aa47652dbb82a46bd9e00333c0ec09542b0cce19349bbf9ff4e8d8b8abad6dee3f341331245c9739914db989f2a461eb313ec74aacc20d94dd8222aa542b04bce54b40c9a70b95c16fa26819d92518bd45d1bdafb7e1123927d2b2e796d4d359e44fd2eb83fca5d806d324e65e4c4e3e86c8a6fad6bdf3e4c37ee9dd7659b2adee8a1969c50e37ed3fb20f744e95b0b0ddb5b4b0335d67078e0e34e56a810f2beffefec3f7955d468826d49a9769ffc3df10e8a6c602916758bc95457254ff696ad999bd3ccbda8facd50757d2f0acb901f71f491be920d8b1df94bdcacdf3589c1b31218cc8ce52020a88543ef8ce751ddabd5ea6569d026626a41919806774ee44b601a65a297ca903fb149816ed7822e74102786a7eddf744d086e137d1a4a1a1f4f3ce174120b37bbf8f6218093377b8fba0b9ef306bb85833659763573af17e9b95a5c25e06bb7128fe6e8ac03c409c1c6386af1477d8c2ea1d18d1ccd10fd2e1d1a0b6499ac0f4a0eb2d8060d068704fb24caccba6568a774e1d7ba7b56bca9ac36be9c5b3fa85852f80780688fe3df852fc84b24d7cd25d28039294c34ea0e84e62e7d36b83b92f0f75b643564553f6541097322fd2b64b42158c818bd37b45e5d02553aa042a7dccecb1c421b4a6082c776fca84c08e466334b2a678e8d703c32cccacd1cd5d1ead748ef96dc112131e6f6ef81ba124cf225134b665438fc0ca9b0b4978380831dc402bd9b894c3e3f8f2d31860638068b070df5505a1713220737173807247bddfad6644c11ddb086c7eb4b343d3baddbe363ecdb88fc16cb34cd4eb728d31c30888a9e5ee573b6a120367a3b8b1e5fc6951d9806a83a5c9d7e52b1bee57dbf6ab0a2125f8deddec156c60563d8299ac4c999a6fa0047ca2740fe4e65df40f1369f27f66d9f433154785787da2361c2fd95a8435ebd43e069f5d924621f0e5eb374d1b4fda950b4f9f2f7521fa3e36a1c6e4490f27a6183f7a50b5703803f79daa8e63cb07547a751ca3c40a1729ed07f3269e5eb2abcd0fcd3bae5d0937d00295f8e462842d9c87372194d43adf0142892f83bae86cbfd50bb4ccb5814275be678c51f796752c3687cd2d72a134ce4da4303f9444922d811fc3cd62c5366bd73ba01d9857fcc0ba4d09944a2560060487aca0bee1dd4efd94354d06b64d5b0f1bb704b4ea924c20130aead65299324bdd88f01dd3330e3d116d2ce34dbbacf994803f52a352c5a74241630913322861d7e2dbc6c799d2d1ba2dad8009b941280f64a2cee758ff1c5c63404f9fb62774abcd4ab958578fc9bb09e47f39145e1a9e641bc17587f0a18d4e710a1ee3da0304081aed5fac76ddef56780fe1eede22ce4644197898f5cb8c261c5bc6c27b45ba25361937d2ef3de1056877049cae1d886c2c265cefa41f0c52edfcdadc95f805278da8b12415eaea1ef4ff58f30f11b83f72da003c6213e5a2e6fc87388eb8d4f40dddcb11ba1206ac21d776ccb19b3955f56048ea9a5af88e8e5123537cce0bed4695812e0084e71ab56517827fb47816a60e80f4f06d6c032e69a7db1d7e60506d6af77a5317bb1e53620f5aca0e8c0861a8b197160630e4858c47cd235d6a73d644f31484e51bb4b5e47c5af0070f3d279ce3a2a13f4f6ee0f154c496ff5f4e315b5ea8c5b369304fb3ddd07930fd55b3391193c1a2cc22ad9c301e10c76c78e585441a51c786b96a5f62fad9860d252e12cb3d988c494facb5927a9b2abc68b5e41df53b6adb700d7a50d5d6e4383a8c0f0d6ae836c35a830bad21cc88780da117fa9af6437d9f980eecbfc7cc462077673ebd73b51a5f3fee3d8f94d5f5014f9a81197bdc649a121e007ed5384638bf15314686d7b5cbb7380164d4a5c1d7b3a70c16fa6895a7ec9889f35611c7f050cbc31db637a57beeef4519c508e4fcd08e7a3fc9fb2139b8afab1c99850ab24703df24b0dae5e890f596dea76e3fcb9da53bdf1835cafd474bc3b2a55ffd870c2d41b4ced1efaffeda44825e77b3affc087932a036749d74963fafd3b2b663021cedabc8d9bd5307a14c0f1c57b8ed72866c1fd1d30ff905fa57dd17a548acca88d80ac29309eac27d928a5cb168e8ecf5ab9e0e52b9f7d0b66ed3a3aa8f5f379c3d1c1297cd1bc0ac30784a81b282f4e5679d34a340a7d9bc200c3c6aed93ce179feb3c8492eea9b7f2c7c2cbd5600dd713b49a620b936f21dd1cb1621b3a1ac83276e4080381f6d8e07bc38f5e7d51f6e8208468dc1e43bbd5b0825d12eefe1097b03607ba82a4c6741eec5b39549801efd808a056997a47e3542b7d4856d6d1cbdd53af9e08353fe73ad46e79188f13149a36b78706c007c14879e0c4342ce590d63911c4584f6a9e3f80b04c441d8d5b4139b5eba514165cc337d68e59be7cfd6a9f0c39a3061b715c2e340224cdfa9641c383f711b517fb171ea85f1a96241d822601b795854cc87b3a82181ef0be9c5cefdd47bece3fd782916bef8f85cf984cdd5ec19ae8247b05d302f8c0ba964503d07bc71dcf9d7daaa847d665bb0579283f00c6ed4409da31d4a9e2d2181331f0b3c33dfc4e0cb1cc4dd0f10472d914ac41e3b2b848019b78476dcbd11f37bd6ee0c07811fb47aeb660fbcaeb8d5f61d15647c25f2af0dda138fa6ab406f9ab8df4b3a6539191853beb327cb1bcd6bf628e23009687b8d6782a207f97f157ea47b9b74ab02635bdbc731ba6392ec0599b71ec823e3ec16c95ee3bb878dc38fc8a3fcfb8b0f0d85ef45148a09d0fe0ab1279de30da945a3022cb1bd35ee838bcc666c145f153b1380be238e64a27ad1e461ba86c88064cf5a3855e74fcbfd20436b8f0ffffe049ff6dda3809254c31736b2ede8c469813c135fa451beb98ff01388352fb353027d34fb78a66fadca8410edc8dcfcebe1bad9a01613549ec28254afc4ff9cce79be7f2d61c55ad5af01df483bdad007ae1960e7db6b9ddf91e7723fffbdb826fb7d53e22d6cc036e5c54cf05aedb38bd2bbff838127ebed0f4fd957496ef9b1c4bfd190b268d39cba5e4e71187a2500a83584807c0938a88d08b59c599b66fb764d487db465a996024cecf4fbd39408907b0814cd299f82f16e0dd034e0bc5fa1471eef30029b78873e93391f9515c7664f74a508b9d399ffeb9b4b3cf77ab2178af5ba01372aa30b3150f7604c97a303aec0d7a5c51755d3c4855fea2ae2c90c7956e844a92a0e24fa83e477c484e6a7f88801d277c26b3a873ac201983a15cf5d6f80c889fd968956aa145bcf50151a2840283b9ae34f472e90492d49e85e6ba32cb43607bcb6e0aaa4b4cb3e47f19af172174ef3b456bf74d0dd1cb7b7c3f516427796c453fac926b5581c095c4a6eabda8401b968699b460244bcccbabd63bd567400f783ac4491d3c963a8433a5f77cd1c2eef8a54dfd9698aa4e84f15cbc4fa619f8c406649c7dcd3d7852ff7152dd1cf5a7177ad11d92af8fc7"}, 0x1008, 0x800) r1 = msgget(0x0, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000010c0)=""/93) r3 = geteuid() getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0, &(0x7f00000011c0)) r6 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000001200)={{0x0, r3, 0xee00, 0xee01, r4, 0x80, 0x7ff}, 0x0, 0x0, 0x400, 0x4, 0x42, 0x3, 0x0, 0xf801, 0x7, 0x92, r6}) r7 = msgget(0x0, 0x1) r8 = geteuid() r9 = getpid() msgctl$IPC_SET(r7, 0x1, &(0x7f0000001280)={{0x2, r8, r5, r3, r4, 0xa, 0x3}, 0x0, 0x0, 0x6, 0x5, 0x3, 0x28ab1cf0, 0xa1, 0x3, 0x9d2, 0x1, r9}) r10 = msgget$private(0x0, 0x102) msgsnd(r10, &(0x7f0000001300)={0x2, "7cc818fac1b6469100f2c1ab86d625ec975e6b008c5f4731f623fbd58e1c55265cce1561ca80b4f1c1d0759780d5951b1265888857664645a7a31058c42a9cb826e18e231d64387fcc1fd7b90b87d0ea4a8c00003ff761704431c319c4961695dc084d46db015feb5084d3f44ae2c2126ce15f5ca49d1e13c46665f8648abf136dbb02fd1591abe8b8b68689173b2734d2d42c05de839f9828c38be062132a69b8a65b2aed6c674ae102bc58408a46b188df84991c4351983b18d6a4c830ea"}, 0xc7, 0x800) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001540)={0x0, 0x0, "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", "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"}) syz_emit_vhci(&(0x7f0000002540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0x9, 0xc}}}}, 0x11) 00:44:45 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) io_cancel(0x0, 0x0, 0x0) [ 273.680930][ T6456] loop5: detected capacity change from 0 to 6 [ 273.683946][ T6457] loop0: detected capacity change from 0 to 360 [ 273.711283][ T6456] Dev loop5: unable to read RDB block 6 [ 273.711321][ T6456] loop5: unable to read partition table 00:44:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, 0x0) 00:44:45 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) [ 273.711466][ T6456] loop5: partition table beyond EOD, truncated [ 273.713475][ T6457] FAT-fs (loop0): bogus number of reserved sectors 00:44:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000280)=""/136, 0x32, 0x88, 0x1}, 0x20) 00:44:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) [ 273.713490][ T6457] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 273.713507][ T6457] FAT-fs (loop0): Can't find a valid FAT filesystem 00:44:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@kfunc, @jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa2, &(0x7f00000000c0)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x80) 00:44:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, 0x0) 00:44:45 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) [ 273.714361][ T6456] FAT-fs (loop5): Directory bread(block 6) failed [ 273.726695][ T6461] loop3: detected capacity change from 0 to 6 [ 273.759785][ T6461] Dev loop3: unable to read RDB block 6 [ 273.759874][ T6461] loop3: unable to read partition table [ 273.760000][ T6461] loop3: partition table beyond EOD, truncated [ 273.768518][ T6461] FAT-fs (loop3): Directory bread(block 6) failed [ 273.894176][ T6470] loop0: detected capacity change from 0 to 360 00:44:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, 0x0) [ 273.895879][ T28] audit: type=1400 audit(1655253885.585:302): avc: denied { create } for pid=6467 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.905299][ T28] audit: type=1400 audit(1655253885.595:303): avc: denied { ioctl } for pid=6467 comm="syz-executor.5" path="socket:[41102]" dev="sockfs" ino=41102 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.907450][ T28] audit: type=1400 audit(1655253885.605:304): avc: denied { read } for pid=6471 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 274.006253][ T6483] loop0: detected capacity change from 0 to 360 [ 274.033158][ T6485] loop4: detected capacity change from 0 to 6 [ 274.042877][ T3687] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 274.047147][ T6485] Dev loop4: unable to read RDB block 6 [ 274.047185][ T6485] loop4: unable to read partition table [ 274.047311][ T6485] loop4: partition table beyond EOD, truncated [ 274.052650][ T6485] FAT-fs (loop4): Directory bread(block 6) failed [ 274.122110][ T6487] loop0: detected capacity change from 0 to 360 [ 274.276729][ T3687] usb 3-1: Using ep0 maxpacket: 16 [ 274.397038][ T3687] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 274.397069][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.399264][ T3687] usb 3-1: config 0 descriptor?? [ 274.656680][ T3687] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 275.796731][ T3687] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 275.800759][ T3687] usb 3-1: USB disconnect, device number 11 00:44:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@const, @int]}}, &(0x7f0000000280)=""/136, 0x36, 0x88, 0x1}, 0x20) 00:44:47 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) 00:44:47 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0xb6ff}}) 00:44:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)) 00:44:47 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@size}]}) 00:44:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa2, &(0x7f00000000c0)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 276.267268][ T6493] loop0: detected capacity change from 0 to 360 [ 276.285913][ T6497] tmpfs: Bad value for 'size' [ 276.297662][ T6495] loop4: detected capacity change from 0 to 6 00:44:48 executing program 1: getgroups(0x1, &(0x7f00000044c0)=[0xee01]) 00:44:48 executing program 3: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 00:44:48 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) [ 276.315983][ T6495] Dev loop4: unable to read RDB block 6 [ 276.316021][ T6495] loop4: unable to read partition table [ 276.316151][ T6495] loop4: partition table beyond EOD, truncated 00:44:48 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)) 00:44:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)) [ 276.326891][ T6495] FAT-fs (loop4): Directory bread(block 6) failed [ 276.477427][ T6509] loop0: detected capacity change from 0 to 360 [ 276.495946][ T6511] loop4: detected capacity change from 0 to 6 [ 276.509555][ T6511] Dev loop4: unable to read RDB block 6 [ 276.509589][ T6511] loop4: unable to read partition table [ 276.509730][ T6511] loop4: partition table beyond EOD, truncated [ 276.512004][ T6511] FAT-fs (loop4): Directory bread(block 6) failed [ 276.636896][ T3724] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 276.896599][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 277.036828][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 277.036859][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.038836][ T3724] usb 3-1: config 0 descriptor?? [ 277.307265][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 278.217005][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 278.218902][ T3724] usb 3-1: USB disconnect, device number 12 00:44:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@bloom_filter={0x1e, 0x0, 0x1000, 0x43f}, 0x48) 00:44:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000001300)=""/4096, 0x26, 0x1000, 0x7}, 0x20) 00:44:50 executing program 1: syz_clone(0xa281000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:44:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)) 00:44:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) [ 278.696442][ T6519] loop4: detected capacity change from 0 to 6 [ 278.715114][ T6519] Dev loop4: unable to read RDB block 6 00:44:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x8000}) 00:44:50 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=0xffffffffffffffff, 0x4) 00:44:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000002300)) [ 278.715155][ T6519] loop4: unable to read partition table 00:44:50 executing program 5: open$dir(&(0x7f0000000000)='./file1\x00', 0x4242, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xee01, 0x1000) [ 278.715287][ T6519] loop4: partition table beyond EOD, truncated 00:44:50 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x150) 00:44:50 executing program 4: symlinkat(&(0x7f0000002c40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002c80)='./file0\x00') [ 278.720956][ T6519] FAT-fs (loop4): Directory bread(block 6) failed [ 278.729183][ T6524] loop0: detected capacity change from 0 to 360 [ 278.894302][ T28] audit: type=1800 audit(1655253890.585:305): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=1164 res=0 errno=0 [ 279.006687][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 279.246604][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 279.367039][ T23] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 279.367069][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.369245][ T23] usb 3-1: config 0 descriptor?? [ 279.626697][ T23] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 280.537542][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 280.544872][ T23] usb 3-1: USB disconnect, device number 13 00:44:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x43, 0x0, 0x0) 00:44:52 executing program 5: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={0x0}) 00:44:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x1) 00:44:52 executing program 4: open$dir(&(0x7f0000000000)='./file1\x00', 0x4242, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1000, 0x8, &(0x7f0000000200)) 00:44:52 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 00:44:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:44:52 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file1\x00') 00:44:52 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 00:44:52 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) [ 281.058674][ T28] audit: type=1800 audit(1655253892.755:306): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1173 res=0 errno=0 00:44:52 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:44:52 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x4242, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 281.325049][ T28] audit: type=1800 audit(1655253893.015:307): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1167 res=0 errno=0 [ 281.376622][ T3724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 281.616707][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 281.748109][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 281.748139][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.755053][ T3724] usb 3-1: config 0 descriptor?? [ 282.006665][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 282.926671][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 282.928274][ T3724] usb 3-1: USB disconnect, device number 14 00:44:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:44:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) 00:44:55 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000400)=0x0) timer_settime(r0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}}, &(0x7f0000000480)) 00:44:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) 00:44:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x10) 00:44:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) [ 283.716644][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 283.956680][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 284.076689][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 284.076720][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.078016][ T27] usb 3-1: config 0 descriptor?? [ 284.336682][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 285.036721][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 285.046404][ T27] usb 3-1: USB disconnect, device number 15 00:44:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:44:57 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) 00:44:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:57 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000cc0), 0x0, 0x4000) 00:44:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:57 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004a00), &(0x7f0000004ac0)=0xc) 00:44:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) 00:44:57 executing program 1: pipe2(&(0x7f0000000040), 0x80800) 00:44:57 executing program 0: symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00') execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0, 0x0) 00:44:57 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)='M', 0x1, 0x7fffffff}], 0x20048, 0x0) [ 285.710022][ T6609] process 'syz-executor.0' launched './file1/file0' with NULL argv: empty string added [ 285.735499][ T6611] loop1: detected capacity change from 0 to 264192 [ 285.876717][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 286.116611][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 286.246714][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 286.246743][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.247985][ T27] usb 3-1: config 0 descriptor?? [ 286.506695][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 287.196691][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 287.207306][ T27] usb 3-1: USB disconnect, device number 16 00:44:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:44:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4080aea2, &(0x7f0000000180)=ANY=[]) 00:44:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7}]}) 00:44:59 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{&(0x7f00000002c0)="d4191abc710a24b6bd74385a98f6d177568475be1e2fb6971f39d474eb8e74bcb4fff26acd6fb5cd3d3b3e0228bbe13e0d51b80b44aa6a87f3460f268b1edf32a8536ba321211a31e3c83e131dbf4da451e8d80250ec88240744b9741b8e822d0ab5dd70f9d5859df750f5ff1b33ac680fe7d96c54ccc9468afbfec9851603ea2c1bfd5a26701b5dc7f4a44d80349e208757b984b219b234c60fe1c33a2bc3a6b93af239d4d46c214bf29bc2b8a6badc5aeaa6956ba515a01ebf1c46b3264c28f29b942dca350e0e30ed384ae978eddac7aca5282b3a43f554e646dc9c4930ac2b2a53c4ab7967648cc8609cbf0ba546ba6e7af09f1efad2a2a06879d21576b0573fda0c38a1fd1d8d5a5db3f45f2d9a851d1fbe389c2a2073b90c07a4910d74f8df592f3dd1144014742e8c53eb9cdf34e492b0f4604ebd8e61937e1fc0124d8b672e09905088b700723a37b17a1db0134dfc40b8d3dd73425ffdbd35d58835a0461b2105c95791f05fa130bdfd797eaa51b4faa3d866d325b4a28e9709f3ee0cc1b6310fe3a7935a77717b3d0d0287a99419851b4d315c1ac73912fbcb6c5036323123f04d5475f6ee3c7a51564e6d8e868281b01d6e1ec0223d4cdff4158ccf1c717537202016c177f36a6f6ea511f45ba7e5d20814c6a8ff553453d1fd43b9c802e536212b1993b65e9a36ef861847c8cceff23a3ab2f75b61f71caaa30e", 0x200}], 0x0, &(0x7f0000001440)) 00:44:59 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "1dfa16cd845fd7c289790908f895c4e4c5bd577b1b0df2ad0430ceb90c33e5dae8efc927a37528f09432eb9d0461a55885fee8a6ed34a8c0d0d5b348f279d67c18f2f85c9b3f0697b5055e9eb339eb9e3171b867bd10eb42ab6ef2c46d5859c471f1fedd752af30e11048d83924cb8c051020b9005275024c6f4ccff38da89a217ee9aadf6d30429c37bc03be771c45919f20f4dac9b6714616871a15c27869ee1f8a6fd413df075527becd75990"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "4a5096bdf7d650cd10bab1b3e475a17c764e16a9670c2af8cdc4972f313ecbcb1221c87e288678ae07646785a24bae7dde424a872f0b2a9f5d55e59c25d5a67b56d95330ab8c4a8408f1afd2ca2ca3fd6ed6afcf94c66a4c2f57725c182dd1a75939d5ed2691146254bda41a390279085a890db36c80c2d7347cd0e3884c1ebdbf53abaf418558d075d0f843bcac9ea68ba83ef3a1c55c63de"}, @INET_DIAG_REQ_BYTECODE={0xd59, 0x1, "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"}]}, 0xec4}}, 0x40000) 00:44:59 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 287.701989][ T6625] loop4: detected capacity change from 0 to 1 00:44:59 executing program 1: syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@mode={'mode', 0x3d, 0x2000000008ea}}]}) 00:44:59 executing program 0: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000002a40), 0x0, &(0x7f0000002b00)) [ 287.742561][ T6625] Dev loop4: unable to read RDB block 1 [ 287.742601][ T6625] loop4: unable to read partition table 00:44:59 executing program 1: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) [ 287.742740][ T6625] loop4: partition table beyond EOD, truncated 00:44:59 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xee00}}]}) [ 287.745032][ T6625] syz-executor.4: attempt to access beyond end of device [ 287.745032][ T6625] loop4: rw=2048, sector=2, nr_sectors = 1 limit=1 [ 287.745124][ T6625] hfsplus: unable to find HFS+ superblock 00:44:59 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@nodecompose}, {@type={'type', 0x3d, "62588a44"}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 00:44:59 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 287.746270][ T28] audit: type=1326 audit(1655253899.435:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85c2689109 code=0x0 [ 287.800251][ T6629] tmpfs: Bad value for 'mode' [ 287.850325][ T28] audit: type=1400 audit(1655253899.535:309): avc: denied { mount } for pid=6631 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 287.976717][ T3724] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 287.978299][ T28] audit: type=1400 audit(1655253899.675:310): avc: denied { unmount } for pid=3641 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 288.032288][ T6638] hfsplus: invalid uid specified [ 288.032296][ T6638] hfsplus: unable to parse mount options [ 288.136706][ T3658] Bluetooth: hci2: command 0x0406 tx timeout [ 288.136749][ T3658] Bluetooth: hci3: command 0x0406 tx timeout [ 288.136772][ T27] Bluetooth: hci1: command 0x0406 tx timeout [ 288.136788][ T3658] Bluetooth: hci0: command 0x0406 tx timeout [ 288.136826][ T3658] Bluetooth: hci5: command 0x0406 tx timeout [ 288.136891][ T3658] Bluetooth: hci4: command 0x0406 tx timeout [ 288.216833][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 288.336679][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 288.336740][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.338106][ T3724] usb 3-1: config 0 descriptor?? [ 288.596670][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 289.276720][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 289.281708][ T3724] usb 3-1: USB disconnect, device number 17 00:45:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:01 executing program 4: syz_mount_image$nfs4(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 00:45:01 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x0, 0x58}, {}], 0x3, &(0x7f0000000040)={0x0, 0x3938700}) 00:45:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:01 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:01 executing program 4: syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xc12, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x8}}, [{}]}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x58, &(0x7f0000000080)={0x5, 0xf, 0x58, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0xf00, 0x6b0c, [0x0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2bcec44242fd88ba428beef62b6df689"}, @ss_cap={0xa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa4, "0a3c889c8c1d476f077dc7390925db6e"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 00:45:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x8188aea6, &(0x7f0000000180)=ANY=[]) [ 289.780623][ T6648] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 00:45:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='mode=00000000000000000000011,']) [ 289.840167][ T6661] Error: Driver 'raw-gadget' is already registered, aborting... [ 289.840179][ T6661] UDC core: USB Raw Gadget: driver registration failed: -16 [ 289.840196][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:01 executing program 1: fanotify_mark(0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff, 0x0) 00:45:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x5, 0x7}]}) 00:45:01 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 289.989921][ T28] audit: type=1326 audit(1655253901.685:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd1289109 code=0x0 [ 290.101899][ T3724] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 290.356591][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 290.486783][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 290.486802][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.491008][ T3724] usb 3-1: config 0 descriptor?? [ 290.746652][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 291.436616][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 291.438175][ T3724] usb 3-1: USB disconnect, device number 18 00:45:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:03 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x100100c, &(0x7f0000000400)={[], [{@dont_appraise}, {@hash}]}) 00:45:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x14}}, 0x0) 00:45:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:03 executing program 0: select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x63}, &(0x7f00000001c0)={0x77359400}) 00:45:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x8}]}) 00:45:03 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x1, [{0x0, 0x0}]}) 00:45:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 00:45:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@part={'part', 0x3d, 0xf93}}]}) [ 292.133859][ T6704] Error: Driver 'raw-gadget' is already registered, aborting... [ 292.133871][ T6704] UDC core: USB Raw Gadget: driver registration failed: -16 [ 292.133888][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) [ 292.217138][ T921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 292.284609][ T6708] hfsplus: unable to find HFS+ superblock [ 292.461429][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 292.576785][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 292.576805][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.578399][ T921] usb 3-1: config 0 descriptor?? [ 292.826690][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 293.536671][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 293.538691][ T921] usb 3-1: USB disconnect, device number 19 00:45:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) 00:45:05 executing program 1: syz_mount_image$tmpfs(&(0x7f00000000c0), 0x0, 0x0, 0x3, &(0x7f0000002a40)=[{&(0x7f00000006c0)="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", 0x4aa}, {0x0, 0x0, 0x4}, {0x0}], 0x0, &(0x7f0000002b00)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'mode'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32], 0x2d, [0x0, 0x0, 0x38], 0x2d, [0x65, 0x66, 0x62, 0x62], 0x2d, [0x65, 0x0, 0x62], 0x2d, [0x61, 0x0, 0x61, 0x0, 0x66, 0x56, 0x35, 0x62]}}}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x6, &(0x7f00000004c0)=[{0x0}, {0x0, 0x0, 0x11}, {&(0x7f0000000200)='r', 0x1}, {&(0x7f00000002c0)="709635adfbc698d7b52109ca682c3ced455a601ae9f6ce74114fafa2e03d74fe9ae7d49c1628bb7196ab53faf397a2b26f116e934b0be4f50f50f505dba5e0ccd34e9e7f2f831e82baaed657a5308918732f3573bad2d3fc9f397c3199a39a8fe5ad4c7880d5639b5ab8c6256e64070919b055089d7699855872ad46a1858954035d3bc41bbb2a366b2c54db5d0945fa22e31e61d184fc8114df17835858aa43fde0b51c957c924039d3aedd67f8842aad1d88ece276771c4cd002d15f9fd3c64d177c7c53c4abf7", 0xc8, 0x5}, {&(0x7f00000003c0)}, {&(0x7f0000000440), 0x0, 0x59}], 0xa, &(0x7f0000000580)={[{@uid={'uid', 0x3d, 0xee00}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, ':+'}}, {@smackfshat}]}) syz_open_dev$vcsu(&(0x7f0000002d00), 0x800, 0x2) 00:45:05 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x24b000, &(0x7f0000000580)=ANY=[]) [ 294.039607][ T6728] loop1: detected capacity change from 0 to 2 [ 294.078686][ T6728] loop1: detected capacity change from 0 to 264192 00:45:05 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f0000000440), 0x0) [ 294.079588][ T6728] tmpfs: Unknown parameter 'euid' 00:45:05 executing program 0: socket(0x0, 0x0, 0x2) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x18, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x20, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xe6b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) 00:45:05 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 294.137379][ T3925] blk_print_req_error: 4 callbacks suppressed [ 294.137394][ T3925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 294.137423][ T3925] buffer_io_error: 4 callbacks suppressed [ 294.137433][ T3925] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.137502][ T3925] ldm_validate_partition_table(): Disk read failed. [ 294.137523][ T3925] Dev loop1: unable to read RDB block 0 00:45:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) [ 294.137542][ T3925] loop1: unable to read partition table [ 294.137680][ T3925] loop1: partition table beyond EOD, truncated 00:45:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) [ 294.233175][ T6743] Error: Driver 'raw-gadget' is already registered, aborting... [ 294.233187][ T6743] UDC core: USB Raw Gadget: driver registration failed: -16 [ 294.233204][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.289220][ T6745] Error: Driver 'raw-gadget' is already registered, aborting... [ 294.289233][ T6745] UDC core: USB Raw Gadget: driver registration failed: -16 [ 294.289250][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.316838][ T3745] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.556733][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 294.676820][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 294.676851][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.678853][ T3745] usb 3-1: config 0 descriptor?? [ 294.936906][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 295.636630][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 295.638522][ T3745] usb 3-1: USB disconnect, device number 20 00:45:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:07 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x2}, 0xc) 00:45:07 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:45:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000100)="124a894f235da2c5cae0ceb78a1cf21e0db0d0ed3e8b72178f1317f6a2d43881f10faec8d8edbee3519e47c1a61f4dbe70f8da4f0e74ed342cef162e5d1e604c20981616fcbcbf0e4f20bb03d84d52561cddde2e400f48f7e41a324a52a8d88bb157a05626efe97c96abd57db06762addc1ec6206832277b053713717e2b24d49a023f049832a7f401defcbfe8dd804c94", 0x91}], 0x1}, 0x0) 00:45:07 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 00:45:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002500)={&(0x7f0000002380), 0xc, &(0x7f00000024c0)={0x0}}, 0x5) 00:45:07 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, 0x0) 00:45:07 executing program 4: syz_open_procfs(0x0, &(0x7f00000007c0)='attr/sockcreate\x00') 00:45:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:07 executing program 1: connect$l2tp(0xffffffffffffffff, 0x0, 0x0) 00:45:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:45:07 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) [ 296.191606][ T6769] Error: Driver 'raw-gadget' is already registered, aborting... [ 296.191619][ T6769] UDC core: USB Raw Gadget: driver registration failed: -16 [ 296.191636][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.317054][ T6778] block nbd3: shutting down sockets [ 296.416726][ T3745] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 296.636599][ T3745] usb 1-1: device descriptor read/64, error 18 00:45:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:08 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) [ 296.746161][ T28] audit: type=1400 audit(1655253908.435:312): avc: denied { read } for pid=6782 comm="syz-executor.1" name="renderD128" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.746417][ T28] audit: type=1400 audit(1655253908.435:313): avc: denied { open } for pid=6782 comm="syz-executor.1" path="/dev/dri/renderD128" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.777619][ T6785] Error: Driver 'raw-gadget' is already registered, aborting... [ 296.777631][ T6785] UDC core: USB Raw Gadget: driver registration failed: -16 [ 296.777648][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.906684][ T3745] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 297.106687][ T3745] usb 1-1: device descriptor read/64, error 18 [ 297.237575][ T3745] usb usb1-port1: attempt power cycle [ 297.656573][ T3745] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 297.746815][ T3745] usb 1-1: Invalid ep0 maxpacket: 0 [ 297.906629][ T3745] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.016758][ T3745] usb 1-1: Invalid ep0 maxpacket: 0 [ 298.016923][ T3745] usb usb1-port1: unable to enumerate USB device 00:45:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 00:45:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:10 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) 00:45:10 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) 00:45:10 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) 00:45:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:10 executing program 5: semtimedop(0x0, &(0x7f0000001200)=[{}, {}], 0x2, 0x0) 00:45:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 299.231730][ T6794] block nbd3: shutting down sockets 00:45:10 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000003c0)=0x14) 00:45:11 executing program 5: semctl$GETPID(0x0, 0x0, 0xb, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000040)=""/74) 00:45:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002240)={'wpan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002540), r0) 00:45:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 299.416704][ T3745] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 299.462894][ T6807] block nbd3: shutting down sockets 00:45:11 executing program 0: clock_gettime(0x0, &(0x7f0000001240)) semtimedop(0x0, &(0x7f0000001200)=[{0x0, 0x101}, {}], 0x2, 0x0) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) [ 299.503189][ T28] audit: type=1400 audit(1655253911.195:314): avc: denied { ioctl } for pid=6810 comm="syz-executor.5" path="socket:[42839]" dev="sockfs" ino=42839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:45:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)) 00:45:11 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) [ 299.640220][ T6814] block nbd3: shutting down sockets 00:45:11 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 00:45:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 299.656840][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 299.776758][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 299.776788][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.787336][ T3745] usb 3-1: config 0 descriptor?? [ 299.843307][ T6823] block nbd3: shutting down sockets [ 300.056682][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 300.777035][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 300.778823][ T3745] usb 3-1: USB disconnect, device number 21 00:45:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:12 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 00:45:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000080)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4800}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xfd, &(0x7f0000000140)=""/253, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:12 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)) 00:45:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 00:45:13 executing program 0: getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 00:45:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) [ 301.276595][ T28] audit: type=1400 audit(1655253912.965:315): avc: denied { read } for pid=6829 comm="syz-executor.1" name="sg0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.301782][ T6832] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:45:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 301.336141][ T28] audit: type=1400 audit(1655253913.015:316): avc: denied { ioctl } for pid=6829 comm="syz-executor.1" path="/dev/sg0" dev="devtmpfs" ino=714 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 00:45:13 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@size={'size', 0x2c}}]}) 00:45:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010020f7fffffffffffffe"], 0x14}}, 0x0) [ 301.388077][ T6834] block nbd3: shutting down sockets [ 301.394657][ T28] audit: type=1400 audit(1655253913.075:317): avc: denied { write } for pid=6829 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 00:45:13 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000007640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 301.395979][ T28] audit: type=1400 audit(1655253913.075:318): avc: denied { read } for pid=6829 comm="syz-executor.1" path="socket:[42905]" dev="sockfs" ino=42905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.544387][ T6849] tmpfs: Bad value for 'size' [ 301.559773][ T6844] block nbd3: shutting down sockets [ 301.596734][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 301.836579][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 301.957842][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 301.957864][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.959183][ T27] usb 3-1: config 0 descriptor?? [ 302.217093][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 302.936793][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 302.938725][ T27] usb 3-1: USB disconnect, device number 22 00:45:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:15 executing program 0: r0 = socket(0x1e, 0x4, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffb2}}, 0x40) 00:45:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) recvfrom$inet(r1, 0x0, 0x0, 0x40002021, 0x0, 0x0) 00:45:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 303.436869][ T28] audit: type=1400 audit(1655253915.135:319): avc: denied { read } for pid=6859 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.439315][ T6862] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:45:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x5000) [ 303.445655][ T6864] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:45:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 303.467497][ T28] audit: type=1400 audit(1655253915.165:320): avc: denied { write } for pid=6857 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 00:45:15 executing program 0: socket(0x10, 0x2, 0x6) [ 303.517400][ T6866] block nbd3: shutting down sockets [ 303.540110][ T6862] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.574061][ T6872] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:45:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0xf0ff7f00000000}, {&(0x7f0000000000)=""/32, 0x20}], 0x2}, 0x0) 00:45:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 303.616426][ T6862] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.717874][ T6878] block nbd3: shutting down sockets [ 303.747141][ T6864] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.777039][ T3682] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 303.862438][ T6883] block nbd3: shutting down sockets [ 304.016590][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 304.146909][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 304.146941][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.149395][ T3682] usb 3-1: config 0 descriptor?? [ 304.406698][ T3682] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 305.126702][ T3682] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 305.130855][ T3682] usb 3-1: USB disconnect, device number 23 00:45:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:17 executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r0, 0x2000000000000262, &(0x7f0000000000)) 00:45:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 305.615856][ T6889] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.628351][ T6889] debugfs: Directory 'sg0' with parent 'block' already present! 00:45:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 00:45:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="710000003f0000000100000036e036e3a36a9e15441af5cbc8dc134ec353113de0a36c7a2ad11045bdc9396fb9ddcabe8b91f602c5b637b60dc6f10227888b18697bc14913806743464b7f5c02093161600821f13480b1d9c5a6e239230183b69109b23b5a181de41cb901f34adb03865b3360bee6bdaf6bc22e0900000000000056e9151f261800"]) fsync(r0) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x640400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x7, 0x1, 0x8dfb, 0xe80b, 0x100000000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}], 0x1}}], 0x1, 0x4000801) read(r2, &(0x7f00000000c0)=""/9, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2000, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 305.628374][ T6889] blktrace: debugfs_dir not present for sg0 so skipping [ 305.630329][ T6889] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.630351][ T6889] blktrace: debugfs_dir not present for sg0 so skipping [ 305.633963][ T6893] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.645005][ T6893] debugfs: Directory 'sg0' with parent 'block' already present! 00:45:17 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 305.645026][ T6893] blktrace: debugfs_dir not present for sg0 so skipping [ 305.650365][ T6893] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.650386][ T6893] blktrace: debugfs_dir not present for sg0 so skipping [ 305.669160][ T6890] block nbd3: shutting down sockets 00:45:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x50}}, 0x0) [ 305.761791][ T6899] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.785842][ T6899] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.785865][ T6899] blktrace: debugfs_dir not present for sg0 so skipping [ 305.788643][ T6903] loop0: detected capacity change from 0 to 320 00:45:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 305.817238][ T6903] loop0: [ 305.818876][ T6899] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.818898][ T6899] blktrace: debugfs_dir not present for sg0 so skipping [ 305.841629][ T28] audit: type=1400 audit(1655253917.535:321): avc: denied { write } for pid=6901 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.843125][ T28] audit: type=1400 audit(1655253917.535:322): avc: denied { add_name } for pid=6901 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.843411][ T28] audit: type=1400 audit(1655253917.535:323): avc: denied { associate } for pid=6901 comm="syz-executor.0" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.851780][ T28] audit: type=1400 audit(1655253917.545:324): avc: denied { read write open } for pid=6901 comm="syz-executor.0" path="/root/syzkaller-testdir1254886679/syzkaller.uUic9G/269/file0/file0" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 305.854199][ T6907] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.857527][ T6904] block nbd3: shutting down sockets [ 305.870219][ T6907] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.872724][ T6907] blktrace: debugfs_dir not present for sg0 so skipping [ 305.874629][ T6907] debugfs: Directory 'sg0' with parent 'block' already present! [ 305.874664][ T6907] blktrace: debugfs_dir not present for sg0 so skipping [ 305.937120][ T3745] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 306.027470][ T6913] block nbd3: shutting down sockets [ 306.237263][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 306.368219][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 306.368252][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.370354][ T3745] usb 3-1: config 0 descriptor?? [ 306.626858][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 306.628351][ T28] audit: type=1400 audit(1655253918.325:325): avc: denied { unmount } for pid=3638 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 307.346845][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 307.349116][ T3745] usb 3-1: USB disconnect, device number 24 00:45:19 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:45:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) recvmmsg$unix(r1, &(0x7f0000002500)=[{{&(0x7f00000011c0)=@abs, 0x6e, 0x0, 0x1f00, &(0x7f0000002280)}}], 0x1, 0x0, 0x0) 00:45:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:19 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:19 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:19 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 307.837391][ T6919] loop5: detected capacity change from 0 to 320 [ 307.868736][ T6921] loop0: detected capacity change from 0 to 320 [ 307.879043][ T6919] loop5: [ 307.913155][ T6921] loop0: 00:45:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 307.930248][ T6928] loop4: detected capacity change from 0 to 320 [ 307.941278][ T6928] loop4: 00:45:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:20 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:45:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:20 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:20 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 308.781315][ T6959] loop5: detected capacity change from 0 to 320 [ 308.797392][ T6959] loop5: 00:45:20 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:20 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:20 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:20 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 308.908748][ T6963] loop1: detected capacity change from 0 to 320 [ 308.914308][ T6963] loop1: 00:45:20 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:20 executing program 2: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 309.031359][ T6967] loop4: detected capacity change from 0 to 320 [ 309.033172][ T6968] loop0: detected capacity change from 0 to 320 [ 309.052598][ T6967] loop4: [ 309.054203][ T6968] loop0: 00:45:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:45:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:21 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 309.897859][ T6985] block nbd3: shutting down sockets 00:45:21 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:21 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:21 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 309.972964][ T6987] loop5: detected capacity change from 0 to 320 [ 310.000460][ T6987] loop5: [ 310.048710][ T6991] loop1: detected capacity change from 0 to 320 [ 310.053654][ T6991] loop1: [ 310.078425][ T6990] block nbd3: shutting down sockets 00:45:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 310.106122][ T6993] loop4: detected capacity change from 0 to 320 [ 310.119241][ T6993] loop4: 00:45:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 310.166453][ T6995] loop0: detected capacity change from 0 to 320 [ 310.189790][ T6995] loop0: 00:45:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 310.297511][ T6999] block nbd3: shutting down sockets 00:45:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 310.417604][ T7005] block nbd3: shutting down sockets 00:45:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 310.617206][ T7007] block nbd3: shutting down sockets 00:45:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 310.787296][ T7009] block nbd3: shutting down sockets 00:45:22 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 310.947329][ T7011] block nbd3: shutting down sockets [ 311.187326][ T7015] loop5: detected capacity change from 0 to 320 [ 311.199628][ T7015] loop5: 00:45:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:22 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:22 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:23 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) [ 311.373172][ T7021] loop1: detected capacity change from 0 to 320 [ 311.376103][ T7022] loop0: detected capacity change from 0 to 320 [ 311.383649][ T7023] loop4: detected capacity change from 0 to 320 [ 311.398600][ T7021] loop1: 00:45:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 311.401163][ T7022] loop0: [ 311.404365][ T7023] loop4: [ 311.418942][ T7017] block nbd3: shutting down sockets 00:45:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 311.649007][ T7032] block nbd3: shutting down sockets 00:45:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 311.833190][ T7034] block nbd3: shutting down sockets [ 311.886777][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 312.047765][ T7036] block nbd3: shutting down sockets [ 312.076823][ T27] usb 3-1: device descriptor read/64, error 18 00:45:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:23 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) [ 312.328952][ T7039] block nbd3: shutting down sockets 00:45:24 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:24 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) [ 312.347667][ T27] usb 3-1: new high-speed USB device number 26 using dummy_hcd 00:45:24 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 312.392010][ T7041] loop5: detected capacity change from 0 to 320 [ 312.394272][ T7041] loop5: [ 312.500875][ T7046] loop0: detected capacity change from 0 to 320 [ 312.507415][ T7048] loop4: detected capacity change from 0 to 320 00:45:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 312.511346][ T7049] loop1: detected capacity change from 0 to 320 [ 312.513347][ T7046] loop0: [ 312.515890][ T7048] loop4: [ 312.526138][ T7049] loop1: [ 312.536743][ T27] usb 3-1: device descriptor read/64, error 18 00:45:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 312.577200][ T7043] block nbd3: shutting down sockets [ 312.656918][ T27] usb usb3-port1: attempt power cycle [ 312.717029][ T7051] block nbd3: shutting down sockets 00:45:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 312.877059][ T7056] block nbd3: shutting down sockets [ 313.047490][ T7058] block nbd3: shutting down sockets [ 313.066629][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 313.236948][ T27] usb 3-1: device descriptor read/8, error -61 [ 313.506599][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 313.676639][ T27] usb 3-1: device descriptor read/8, error -61 [ 313.796688][ T27] usb usb3-port1: unable to enumerate USB device 00:45:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 00:45:26 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:26 executing program 0: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:26 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:26 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 314.649318][ T7067] loop1: detected capacity change from 0 to 320 [ 314.649441][ T7070] loop4: detected capacity change from 0 to 320 [ 314.650825][ T7069] loop5: detected capacity change from 0 to 320 [ 314.651340][ T7070] loop4: [ 314.652694][ T7068] loop0: detected capacity change from 0 to 320 [ 314.664253][ T7069] loop5: [ 314.676292][ T7067] loop1: 00:45:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 314.681869][ T7068] loop0: [ 314.690015][ T7062] block nbd3: shutting down sockets 00:45:26 executing program 3: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 314.887361][ T7074] block nbd3: shutting down sockets [ 315.017673][ T7080] loop3: detected capacity change from 0 to 320 [ 315.030339][ T7080] loop3: [ 315.106683][ T3682] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 315.307324][ T3682] usb 3-1: device descriptor read/64, error 18 00:45:27 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) [ 315.597468][ T3682] usb 3-1: new high-speed USB device number 30 using dummy_hcd 00:45:27 executing program 5: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0}, {&(0x7f0000000600)}], 0x408, &(0x7f0000000740)={[{@dots}, {@nodots}, {@dots}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '/\x90%.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 00:45:27 executing program 1: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 315.737624][ T7083] loop5: detected capacity change from 0 to 320 [ 315.739096][ T3925] loop5: [ 315.740675][ T7085] loop4: detected capacity change from 0 to 320 [ 315.765086][ T7085] loop4: [ 315.796811][ T3682] usb 3-1: device descriptor read/64, error 18 [ 315.850489][ T7087] loop1: detected capacity change from 0 to 320 [ 315.863044][ T7087] loop1: [ 315.926997][ T3682] usb usb3-port1: attempt power cycle [ 316.346617][ T3682] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 316.536841][ T3682] usb 3-1: device descriptor read/8, error -61 [ 316.781535][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.827680][ T3682] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 317.016708][ T3682] usb 3-1: device descriptor read/8, error -61 [ 317.139228][ T3682] usb usb3-port1: unable to enumerate USB device 00:45:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:29 executing program 3: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:29 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x50}}, 0x0) 00:45:29 executing program 1: io_setup(0x1, &(0x7f0000000580)=0x0) clock_gettime(0x0, &(0x7f0000000040)) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) getrusage(0x0, &(0x7f0000000140)) 00:45:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@size={'size', 0x2c, [0x31]}}]}) [ 317.725907][ T7103] loop4: detected capacity change from 0 to 320 [ 317.737551][ T7104] loop3: detected capacity change from 0 to 320 [ 317.766808][ T7103] loop4: [ 317.780821][ T7104] loop3: 00:45:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) [ 317.859954][ T7113] tmpfs: Unknown parameter 'size,1' 00:45:29 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) dup2(r1, r0) 00:45:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x53}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:45:29 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000001c0)=[{0x1, 0x8, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x2, 0xc00}, {0x0, 0x7f, 0x1800}, {0x0, 0x4, 0x1000}], 0x3) [ 318.166630][ T3724] usb 3-1: new high-speed USB device number 33 using dummy_hcd 00:45:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 318.356634][ T3724] usb 3-1: device descriptor read/64, error 18 [ 318.626612][ T3724] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 318.816642][ T3724] usb 3-1: device descriptor read/64, error 18 [ 318.941050][ T3724] usb usb3-port1: attempt power cycle [ 319.346631][ T3724] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 319.516841][ T3724] usb 3-1: device descriptor read/8, error -61 [ 319.786590][ T3724] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 319.966765][ T3724] usb 3-1: device descriptor read/8, error -61 [ 320.092054][ T3724] usb usb3-port1: unable to enumerate USB device 00:45:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:32 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) dup2(r1, r0) 00:45:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0x4) 00:45:32 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 00:45:32 executing program 3: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:32 executing program 4: listen(0xffffffffffffffff, 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000013b00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x8, 0x6, &(0x7f0000000680)=[{&(0x7f0000000180)}, {0x0, 0x0, 0x7}, {0x0}, {&(0x7f00000004c0)="0e10425e31dbf4b713c690b52b9a745b5aea702238", 0x15}, {0x0, 0x0, 0x8}, {&(0x7f0000000600)="9341e72da855df5126cede811da3beff8c46bf9873cc1fe37b4665ccd205653816357bc2e36f47b4c0fe759967a175ff4870ab03b990bf141a9a78d62eb0d56974b10e9b09a2cccd90ed7f0b611bbc27793da6a49a7ae4c92fb8002c315ecf8e1e43e98e4a818fd91bee78731b6ae25e260ef89b", 0x74, 0xffffffffffffffff}], 0x408, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@dots}, {@nodots}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'exfat\x00'}}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'exfat\x00'}}, {@dont_appraise}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) 00:45:32 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) [ 320.798421][ T7137] loop4: detected capacity change from 0 to 320 [ 320.802515][ T7141] loop3: detected capacity change from 0 to 320 [ 320.808180][ T7137] loop4: [ 320.831686][ T7141] loop3: 00:45:32 executing program 1: socketpair(0xa, 0x5, 0x0, 0x0) 00:45:32 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4}, 0x20) 00:45:32 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:45:32 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100), 0x0) [ 321.060435][ T28] audit: type=1400 audit(1655253932.755:326): avc: denied { bind } for pid=7155 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:45:32 executing program 1: r0 = socket(0xa, 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) [ 321.060652][ T28] audit: type=1400 audit(1655253932.755:327): avc: denied { node_bind } for pid=7155 comm="syz-executor.5" saddr=fe80::2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.316742][ T3745] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 321.536688][ T3745] usb 3-1: device descriptor read/64, error 18 [ 321.816837][ T3745] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 322.036620][ T3745] usb 3-1: device descriptor read/64, error 18 [ 322.157313][ T3745] usb usb3-port1: attempt power cycle [ 322.576584][ T3745] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 322.746718][ T3745] usb 3-1: device descriptor read/8, error -61 [ 323.016593][ T3745] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 323.206718][ T3745] usb 3-1: device descriptor read/8, error -61 [ 323.328912][ T3745] usb usb3-port1: unable to enumerate USB device 00:45:35 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1}, 0x0) 00:45:35 executing program 0: io_submit(0x0, 0x200000000000019c, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="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", 0x0, 0x8000000000000000, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="a6d4ad66fee5a36f832cd0b829f37b02d0137e5062c5d562813066c48f3880dbecaf8d06cdb99f05eecc5b9920512af1bf93aaa2ad48f0a8e98f515cb6cef8c3e82379e6280a56d1c78d6fc8c32a67d3da068bf35466ba8b036968e9dae89263d108163a2cbfb27926c33f6dbfdf1330e32b7fc38e2225b62bde584d427380b495847855034dfbb2d4ab0663e10e8b66d860ea5bce35aca61fbe9c4aef2fb8dce7637b26f586435f3eb6e0bbe228e9dcd3261b76c0", 0x0, 0xffffffff}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="fb90c13440b5fb46344fd13359b79753e4b1717c2a51790931aad357eb8dc14c5ec6f4cd1236106c0d3a2977a1fd999b2d80e3b4db7a870c1360efa2471dc43005dfd5f790e96451df0a83776cde8b0efcd9cab62b89f0f1e1ea0a20605804c908a4ff2b141a4d45c5718a1c8a88138648e26cf0811ea11f0d2c36deaa56f6e0c9a7970e9746ec18fb4aa32563323b5a5c563fed9f735665850bd691936f", 0x0, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)="195c219dcbe35fb4f540db303222cfa94e3cc30a075685ce06527db1d28debe984a638de2821d89b5c46de5ac6eb48791af85e7c971d99455552f133860ed1c2cb3bbe4f96b644437b900f49b2f48cd9762451b920936077c76f936ae62a08620230b694758e7818c53905db5945a2720d9be2b54774753acac122f32c706fc0fa0c4057010c606b84efb59d5d8efcb40cd726478d36cf8e73329ba502175dc5692008b5f57790189032e91028b81f813b5925320f6a33ba92121c3f86df5f83a53727f9339d2e6d190a7eed6e3b4bac5e5361d6ba93a45dcf2800c4493e06c956e6a47103572b508197afaa57ccf19403af0dd4c4bf5564bd", 0x0, 0x80, 0x0, 0x2}]) 00:45:35 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) 00:45:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:35 executing program 3: r0 = socket(0x26, 0x5, 0x0) bind$l2tp6(r0, 0x0, 0x0) 00:45:35 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 00:45:35 executing program 0: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 00:45:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) 00:45:35 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:45:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000007c0), 0xc) 00:45:35 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) 00:45:35 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc12, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0xcd, {0x9, 0x21, 0x0, 0xb}}}]}}]}}, 0x0) [ 324.009962][ T7188] Error: Driver 'raw-gadget' is already registered, aborting... [ 324.009977][ T7188] UDC core: USB Raw Gadget: driver registration failed: -16 [ 324.009996][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.024283][ T28] audit: type=1400 audit(1655253935.715:328): avc: denied { ioctl } for pid=7187 comm="syz-executor.3" path="socket:[43897]" dev="sockfs" ino=43897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.326704][ T921] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 324.516646][ T921] usb 3-1: device descriptor read/64, error 18 00:45:36 executing program 5: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)={0x0, r0+60000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) [ 324.796781][ T921] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 324.986700][ T921] usb 3-1: device descriptor read/64, error 18 [ 325.110874][ T921] usb usb3-port1: attempt power cycle [ 325.516605][ T921] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 325.696666][ T921] usb 3-1: device descriptor read/8, error -61 [ 325.976802][ T921] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 326.147595][ T921] usb 3-1: device descriptor read/8, error -61 [ 326.267770][ T921] usb usb3-port1: unable to enumerate USB device 00:45:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:38 executing program 4: syz_clone(0x201000, &(0x7f00000010c0), 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="153f1a956866be61904b28f461e8c8a33707ab943f0f948506158ee3d42c98b6") waitid(0x0, 0x0, 0x0, 0x1, &(0x7f00000022c0)) syz_clone(0x10205000, 0x0, 0x0, &(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)) syz_open_procfs$namespace(0x0, 0x0) 00:45:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x10, &(0x7f0000000180), &(0x7f0000000200)=0x8) 00:45:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891b, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 00:45:38 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:45:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 00:45:38 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:45:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) [ 326.926855][ T7200] sctp: [Deprecated]: syz-executor.3 (pid 7200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.926855][ T7200] Use struct sctp_sack_info instead 00:45:38 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 00:45:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x20a82) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/key-users\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x0, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4, "61dc2462d6de99a47fdd88c26d26115fb9c25ae1f56c43d46e0aa2ed9cb2672e8e08df8fc1c1ceadd76edce586f3c3f7b53d416c0bad841cd579a5aa248f37bc", "60400f2156b5dedf62122cbf3b718639937e47d5baa98dcf038eafb6cae2fcf0818352a64e21a8e48dcc56b518a16ff00b1bbb611dc161a34f594735cd3b4136", "1ab26ee2b9a8f4ff4e601619f4b6f9e32346e83019cdd564dd4e04f2c1dde099", [0x0, 0x9]}}) [ 327.023431][ T7212] Error: Driver 'raw-gadget' is already registered, aborting... [ 327.023445][ T7212] UDC core: USB Raw Gadget: driver registration failed: -16 00:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000001840)=[{{&(0x7f00000000c0), 0x6e, 0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10102, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000080)={0x14, r1, 0x803, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 00:45:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0x3, &(0x7f0000001000)=@framed={{0x18, 0xa}}, &(0x7f0000000f40)='GPL\x00', 0x6, 0xab, &(0x7f0000001080)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 327.023464][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.196911][ T921] usb 1-1: new high-speed USB device number 6 using dummy_hcd 00:45:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:39 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 00:45:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 327.572843][ T7231] Error: Driver 'raw-gadget' is already registered, aborting... [ 327.572856][ T7231] UDC core: USB Raw Gadget: driver registration failed: -16 [ 327.572874][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.593261][ T7227] block nbd1: shutting down sockets [ 327.606800][ T921] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 327.606830][ T921] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.608805][ T7230] block nbd4: shutting down sockets [ 327.637894][ T7224] block nbd5: shutting down sockets [ 327.678198][ T921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.678228][ T921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 327.678252][ T921] usb 1-1: SerialNumber: syz [ 327.705991][ T7201] raw-gadget gadget.0: fail, usb_ep_enable returned -22 [ 327.929937][ T7201] raw-gadget gadget.0: fail, usb_ep_enable returned -22 [ 328.396922][ T921] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 328.432287][ T28] audit: type=1400 audit(1655253940.125:329): avc: denied { search } for pid=3191 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.432601][ T28] audit: type=1400 audit(1655253940.125:330): avc: denied { read } for pid=3191 comm="dhcpcd" name="n68" dev="tmpfs" ino=8098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.432897][ T28] audit: type=1400 audit(1655253940.125:331): avc: denied { open } for pid=3191 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=8098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.433221][ T28] audit: type=1400 audit(1655253940.125:332): avc: denied { getattr } for pid=3191 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=8098 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.523229][ T28] audit: type=1400 audit(1655253940.215:333): avc: denied { read } for pid=7234 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.523532][ T28] audit: type=1400 audit(1655253940.215:334): avc: denied { open } for pid=7234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.524017][ T28] audit: type=1400 audit(1655253940.215:335): avc: denied { getattr } for pid=7234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.681533][ T28] audit: type=1400 audit(1655253940.375:336): avc: denied { write } for pid=7233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1400 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.681575][ T28] audit: type=1400 audit(1655253940.375:337): avc: denied { add_name } for pid=7233 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.681610][ T28] audit: type=1400 audit(1655253940.375:338): avc: denied { create } for pid=7233 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.170680][ T921] usb 1-1: USB disconnect, device number 6 [ 329.179370][ T921] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:45:41 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:45:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) 00:45:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:41 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:45:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 329.718549][ T7303] Error: Driver 'raw-gadget' is already registered, aborting... [ 329.718562][ T7303] UDC core: USB Raw Gadget: driver registration failed: -16 [ 329.718582][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 329.722053][ T7302] Error: Driver 'raw-gadget' is already registered, aborting... [ 329.722066][ T7302] UDC core: USB Raw Gadget: driver registration failed: -16 [ 329.722084][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.803491][ T7295] block nbd1: shutting down sockets 00:45:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 329.977512][ T921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.017739][ T7311] block nbd1: shutting down sockets 00:45:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 330.187125][ T7317] block nbd1: shutting down sockets 00:45:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 330.217890][ T921] usb 6-1: Using ep0 maxpacket: 16 [ 330.284419][ T7326] Error: Driver 'raw-gadget' is already registered, aborting... [ 330.284432][ T7326] UDC core: USB Raw Gadget: driver registration failed: -16 00:45:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 330.284450][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.334579][ T7328] Error: Driver 'raw-gadget' is already registered, aborting... [ 330.334592][ T7328] UDC core: USB Raw Gadget: driver registration failed: -16 [ 330.334610][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.336783][ T7323] block nbd1: shutting down sockets [ 330.337292][ T921] usb 6-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 330.337322][ T921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.341907][ T921] usb 6-1: config 0 descriptor?? [ 330.469872][ T7331] block nbd1: shutting down sockets [ 330.521308][ T7300] loop3: detected capacity change from 0 to 32766 [ 330.533309][ T7306] loop0: detected capacity change from 0 to 32766 [ 330.598439][ T921] usb 6-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state 00:45:42 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 00:45:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 330.727104][ T7338] block nbd1: shutting down sockets [ 331.315659][ T7345] loop0: detected capacity change from 0 to 32766 [ 331.516729][ T921] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 331.523723][ T921] usb 6-1: USB disconnect, device number 2 00:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:45:43 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) 00:45:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:45:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:43 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) 00:45:43 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 332.019330][ T7377] Error: Driver 'raw-gadget' is already registered, aborting... [ 332.019343][ T7377] UDC core: USB Raw Gadget: driver registration failed: -16 [ 332.019360][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.063737][ T7376] loop5: detected capacity change from 0 to 360 00:45:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 332.106937][ T7367] block nbd1: shutting down sockets 00:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:45:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 332.265257][ T7384] loop5: detected capacity change from 0 to 360 [ 332.273175][ T3724] usb 5-1: new high-speed USB device number 3 using dummy_hcd 00:45:44 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 00:45:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:45:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 332.506673][ T3724] usb 5-1: Using ep0 maxpacket: 16 [ 332.626762][ T3724] usb 5-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 332.626793][ T3724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.640056][ T7395] Error: Driver 'raw-gadget' is already registered, aborting... [ 332.640068][ T7395] UDC core: USB Raw Gadget: driver registration failed: -16 [ 332.640085][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.648050][ T3724] usb 5-1: config 0 descriptor?? [ 332.691060][ T7374] loop3: detected capacity change from 0 to 32766 [ 332.765344][ T7373] loop0: detected capacity change from 0 to 32766 00:45:44 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000001a40)) [ 332.906954][ T3724] usb 5-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 333.009076][ T7390] loop5: detected capacity change from 0 to 32766 [ 333.434024][ T7398] loop3: detected capacity change from 0 to 32766 [ 333.826666][ T3724] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 333.830172][ T3724] usb 5-1: USB disconnect, device number 3 00:45:46 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, 0x0) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:45:46 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 00:45:46 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 00:45:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:46 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) 00:45:46 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:45:46 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 334.576648][ T3745] usb 3-1: new high-speed USB device number 45 using dummy_hcd 00:45:46 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:45:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 00:45:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 334.816626][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 334.946900][ T3745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.946929][ T3745] usb 3-1: config 0 has no interfaces? [ 334.946955][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 334.946982][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.949245][ T3745] usb 3-1: config 0 descriptor?? [ 335.103707][ T7411] loop4: detected capacity change from 0 to 32766 00:45:46 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 335.191455][ T7405] loop5: detected capacity change from 0 to 32766 [ 335.301945][ T3925] I/O error, dev loop4, sector 32512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:45:47 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 335.767990][ T7435] block nbd1: shutting down sockets [ 335.962212][ T7433] loop4: detected capacity change from 0 to 32766 [ 336.055243][ T7438] loop0: detected capacity change from 0 to 32766 [ 336.116606][ T3925] I/O error, dev loop4, sector 32512 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:45:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:49 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:49 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:45:49 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:49 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 337.312831][ T921] usb 3-1: USB disconnect, device number 45 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 337.417980][ T7444] block nbd1: shutting down sockets 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 337.567029][ T7459] block nbd1: shutting down sockets 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 337.706676][ T7462] block nbd1: shutting down sockets 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 337.816868][ T921] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 337.859511][ T7464] block nbd1: shutting down sockets [ 337.978777][ T7466] block nbd1: shutting down sockets 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) [ 338.086841][ T921] usb 3-1: Using ep0 maxpacket: 16 00:45:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) [ 338.162513][ T7448] loop3: detected capacity change from 0 to 32766 [ 338.186751][ T7468] block nbd1: shutting down sockets [ 338.226705][ T921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.226732][ T921] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.226766][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 338.226790][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.235113][ T921] usb 3-1: config 0 descriptor?? [ 338.236235][ T7451] loop5: detected capacity change from 0 to 32766 [ 338.297224][ T7470] block nbd1: shutting down sockets [ 338.323887][ T7450] loop0: detected capacity change from 0 to 32766 00:45:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) 00:45:52 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:52 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:52 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:52 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 340.413064][ T3724] usb 3-1: USB disconnect, device number 46 00:45:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 340.507077][ T7476] block nbd1: shutting down sockets 00:45:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 340.646922][ T7492] block nbd1: shutting down sockets 00:45:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 340.798465][ T7494] block nbd1: shutting down sockets 00:45:52 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f10000000000", 0xa}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 340.928025][ T7496] block nbd1: shutting down sockets [ 340.946876][ T3724] usb 3-1: new high-speed USB device number 47 using dummy_hcd 00:45:52 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 341.196549][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 341.201116][ T7481] loop4: detected capacity change from 0 to 32766 [ 341.205538][ T7478] loop3: detected capacity change from 0 to 32766 [ 341.326857][ T3724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 00:45:53 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 341.326884][ T3724] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.326917][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 341.326943][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.351621][ T7485] loop0: detected capacity change from 0 to 32766 [ 341.374666][ T3724] usb 3-1: config 0 descriptor?? 00:45:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:55 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:55 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:55 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0xd}]) [ 343.513087][ T27] usb 3-1: USB disconnect, device number 47 00:45:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (fail_nth: 1) 00:45:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (fail_nth: 1) 00:45:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (fail_nth: 2) [ 343.917533][ T7527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.956796][ T7526] block nbd3: shutting down sockets 00:45:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (fail_nth: 2) [ 343.977401][ T7529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.977443][ T7529] block nbd0: shutting down sockets [ 343.996676][ T27] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 344.076372][ T7534] ERROR: Out of memory at tomoyo_realpath_from_path. 00:45:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (fail_nth: 3) 00:45:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (fail_nth: 3) [ 344.126703][ T7534] block nbd3: Device being setup by another task [ 344.127377][ T7530] block nbd3: shutting down sockets [ 344.166871][ T7535] block nbd0: Device being setup by another task [ 344.168092][ T7533] block nbd0: shutting down sockets [ 344.195021][ T7520] loop5: detected capacity change from 0 to 32766 [ 344.219546][ T7518] loop1: detected capacity change from 0 to 32766 [ 344.236559][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 344.288970][ T7537] block nbd0: shutting down sockets [ 344.295127][ T7537] FAULT_INJECTION: forcing a failure. [ 344.295127][ T7537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 344.295154][ T7537] CPU: 1 PID: 7537 Comm: syz-executor.0 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 344.295179][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.295192][ T7537] Call Trace: [ 344.295198][ T7537] [ 344.295205][ T7537] dump_stack_lvl+0xcd/0x134 [ 344.295338][ T7537] should_fail.cold+0x5/0xa [ 344.295363][ T7537] _copy_to_user+0x2a/0x140 [ 344.295439][ T7537] simple_read_from_buffer+0xcc/0x160 [ 344.295517][ T7537] proc_fail_nth_read+0x187/0x220 [ 344.295568][ T7537] ? proc_exe_link+0x1d0/0x1d0 [ 344.295594][ T7537] ? security_file_permission+0xab/0xd0 [ 344.295663][ T7537] ? proc_exe_link+0x1d0/0x1d0 [ 344.295688][ T7537] vfs_read+0x1ef/0x5d0 [ 344.295764][ T7537] ksys_read+0x127/0x250 [ 344.295788][ T7537] ? vfs_write+0xac0/0xac0 [ 344.295811][ T7537] ? syscall_enter_from_user_mode+0x21/0x70 [ 344.295865][ T7537] ? syscall_enter_from_user_mode+0x21/0x70 [ 344.295892][ T7537] do_syscall_64+0x35/0xb0 [ 344.295943][ T7537] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 344.295994][ T7537] RIP: 0033:0x7f85c263bcbc [ 344.296012][ T7537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 344.296035][ T7537] RSP: 002b:00007f85c371d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.296058][ T7537] RAX: ffffffffffffffda RBX: 00007f85c279bf60 RCX: 00007f85c263bcbc [ 344.296073][ T7537] RDX: 000000000000000f RSI: 00007f85c371d1e0 RDI: 0000000000000007 [ 344.296088][ T7537] RBP: 00007f85c371d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.296102][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.296116][ T7537] R13: 00007ffd165601ff R14: 00007f85c371d300 R15: 0000000000022000 [ 344.296135][ T7537] [ 344.297241][ T7539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.342257][ T7538] block nbd3: shutting down sockets [ 344.371265][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.371290][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.371325][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 344.371352][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.398110][ T27] usb 3-1: config 0 descriptor?? [ 344.404402][ T7516] loop4: detected capacity change from 0 to 32766 00:45:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:45:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 1) 00:45:58 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:45:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (fail_nth: 4) 00:45:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:45:58 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) (fail_nth: 1) [ 346.600518][ T3745] usb 3-1: USB disconnect, device number 48 00:45:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 2) 00:45:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x2) 00:45:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (fail_nth: 5) [ 346.717780][ T7551] block nbd0: shutting down sockets [ 346.732189][ T7546] block nbd3: shutting down sockets 00:45:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 3) [ 346.738234][ T7558] FAULT_INJECTION: forcing a failure. [ 346.738234][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.738263][ T7558] CPU: 1 PID: 7558 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 00:45:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 4) 00:45:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x10) [ 346.738290][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.738303][ T7558] Call Trace: [ 346.738309][ T7558] [ 346.738316][ T7558] dump_stack_lvl+0xcd/0x134 [ 346.738345][ T7558] should_fail.cold+0x5/0xa [ 346.738369][ T7558] _copy_from_user+0x2a/0x170 [ 346.738404][ T7558] __do_sys_memfd_create+0xff/0x4e0 [ 346.738437][ T7558] do_syscall_64+0x35/0xb0 [ 346.738466][ T7558] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 346.738494][ T7558] RIP: 0033:0x7fadd1289109 [ 346.738510][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 346.738531][ T7558] RSP: 002b:00007fadd2333f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 346.738553][ T7558] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd1289109 [ 346.738569][ T7558] RDX: 000000000000001a RSI: 0000000000000000 RDI: 00007fadd12e21be [ 346.738583][ T7558] RBP: 0000000000000003 R08: 000000000000000d R09: 00007fadd23341d0 [ 346.738597][ T7558] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 346.738611][ T7558] R13: 0000000020000140 R14: 000000000002d000 R15: 0000000020000100 [ 346.738628][ T7558] [ 346.891976][ T7561] block nbd0: shutting down sockets [ 346.895015][ T7559] FAULT_INJECTION: forcing a failure. [ 346.895015][ T7559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.895041][ T7559] CPU: 1 PID: 7559 Comm: syz-executor.4 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 346.895066][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.895078][ T7559] Call Trace: [ 346.895084][ T7559] [ 346.895090][ T7559] dump_stack_lvl+0xcd/0x134 [ 346.895118][ T7559] should_fail.cold+0x5/0xa [ 346.895139][ T7559] _copy_from_user+0x2a/0x170 [ 346.895166][ T7559] io_submit_one+0x91/0x1c70 [ 346.895249][ T7559] ? find_held_lock+0x2d/0x110 [ 346.895315][ T7559] ? do_io_getevents+0x160/0x160 [ 346.895339][ T7559] ? __might_fault+0xd1/0x170 [ 346.895419][ T7559] ? lock_downgrade+0x6e0/0x6e0 [ 346.895446][ T7559] __x64_sys_io_submit+0x18c/0x330 [ 346.895472][ T7559] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 346.895497][ T7559] ? syscall_enter_from_user_mode+0x21/0x70 [ 346.895522][ T7559] ? syscall_enter_from_user_mode+0x21/0x70 [ 346.895547][ T7559] do_syscall_64+0x35/0xb0 [ 346.895572][ T7559] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 346.895599][ T7559] RIP: 0033:0x7f16e0c89109 [ 346.895614][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 346.895636][ T7559] RSP: 002b:00007f16e1de9168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 346.895657][ T7559] RAX: ffffffffffffffda RBX: 00007f16e0d9c030 RCX: 00007f16e0c89109 [ 346.895672][ T7559] RDX: 0000000020001a40 RSI: 0000000000000001 RDI: 00007f16e1d24000 [ 346.895686][ T7559] RBP: 00007f16e1de91d0 R08: 0000000000000000 R09: 0000000000000000 [ 346.895700][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.895713][ T7559] R13: 00007ffc1714fe2f R14: 00007f16e1de9300 R15: 0000000000022000 [ 346.895729][ T7559] [ 346.907849][ T7566] FAULT_INJECTION: forcing a failure. [ 346.907849][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.907877][ T7566] CPU: 1 PID: 7566 Comm: syz-executor.3 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 346.907903][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.907916][ T7566] Call Trace: [ 346.907922][ T7566] [ 346.907928][ T7566] dump_stack_lvl+0xcd/0x134 [ 346.907956][ T7566] should_fail.cold+0x5/0xa [ 346.907980][ T7566] _copy_from_user+0x2a/0x170 [ 346.908008][ T7566] kstrtouint_from_user+0xa8/0x190 [ 346.908039][ T7566] ? kstrtouint+0x120/0x120 [ 346.908067][ T7566] ? lock_release+0x780/0x780 [ 346.908097][ T7566] proc_fail_nth_write+0x79/0x220 [ 346.908124][ T7566] ? proc_task_getattr+0x1f0/0x1f0 [ 346.908152][ T7566] ? proc_task_getattr+0x1f0/0x1f0 [ 346.908177][ T7566] vfs_write+0x269/0xac0 [ 346.908201][ T7566] ksys_write+0x127/0x250 [ 346.908225][ T7566] ? __ia32_sys_read+0xb0/0xb0 [ 346.908249][ T7566] ? syscall_enter_from_user_mode+0x21/0x70 [ 346.908274][ T7566] ? syscall_enter_from_user_mode+0x21/0x70 [ 346.908300][ T7566] do_syscall_64+0x35/0xb0 [ 346.908327][ T7566] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 346.908355][ T7566] RIP: 0033:0x7f7c3583bc1f [ 346.908372][ T7566] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 346.908401][ T7566] RSP: 002b:00007f7c3691f160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 346.908423][ T7566] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c3583bc1f [ 346.908440][ T7566] RDX: 0000000000000001 RSI: 00007f7c3691f1e0 RDI: 0000000000000006 [ 346.908455][ T7566] RBP: 00007f7c3691f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 346.908469][ T7566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 346.908483][ T7566] R13: 00007ffca1abfb7f R14: 00007f7c3691f300 R15: 0000000000022000 [ 346.908501][ T7566] [ 346.914849][ T7562] block nbd3: shutting down sockets [ 347.056722][ T3745] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 347.067325][ T7570] block nbd0: shutting down sockets [ 347.285884][ T7549] loop4: detected capacity change from 0 to 32766 [ 347.313317][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 347.365349][ T7552] loop5: detected capacity change from 0 to 32766 [ 347.426812][ T3745] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.426882][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 347.426910][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.428868][ T3745] usb 3-1: config 0 descriptor?? 00:46:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:46:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 5) 00:46:01 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) (fail_nth: 2) 00:46:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x301) 00:46:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 1) 00:46:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 2) [ 349.682118][ T3745] usb 3-1: USB disconnect, device number 49 00:46:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 6) 00:46:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125d) 00:46:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x2, r1) 00:46:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 3) [ 349.787887][ T7588] block nbd0: Device being setup by another task [ 349.788615][ T7583] block nbd0: shutting down sockets [ 349.810929][ T7584] block nbd3: shutting down sockets [ 349.828225][ T7593] FAULT_INJECTION: forcing a failure. [ 349.828225][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 4) [ 349.828252][ T7593] CPU: 1 PID: 7593 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 349.828279][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.828292][ T7593] Call Trace: [ 349.828298][ T7593] [ 349.828304][ T7593] dump_stack_lvl+0xcd/0x134 [ 349.828334][ T7593] should_fail.cold+0x5/0xa [ 349.828356][ T7593] _copy_from_user+0x2a/0x170 [ 349.828384][ T7593] __do_sys_memfd_create+0xff/0x4e0 [ 349.828414][ T7593] do_syscall_64+0x35/0xb0 [ 349.828442][ T7593] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 349.828471][ T7593] RIP: 0033:0x7ffb30289109 [ 349.828488][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 349.828510][ T7593] RSP: 002b:00007ffb31402f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 349.828533][ T7593] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb30289109 [ 349.828548][ T7593] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007ffb302e21be [ 349.828562][ T7593] RBP: 0000000000000001 R08: 0000000000000400 R09: 00007ffb314031d0 [ 349.828576][ T7593] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 349.828590][ T7593] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000280 [ 349.828607][ T7593] [ 349.944642][ T7602] FAULT_INJECTION: forcing a failure. [ 349.944642][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.944672][ T7602] CPU: 1 PID: 7602 Comm: syz-executor.4 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 349.944703][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.944715][ T7602] Call Trace: [ 349.944721][ T7602] [ 349.944727][ T7602] dump_stack_lvl+0xcd/0x134 [ 349.944755][ T7602] should_fail.cold+0x5/0xa [ 349.944778][ T7602] _copy_from_user+0x2a/0x170 [ 349.944804][ T7602] kstrtouint_from_user+0xa8/0x190 [ 349.944831][ T7602] ? kstrtouint+0x120/0x120 [ 349.944857][ T7602] ? lock_release+0x780/0x780 [ 349.944883][ T7602] proc_fail_nth_write+0x79/0x220 [ 349.944908][ T7602] ? proc_task_getattr+0x1f0/0x1f0 [ 349.944932][ T7602] ? proc_task_getattr+0x1f0/0x1f0 [ 349.944955][ T7602] vfs_write+0x269/0xac0 [ 349.944978][ T7602] ksys_write+0x127/0x250 [ 349.944999][ T7602] ? __ia32_sys_read+0xb0/0xb0 [ 349.945025][ T7602] ? syscall_enter_from_user_mode+0x21/0x70 [ 349.945051][ T7602] ? syscall_enter_from_user_mode+0x21/0x70 [ 349.945075][ T7602] do_syscall_64+0x35/0xb0 [ 349.945102][ T7602] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 349.945129][ T7602] RIP: 0033:0x7f16e0c3bc1f [ 349.945144][ T7602] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 349.945166][ T7602] RSP: 002b:00007f16e1d44160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 349.945187][ T7602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f16e0c3bc1f [ 349.945201][ T7602] RDX: 0000000000000001 RSI: 00007f16e1d441e0 RDI: 0000000000000005 [ 349.945215][ T7602] RBP: 00007f16e1d441d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.945228][ T7602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 349.945242][ T7602] R13: 00007ffc1714fe2f R14: 00007f16e1d44300 R15: 0000000000022000 [ 349.945258][ T7602] [ 349.956927][ T7600] block nbd3: shutting down sockets [ 349.997540][ T7598] block nbd0: shutting down sockets [ 350.216731][ T3745] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 350.456665][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 350.576726][ T3745] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.576768][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 350.576796][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.580216][ T3745] usb 3-1: config 0 descriptor?? 00:46:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef40000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 7) 00:46:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x10, r1) 00:46:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 5) 00:46:04 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125e) 00:46:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 8) [ 352.792142][ T3682] usb 3-1: USB disconnect, device number 50 00:46:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 6) 00:46:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x301, r1) [ 352.900811][ T7610] block nbd3: shutting down sockets [ 352.912750][ T7624] ERROR: Out of memory at tomoyo_realpath_from_path. 00:46:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) 00:46:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 7) [ 352.928504][ T7624] loop1: detected capacity change from 0 to 360 [ 352.937164][ T7623] block nbd0: Device being setup by another task 00:46:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x125d, r1) [ 352.937914][ T7614] block nbd0: shutting down sockets [ 353.037046][ T7628] block nbd3: shutting down sockets [ 353.107356][ T7630] block nbd0: shutting down sockets [ 353.138049][ T7634] block nbd3: shutting down sockets [ 353.276786][ T3682] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 353.319967][ T7615] loop4: detected capacity change from 0 to 32766 [ 353.516661][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 353.636758][ T3682] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.636797][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 353.636824][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.642640][ T3682] usb 3-1: config 0 descriptor?? 00:46:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 9) 00:46:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 8) 00:46:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1260) 00:46:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x125e, r1) 00:46:07 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 355.866419][ T3745] usb 3-1: USB disconnect, device number 51 00:46:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 9) 00:46:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 10) [ 355.907106][ T7648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.907554][ T7648] loop5: detected capacity change from 0 to 4 [ 355.913318][ T7648] Dev loop5: unable to read RDB block 4 [ 355.913352][ T7648] loop5: unable to read partition table 00:46:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x125f, r1) 00:46:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1261) [ 355.913491][ T7648] loop5: partition table beyond EOD, truncated [ 355.915276][ T7648] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:46:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 10) [ 355.920415][ T7651] loop1: detected capacity change from 0 to 360 [ 355.947671][ T7642] block nbd3: shutting down sockets [ 355.981748][ T7641] block nbd0: shutting down sockets 00:46:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1260, r1) [ 356.039735][ T7655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.045796][ T7655] loop5: detected capacity change from 0 to 4 [ 356.048564][ T7655] Dev loop5: unable to read RDB block 4 [ 356.048597][ T7655] loop5: unable to read partition table [ 356.048724][ T7655] loop5: partition table beyond EOD, truncated [ 356.049661][ T7655] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 356.071413][ T7658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.071894][ T7658] loop1: detected capacity change from 0 to 360 [ 356.117108][ T7657] block nbd3: shutting down sockets [ 356.147301][ T7659] block nbd0: shutting down sockets [ 356.199538][ T7664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.202532][ T7664] loop5: detected capacity change from 0 to 4 [ 356.207971][ T7664] Dev loop5: unable to read RDB block 4 [ 356.208006][ T7664] loop5: unable to read partition table [ 356.208145][ T7664] loop5: partition table beyond EOD, truncated [ 356.216050][ T7664] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 356.237161][ T7663] block nbd3: shutting down sockets [ 356.336653][ T3745] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 356.578752][ T7646] loop4: detected capacity change from 0 to 32766 [ 356.580628][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 356.696651][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 356.696684][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.698830][ T3745] usb 3-1: config 0 descriptor?? [ 356.956642][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 357.678485][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 357.686371][ T3745] usb 3-1: USB disconnect, device number 52 00:46:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1262) 00:46:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 11) 00:46:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1261, r1) 00:46:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 11) 00:46:09 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 358.185668][ T7674] loop5: detected capacity change from 0 to 4 [ 358.188517][ T7675] loop1: detected capacity change from 0 to 360 [ 358.216982][ T7674] Dev loop5: unable to read RDB block 4 [ 358.217022][ T7674] loop5: unable to read partition table 00:46:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1263) [ 358.217153][ T7674] loop5: partition table beyond EOD, truncated [ 358.217750][ T7674] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:46:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1262, r1) 00:46:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 12) 00:46:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 12) [ 358.256167][ T7668] block nbd3: shutting down sockets [ 358.263641][ T7667] block nbd0: shutting down sockets 00:46:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1264) [ 358.383588][ T7685] FAULT_INJECTION: forcing a failure. [ 358.383588][ T7685] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1263, r1) [ 358.383619][ T7685] CPU: 0 PID: 7685 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 358.383646][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.383660][ T7685] Call Trace: [ 358.383666][ T7685] [ 358.383673][ T7685] dump_stack_lvl+0xcd/0x134 [ 358.383704][ T7685] should_fail.cold+0x5/0xa [ 358.383737][ T7685] copy_page_from_iter_atomic+0x5ac/0x1b30 [ 358.383765][ T7685] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 358.383880][ T7685] ? iov_iter_get_pages_alloc+0x1520/0x1520 [ 358.383906][ T7685] ? fault_in_readable+0x1bc/0x290 [ 358.383934][ T7685] ? fault_in_subpage_writeable+0x20/0x20 [ 358.383956][ T7685] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 358.383983][ T7685] ? shmem_write_begin+0xff/0x1e0 [ 358.384011][ T7685] ? shmem_write_begin+0x109/0x1e0 [ 358.384034][ T7685] generic_perform_write+0x2b8/0x560 [ 358.384082][ T7685] ? filemap_fdatawrite_wbc+0x1b0/0x1b0 [ 358.384107][ T7685] ? discard_new_inode+0x190/0x190 [ 358.384130][ T7685] ? generic_write_checks+0x25f/0x390 [ 358.384159][ T7685] __generic_file_write_iter+0x2aa/0x4d0 [ 358.384185][ T7685] generic_file_write_iter+0xd7/0x220 [ 358.384208][ T7685] ? iov_iter_init+0x45/0x1b0 [ 358.384229][ T7685] new_sync_write+0x38a/0x560 [ 358.384252][ T7685] ? new_sync_read+0x5f0/0x5f0 [ 358.384276][ T7685] ? lock_release+0x780/0x780 [ 358.384304][ T7685] vfs_write+0x7c0/0xac0 [ 358.384328][ T7685] __x64_sys_pwrite64+0x1f7/0x250 [ 358.384353][ T7685] ? ksys_pwrite64+0x1a0/0x1a0 [ 358.384384][ T7685] ? syscall_enter_from_user_mode+0x21/0x70 [ 358.384411][ T7685] ? syscall_enter_from_user_mode+0x21/0x70 [ 358.384438][ T7685] do_syscall_64+0x35/0xb0 [ 358.384466][ T7685] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 358.384494][ T7685] RIP: 0033:0x7fadd123c0d7 [ 358.384510][ T7685] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 358.384532][ T7685] RSP: 002b:00007fadd2333f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 358.384555][ T7685] RAX: ffffffffffffffda RBX: 00007fadd12d2a20 RCX: 00007fadd123c0d7 [ 358.384570][ T7685] RDX: 0000000000000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 358.384584][ T7685] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fadd23341d0 [ 358.384598][ T7685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 358.384612][ T7685] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 358.384628][ T7685] [ 358.387041][ T7686] FAULT_INJECTION: forcing a failure. [ 358.387041][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.387069][ T7686] CPU: 1 PID: 7686 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 358.387095][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.387108][ T7686] Call Trace: [ 358.387114][ T7686] [ 358.387121][ T7686] dump_stack_lvl+0xcd/0x134 [ 358.387149][ T7686] should_fail.cold+0x5/0xa [ 358.387174][ T7686] copy_page_from_iter_atomic+0x5ac/0x1b30 [ 358.387201][ T7686] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 358.387237][ T7686] ? iov_iter_get_pages_alloc+0x1520/0x1520 [ 358.387262][ T7686] ? fault_in_readable+0x1bc/0x290 [ 358.387285][ T7686] ? fault_in_subpage_writeable+0x20/0x20 [ 358.387308][ T7686] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 358.387334][ T7686] ? shmem_write_begin+0xff/0x1e0 [ 358.387357][ T7686] ? shmem_write_begin+0x109/0x1e0 [ 358.387378][ T7686] generic_perform_write+0x2b8/0x560 [ 358.387402][ T7686] ? filemap_fdatawrite_wbc+0x1b0/0x1b0 [ 358.387425][ T7686] ? discard_new_inode+0x190/0x190 [ 358.387446][ T7686] ? generic_write_checks+0x25f/0x390 [ 358.387474][ T7686] __generic_file_write_iter+0x2aa/0x4d0 [ 358.387500][ T7686] generic_file_write_iter+0xd7/0x220 [ 358.387526][ T7686] ? iov_iter_init+0x45/0x1b0 [ 358.387547][ T7686] new_sync_write+0x38a/0x560 [ 358.387571][ T7686] ? new_sync_read+0x5f0/0x5f0 [ 358.387595][ T7686] ? lock_release+0x780/0x780 [ 358.387626][ T7686] vfs_write+0x7c0/0xac0 [ 358.387649][ T7686] __x64_sys_pwrite64+0x1f7/0x250 [ 358.387675][ T7686] ? ksys_pwrite64+0x1a0/0x1a0 [ 358.387699][ T7686] ? syscall_enter_from_user_mode+0x21/0x70 [ 358.387724][ T7686] ? syscall_enter_from_user_mode+0x21/0x70 [ 358.387751][ T7686] do_syscall_64+0x35/0xb0 [ 358.387778][ T7686] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 358.387807][ T7686] RIP: 0033:0x7ffb3023c0d7 [ 358.387823][ T7686] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 358.387846][ T7686] RSP: 002b:00007ffb31402f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 358.387868][ T7686] RAX: ffffffffffffffda RBX: 00007ffb302d2a20 RCX: 00007ffb3023c0d7 [ 358.387884][ T7686] RDX: 0000000000000062 RSI: 0000000020000440 RDI: 0000000000000004 [ 358.387899][ T7686] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffb314031d0 [ 358.387914][ T7686] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 358.387929][ T7686] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 358.387947][ T7686] [ 358.398594][ T7685] loop1: detected capacity change from 0 to 360 [ 358.410903][ T7679] block nbd3: shutting down sockets [ 358.413824][ T7686] loop5: detected capacity change from 0 to 4 [ 358.418583][ T7680] block nbd0: shutting down sockets [ 358.423671][ T7686] Dev loop5: unable to read RDB block 4 [ 358.423711][ T7686] loop5: unable to read partition table [ 358.423846][ T7686] loop5: partition table beyond EOD, truncated [ 358.425891][ T7686] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 358.470332][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.470363][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 358.496843][ T3682] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 358.557060][ T7688] block nbd3: shutting down sockets [ 358.557718][ T7689] block nbd0: shutting down sockets [ 358.752844][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 358.799408][ T7671] loop4: detected capacity change from 0 to 32766 [ 358.908041][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 358.908073][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.917892][ T3682] usb 3-1: config 0 descriptor?? [ 359.206670][ T3682] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 359.926651][ T3682] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 359.928563][ T3682] usb 3-1: USB disconnect, device number 53 [ 359.932722][ T5002] udevd[5002]: setting owner of /dev/bus/usb/003/053 to uid=0, gid=0 failed: No such file or directory 00:46:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 13) 00:46:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 13) 00:46:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1265) 00:46:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1264, r1) 00:46:12 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 14) [ 360.445908][ T7700] FAULT_INJECTION: forcing a failure. [ 360.445908][ T7700] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1265, r1) [ 360.445939][ T7700] CPU: 0 PID: 7700 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 00:46:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1267) [ 360.445965][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 14) [ 360.445990][ T7700] Call Trace: [ 360.445996][ T7700] [ 360.446004][ T7700] dump_stack_lvl+0xcd/0x134 [ 360.446034][ T7700] should_fail.cold+0x5/0xa 00:46:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 15) [ 360.446057][ T7700] copy_page_from_iter_atomic+0x5ac/0x1b30 [ 360.446085][ T7700] ? ktime_get_coarse_real_ts64+0x1b7/0x200 [ 360.446114][ T7700] ? iov_iter_get_pages_alloc+0x1520/0x1520 00:46:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1268) [ 360.446138][ T7700] ? fault_in_readable+0x1bc/0x290 [ 360.446160][ T7700] ? fault_in_subpage_writeable+0x20/0x20 [ 360.446182][ T7700] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 360.446209][ T7700] ? shmem_write_begin+0xff/0x1e0 [ 360.446230][ T7700] ? shmem_write_begin+0x109/0x1e0 [ 360.446252][ T7700] generic_perform_write+0x2b8/0x560 [ 360.446276][ T7700] ? filemap_fdatawrite_wbc+0x1b0/0x1b0 [ 360.446299][ T7700] ? discard_new_inode+0x190/0x190 [ 360.446320][ T7700] ? generic_write_checks+0x25f/0x390 [ 360.446347][ T7700] __generic_file_write_iter+0x2aa/0x4d0 [ 360.446373][ T7700] generic_file_write_iter+0xd7/0x220 [ 360.446397][ T7700] ? iov_iter_init+0x45/0x1b0 [ 360.446417][ T7700] new_sync_write+0x38a/0x560 [ 360.446440][ T7700] ? new_sync_read+0x5f0/0x5f0 [ 360.446466][ T7700] ? lock_release+0x780/0x780 [ 360.446494][ T7700] vfs_write+0x7c0/0xac0 [ 360.446516][ T7700] __x64_sys_pwrite64+0x1f7/0x250 [ 360.446540][ T7700] ? ksys_pwrite64+0x1a0/0x1a0 [ 360.446562][ T7700] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.446595][ T7700] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.446622][ T7700] do_syscall_64+0x35/0xb0 [ 360.446650][ T7700] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 360.446678][ T7700] RIP: 0033:0x7fadd123c0d7 [ 360.446694][ T7700] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 360.446718][ T7700] RSP: 002b:00007fadd2333f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 360.446741][ T7700] RAX: ffffffffffffffda RBX: 00007fadd12d2a20 RCX: 00007fadd123c0d7 [ 360.446756][ T7700] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 360.446770][ T7700] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fadd23341d0 [ 360.446783][ T7700] R10: 000000000000000d R11: 0000000000000293 R12: 0000000000000004 [ 360.446797][ T7700] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 360.446813][ T7700] [ 360.471508][ T7700] loop1: detected capacity change from 0 to 360 [ 360.497224][ T7696] block nbd3: shutting down sockets [ 360.541316][ T7707] FAULT_INJECTION: forcing a failure. [ 360.541316][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.541345][ T7707] CPU: 1 PID: 7707 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 360.541370][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.541383][ T7707] Call Trace: [ 360.541388][ T7707] [ 360.541395][ T7707] dump_stack_lvl+0xcd/0x134 [ 360.541424][ T7707] should_fail.cold+0x5/0xa [ 360.541447][ T7707] strncpy_from_user+0x34/0x3c0 [ 360.541535][ T7707] getname_flags.part.0+0x95/0x4f0 [ 360.541573][ T7707] getname+0x8e/0xd0 [ 360.541598][ T7707] do_sys_openat2+0xf5/0x4c0 [ 360.541619][ T7707] ? find_held_lock+0x2d/0x110 [ 360.541644][ T7707] ? build_open_flags+0x6f0/0x6f0 [ 360.541665][ T7707] ? lock_downgrade+0x6e0/0x6e0 [ 360.541692][ T7707] __x64_sys_openat+0x13f/0x1f0 [ 360.541713][ T7707] ? __ia32_sys_open+0x1c0/0x1c0 [ 360.541734][ T7707] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.541759][ T7707] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.541784][ T7707] do_syscall_64+0x35/0xb0 [ 360.541809][ T7707] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 360.541836][ T7707] RIP: 0033:0x7ffb3023c024 [ 360.541851][ T7707] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 360.541873][ T7707] RSP: 002b:00007ffb31402eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 360.541894][ T7707] RAX: ffffffffffffffda RBX: 00007ffb302d2a20 RCX: 00007ffb3023c024 [ 360.541909][ T7707] RDX: 0000000000000002 RSI: 00007ffb31402fe0 RDI: 00000000ffffff9c [ 360.541923][ T7707] RBP: 00007ffb31402fe0 R08: 0000000000000000 R09: 00007ffb314031d0 [ 360.541937][ T7707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 360.541950][ T7707] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 360.541965][ T7707] [ 360.544747][ T7704] block nbd0: Device being setup by another task [ 360.546057][ T7693] block nbd0: shutting down sockets [ 360.686934][ T7710] block nbd3: shutting down sockets [ 360.698282][ T7712] block nbd0: Device being setup by another task [ 360.699074][ T7708] block nbd0: shutting down sockets [ 360.700925][ T7715] loop1: detected capacity change from 0 to 360 [ 360.712377][ T7716] FAULT_INJECTION: forcing a failure. [ 360.712377][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.712406][ T7716] CPU: 1 PID: 7716 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 360.712432][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.712445][ T7716] Call Trace: [ 360.712460][ T7716] [ 360.712467][ T7716] dump_stack_lvl+0xcd/0x134 [ 360.712498][ T7716] should_fail.cold+0x5/0xa [ 360.712523][ T7716] strncpy_from_user+0x34/0x3c0 [ 360.712546][ T7716] getname_flags.part.0+0x95/0x4f0 [ 360.712580][ T7716] getname+0x8e/0xd0 [ 360.712607][ T7716] do_sys_openat2+0xf5/0x4c0 [ 360.712629][ T7716] ? find_held_lock+0x2d/0x110 [ 360.712657][ T7716] ? build_open_flags+0x6f0/0x6f0 [ 360.712679][ T7716] ? lock_downgrade+0x6e0/0x6e0 [ 360.712708][ T7716] __x64_sys_openat+0x13f/0x1f0 [ 360.712730][ T7716] ? __ia32_sys_open+0x1c0/0x1c0 [ 360.712753][ T7716] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.712779][ T7716] ? syscall_enter_from_user_mode+0x21/0x70 [ 360.712805][ T7716] do_syscall_64+0x35/0xb0 [ 360.712833][ T7716] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 360.712862][ T7716] RIP: 0033:0x7ffb3023c024 [ 360.712878][ T7716] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 360.712901][ T7716] RSP: 002b:00007ffb31402eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 360.712923][ T7716] RAX: ffffffffffffffda RBX: 00007ffb302d2a20 RCX: 00007ffb3023c024 [ 360.712939][ T7716] RDX: 0000000000000002 RSI: 00007ffb31402fe0 RDI: 00000000ffffff9c [ 360.712953][ T7716] RBP: 00007ffb31402fe0 R08: 0000000000000000 R09: 00007ffb314031d0 [ 360.712967][ T7716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 360.712981][ T7716] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 360.712997][ T7716] [ 360.746600][ T3682] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 360.877290][ T7717] block nbd0: shutting down sockets [ 360.993420][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 361.062021][ T7697] loop4: detected capacity change from 0 to 32766 [ 361.107751][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 361.107781][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.110005][ T3682] usb 3-1: config 0 descriptor?? [ 361.366947][ T3682] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 362.066729][ T3682] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 362.068690][ T3682] usb 3-1: USB disconnect, device number 54 00:46:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1267, r1) 00:46:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 15) 00:46:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 16) 00:46:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1269) 00:46:14 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xd, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 362.575984][ T7728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 362.585194][ T7724] loop1: detected capacity change from 0 to 360 [ 362.595177][ T7728] loop5: detected capacity change from 0 to 4 [ 362.597138][ T7728] Dev loop5: unable to read RDB block 4 [ 362.597173][ T7728] loop5: unable to read partition table 00:46:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1274) 00:46:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 17) 00:46:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 16) 00:46:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1268, r1) [ 362.597387][ T7728] loop5: partition table beyond EOD, truncated [ 362.599290][ T7728] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 362.647355][ T7723] block nbd3: shutting down sockets [ 362.657286][ T7720] block nbd0: shutting down sockets 00:46:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 18) 00:46:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 17) [ 362.788315][ T7735] block nbd3: shutting down sockets [ 362.848983][ T7736] block nbd0: shutting down sockets [ 362.876574][ T3682] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 363.072003][ T7726] loop4: detected capacity change from 0 to 32766 [ 363.116691][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 363.236718][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 363.236750][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.238390][ T3682] usb 3-1: config 0 descriptor?? [ 363.496860][ T3682] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 364.216913][ T3682] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 364.222101][ T3682] usb 3-1: USB disconnect, device number 55 00:46:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1269, r1) 00:46:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 18) 00:46:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1276) 00:46:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 19) 00:46:16 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 364.720085][ T7750] loop5: detected capacity change from 0 to 4 [ 364.726417][ T7753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.737567][ T7750] Dev loop5: unable to read RDB block 4 [ 364.737605][ T7750] loop5: unable to read partition table 00:46:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 19) [ 364.737729][ T7750] loop5: partition table beyond EOD, truncated [ 364.741183][ T7750] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 364.742853][ T7753] loop1: detected capacity change from 0 to 360 [ 364.787214][ T7745] block nbd3: shutting down sockets 00:46:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1274, r1) 00:46:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 20) 00:46:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1277) [ 364.827251][ T7747] block nbd0: shutting down sockets 00:46:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1276, r1) [ 364.912885][ T7762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.913130][ T7762] loop1: detected capacity change from 0 to 360 [ 364.947181][ T7760] block nbd3: shutting down sockets 00:46:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 20) [ 364.962613][ T7765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.962864][ T7765] loop5: detected capacity change from 0 to 4 [ 364.964097][ T3925] Dev loop5: unable to read RDB block 4 [ 364.964129][ T3925] loop5: unable to read partition table [ 364.964251][ T3925] loop5: partition table beyond EOD, truncated [ 364.987423][ T7758] block nbd0: shutting down sockets [ 365.000529][ T7765] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 365.026695][ T3745] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 365.049378][ T7767] loop1: detected capacity change from 0 to 360 [ 365.106932][ T7768] block nbd3: shutting down sockets [ 365.266674][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 365.334145][ T7754] loop4: detected capacity change from 0 to 32766 [ 365.386658][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 365.386690][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.388751][ T3745] usb 3-1: config 0 descriptor?? [ 365.646662][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 366.356673][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 366.364500][ T3745] usb 3-1: USB disconnect, device number 56 00:46:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1278) 00:46:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 21) 00:46:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 21) 00:46:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1277, r1) 00:46:18 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x84, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 366.873364][ T7776] loop1: detected capacity change from 0 to 360 [ 366.894249][ T7777] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.894415][ T7777] loop5: detected capacity change from 0 to 4 00:46:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1278, r1) [ 366.897392][ T7772] block nbd3: shutting down sockets [ 366.897909][ T7777] Dev loop5: unable to read RDB block 4 00:46:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 22) 00:46:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 22) [ 366.897942][ T7777] loop5: unable to read partition table [ 366.898066][ T7777] loop5: partition table beyond EOD, truncated [ 366.907197][ T7777] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:46:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1279) [ 367.027344][ T7770] block nbd0: shutting down sockets [ 367.067380][ T7788] loop1: detected capacity change from 0 to 360 [ 367.074010][ T7789] loop5: detected capacity change from 0 to 4 00:46:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x1279, r1) 00:46:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 23) [ 367.087022][ T7789] Dev loop5: unable to read RDB block 4 [ 367.087064][ T7789] loop5: unable to read partition table [ 367.087207][ T7789] loop5: partition table beyond EOD, truncated [ 367.087758][ T7789] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 367.100661][ T7782] block nbd3: shutting down sockets [ 367.140701][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.140731][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 367.186706][ T921] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 367.205695][ T7795] loop1: detected capacity change from 0 to 360 [ 367.214710][ T7790] block nbd0: shutting down sockets [ 367.245860][ T7792] block nbd3: shutting down sockets [ 367.426655][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 367.493228][ T7779] loop4: detected capacity change from 0 to 32766 [ 367.547581][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 367.547605][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.549218][ T921] usb 3-1: config 0 descriptor?? [ 367.806655][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 368.526750][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 368.528603][ T921] usb 3-1: USB disconnect, device number 57 00:46:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 23) 00:46:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127a, r1) 00:46:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127a) 00:46:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 24) 00:46:20 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x41ff, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 369.012794][ T7803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.012953][ T7802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.012958][ T7803] loop5: detected capacity change from 0 to 4 [ 369.013088][ T7802] loop1: detected capacity change from 0 to 360 [ 369.014993][ T7803] Dev loop5: unable to read RDB block 4 00:46:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 25) 00:46:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127b, r1) 00:46:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127b) 00:46:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 24) [ 369.015032][ T7803] loop5: unable to read partition table [ 369.015162][ T7803] loop5: partition table beyond EOD, truncated [ 369.040617][ T7803] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 369.069284][ T7798] block nbd3: shutting down sockets [ 369.117312][ T7797] block nbd0: shutting down sockets 00:46:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 25) 00:46:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 26) [ 369.206800][ T7814] loop1: detected capacity change from 0 to 360 [ 369.209226][ T7816] loop5: detected capacity change from 0 to 4 [ 369.212932][ T7816] Dev loop5: unable to read RDB block 4 [ 369.212971][ T7816] loop5: unable to read partition table [ 369.213099][ T7816] loop5: partition table beyond EOD, truncated [ 369.214429][ T7816] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 369.287909][ T7810] block nbd3: shutting down sockets [ 369.310887][ T7813] block nbd0: shutting down sockets [ 369.346620][ T921] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 369.346744][ T7822] loop1: detected capacity change from 0 to 360 [ 369.348567][ T7823] loop5: detected capacity change from 0 to 4 [ 369.351858][ T7823] Dev loop5: unable to read RDB block 4 [ 369.351896][ T7823] loop5: unable to read partition table [ 369.352031][ T7823] loop5: partition table beyond EOD, truncated [ 369.353283][ T7823] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 369.586543][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 369.627997][ T7804] loop4: detected capacity change from 0 to 32766 [ 369.710401][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 369.710432][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.721531][ T921] usb 3-1: config 0 descriptor?? [ 369.976823][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 370.716676][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 370.723276][ T921] usb 3-1: USB disconnect, device number 58 00:46:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127c, r1) 00:46:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127c) 00:46:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 26) 00:46:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 27) 00:46:22 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4202, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 371.256803][ T7831] loop5: detected capacity change from 0 to 4 [ 371.267632][ T7830] loop1: detected capacity change from 0 to 360 [ 371.268941][ T7831] Dev loop5: unable to read RDB block 4 [ 371.268974][ T7831] loop5: unable to read partition table 00:46:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127d, r1) 00:46:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 28) 00:46:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 27) 00:46:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127d) [ 371.269097][ T7831] loop5: partition table beyond EOD, truncated [ 371.282550][ T7831] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 371.310217][ T7824] block nbd3: shutting down sockets [ 371.327424][ T7826] block nbd0: shutting down sockets 00:46:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127e, r1) [ 371.447403][ T7836] block nbd3: shutting down sockets [ 371.470622][ T7843] loop1: detected capacity change from 0 to 360 [ 371.475176][ T7844] loop5: detected capacity change from 0 to 4 00:46:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127e) [ 371.507907][ T7844] Dev loop5: unable to read RDB block 4 [ 371.507947][ T7844] loop5: unable to read partition table [ 371.508087][ T7844] loop5: partition table beyond EOD, truncated [ 371.511505][ T7844] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 371.540118][ T7839] block nbd0: shutting down sockets [ 371.567456][ T7845] block nbd3: shutting down sockets [ 371.576952][ T3724] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 371.718649][ T7848] block nbd0: shutting down sockets [ 371.805110][ T7833] loop4: detected capacity change from 0 to 32766 [ 371.826658][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 371.956661][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 371.956693][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.958222][ T3724] usb 3-1: config 0 descriptor?? [ 372.216764][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 372.947061][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 372.948958][ T3724] usb 3-1: USB disconnect, device number 59 00:46:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 29) 00:46:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x127f, r1) 00:46:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 28) 00:46:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x127f) 00:46:25 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7400, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 29) [ 373.488368][ T7857] loop5: detected capacity change from 0 to 4 [ 373.494092][ T7857] Dev loop5: unable to read RDB block 4 [ 373.494127][ T7857] loop5: unable to read partition table 00:46:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x4b47, r1) 00:46:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 30) 00:46:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x4b47) [ 373.494259][ T7857] loop5: partition table beyond EOD, truncated [ 373.496324][ T7859] loop1: detected capacity change from 0 to 360 00:46:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 30) [ 373.500642][ T7857] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 373.528725][ T7851] block nbd3: shutting down sockets [ 373.596683][ T7863] block nbd0: Device being setup by another task 00:46:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x4b49, r1) [ 373.597918][ T7853] block nbd0: shutting down sockets [ 373.629998][ T7866] loop5: detected capacity change from 0 to 4 [ 373.665783][ T7871] loop1: detected capacity change from 0 to 360 [ 373.689670][ T7867] block nbd3: shutting down sockets [ 373.747280][ T7873] block nbd0: Device being setup by another task [ 373.748014][ T7869] block nbd0: shutting down sockets [ 373.773971][ T7875] loop5: detected capacity change from 0 to 4 [ 373.796652][ T3724] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 373.812046][ T7876] block nbd3: shutting down sockets [ 374.038021][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 374.081852][ T7856] loop4: detected capacity change from 0 to 32766 [ 374.156703][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 374.156734][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.158030][ T3724] usb 3-1: config 0 descriptor?? [ 374.416643][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 375.156691][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 375.164782][ T3724] usb 3-1: USB disconnect, device number 60 00:46:27 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 31) 00:46:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x541b, r1) 00:46:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x4b49) 00:46:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 31) 00:46:27 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7500, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x5421, r1) [ 375.689661][ T7885] loop5: detected capacity change from 0 to 4 [ 375.692572][ T7885] Dev loop5: unable to read RDB block 4 [ 375.692610][ T7885] loop5: unable to read partition table 00:46:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 32) [ 375.692740][ T7885] loop5: partition table beyond EOD, truncated [ 375.695950][ T7885] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:46:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 32) 00:46:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x541b) 00:46:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x5450, r1) [ 375.715036][ T7883] loop1: detected capacity change from 0 to 360 00:46:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 33) [ 375.717110][ T7879] block nbd3: shutting down sockets [ 375.787358][ T7880] block nbd0: shutting down sockets [ 375.804754][ T7895] loop5: detected capacity change from 0 to 4 [ 375.827754][ T7892] block nbd3: shutting down sockets [ 375.847171][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.847204][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.847269][ T3925] ldm_validate_partition_table(): Disk read failed. [ 375.847290][ T3925] Dev loop5: unable to read RDB block 0 [ 375.847310][ T3925] loop5: unable to read partition table [ 375.847444][ T3925] loop5: partition table beyond EOD, truncated [ 375.917034][ T7901] loop1: detected capacity change from 0 to 360 [ 375.921886][ T7903] loop5: detected capacity change from 0 to 4 [ 375.925612][ T7903] Dev loop5: unable to read RDB block 4 [ 375.925644][ T7903] loop5: unable to read partition table [ 375.925822][ T7903] loop5: partition table beyond EOD, truncated [ 375.930708][ T7903] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 375.957008][ T7898] block nbd3: shutting down sockets [ 375.957724][ T7896] block nbd0: shutting down sockets [ 375.971111][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971143][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 375.971203][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971230][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 375.971278][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971304][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 375.971353][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971379][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 375.971428][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971454][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 375.971503][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971528][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 375.971577][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.971603][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 375.972875][ T921] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 376.171624][ T7887] loop4: detected capacity change from 0 to 32766 [ 376.226672][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 376.374728][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 376.374762][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.384607][ T921] usb 3-1: config 0 descriptor?? [ 376.636644][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 377.376778][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 377.383972][ T921] usb 3-1: USB disconnect, device number 61 00:46:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 33) 00:46:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x5421) 00:46:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 34) 00:46:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x5451, r1) 00:46:29 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7600, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 34) [ 377.907246][ T7909] loop1: detected capacity change from 0 to 360 [ 377.907646][ T7911] loop5: detected capacity change from 0 to 4 00:46:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x5450) 00:46:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 35) 00:46:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x5452, r1) [ 377.957245][ T7904] block nbd0: shutting down sockets [ 377.957555][ T7906] block nbd3: shutting down sockets [ 378.025977][ T7919] loop1: detected capacity change from 0 to 360 [ 378.026021][ T7919] FAULT_INJECTION: forcing a failure. [ 378.026021][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x5460, r1) 00:46:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 36) [ 378.026046][ T7919] CPU: 1 PID: 7919 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 378.026072][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.026084][ T7919] Call Trace: [ 378.026090][ T7919] [ 378.026097][ T7919] dump_stack_lvl+0xcd/0x134 [ 378.026127][ T7919] should_fail.cold+0x5/0xa [ 378.026150][ T7919] strncpy_from_user+0x34/0x3c0 [ 378.026175][ T7919] getname_flags.part.0+0x95/0x4f0 [ 378.026205][ T7919] ? syscall_enter_from_user_mode+0x21/0x70 [ 378.026233][ T7919] __x64_sys_mkdirat+0xff/0x170 [ 378.026255][ T7919] do_syscall_64+0x35/0xb0 [ 378.026281][ T7919] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 378.026309][ T7919] RIP: 0033:0x7fadd1288217 [ 378.026326][ T7919] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 378.026349][ T7919] RSP: 002b:00007fadd2333f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 378.026371][ T7919] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd1288217 [ 378.026386][ T7919] RDX: 00000000000001ff RSI: 0000000020000140 RDI: 00000000ffffff9c [ 378.026401][ T7919] RBP: 00007fadd23341d0 R08: 0000000000000000 R09: 00007fadd23341d0 [ 378.026417][ T7919] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 378.026431][ T7919] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 378.026448][ T7919] [ 378.051093][ T7922] loop5: detected capacity change from 0 to 4 [ 378.051201][ T7922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.056074][ T7922] Dev loop5: unable to read RDB block 4 [ 378.056107][ T7922] loop5: unable to read partition table [ 378.056235][ T7922] loop5: partition table beyond EOD, truncated [ 378.067000][ T7922] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 378.092346][ T2980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 378.092379][ T2980] Buffer I/O error on dev loop1, logical block 0, async page read [ 378.092442][ T2980] ldm_validate_partition_table(): Disk read failed. [ 378.092463][ T2980] Dev loop1: unable to read RDB block 0 [ 378.092515][ T2980] loop1: unable to read partition table [ 378.092642][ T2980] loop1: partition table beyond EOD, truncated [ 378.107486][ T7921] block nbd3: shutting down sockets [ 378.127189][ T7918] block nbd0: shutting down sockets [ 378.196671][ T921] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 378.218292][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.252825][ T7929] loop5: detected capacity change from 0 to 4 [ 378.257814][ T7929] Dev loop5: unable to read RDB block 4 [ 378.257853][ T7929] loop5: unable to read partition table [ 378.257983][ T7929] loop5: partition table beyond EOD, truncated [ 378.263935][ T7929] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 378.274530][ T7926] block nbd3: shutting down sockets [ 378.436562][ T921] usb 3-1: Using ep0 maxpacket: 16 [ 378.556785][ T921] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 378.556817][ T921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.560458][ T921] usb 3-1: config 0 descriptor?? [ 378.727708][ T7912] loop4: detected capacity change from 0 to 32766 [ 378.829997][ T921] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 379.549737][ T921] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 379.563970][ T921] usb 3-1: USB disconnect, device number 62 00:46:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x5451) 00:46:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x8933, r1) 00:46:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 35) 00:46:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 37) 00:46:31 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 380.072463][ T7933] loop5: detected capacity change from 0 to 4 [ 380.077784][ T7937] loop1: detected capacity change from 0 to 360 [ 380.089705][ T7933] Dev loop5: unable to read RDB block 4 [ 380.089744][ T7933] loop5: unable to read partition table 00:46:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 36) 00:46:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x5452) 00:46:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 38) 00:46:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab01, r1) [ 380.089887][ T7933] loop5: partition table beyond EOD, truncated [ 380.106635][ T7933] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 380.147557][ T7931] block nbd0: shutting down sockets [ 380.157710][ T7938] block nbd3: shutting down sockets 00:46:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab02, r1) 00:46:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 37) [ 380.244092][ T7948] loop1: detected capacity change from 0 to 360 [ 380.244188][ T7948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.252781][ T7951] loop5: detected capacity change from 0 to 4 [ 380.252904][ T7951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.261566][ T7951] Dev loop5: unable to read RDB block 4 [ 380.261604][ T7951] loop5: unable to read partition table [ 380.261722][ T7951] loop5: partition table beyond EOD, truncated [ 380.263578][ T7951] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 380.286878][ T7946] block nbd3: shutting down sockets [ 380.307365][ T7944] block nbd0: shutting down sockets [ 380.314948][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 380.314980][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 380.406800][ T27] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 380.407797][ T7955] loop1: detected capacity change from 0 to 360 [ 380.407895][ T7955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.418159][ T7952] block nbd3: shutting down sockets [ 380.633221][ T7941] loop4: detected capacity change from 0 to 32766 [ 380.686700][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 380.816836][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 380.816868][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.818877][ T27] usb 3-1: config 0 descriptor?? [ 381.107224][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 381.846814][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 381.854898][ T27] usb 3-1: USB disconnect, device number 63 00:46:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 39) 00:46:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x5460) 00:46:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) 00:46:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 38) 00:46:34 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7800, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 40) [ 382.364753][ T7961] loop5: detected capacity change from 0 to 4 [ 382.364985][ T7961] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory 00:46:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x8933) [ 382.400112][ T7967] loop1: detected capacity change from 0 to 360 00:46:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 39) [ 382.400245][ T7967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.447467][ T7957] block nbd0: shutting down sockets 00:46:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 41) [ 382.522472][ T7970] loop5: detected capacity change from 0 to 4 [ 382.561780][ T7974] loop1: detected capacity change from 0 to 360 00:46:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 40) [ 382.599264][ T3925] blk_print_req_error: 14 callbacks suppressed [ 382.599281][ T3925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:46:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 42) [ 382.599310][ T3925] buffer_io_error: 14 callbacks suppressed [ 382.599320][ T3925] Buffer I/O error on dev loop1, logical block 0, async page read [ 382.599386][ T3925] ldm_validate_partition_table(): Disk read failed. [ 382.599406][ T3925] Dev loop1: unable to read RDB block 0 [ 382.599425][ T3925] loop1: unable to read partition table [ 382.599600][ T3925] loop1: partition table beyond EOD, truncated [ 382.634445][ T7977] loop5: detected capacity change from 0 to 4 [ 382.635210][ T5002] Dev loop5: unable to read RDB block 4 [ 382.635242][ T5002] loop5: unable to read partition table [ 382.635370][ T5002] loop5: partition table beyond EOD, truncated [ 382.676787][ T27] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 382.682664][ T7972] block nbd0: shutting down sockets [ 382.702006][ T7980] loop1: detected capacity change from 0 to 360 [ 382.732072][ T3925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 382.732103][ T3925] Buffer I/O error on dev loop1, logical block 0, async page read [ 382.732168][ T3925] ldm_validate_partition_table(): Disk read failed. [ 382.732189][ T3925] Dev loop1: unable to read RDB block 0 [ 382.732208][ T3925] loop1: unable to read partition table [ 382.732340][ T3925] loop1: partition table beyond EOD, truncated [ 382.746087][ T7982] loop5: detected capacity change from 0 to 4 [ 382.746354][ T7982] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 382.916616][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 383.004726][ T7965] loop4: detected capacity change from 0 to 32766 [ 383.036714][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 383.036745][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.038821][ T27] usb 3-1: config 0 descriptor?? [ 383.230605][ T49] block nbd3: Receive control failed (result -32) [ 383.235137][ T7966] block nbd3: shutting down sockets [ 383.296744][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 383.996748][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 383.998726][ T27] usb 3-1: USB disconnect, device number 64 00:46:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab00) 00:46:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 43) 00:46:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 41) 00:46:36 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7900, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab04, r1) [ 384.466181][ T7988] loop1: detected capacity change from 0 to 360 [ 384.477553][ T7989] loop5: detected capacity change from 0 to 4 00:46:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab05, r1) 00:46:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 42) [ 384.506725][ T7989] Dev loop5: unable to read RDB block 4 [ 384.506765][ T7989] loop5: unable to read partition table 00:46:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab01) 00:46:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 44) [ 384.506896][ T7989] loop5: partition table beyond EOD, truncated [ 384.517838][ T7991] block nbd3: shutting down sockets 00:46:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 43) [ 384.548113][ T7989] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 384.587750][ T7983] block nbd0: shutting down sockets [ 384.628179][ T7998] loop1: detected capacity change from 0 to 360 [ 384.657495][ T3925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:46:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 45) [ 384.657525][ T3925] Buffer I/O error on dev loop1, logical block 0, async page read [ 384.657590][ T3925] ldm_validate_partition_table(): Disk read failed. [ 384.657610][ T3925] Dev loop1: unable to read RDB block 0 [ 384.657629][ T3925] loop1: unable to read partition table [ 384.657769][ T3925] loop1: partition table beyond EOD, truncated [ 384.668283][ T8001] loop5: detected capacity change from 0 to 4 [ 384.673966][ T2980] Dev loop5: unable to read RDB block 4 [ 384.673998][ T2980] loop5: unable to read partition table [ 384.674123][ T2980] loop5: partition table beyond EOD, truncated [ 384.695384][ T7996] block nbd3: shutting down sockets [ 384.762328][ T8007] loop1: detected capacity change from 0 to 360 [ 384.770036][ T8006] block nbd0: Device being setup by another task [ 384.770770][ T8002] block nbd0: shutting down sockets [ 384.796578][ T23] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 384.797334][ T8009] loop5: detected capacity change from 0 to 4 [ 384.798256][ T8009] ENOMEM in journal_alloc_journal_head, retrying. [ 384.805540][ T8009] Dev loop5: unable to read RDB block 4 [ 384.805574][ T8009] loop5: unable to read partition table [ 384.805715][ T8009] loop5: partition table beyond EOD, truncated [ 384.806276][ T8009] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 385.071579][ T7990] loop4: detected capacity change from 0 to 32766 [ 385.076638][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 385.236750][ T23] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 385.236783][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.238830][ T23] usb 3-1: config 0 descriptor?? [ 385.489641][ T23] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 386.166702][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 386.176152][ T23] usb 3-1: USB disconnect, device number 65 00:46:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 00:46:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 44) 00:46:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab02) 00:46:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 46) 00:46:38 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7a00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 47) [ 386.651778][ T8015] loop5: detected capacity change from 0 to 4 [ 386.658716][ T8018] loop1: detected capacity change from 0 to 360 00:46:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 45) 00:46:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) 00:46:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab07, r1) [ 386.738213][ T8011] block nbd0: shutting down sockets [ 386.757102][ T8010] block nbd3: shutting down sockets [ 386.769417][ T8025] loop5: detected capacity change from 0 to 4 [ 386.796096][ T8026] loop1: detected capacity change from 0 to 360 00:46:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 48) 00:46:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 46) [ 386.799573][ T8026] ENOMEM in journal_alloc_journal_head, retrying. [ 386.873620][ T8032] loop5: detected capacity change from 0 to 4 [ 386.874219][ T8032] ENOMEM in journal_alloc_journal_head, retrying. [ 386.891476][ T8028] block nbd3: shutting down sockets [ 386.893698][ T8032] Dev loop5: unable to read RDB block 4 [ 386.893733][ T8032] loop5: unable to read partition table [ 386.893866][ T8032] loop5: partition table beyond EOD, truncated [ 386.900646][ T8032] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 386.907059][ T8030] block nbd0: server does not support multiple connections per device. [ 386.907297][ T8027] block nbd0: shutting down sockets [ 386.956346][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.956380][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 386.957327][ T8034] loop1: detected capacity change from 0 to 360 [ 386.961266][ T3682] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 387.196680][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 387.213630][ T8017] loop4: detected capacity change from 0 to 32766 [ 387.316799][ T3682] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 387.316831][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.318773][ T3682] usb 3-1: config 0 descriptor?? [ 387.576826][ T3682] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 388.286621][ T3682] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 388.289206][ T3682] usb 3-1: USB disconnect, device number 66 00:46:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab05) 00:46:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 00:46:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 47) 00:46:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 49) 00:46:40 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7b00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 388.756751][ T8042] loop5: detected capacity change from 0 to 4 [ 388.757402][ T8042] FAULT_INJECTION: forcing a failure. [ 388.757402][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab09, r1) 00:46:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 50) 00:46:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 48) [ 388.757432][ T8042] CPU: 1 PID: 8042 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 00:46:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab06) [ 388.757457][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.757470][ T8042] Call Trace: [ 388.757476][ T8042] 00:46:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab0a, r1) [ 388.757483][ T8042] dump_stack_lvl+0xcd/0x134 [ 388.757513][ T8042] should_fail.cold+0x5/0xa 00:46:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 51) [ 388.757536][ T8042] _copy_from_user+0x2a/0x170 [ 388.757571][ T8042] memdup_user+0x65/0xd0 [ 388.757594][ T8042] strndup_user+0x70/0xe0 [ 388.757615][ T8042] __x64_sys_mount+0x134/0x300 [ 388.757643][ T8042] ? copy_mnt_ns+0xae0/0xae0 [ 388.757668][ T8042] ? syscall_enter_from_user_mode+0x21/0x70 [ 388.757694][ T8042] ? syscall_enter_from_user_mode+0x21/0x70 [ 388.757720][ T8042] do_syscall_64+0x35/0xb0 [ 388.757746][ T8042] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 388.757775][ T8042] RIP: 0033:0x7ffb3028a63a [ 388.757791][ T8042] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 388.757811][ T8042] RSP: 002b:00007ffb31402f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 388.757833][ T8042] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb3028a63a [ 388.757849][ T8042] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffb31402fe0 [ 388.757865][ T8042] RBP: 00007ffb31403020 R08: 00007ffb31403020 R09: 0000000020000000 [ 388.757879][ T8042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 388.757893][ T8042] R13: 0000000020000100 R14: 00007ffb31402fe0 R15: 0000000020000280 [ 388.757911][ T8042] [ 388.791844][ T8043] loop1: detected capacity change from 0 to 360 [ 388.808876][ T8039] block nbd3: NBD_DISCONNECT [ 388.809155][ T8035] block nbd3: Disconnected due to user request. [ 388.809168][ T8035] block nbd3: shutting down sockets [ 388.866975][ T8036] block nbd0: shutting down sockets [ 388.952002][ T8053] loop5: detected capacity change from 0 to 4 [ 388.952561][ T8055] loop1: detected capacity change from 0 to 360 [ 388.952639][ T8053] FAULT_INJECTION: forcing a failure. [ 388.952639][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.952664][ T8053] CPU: 0 PID: 8053 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 388.952690][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.952703][ T8053] Call Trace: [ 388.952708][ T8053] [ 388.952715][ T8053] dump_stack_lvl+0xcd/0x134 [ 388.952744][ T8053] should_fail.cold+0x5/0xa [ 388.952767][ T8053] _copy_from_user+0x2a/0x170 [ 388.952795][ T8053] copy_mount_options+0x76/0x180 [ 388.952821][ T8053] __x64_sys_mount+0x1a9/0x300 [ 388.952849][ T8053] ? copy_mnt_ns+0xae0/0xae0 [ 388.952875][ T8053] ? syscall_enter_from_user_mode+0x21/0x70 [ 388.952901][ T8053] ? syscall_enter_from_user_mode+0x21/0x70 [ 388.952925][ T8053] do_syscall_64+0x35/0xb0 [ 388.952954][ T8053] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 388.952981][ T8053] RIP: 0033:0x7ffb3028a63a [ 388.952997][ T8053] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 388.953029][ T8053] RSP: 002b:00007ffb31402f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 388.953052][ T8053] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb3028a63a [ 388.953068][ T8053] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffb31402fe0 [ 388.953083][ T8053] RBP: 00007ffb31403020 R08: 00007ffb31403020 R09: 0000000020000000 [ 388.953098][ T8053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 388.953111][ T8053] R13: 0000000020000100 R14: 00007ffb31402fe0 R15: 0000000020000280 [ 388.953128][ T8053] [ 388.957599][ T8049] block nbd3: shutting down sockets [ 388.970122][ T2980] Dev loop5: unable to read RDB block 4 [ 388.970155][ T2980] loop5: unable to read partition table [ 388.970358][ T2980] loop5: partition table beyond EOD, truncated [ 388.971016][ T8053] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 389.039716][ T8054] block nbd0: shutting down sockets [ 389.066837][ T8057] block nbd3: shutting down sockets [ 389.075623][ T8060] loop5: detected capacity change from 0 to 4 [ 389.100474][ T2980] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.100506][ T2980] Buffer I/O error on dev loop5, logical block 0, async page read [ 389.100574][ T2980] ldm_validate_partition_table(): Disk read failed. [ 389.100596][ T2980] Dev loop5: unable to read RDB block 0 [ 389.100616][ T2980] loop5: unable to read partition table [ 389.100759][ T2980] loop5: partition table beyond EOD, truncated [ 389.106929][ T27] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 389.376607][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 389.417462][ T8040] loop4: detected capacity change from 0 to 32766 [ 389.526721][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 389.526752][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.528612][ T27] usb 3-1: config 0 descriptor?? [ 389.786725][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 390.496666][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 390.500322][ T27] usb 3-1: USB disconnect, device number 67 00:46:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 49) 00:46:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab07) 00:46:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xff00, r1) 00:46:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 52) 00:46:42 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7c00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 390.951807][ T8067] loop5: detected capacity change from 0 to 4 [ 390.984825][ T8070] loop1: detected capacity change from 0 to 360 00:46:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 53) 00:46:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 50) 00:46:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab08) [ 390.985501][ T8070] FAULT_INJECTION: forcing a failure. [ 390.985501][ T8070] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x400448c9, r1) [ 390.985530][ T8070] CPU: 1 PID: 8070 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 390.985556][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 51) [ 390.985569][ T8070] Call Trace: [ 390.985575][ T8070] [ 390.985582][ T8070] dump_stack_lvl+0xcd/0x134 [ 390.985612][ T8070] should_fail.cold+0x5/0xa [ 390.985636][ T8070] _copy_from_user+0x2a/0x170 00:46:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x400448dd, r1) [ 390.985664][ T8070] memdup_user+0x65/0xd0 [ 390.985688][ T8070] strndup_user+0x70/0xe0 [ 390.985710][ T8070] __x64_sys_mount+0x17d/0x300 [ 390.985737][ T8070] ? copy_mnt_ns+0xae0/0xae0 [ 390.985762][ T8070] ? syscall_enter_from_user_mode+0x21/0x70 [ 390.985789][ T8070] ? syscall_enter_from_user_mode+0x21/0x70 [ 390.985815][ T8070] do_syscall_64+0x35/0xb0 [ 390.985840][ T8070] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 390.985867][ T8070] RIP: 0033:0x7fadd128a63a [ 390.985883][ T8070] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 390.985905][ T8070] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 390.985927][ T8070] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 390.985942][ T8070] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 390.985958][ T8070] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 390.985972][ T8070] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 390.985987][ T8070] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 390.986005][ T8070] [ 391.022421][ T8064] block nbd3: shutting down sockets [ 391.027769][ T8063] block nbd0: shutting down sockets [ 391.116071][ T8077] loop5: detected capacity change from 0 to 4 [ 391.122313][ T8079] loop1: detected capacity change from 0 to 360 [ 391.163172][ T2980] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.163206][ T2980] Buffer I/O error on dev loop5, logical block 0, async page read [ 391.163272][ T2980] ldm_validate_partition_table(): Disk read failed. [ 391.163294][ T2980] Dev loop5: unable to read RDB block 0 [ 391.163313][ T2980] loop5: unable to read partition table [ 391.163488][ T2980] loop5: partition table beyond EOD, truncated [ 391.177383][ T8080] block nbd3: shutting down sockets [ 391.197085][ T8076] block nbd0: NBD_DISCONNECT [ 391.197421][ T8075] block nbd0: Disconnected due to user request. [ 391.197437][ T8075] block nbd0: shutting down sockets [ 391.256074][ T8085] loop1: detected capacity change from 0 to 360 [ 391.266695][ T8085] FAULT_INJECTION: forcing a failure. [ 391.266695][ T8085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.266726][ T8085] CPU: 0 PID: 8085 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 391.266752][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.266765][ T8085] Call Trace: [ 391.266771][ T8085] [ 391.266777][ T8085] dump_stack_lvl+0xcd/0x134 [ 391.266808][ T8085] should_fail.cold+0x5/0xa [ 391.266831][ T8085] _copy_from_user+0x2a/0x170 [ 391.266859][ T8085] memdup_user+0x65/0xd0 [ 391.266882][ T8085] strndup_user+0x70/0xe0 [ 391.266904][ T8085] __x64_sys_mount+0x134/0x300 [ 391.266931][ T8085] ? copy_mnt_ns+0xae0/0xae0 [ 391.266956][ T8085] ? syscall_enter_from_user_mode+0x21/0x70 [ 391.266982][ T8085] ? syscall_enter_from_user_mode+0x21/0x70 [ 391.267008][ T8085] do_syscall_64+0x35/0xb0 [ 391.267036][ T8085] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 391.267064][ T8085] RIP: 0033:0x7fadd128a63a [ 391.267080][ T8085] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 391.267103][ T8085] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 391.267126][ T8085] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 391.267141][ T8085] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 391.267157][ T8085] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 391.267171][ T8085] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 391.267186][ T8085] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 391.267205][ T8085] [ 391.307008][ T8082] block nbd3: shutting down sockets [ 391.331217][ T2980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.331315][ T2980] Buffer I/O error on dev loop1, logical block 0, async page read [ 391.331445][ T2980] ldm_validate_partition_table(): Disk read failed. [ 391.331467][ T2980] Dev loop1: unable to read RDB block 0 [ 391.331540][ T2980] loop1: unable to read partition table [ 391.331850][ T2980] loop1: partition table beyond EOD, truncated [ 391.396570][ T3724] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 391.534097][ T8068] loop4: detected capacity change from 0 to 32766 [ 391.648911][ T3724] usb 3-1: Using ep0 maxpacket: 16 [ 391.779952][ T3724] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 391.779983][ T3724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.793386][ T3724] usb 3-1: config 0 descriptor?? [ 392.036726][ T3724] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 392.726633][ T3724] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 392.731297][ T3724] usb 3-1: USB disconnect, device number 68 00:46:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 54) 00:46:44 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab09) 00:46:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x400454ca, r1) 00:46:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 52) 00:46:44 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7d00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 55) [ 393.207953][ T8087] loop5: detected capacity change from 0 to 4 [ 393.212852][ T8094] loop1: detected capacity change from 0 to 360 00:46:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 53) 00:46:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab0a) [ 393.281661][ T8089] block nbd0: shutting down sockets [ 393.294179][ T8090] block nbd3: shutting down sockets 00:46:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40049409, r1) 00:46:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 56) [ 393.343283][ T8100] loop5: detected capacity change from 0 to 4 [ 393.344449][ T3925] Dev loop5: unable to read RDB block 4 [ 393.344517][ T3925] loop5: unable to read partition table [ 393.344640][ T3925] loop5: partition table beyond EOD, truncated 00:46:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40081271, r1) [ 393.385792][ T8104] loop1: detected capacity change from 0 to 360 [ 393.407444][ T8104] FAULT_INJECTION: forcing a failure. [ 393.407444][ T8104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.407474][ T8104] CPU: 0 PID: 8104 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 393.407501][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.407514][ T8104] Call Trace: [ 393.407520][ T8104] [ 393.407526][ T8104] dump_stack_lvl+0xcd/0x134 [ 393.407556][ T8104] should_fail.cold+0x5/0xa [ 393.407578][ T8104] _copy_from_user+0x2a/0x170 [ 393.407605][ T8104] copy_mount_options+0x76/0x180 [ 393.407632][ T8104] __x64_sys_mount+0x1a9/0x300 [ 393.407659][ T8104] ? copy_mnt_ns+0xae0/0xae0 [ 393.407685][ T8104] ? syscall_enter_from_user_mode+0x21/0x70 [ 393.407710][ T8104] ? syscall_enter_from_user_mode+0x21/0x70 [ 393.407737][ T8104] do_syscall_64+0x35/0xb0 [ 393.407764][ T8104] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 393.407792][ T8104] RIP: 0033:0x7fadd128a63a [ 393.407807][ T8104] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 393.407830][ T8104] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 393.407853][ T8104] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 393.407868][ T8104] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 393.407883][ T8104] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 393.407899][ T8104] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 393.407913][ T8104] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 393.407931][ T8104] [ 393.432243][ T8108] loop5: detected capacity change from 0 to 4 [ 393.432964][ T8108] FAULT_INJECTION: forcing a failure. [ 393.432964][ T8108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.432991][ T8108] CPU: 0 PID: 8108 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 393.433022][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.433034][ T8108] Call Trace: [ 393.433039][ T8108] [ 393.433046][ T8108] dump_stack_lvl+0xcd/0x134 [ 393.433075][ T8108] should_fail.cold+0x5/0xa [ 393.433098][ T8108] strncpy_from_user+0x34/0x3c0 [ 393.433119][ T8108] getname_flags.part.0+0x95/0x4f0 [ 393.433148][ T8108] getname_flags+0x9a/0xe0 [ 393.433172][ T8108] user_path_at_empty+0x2b/0x60 [ 393.433208][ T8108] __x64_sys_mount+0x1ea/0x300 [ 393.433237][ T8108] ? copy_mnt_ns+0xae0/0xae0 [ 393.433264][ T8108] ? syscall_enter_from_user_mode+0x21/0x70 [ 393.433292][ T8108] ? syscall_enter_from_user_mode+0x21/0x70 [ 393.433318][ T8108] do_syscall_64+0x35/0xb0 [ 393.433347][ T8108] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 393.433375][ T8108] RIP: 0033:0x7ffb3028a63a [ 393.433391][ T8108] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 393.433414][ T8108] RSP: 002b:00007ffb31402f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 393.433437][ T8108] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb3028a63a [ 393.433452][ T8108] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffb31402fe0 [ 393.433466][ T8108] RBP: 00007ffb31403020 R08: 00007ffb31403020 R09: 0000000020000000 [ 393.433481][ T8108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 393.433495][ T8108] R13: 0000000020000100 R14: 00007ffb31402fe0 R15: 0000000020000280 [ 393.433513][ T8108] [ 393.446966][ T8102] block nbd3: shutting down sockets [ 393.506674][ T6] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 393.517769][ T8105] block nbd0: shutting down sockets [ 393.591282][ T8110] block nbd3: shutting down sockets [ 393.747272][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 393.866794][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 393.866826][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.868824][ T6] usb 3-1: config 0 descriptor?? [ 393.869300][ T8093] loop4: detected capacity change from 0 to 32766 [ 394.131003][ T6] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 394.816737][ T6] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 394.820219][ T6] usb 3-1: USB disconnect, device number 69 00:46:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 57) 00:46:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab12) 00:46:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40086602, r1) 00:46:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 54) 00:46:46 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7e00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 395.323447][ T8120] loop5: detected capacity change from 0 to 4 [ 395.336036][ T8121] loop1: detected capacity change from 0 to 360 [ 395.358060][ T28] kauditd_printk_skb: 4 callbacks suppressed 00:46:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 55) 00:46:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40087602, r1) [ 395.358074][ T28] audit: type=1400 audit(1655254007.055:343): avc: denied { setattr } for pid=8114 comm="syz-executor.3" path="/dev/nbd3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.406641][ T8114] block nbd3: shutting down sockets 00:46:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x400448c9) 00:46:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 58) [ 395.453111][ T8125] block nbd0: Device being setup by another task [ 395.453767][ T8113] block nbd0: shutting down sockets 00:46:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40101283, r1) [ 395.533869][ T8130] loop1: detected capacity change from 0 to 360 [ 395.556950][ T8127] block nbd3: shutting down sockets [ 395.565356][ T8135] loop5: detected capacity change from 0 to 4 00:46:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x400448dd) [ 395.566217][ T8135] FAULT_INJECTION: forcing a failure. [ 395.566217][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.566246][ T8135] CPU: 0 PID: 8135 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 395.566272][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.566286][ T8135] Call Trace: [ 395.566291][ T8135] [ 395.566298][ T8135] dump_stack_lvl+0xcd/0x134 [ 395.566327][ T8135] should_fail.cold+0x5/0xa [ 395.566350][ T8135] strncpy_from_user+0x34/0x3c0 [ 395.566374][ T8135] getname_flags.part.0+0x95/0x4f0 [ 395.566404][ T8135] getname_flags+0x9a/0xe0 [ 395.566428][ T8135] user_path_at_empty+0x2b/0x60 [ 395.566459][ T8135] __x64_sys_mount+0x1ea/0x300 [ 395.566484][ T8135] ? copy_mnt_ns+0xae0/0xae0 [ 395.566509][ T8135] ? syscall_enter_from_user_mode+0x21/0x70 [ 395.566534][ T8135] ? syscall_enter_from_user_mode+0x21/0x70 [ 395.566558][ T8135] do_syscall_64+0x35/0xb0 [ 395.566583][ T8135] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 395.566611][ T8135] RIP: 0033:0x7ffb3028a63a [ 395.566626][ T8135] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 395.566648][ T8135] RSP: 002b:00007ffb31402f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 395.566669][ T8135] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb3028a63a [ 395.566684][ T8135] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffb31402fe0 [ 395.566698][ T8135] RBP: 00007ffb31403020 R08: 00007ffb31403020 R09: 0000000020000000 [ 395.566713][ T8135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 395.566726][ T8135] R13: 0000000020000100 R14: 00007ffb31402fe0 R15: 0000000020000280 [ 395.566743][ T8135] [ 395.617807][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 395.617838][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 395.617901][ T3925] ldm_validate_partition_table(): Disk read failed. [ 395.617922][ T3925] Dev loop5: unable to read RDB block 0 [ 395.617942][ T3925] loop5: unable to read partition table [ 395.618091][ T3925] loop5: partition table beyond EOD, truncated [ 395.626842][ T6] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 395.628601][ T8131] block nbd0: shutting down sockets [ 395.717368][ T8136] block nbd3: shutting down sockets [ 395.789721][ T8138] block nbd0: shutting down sockets [ 395.884674][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 395.926100][ T8117] loop4: detected capacity change from 0 to 32766 [ 396.001160][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 396.001179][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.003076][ T6] usb 3-1: config 0 descriptor?? [ 396.256748][ T6] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 396.976864][ T6] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 396.985452][ T6] usb 3-1: USB disconnect, device number 70 00:46:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 59) 00:46:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40101286, r1) 00:46:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 56) 00:46:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x400454ca) 00:46:49 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7f00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40101288, r1) 00:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 60) [ 397.502949][ T8150] loop5: detected capacity change from 0 to 4 [ 397.505459][ T8148] loop1: detected capacity change from 0 to 360 [ 397.506152][ T8148] FAULT_INJECTION: forcing a failure. [ 397.506152][ T8148] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40049409) [ 397.506181][ T8148] CPU: 1 PID: 8148 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 397.506206][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 57) [ 397.506219][ T8148] Call Trace: [ 397.506225][ T8148] [ 397.506231][ T8148] dump_stack_lvl+0xcd/0x134 [ 397.506265][ T8148] should_fail.cold+0x5/0xa [ 397.506288][ T8148] _copy_from_user+0x2a/0x170 00:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 61) 00:46:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 58) [ 397.506315][ T8148] copy_mount_options+0x76/0x180 [ 397.506340][ T8148] __x64_sys_mount+0x1a9/0x300 [ 397.506368][ T8148] ? copy_mnt_ns+0xae0/0xae0 [ 397.506395][ T8148] ? syscall_enter_from_user_mode+0x21/0x70 [ 397.506419][ T8148] ? syscall_enter_from_user_mode+0x21/0x70 [ 397.506443][ T8148] do_syscall_64+0x35/0xb0 [ 397.506469][ T8148] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 397.506494][ T8148] RIP: 0033:0x7fadd128a63a [ 397.506510][ T8148] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 397.506531][ T8148] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 397.506554][ T8148] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 397.506569][ T8148] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 397.506583][ T8148] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 397.506599][ T8148] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 397.506613][ T8148] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 397.506631][ T8148] [ 397.537123][ T8141] block nbd3: shutting down sockets [ 397.590525][ T8144] block nbd0: shutting down sockets [ 397.666909][ T8157] loop5: detected capacity change from 0 to 4 [ 397.667644][ T8157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.696938][ T8154] block nbd3: shutting down sockets [ 397.702454][ T8160] loop1: detected capacity change from 0 to 360 [ 397.704467][ T8160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.766541][ T6] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 397.799413][ T8159] block nbd0: shutting down sockets [ 397.808990][ T8164] loop5: detected capacity change from 0 to 4 [ 397.819452][ T8164] Dev loop5: unable to read RDB block 4 [ 397.819491][ T8164] loop5: unable to read partition table [ 397.819629][ T8164] loop5: partition table beyond EOD, truncated [ 397.820349][ T8164] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 397.822644][ T8165] loop1: detected capacity change from 0 to 360 [ 397.870167][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.870199][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 398.006558][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 398.040597][ T8149] loop4: detected capacity change from 0 to 32766 [ 398.126604][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 398.126635][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.128490][ T6] usb 3-1: config 0 descriptor?? [ 398.386782][ T6] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 399.106706][ T6] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 399.115863][ T6] usb 3-1: USB disconnect, device number 71 00:46:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401070c9, r1) 00:46:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40081271) 00:46:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 62) 00:46:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 59) 00:46:51 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8100, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 399.605315][ T8173] loop5: detected capacity change from 0 to 4 [ 399.615859][ T8175] loop1: detected capacity change from 0 to 360 [ 399.616941][ T8175] FAULT_INJECTION: forcing a failure. [ 399.616941][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.616969][ T8175] CPU: 0 PID: 8175 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 00:46:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401070ca, r1) 00:46:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 63) 00:46:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 60) 00:46:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40086602) [ 399.617003][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.617017][ T8175] Call Trace: [ 399.617023][ T8175] [ 399.617030][ T8175] dump_stack_lvl+0xcd/0x134 [ 399.617060][ T8175] should_fail.cold+0x5/0xa [ 399.617082][ T8175] strncpy_from_user+0x34/0x3c0 [ 399.617106][ T8175] getname_flags.part.0+0x95/0x4f0 [ 399.617136][ T8175] getname_flags+0x9a/0xe0 [ 399.617163][ T8175] user_path_at_empty+0x2b/0x60 [ 399.617192][ T8175] __x64_sys_mount+0x1ea/0x300 [ 399.617220][ T8175] ? copy_mnt_ns+0xae0/0xae0 [ 399.617245][ T8175] ? syscall_enter_from_user_mode+0x21/0x70 00:46:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401070cd, r1) 00:46:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 61) [ 399.617272][ T8175] ? syscall_enter_from_user_mode+0x21/0x70 [ 399.617298][ T8175] do_syscall_64+0x35/0xb0 [ 399.617325][ T8175] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 399.617353][ T8175] RIP: 0033:0x7fadd128a63a [ 399.617369][ T8175] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 399.617391][ T8175] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 399.617414][ T8175] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 399.617429][ T8175] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 399.617445][ T8175] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 399.617460][ T8175] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 399.617474][ T8175] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 399.617491][ T8175] [ 399.645305][ T8168] block nbd3: shutting down sockets [ 399.717261][ T8179] block nbd0: Device being setup by another task [ 399.718012][ T8167] block nbd0: shutting down sockets [ 399.797609][ T8185] loop5: detected capacity change from 0 to 4 [ 399.798450][ T8185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.802848][ T8186] loop1: detected capacity change from 0 to 360 [ 399.831714][ T8181] block nbd3: shutting down sockets [ 399.907532][ T8187] block nbd0: shutting down sockets [ 399.947043][ T6] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 399.984028][ T8193] loop1: detected capacity change from 0 to 360 [ 399.984748][ T8193] FAULT_INJECTION: forcing a failure. [ 399.984748][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.984777][ T8193] CPU: 1 PID: 8193 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 399.984802][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.984815][ T8193] Call Trace: [ 399.984820][ T8193] [ 399.984827][ T8193] dump_stack_lvl+0xcd/0x134 [ 399.984857][ T8193] should_fail.cold+0x5/0xa [ 399.984880][ T8193] strncpy_from_user+0x34/0x3c0 [ 399.984909][ T8193] getname_flags.part.0+0x95/0x4f0 [ 399.984941][ T8193] getname_flags+0x9a/0xe0 [ 399.984966][ T8193] user_path_at_empty+0x2b/0x60 [ 399.984994][ T8193] __x64_sys_mount+0x1ea/0x300 [ 399.985022][ T8193] ? copy_mnt_ns+0xae0/0xae0 [ 399.985048][ T8193] ? syscall_enter_from_user_mode+0x21/0x70 [ 399.985075][ T8193] ? syscall_enter_from_user_mode+0x21/0x70 [ 399.985101][ T8193] do_syscall_64+0x35/0xb0 [ 399.985129][ T8193] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 399.985157][ T8193] RIP: 0033:0x7fadd128a63a [ 399.985173][ T8193] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 399.985196][ T8193] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 399.985218][ T8193] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 399.985234][ T8193] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 399.985249][ T8193] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 399.985264][ T8193] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 399.985279][ T8193] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 399.985296][ T8193] [ 400.007844][ T8190] block nbd3: shutting down sockets [ 400.209709][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 400.340354][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 400.340385][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.342404][ T8172] loop4: detected capacity change from 0 to 32766 [ 400.342489][ T6] usb 3-1: config 0 descriptor?? [ 400.607358][ T6] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 401.326779][ T6] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 401.334797][ T6] usb 3-1: USB disconnect, device number 72 00:46:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 64) 00:46:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40087602) 00:46:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x40186366, r1) 00:46:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 62) 00:46:53 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8200, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 63) [ 401.809750][ T8197] loop5: detected capacity change from 0 to 4 [ 401.815716][ T8200] loop1: detected capacity change from 0 to 360 [ 401.822219][ T8200] ERROR: Out of memory at tomoyo_realpath_from_path. 00:46:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401870c8, r1) [ 401.841109][ T8197] Dev loop5: unable to read RDB block 4 00:46:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 65) 00:46:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40101283) [ 401.841195][ T8197] loop5: unable to read partition table [ 401.841335][ T8197] loop5: partition table beyond EOD, truncated 00:46:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401870cb, r1) [ 401.841963][ T8197] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 401.858020][ T8194] block nbd3: shutting down sockets 00:46:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 64) [ 401.927247][ T8196] block nbd0: shutting down sockets [ 401.975500][ T8211] loop1: detected capacity change from 0 to 360 [ 401.997222][ T8207] block nbd3: shutting down sockets [ 402.002758][ T8214] loop5: detected capacity change from 0 to 4 [ 402.107439][ T8212] block nbd0: shutting down sockets [ 402.130414][ T6] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 402.131902][ T8220] loop1: detected capacity change from 0 to 360 [ 402.170397][ T8216] block nbd3: shutting down sockets [ 402.170987][ T2980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.171020][ T2980] Buffer I/O error on dev loop1, logical block 0, async page read [ 402.171088][ T2980] ldm_validate_partition_table(): Disk read failed. [ 402.171110][ T2980] Dev loop1: unable to read RDB block 0 [ 402.171130][ T2980] loop1: unable to read partition table [ 402.171251][ T2980] loop1: partition table beyond EOD, truncated [ 402.366746][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 402.486945][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 402.486977][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.489320][ T6] usb 3-1: config 0 descriptor?? [ 402.751247][ T6] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 403.456834][ T6] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 403.469319][ T6] usb 3-1: USB disconnect, device number 73 00:46:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40101286) 00:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 66) 00:46:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 65) 00:46:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401870cc, r1) 00:46:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:55 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8300, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 403.970367][ T8231] loop5: detected capacity change from 0 to 4 [ 403.970742][ T8230] loop1: detected capacity change from 0 to 360 00:46:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x401c5820, r1) 00:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 67) 00:46:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40101288) 00:46:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 66) [ 403.971281][ T8231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.001401][ T8224] block nbd3: shutting down sockets 00:46:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x4020940d, r1) [ 404.047275][ T8222] block nbd0: shutting down sockets [ 404.123800][ T8240] loop5: detected capacity change from 0 to 4 [ 404.128609][ T8241] loop1: detected capacity change from 0 to 360 00:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 68) 00:46:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 67) [ 404.147325][ T8235] block nbd3: shutting down sockets 00:46:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401070c9) [ 404.248246][ T8238] block nbd0: shutting down sockets 00:46:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80041284, r1) [ 404.276634][ T27] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 404.297237][ T8244] block nbd3: shutting down sockets 00:46:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 68) [ 404.305942][ T8249] loop1: detected capacity change from 0 to 360 [ 404.308146][ T8250] loop5: detected capacity change from 0 to 4 [ 404.318732][ T8250] Dev loop5: unable to read RDB block 4 [ 404.318767][ T8250] loop5: unable to read partition table [ 404.318904][ T8250] loop5: partition table beyond EOD, truncated [ 404.322384][ T8250] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 404.397293][ T8248] block nbd0: shutting down sockets [ 404.416995][ T8252] block nbd3: shutting down sockets [ 404.467274][ T8255] loop1: detected capacity change from 0 to 360 [ 404.469742][ T8255] syz-executor.1: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 404.469984][ T8255] CPU: 1 PID: 8255 Comm: syz-executor.1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 404.470010][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.470023][ T8255] Call Trace: [ 404.470029][ T8255] [ 404.470035][ T8255] dump_stack_lvl+0xcd/0x134 [ 404.470078][ T8255] warn_alloc.cold+0x9b/0x189 [ 404.470146][ T8255] ? zone_watermark_ok_safe+0x290/0x290 [ 404.470177][ T8255] ? mark_held_locks+0x9f/0xe0 [ 404.470207][ T8255] ? kfree+0x1fb/0x310 [ 404.470268][ T8255] ? kfree+0x1fb/0x310 [ 404.470292][ T8255] ? __get_vm_area_node+0x297/0x3f0 [ 404.470320][ T8255] __vmalloc_node_range+0xdff/0x13e0 [ 404.470349][ T8255] ? find_held_lock+0x2d/0x110 [ 404.470374][ T8255] ? bdev_disk_changed+0x318/0xf60 [ 404.470433][ T8255] ? vfree_atomic+0xe0/0xe0 [ 404.470458][ T8255] ? rcu_read_lock_sched_held+0x3a/0x70 [ 404.470503][ T8255] ? bdev_disk_changed+0x318/0xf60 [ 404.470527][ T8255] vzalloc+0x67/0x80 [ 404.470551][ T8255] ? bdev_disk_changed+0x318/0xf60 [ 404.470573][ T8255] bdev_disk_changed+0x318/0xf60 [ 404.470596][ T8255] ? iput.part.0+0x73/0x820 [ 404.470625][ T8255] blkdev_get_whole+0x18a/0x2d0 [ 404.470698][ T8255] blkdev_get_by_dev.part.0+0x5ec/0xb90 [ 404.470727][ T8255] ? devcgroup_check_permission+0x1ab/0x440 [ 404.470798][ T8255] blkdev_get_by_path+0x1b3/0x2e0 [ 404.470826][ T8255] ? blkdev_get_by_dev+0x80/0x80 [ 404.470852][ T8255] ? kfree+0x1e3/0x310 [ 404.470874][ T8255] mount_bdev+0x5b/0x410 [ 404.470901][ T8255] ? vfat_mount+0x40/0x40 [ 404.470955][ T8255] ? setup+0x110/0x110 [ 404.470978][ T8255] legacy_get_tree+0x105/0x220 [ 404.471026][ T8255] vfs_get_tree+0x89/0x2f0 [ 404.471052][ T8255] path_mount+0x1320/0x1fa0 [ 404.471086][ T8255] ? kmem_cache_free.part.0+0x11e/0x240 [ 404.471112][ T8255] ? putname+0xfe/0x140 [ 404.471137][ T8255] ? finish_automount+0xaf0/0xaf0 [ 404.471165][ T8255] ? putname+0xfe/0x140 [ 404.471189][ T8255] __x64_sys_mount+0x27f/0x300 [ 404.471214][ T8255] ? copy_mnt_ns+0xae0/0xae0 [ 404.471238][ T8255] ? syscall_enter_from_user_mode+0x21/0x70 [ 404.471268][ T8255] do_syscall_64+0x35/0xb0 [ 404.471297][ T8255] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 404.471328][ T8255] RIP: 0033:0x7fadd128a63a [ 404.471346][ T8255] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 404.471369][ T8255] RSP: 002b:00007fadd2333f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 404.471391][ T8255] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fadd128a63a [ 404.471408][ T8255] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007fadd2333fe0 [ 404.471424][ T8255] RBP: 00007fadd2334020 R08: 00007fadd2334020 R09: 0000000020000000 [ 404.471440][ T8255] R10: 0000000000008100 R11: 0000000000000206 R12: 0000000020000000 [ 404.471456][ T8255] R13: 0000000020000140 R14: 00007fadd2333fe0 R15: 0000000020000100 [ 404.471474][ T8255] [ 404.473863][ T8255] Mem-Info: [ 404.473871][ T8255] active_anon:596 inactive_anon:143510 isolated_anon:0 [ 404.473871][ T8255] active_file:4101 inactive_file:7929 isolated_file:0 [ 404.473871][ T8255] unevictable:768 dirty:29 writeback:0 [ 404.473871][ T8255] slab_reclaimable:20998 slab_unreclaimable:111944 [ 404.473871][ T8255] mapped:18451 shmem:3916 pagetables:846 bounce:0 [ 404.473871][ T8255] kernel_misc_reclaimable:0 [ 404.473871][ T8255] free:1282923 free_pcp:2619 free_cma:0 [ 404.473932][ T8255] Node 0 active_anon:2384kB inactive_anon:574040kB active_file:16336kB inactive_file:31716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73804kB dirty:112kB writeback:0kB shmem:14128kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:9976kB pagetables:3376kB all_unreclaimable? no [ 404.473999][ T8255] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 404.474059][ T8255] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.474135][ T8255] lowmem_reserve[]: 0 2633 2634 2634 2634 [ 404.474172][ T8255] Node 0 DMA32 free:1161932kB boost:0kB min:35572kB low:44464kB high:53356kB reserved_highatomic:0KB active_anon:2384kB inactive_anon:574040kB active_file:16336kB inactive_file:31716kB unevictable:1536kB writepending:112kB present:3129332kB managed:2702016kB mlocked:0kB bounce:0kB free_pcp:10476kB local_pcp:2428kB free_cma:0kB [ 404.474246][ T8255] lowmem_reserve[]: 0 0 1 1 1 [ 404.474280][ T8255] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.474348][ T8255] lowmem_reserve[]: 0 0 0 0 0 [ 404.474380][ T8255] Node 1 Normal free:3954400kB boost:0kB min:54316kB low:67892kB high:81468kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.474447][ T8255] lowmem_reserve[]: 0 0 0 0 0 [ 404.474480][ T8255] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.474650][ T8255] Node 0 DMA32: 7231*4kB (UME) 1222*8kB (UME) 1148*16kB (UME) 501*32kB (UME) 169*64kB (UME) 146*128kB (UME) 86*256kB (UME) 40*512kB (UM) 29*1024kB (UME) 10*2048kB (UME) 236*4096kB (UM) = 1161932kB [ 404.474815][ T8255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 404.476222][ T8255] Node 1 Normal: 118*4kB (UME) 177*8kB (UE) 116*16kB (UME) 80*32kB (UME) 53*64kB (UME) 32*128kB (U) 9*256kB (U) 8*512kB (U) 2*1024kB (ME) 2*2048kB (U) 959*4096kB (M) = 3954400kB [ 404.476398][ T8255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.476418][ T8255] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.476436][ T8255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.476887][ T8255] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.476908][ T8255] 15939 total pagecache pages [ 404.476915][ T8255] 0 pages in swap cache [ 404.476921][ T8255] Swap cache stats: add 0, delete 0, find 0/0 [ 404.476935][ T8255] Free swap = 0kB [ 404.476942][ T8255] Total swap = 0kB [ 404.476949][ T8255] 2097051 pages RAM [ 404.476955][ T8255] 0 pages HighMem/MovableOnly [ 404.476961][ T8255] 388010 pages reserved [ 404.476968][ T8255] 0 pages cma reserved [ 404.520513][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520545][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 404.520606][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520632][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 404.520680][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520703][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 404.520749][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520774][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 404.520821][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520846][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 404.520893][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520917][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 404.520961][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 404.520985][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 404.536669][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 404.654325][ T8229] loop4: detected capacity change from 0 to 32766 [ 404.659861][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 404.659892][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.663762][ T27] usb 3-1: config 0 descriptor?? [ 404.941003][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 405.666701][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 405.668583][ T27] usb 3-1: USB disconnect, device number 74 00:46:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:46:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 69) 00:46:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401070ca) 00:46:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80041285, r1) 00:46:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 69) 00:46:57 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8400, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:46:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 70) [ 406.156885][ T8262] loop5: detected capacity change from 0 to 4 [ 406.161492][ T8263] loop1: detected capacity change from 0 to 360 00:46:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401070cd) 00:46:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 70) 00:46:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80081270, r1) [ 406.217308][ T8259] block nbd3: shutting down sockets [ 406.217351][ T8257] block nbd0: shutting down sockets 00:46:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80081272, r1) [ 406.310116][ T8275] loop1: detected capacity change from 0 to 360 [ 406.326056][ T8276] loop5: detected capacity change from 0 to 4 [ 406.334750][ T8276] Dev loop5: unable to read RDB block 4 00:46:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 71) [ 406.334790][ T8276] loop5: unable to read partition table [ 406.334932][ T8276] loop5: partition table beyond EOD, truncated [ 406.337192][ T8276] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 406.348224][ T8271] block nbd3: shutting down sockets [ 406.348380][ T2980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 406.348409][ T2980] Buffer I/O error on dev loop1, logical block 0, async page read [ 406.348470][ T2980] ldm_validate_partition_table(): Disk read failed. [ 406.348490][ T2980] Dev loop1: unable to read RDB block 0 [ 406.348554][ T2980] loop1: unable to read partition table [ 406.348695][ T2980] loop1: partition table beyond EOD, truncated [ 406.376643][ T8277] block nbd0: Device being setup by another task [ 406.380911][ T8267] block nbd0: shutting down sockets [ 406.448409][ T8278] block nbd3: shutting down sockets [ 406.482447][ T8281] loop1: detected capacity change from 0 to 360 [ 406.506673][ T27] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 406.746670][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 406.779017][ T8265] loop4: detected capacity change from 0 to 32766 [ 406.866886][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 406.866919][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.869498][ T27] usb 3-1: config 0 descriptor?? [ 407.126645][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 407.836731][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 407.840201][ T27] usb 3-1: USB disconnect, device number 75 00:47:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:47:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 71) 00:47:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x40186366) 00:47:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 72) 00:47:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80081280, r1) 00:47:00 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8500, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80086301, r1) 00:47:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 72) [ 408.339886][ T8290] loop1: detected capacity change from 0 to 360 [ 408.341200][ T8288] loop5: detected capacity change from 0 to 4 [ 408.343926][ T8288] Dev loop5: unable to read RDB block 4 [ 408.343960][ T8288] loop5: unable to read partition table 00:47:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 73) 00:47:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401870c8) [ 408.344089][ T8288] loop5: partition table beyond EOD, truncated [ 408.345016][ T8288] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80086601, r1) [ 408.367453][ T8284] block nbd3: shutting down sockets [ 408.425259][ T8283] block nbd0: shutting down sockets [ 408.499942][ T8298] loop5: detected capacity change from 0 to 4 00:47:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 73) [ 408.512320][ T8298] Dev loop5: unable to read RDB block 4 [ 408.512355][ T8298] loop5: unable to read partition table [ 408.512500][ T8298] loop5: partition table beyond EOD, truncated [ 408.513345][ T8298] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 408.521697][ T8295] block nbd3: shutting down sockets [ 408.571160][ T8303] loop1: detected capacity change from 0 to 360 [ 408.635236][ T8307] loop5: detected capacity change from 0 to 4 [ 408.638385][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.638418][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 408.638729][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.638756][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 408.638813][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.638838][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 408.638887][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.638913][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 408.638961][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.638986][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 408.639034][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.639060][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 408.639108][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.639135][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 408.642870][ T8300] block nbd0: shutting down sockets [ 408.647662][ T8307] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 408.667731][ T8304] block nbd3: shutting down sockets [ 408.676743][ T3687] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 408.723801][ T5002] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.723832][ T5002] Buffer I/O error on dev loop5, logical block 0, async page read [ 408.935398][ T8287] loop4: detected capacity change from 0 to 32766 [ 408.951937][ T3687] usb 3-1: Using ep0 maxpacket: 16 [ 409.069624][ T3687] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 409.069643][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.071294][ T3687] usb 3-1: config 0 descriptor?? [ 409.326638][ T3687] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 410.246655][ T3687] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 410.252247][ T3687] usb 3-1: USB disconnect, device number 76 00:47:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:47:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 74) 00:47:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x80087601, r1) 00:47:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 74) 00:47:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401870cb) 00:47:02 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8600, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 410.731561][ T8317] loop1: detected capacity change from 0 to 360 [ 410.736312][ T8315] loop5: detected capacity change from 0 to 4 [ 410.751822][ T8315] Dev loop5: unable to read RDB block 4 [ 410.751862][ T8315] loop5: unable to read partition table [ 410.751988][ T8315] loop5: partition table beyond EOD, truncated [ 410.753399][ T8315] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0x801c581f, r1) 00:47:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 75) [ 410.806683][ T8313] block nbd3: shutting down sockets 00:47:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 75) 00:47:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401870cc) [ 410.848913][ T8311] block nbd0: shutting down sockets 00:47:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) [ 410.956877][ T8328] loop5: detected capacity change from 0 to 4 [ 410.961354][ T8329] loop1: detected capacity change from 0 to 360 [ 410.963299][ T8328] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 410.979822][ T8323] block nbd3: shutting down sockets 00:47:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x401c5820) [ 411.017605][ T5002] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.017636][ T5002] Buffer I/O error on dev loop5, logical block 0, async page read [ 411.037436][ T8326] block nbd0: shutting down sockets [ 411.046647][ T3687] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 411.046949][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.046980][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 411.144745][ T8330] block nbd3: shutting down sockets [ 411.273919][ T8316] loop4: detected capacity change from 0 to 32766 [ 411.285721][ T8334] block nbd0: Device being setup by another task [ 411.286566][ T3687] usb 3-1: Using ep0 maxpacket: 16 [ 411.292466][ T8332] block nbd0: shutting down sockets [ 411.406765][ T3687] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 411.406783][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.412743][ T3687] usb 3-1: config 0 descriptor?? [ 411.666740][ T3687] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 412.587215][ T3687] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 412.592282][ T3687] usb 3-1: USB disconnect, device number 77 00:47:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001400), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:47:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 76) 00:47:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 76) 00:47:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc0045878, r1) 00:47:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x4020940d) 00:47:04 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc0101282, r1) [ 413.070475][ T8339] loop5: detected capacity change from 0 to 4 [ 413.072066][ T8339] Dev loop5: unable to read RDB block 4 [ 413.072100][ T8339] loop5: unable to read partition table [ 413.072230][ T8339] loop5: partition table beyond EOD, truncated 00:47:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80041284) 00:47:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 77) 00:47:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 77) [ 413.072733][ T8343] loop1: detected capacity change from 0 to 360 [ 413.074212][ T8339] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 413.106928][ T8336] block nbd3: shutting down sockets [ 413.137383][ T8340] block nbd0: shutting down sockets 00:47:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc0189436, r1) 00:47:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80041285) [ 413.239376][ T8355] loop5: detected capacity change from 0 to 4 [ 413.239399][ T8356] loop1: detected capacity change from 0 to 360 [ 413.256731][ T8355] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 413.286965][ T8352] block nbd3: shutting down sockets [ 413.289560][ T8349] block nbd0: shutting down sockets [ 413.346626][ T3745] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 413.416860][ T8357] block nbd3: shutting down sockets [ 413.457214][ T8358] block nbd0: shutting down sockets [ 413.586544][ T3745] usb 3-1: Using ep0 maxpacket: 16 [ 413.653473][ T8344] loop4: detected capacity change from 0 to 32766 [ 413.706602][ T3745] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 413.706631][ T3745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.708782][ T3745] usb 3-1: config 0 descriptor?? [ 413.966635][ T3745] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 414.886612][ T3745] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 414.888462][ T3745] usb 3-1: USB disconnect, device number 78 00:47:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 78) 00:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 78) 00:47:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc020660b, r1) 00:47:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80081270) 00:47:07 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8800, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:07 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 415.378287][ T8368] loop5: detected capacity change from 0 to 4 [ 415.379401][ T8368] warn_alloc: 2 callbacks suppressed [ 415.379415][ T8368] syz-executor.5: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 00:47:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 79) 00:47:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xc0481273, r1) 00:47:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80081272) 00:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 79) [ 415.379477][ T8368] CPU: 1 PID: 8368 Comm: syz-executor.5 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 415.379501][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.379513][ T8368] Call Trace: 00:47:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x731201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 415.379519][ T8368] [ 415.379526][ T8368] dump_stack_lvl+0xcd/0x134 00:47:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 80) [ 415.379556][ T8368] warn_alloc.cold+0x9b/0x189 00:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 80) 00:47:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80081280) [ 415.379583][ T8368] ? zone_watermark_ok_safe+0x290/0x290 [ 415.379607][ T8368] ? mark_held_locks+0x9f/0xe0 [ 415.379634][ T8368] ? kfree+0x1fb/0x310 00:47:07 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x731201) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 415.379655][ T8368] ? kfree+0x1fb/0x310 [ 415.379677][ T8368] ? __get_vm_area_node+0x297/0x3f0 [ 415.379703][ T8368] __vmalloc_node_range+0xdff/0x13e0 [ 415.379730][ T8368] ? find_held_lock+0x2d/0x110 [ 415.379755][ T8368] ? bdev_disk_changed+0x318/0xf60 [ 415.379779][ T8368] ? vfree_atomic+0xe0/0xe0 00:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 81) [ 415.379804][ T8368] ? rcu_read_lock_sched_held+0x3a/0x70 [ 415.379831][ T8368] ? bdev_disk_changed+0x318/0xf60 [ 415.379851][ T8368] vzalloc+0x67/0x80 [ 415.379875][ T8368] ? bdev_disk_changed+0x318/0xf60 [ 415.379896][ T8368] bdev_disk_changed+0x318/0xf60 [ 415.379917][ T8368] ? iput.part.0+0x73/0x820 [ 415.379944][ T8368] blkdev_get_whole+0x18a/0x2d0 [ 415.379969][ T8368] blkdev_get_by_dev.part.0+0x5ec/0xb90 [ 415.379997][ T8368] ? devcgroup_check_permission+0x1ab/0x440 [ 415.380024][ T8368] blkdev_get_by_path+0x1b3/0x2e0 [ 415.380049][ T8368] ? blkdev_get_by_dev+0x80/0x80 [ 415.380072][ T8368] ? cap_capable+0x1f1/0x280 [ 415.380118][ T8368] get_tree_bdev+0xd5/0x760 [ 415.380146][ T8368] ? ext4_reconfigure+0x29c0/0x29c0 [ 415.380246][ T8368] vfs_get_tree+0x89/0x2f0 [ 415.380272][ T8368] path_mount+0x1320/0x1fa0 [ 415.380299][ T8368] ? kmem_cache_free.part.0+0x11e/0x240 [ 415.380324][ T8368] ? putname+0xfe/0x140 [ 415.380347][ T8368] ? finish_automount+0xaf0/0xaf0 [ 415.380371][ T8368] ? putname+0xfe/0x140 [ 415.380397][ T8368] __x64_sys_mount+0x27f/0x300 [ 415.380424][ T8368] ? copy_mnt_ns+0xae0/0xae0 [ 415.380448][ T8368] ? syscall_enter_from_user_mode+0x21/0x70 [ 415.380474][ T8368] do_syscall_64+0x35/0xb0 [ 415.380502][ T8368] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 415.380530][ T8368] RIP: 0033:0x7ffb3028a63a [ 415.380546][ T8369] loop1: detected capacity change from 0 to 360 [ 415.380546][ T8368] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 415.380568][ T8368] RSP: 002b:00007ffb31402f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 415.380590][ T8368] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ffb3028a63a [ 415.380605][ T8368] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffb31402fe0 [ 415.380619][ T8368] RBP: 00007ffb31403020 R08: 00007ffb31403020 R09: 0000000020000000 [ 415.380633][ T8368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 415.380645][ T8368] R13: 0000000020000100 R14: 00007ffb31402fe0 R15: 0000000020000280 [ 415.380662][ T8368] [ 415.380669][ T8368] Mem-Info: [ 415.380676][ T8368] active_anon:604 inactive_anon:133177 isolated_anon:0 [ 415.380676][ T8368] active_file:4107 inactive_file:7804 isolated_file:0 [ 415.380676][ T8368] unevictable:768 dirty:38 writeback:0 [ 415.380676][ T8368] slab_reclaimable:21014 slab_unreclaimable:110449 [ 415.380676][ T8368] mapped:18435 shmem:1620 pagetables:810 bounce:0 [ 415.380676][ T8368] kernel_misc_reclaimable:0 [ 415.380676][ T8368] free:1288800 free_pcp:8364 free_cma:0 [ 415.380736][ T8368] Node 0 active_anon:2416kB inactive_anon:532708kB active_file:16360kB inactive_file:31216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73740kB dirty:148kB writeback:0kB shmem:4944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:10004kB pagetables:3232kB all_unreclaimable? no [ 415.380796][ T8368] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 415.380852][ T8368] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.380917][ T8368] lowmem_reserve[]: 0 2633 2634 2634 2634 00:47:08 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8900, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80086301) 00:47:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x731201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (rerun: 32) 00:47:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 81) 00:47:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 82) 00:47:08 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 415.380951][ T8368] Node 0 DMA32 free:1185440kB boost:0kB min:35572kB low:44464kB high:53356kB reserved_highatomic:0KB active_anon:2416kB inactive_anon:532708kB active_file:16360kB inactive_file:31216kB unevictable:1536kB writepending:148kB present:3129332kB managed:2702016kB mlocked:0kB bounce:0kB free_pcp:33456kB local_pcp:13512kB free_cma:0kB [ 415.381019][ T8368] lowmem_reserve[]: 0 0 1 1 1 [ 415.381050][ T8368] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:47:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 415.381112][ T8368] lowmem_reserve[]: 0 0 0 0 0 [ 415.381144][ T8368] Node 1 Normal free:3954400kB boost:0kB min:54316kB low:67892kB high:81468kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:47:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 82) [ 415.381206][ T8368] lowmem_reserve[]: 0 0 0 0 0 [ 415.381244][ T8368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB 00:47:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 83) 00:47:08 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80086601) [ 415.381366][ T8368] Node 0 DMA32: 7452*4kB (UME) 1438*8kB (UME) 1482*16kB (UME) 735*32kB (UME) 257*64kB (UME) 157*128kB (UME) 90*256kB (UME) 40*512kB (UM) 29*1024kB (UME) 10*2048kB (UME) 236*4096kB (UM) = 1185440kB 00:47:08 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 415.381529][ T8368] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 00:47:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 83) [ 415.381630][ T8368] Node 1 Normal: 118*4kB (UME) 177*8kB (UE) 116*16kB (UME) 80*32kB (UME) 53*64kB (UME) 32*128kB (U) 9*256kB (U) 8*512kB (U) 2*1024kB (ME) 2*2048kB (U) 959*4096kB (M) = 3954400kB [ 415.381796][ T8368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.381815][ T8368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 415.381833][ T8368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.381851][ T8368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 415.381868][ T8368] 13499 total pagecache pages [ 415.381874][ T8368] 0 pages in swap cache [ 415.381880][ T8368] Swap cache stats: add 0, delete 0, find 0/0 [ 415.381892][ T8368] Free swap = 0kB [ 415.381898][ T8368] Total swap = 0kB [ 415.381904][ T8368] 2097051 pages RAM [ 415.381910][ T8368] 0 pages HighMem/MovableOnly [ 415.381916][ T8368] 388010 pages reserved [ 415.381922][ T8368] 0 pages cma reserved [ 415.412534][ T8368] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 415.437042][ T8362] block nbd3: shutting down sockets [ 415.463367][ T8364] block nbd0: shutting down sockets [ 415.552424][ T8375] loop1: detected capacity change from 0 to 360 [ 415.614556][ T8382] loop5: detected capacity change from 0 to 4 [ 415.618320][ T8382] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 415.640198][ T3925] blk_print_req_error: 6 callbacks suppressed [ 415.640212][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640248][ T3925] buffer_io_error: 6 callbacks suppressed [ 415.640258][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 415.640318][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640344][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 415.640394][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640420][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 415.640469][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640495][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 415.640543][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640569][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 415.640617][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640643][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 415.640692][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.640717][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 415.648704][ T8379] block nbd3: shutting down sockets [ 415.673462][ T5002] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.673493][ T5002] Buffer I/O error on dev loop5, logical block 0, async page read [ 415.677394][ T8377] block nbd0: shutting down sockets 00:47:09 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8a00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 84) 00:47:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x80087601) 00:47:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 00:47:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 84) [ 415.806987][ T8388] loop1: detected capacity change from 0 to 360 [ 415.809995][ T8390] loop5: detected capacity change from 0 to 4 [ 415.821275][ T8390] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 415.896747][ T8393] block nbd0: Device being setup by another task [ 415.897558][ T8387] block nbd0: shutting down sockets [ 416.013024][ T8397] loop5: detected capacity change from 0 to 4 [ 416.014532][ T8397] Dev loop5: unable to read RDB block 4 [ 416.014565][ T8397] loop5: unable to read partition table [ 416.014705][ T8397] loop5: partition table beyond EOD, truncated [ 416.265854][ T8372] loop2: detected capacity change from 0 to 32766 00:47:09 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8300, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 85) [ 416.607059][ T8403] loop5: detected capacity change from 0 to 4 00:47:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 85) 00:47:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x801c581f) [ 416.614018][ T8403] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 416.628499][ T8406] loop1: detected capacity change from 0 to 360 [ 416.630005][ T8406] Dev loop1: unable to read RDB block 8 00:47:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0xa, 0x4, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 416.630225][ T8406] loop1: unable to read partition table [ 416.756774][ T8410] block nbd0: Device being setup by another task 00:47:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc0045878) [ 416.758892][ T8404] block nbd0: shutting down sockets [ 416.787412][ T8409] block nbd3: shutting down sockets 00:47:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 86) [ 416.829565][ T8414] loop1: detected capacity change from 0 to 360 [ 416.892090][ T8417] loop5: detected capacity change from 0 to 4 [ 416.903502][ T8417] Dev loop5: unable to read RDB block 4 [ 416.903542][ T8417] loop5: unable to read partition table [ 416.903677][ T8417] loop5: partition table beyond EOD, truncated [ 416.907403][ T8417] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 416.987549][ T8416] block nbd0: shutting down sockets [ 417.026800][ T8421] block nbd3: Device being setup by another task [ 417.027911][ T8418] block nbd3: shutting down sockets [ 417.044737][ T8423] loop1: detected capacity change from 0 to 360 [ 417.480840][ T8408] loop4: detected capacity change from 0 to 32766 [ 417.518300][ T8425] loop2: detected capacity change from 0 to 32766 [ 417.658937][ T8434] loop1: detected capacity change from 0 to 360 [ 417.662065][ T8433] loop5: detected capacity change from 0 to 4 [ 417.664381][ T8433] Dev loop5: unable to read RDB block 4 [ 417.664415][ T8433] loop5: unable to read partition table [ 417.664546][ T8433] loop5: partition table beyond EOD, truncated [ 417.757417][ T8427] block nbd0: shutting down sockets [ 417.793407][ T8436] block nbd3: Device being setup by another task [ 417.829861][ T8436] block nbd3: shutting down sockets [ 417.888459][ T8444] loop5: detected capacity change from 0 to 4 [ 417.891005][ T8445] loop1: detected capacity change from 0 to 360 [ 417.904862][ T8444] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 417.907641][ T8442] block nbd0: shutting down sockets [ 417.964380][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.964453][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 418.087646][ T8455] loop5: detected capacity change from 0 to 4 [ 418.088984][ T8452] block nbd3: Device being setup by another task [ 418.094687][ T8455] Dev loop5: unable to read RDB block 4 [ 418.094726][ T8455] loop5: unable to read partition table [ 418.094846][ T8455] loop5: partition table beyond EOD, truncated [ 418.107677][ T8450] block nbd0: shutting down sockets [ 418.189624][ T8446] block nbd3: shutting down sockets [ 418.669886][ T8460] loop2: detected capacity change from 0 to 32766 [ 418.674653][ T8457] loop4: detected capacity change from 0 to 32766 00:47:10 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8b00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 86) 00:47:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc0045878) 00:47:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 87) 00:47:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0xa, 0x4, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0xa, 0x4, 0x4, &(0x7f0000000080)) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 00:47:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000018c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 418.849873][ T8468] loop1: detected capacity change from 0 to 360 [ 418.866302][ T8469] loop5: detected capacity change from 0 to 4 00:47:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 87) [ 418.890878][ T8469] Dev loop5: unable to read RDB block 4 00:47:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 88) 00:47:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc0101282) [ 418.890918][ T8469] loop5: unable to read partition table [ 418.891049][ T8469] loop5: partition table beyond EOD, truncated [ 418.957578][ T8466] block nbd0: shutting down sockets 00:47:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) socketpair(0xa, 0x4, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 419.040779][ T8477] block nbd3: shutting down sockets 00:47:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 89) 00:47:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc0189436) [ 419.053788][ T8480] loop1: detected capacity change from 0 to 360 [ 419.061655][ T8482] loop5: detected capacity change from 0 to 4 [ 419.062662][ T8480] loop1: unable to read partition table [ 419.107582][ T8482] Dev loop5: unable to read RDB block 4 [ 419.107616][ T8482] loop5: unable to read partition table [ 419.107760][ T8482] loop5: partition table beyond EOD, truncated [ 419.156691][ T8488] block nbd0: Device being setup by another task [ 419.157529][ T8481] block nbd0: shutting down sockets [ 419.226776][ T8489] block nbd3: Device being setup by another task [ 419.283245][ T8494] loop5: detected capacity change from 0 to 4 [ 419.290572][ T8494] Dev loop5: unable to read RDB block 4 [ 419.290613][ T8494] loop5: unable to read partition table [ 419.290758][ T8494] loop5: partition table beyond EOD, truncated [ 419.303137][ T8494] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 419.348364][ T8491] block nbd0: shutting down sockets [ 419.360194][ T8484] block nbd3: shutting down sockets [ 419.646596][ T27] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 419.724230][ T8496] loop4: detected capacity change from 0 to 32766 00:47:11 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8c00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 88) 00:47:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 90) 00:47:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc020660b) [ 419.853265][ T8505] loop5: detected capacity change from 0 to 4 [ 419.857898][ T8506] loop1: detected capacity change from 0 to 360 [ 419.861035][ T8505] Dev loop5: unable to read RDB block 4 [ 419.861074][ T8505] loop5: unable to read partition table [ 419.861193][ T8505] loop5: partition table beyond EOD, truncated [ 419.865402][ T8505] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 419.936693][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 419.936935][ T8500] block nbd3: shutting down sockets [ 419.937782][ T8502] block nbd0: shutting down sockets [ 420.067444][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 420.067474][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.071555][ T27] usb 3-1: config 0 descriptor?? [ 420.272743][ T8509] loop4: detected capacity change from 0 to 32766 [ 420.336665][ T27] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 421.050129][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 421.053664][ T27] usb 3-1: USB disconnect, device number 79 00:47:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab06, r1) 00:47:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 91) 00:47:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 89) 00:47:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xc0481273) 00:47:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:13 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8d00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 421.537697][ T8512] loop5: detected capacity change from 0 to 4 [ 421.565239][ T8515] loop1: detected capacity change from 0 to 360 [ 421.565650][ T8512] Dev loop5: unable to read RDB block 4 00:47:13 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 421.565687][ T8512] loop5: unable to read partition table [ 421.565817][ T8512] loop5: partition table beyond EOD, truncated [ 421.575681][ T8512] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 421.620562][ T8522] block nbd2: shutting down sockets 00:47:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 92) 00:47:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 90) [ 421.636507][ T8519] block nbd3: Device being setup by another task [ 421.642196][ T8516] block nbd3: shutting down sockets [ 421.667356][ T8514] block nbd0: shutting down sockets 00:47:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r1, 0x0, r2, 0x0, 0xaa, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3ef039000000000000", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}]) write(r5, &(0x7f0000000100)="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", 0xfe) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) [ 421.758702][ T8531] loop1: detected capacity change from 0 to 360 [ 421.791818][ T8536] loop5: detected capacity change from 0 to 4 [ 421.794252][ T8536] Dev loop5: unable to read RDB block 4 00:47:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 93) [ 421.794285][ T8536] loop5: unable to read partition table [ 421.794482][ T8536] loop5: partition table beyond EOD, truncated 00:47:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 91) 00:47:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 421.896629][ T8539] block nbd0: Device being setup by another task [ 421.896704][ T8535] block nbd0: shutting down sockets 00:47:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 94) 00:47:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 92) [ 421.966703][ T8545] loop5: detected capacity change from 0 to 4 [ 421.969911][ T8545] Dev loop5: unable to read RDB block 4 [ 421.970021][ T8545] loop5: unable to read partition table [ 421.970157][ T8545] loop5: partition table beyond EOD, truncated [ 421.971851][ T8546] loop1: detected capacity change from 0 to 360 [ 421.972141][ T8545] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 422.016637][ T8548] block nbd3: Device being setup by another task [ 422.089729][ T8550] block nbd0: Device being setup by another task [ 422.089803][ T8551] block nbd0: shutting down sockets [ 422.109339][ T8554] loop1: detected capacity change from 0 to 360 [ 422.120205][ T8555] loop5: detected capacity change from 0 to 4 [ 422.123668][ T8554] loop1: unable to read partition table [ 422.126193][ T8555] Dev loop5: unable to read RDB block 4 [ 422.126231][ T8555] loop5: unable to read partition table [ 422.126366][ T8555] loop5: partition table beyond EOD, truncated [ 422.139499][ T8555] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 422.408792][ T8521] loop4: detected capacity change from 0 to 32766 00:47:14 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8e00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 422.696234][ T8540] block nbd3: shutting down sockets 00:47:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r1, 0x0, r2, 0x0, 0xaa, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3ef039000000000000", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}]) write(r5, &(0x7f0000000100)="cd436947af4da83c6a8edbac4599f7e1800b00ecc6735a9020818a0a6390e7d67ab7035b714b5db0baeecc2e4b4a9acc6d6142c8b199cd99a7ea11645c57099f0cdd0a8d57ade72330ccec85fbfb28924bdb143b4862248dd56433e41eb8cb24569dcc098f37d4889e9e010aed7b9e700ef6740381ba3bbb762dc930c1c8f5496e86428998118ac42dfc0c2937f4a62aaa2754cb98ebce4c355633925a136eba21d023e914646396059c657489f464ae26296d8158a718cfae3d0b852fa2d458698ac6cbc47fc45ed220f32f50dbd8b374fef94c4e55fc1737c0bbd5b53873e7d309d1a11a60aaa7166578892e7ae956df58c749eae562c8f04184c40b72", 0xfe) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 00:47:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 93) 00:47:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 95) 00:47:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r1, 0x0, r2, 0x0, 0xaa, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3ef039000000000000", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}]) (async) write(r5, &(0x7f0000000100)="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", 0xfe) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) [ 422.933754][ T8560] loop1: detected capacity change from 0 to 360 [ 422.947242][ T8560] Dev loop1: unable to read RDB block 8 [ 422.951285][ T8560] loop1: unable to read partition table 00:47:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 94) [ 422.957241][ T8564] loop5: detected capacity change from 0 to 4 00:47:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r1, 0x0, r2, 0x0, 0xaa, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) io_setup(0x5ff, &(0x7f0000000040)=0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3ef039000000000000", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}]) (async) write(r5, &(0x7f0000000100)="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", 0xfe) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) 00:47:14 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040) sendto$isdn(r0, &(0x7f0000000100)={0x4, 0x101, "a993a1d79b47a77f5e53945717a52a75aa98bb3dd9b5d1e9cd80f9c73538f3a292e9175634a5"}, 0x2e, 0x20048050, &(0x7f0000000140)={0x22, 0x8, 0x8, 0xad, 0x9}, 0x6) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 96) [ 422.958880][ T8564] Dev loop5: unable to read RDB block 4 [ 422.958916][ T8564] loop5: unable to read partition table [ 422.959033][ T8564] loop5: partition table beyond EOD, truncated 00:47:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 95) [ 423.020007][ T8557] loop4: detected capacity change from 0 to 32766 [ 423.027879][ T8566] block nbd0: shutting down sockets [ 423.116036][ T8579] loop1: detected capacity change from 0 to 360 00:47:14 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8f00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 97) [ 423.143336][ T8583] loop5: detected capacity change from 0 to 4 [ 423.148600][ T8583] Dev loop5: unable to read RDB block 4 [ 423.148634][ T8583] loop5: unable to read partition table [ 423.148769][ T8583] loop5: partition table beyond EOD, truncated [ 423.150569][ T8583] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 423.186695][ T8584] block nbd2: Device being setup by another task [ 423.216791][ T8582] block nbd0: shutting down sockets [ 423.247495][ T8585] block nbd3: shutting down sockets [ 423.273114][ T8587] loop1: detected capacity change from 0 to 360 [ 423.300864][ T8589] loop5: detected capacity change from 0 to 4 [ 423.302691][ T8589] Dev loop5: unable to read RDB block 4 [ 423.302724][ T8589] loop5: unable to read partition table [ 423.302852][ T8589] loop5: partition table beyond EOD, truncated [ 423.303353][ T8589] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 423.326787][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.326819][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 423.326876][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.326902][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 423.326952][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.326979][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 423.327030][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.327055][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 423.327104][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.327130][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 423.327180][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.327206][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 423.327256][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.327281][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 423.769733][ T8591] loop4: detected capacity change from 0 to 32766 00:47:15 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8e00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:15 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040) sendto$isdn(r0, &(0x7f0000000100)={0x4, 0x101, "a993a1d79b47a77f5e53945717a52a75aa98bb3dd9b5d1e9cd80f9c73538f3a292e9175634a5"}, 0x2e, 0x20048050, &(0x7f0000000140)={0x22, 0x8, 0x8, 0xad, 0x9}, 0x6) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/nd', 0x2a0000, 0x104) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x1, 0x400) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/65, 0x41}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 00:47:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 96) 00:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 98) [ 423.859653][ T8571] block nbd2: shutting down sockets 00:47:15 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9000, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 99) [ 423.907440][ T8597] loop5: detected capacity change from 0 to 4 [ 423.909013][ T8597] Dev loop5: unable to read RDB block 4 [ 423.909047][ T8597] loop5: unable to read partition table [ 423.909170][ T8597] loop5: partition table beyond EOD, truncated 00:47:15 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040) sendto$isdn(r0, &(0x7f0000000100)={0x4, 0x101, "a993a1d79b47a77f5e53945717a52a75aa98bb3dd9b5d1e9cd80f9c73538f3a292e9175634a5"}, 0x2e, 0x20048050, &(0x7f0000000140)={0x22, 0x8, 0x8, 0xad, 0x9}, 0x6) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040) (async) sendto$isdn(r0, &(0x7f0000000100)={0x4, 0x101, "a993a1d79b47a77f5e53945717a52a75aa98bb3dd9b5d1e9cd80f9c73538f3a292e9175634a5"}, 0x2e, 0x20048050, &(0x7f0000000140)={0x22, 0x8, 0x8, 0xad, 0x9}, 0x6) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) 00:47:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 97) 00:47:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x3) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/nd', 0x2a0000, 0x104) ioctl$NBD_DO_IT(r2, 0xab03) (async) r3 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x1, 0x400) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/65, 0x41}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 423.909705][ T8597] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 423.914220][ T8602] loop1: detected capacity change from 0 to 360 [ 423.978788][ T8599] block nbd0: Device being setup by another task [ 423.978864][ T8598] block nbd0: shutting down sockets 00:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) (fail_nth: 100) [ 424.008156][ T8594] block nbd3: shutting down sockets [ 424.104612][ T8611] loop5: detected capacity change from 0 to 4 00:47:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) (fail_nth: 98) [ 424.113159][ T8611] Dev loop5: unable to read RDB block 4 [ 424.113196][ T8611] loop5: unable to read partition table [ 424.113317][ T8611] loop5: partition table beyond EOD, truncated [ 424.137783][ T8617] loop1: detected capacity change from 0 to 360 [ 424.187654][ T8615] block nbd3: Device being setup by another task [ 424.191147][ T8607] block nbd0: shutting down sockets [ 424.209765][ T8615] block nbd3: shutting down sockets [ 424.284177][ T8627] loop5: detected capacity change from 0 to 4 [ 424.285836][ T8627] Dev loop5: unable to read RDB block 4 [ 424.285944][ T8627] loop5: unable to read partition table [ 424.286074][ T8627] loop5: partition table beyond EOD, truncated [ 424.286902][ T8627] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 424.327956][ T8629] loop1: detected capacity change from 0 to 360 [ 424.745058][ T8601] loop2: detected capacity change from 0 to 32766 00:47:16 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8f00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/nd', 0x2a0000, 0x104) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x1, 0x400) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/65, 0x41}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x3) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/nd', 0x2a0000, 0x104) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) syz_open_dev$admmidi(&(0x7f00000000c0), 0x1, 0x400) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/65, 0x41}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 00:47:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10403) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x408242, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) dup3(r2, r0, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 424.837643][ T8631] loop4: detected capacity change from 0 to 32766 [ 424.911489][ T8638] loop1: detected capacity change from 0 to 360 [ 424.912378][ T8639] loop5: detected capacity change from 0 to 4 00:47:16 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9100, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10403) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x408242, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) dup3(r2, r0, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 424.913898][ T8639] Dev loop5: unable to read RDB block 4 [ 424.913932][ T8639] loop5: unable to read partition table 00:47:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 424.914061][ T8639] loop5: partition table beyond EOD, truncated [ 424.928162][ T8639] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) fgetxattr(r2, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/96, 0x60) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 425.019976][ T8642] block nbd3: Device being setup by another task [ 425.064571][ T8641] block nbd3: shutting down sockets 00:47:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10403) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x408242, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async, rerun: 64) dup3(r2, r0, 0x0) (async, rerun: 64) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 425.144097][ T8653] loop1: detected capacity change from 0 to 360 [ 425.155901][ T8657] loop5: detected capacity change from 0 to 4 00:47:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 425.175292][ T8657] Dev loop5: unable to read RDB block 4 [ 425.175326][ T8657] loop5: unable to read partition table [ 425.175453][ T8657] loop5: partition table beyond EOD, truncated [ 425.175966][ T8657] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 425.247019][ T8655] block nbd3: shutting down sockets [ 425.310205][ T8667] loop5: detected capacity change from 0 to 4 [ 425.347045][ T8667] Dev loop5: unable to read RDB block 4 [ 425.347087][ T8667] loop5: unable to read partition table [ 425.347226][ T8667] loop5: partition table beyond EOD, truncated [ 425.349324][ T8667] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 425.835871][ T8665] loop2: detected capacity change from 0 to 32766 [ 425.869903][ T8669] loop4: detected capacity change from 0 to 32766 00:47:17 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8d00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) fgetxattr(r2, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/96, 0x60) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80006, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000480)={[{@bsdgroups}, {@sb={'sb', 0x3d, 0x80000001}}, {@usrquota}, {@noload}, {@mblk_io_submit}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x27) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r0, 0xffffffffffffffff, 0x0, 0xe000) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x101280, 0x14) r2 = socket(0x10, 0x803, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x800c0, 0x40) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f00000002c0)={0x6, 0x9}) r3 = socket(0x10, 0x0, 0xfffffffd) unshare(0x40400) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x7fffffff) fcntl$dupfd(r4, 0x0, r3) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000880)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) connect(r2, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc0) 00:47:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:17 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9200, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) fgetxattr(r2, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/96, 0x60) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 426.004721][ T8676] loop0: detected capacity change from 0 to 1024 [ 426.005876][ T8676] EXT4-fs: Ignoring removed mblk_io_submit option 00:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:17 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80006, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000480)={[{@bsdgroups}, {@sb={'sb', 0x3d, 0x80000001}}, {@usrquota}, {@noload}, {@mblk_io_submit}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x27) (async) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0xe000) (async) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x101280, 0x14) (async) r2 = socket(0x10, 0x803, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x800c0, 0x40) (async) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) setrlimit(0x7, &(0x7f00000002c0)={0x6, 0x9}) (async) r3 = socket(0x10, 0x0, 0xfffffffd) (async) unshare(0x40400) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x7fffffff) fcntl$dupfd(r4, 0x0, r3) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000880)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) connect(r2, 0x0, 0x0) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc0) 00:47:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 426.012150][ T8679] loop1: detected capacity change from 0 to 360 [ 426.021205][ T8678] loop5: detected capacity change from 0 to 4 [ 426.033704][ T8678] Dev loop5: unable to read RDB block 4 [ 426.033742][ T8678] loop5: unable to read partition table [ 426.033907][ T8678] loop5: partition table beyond EOD, truncated [ 426.037267][ T8676] EXT4-fs (loop0): unable to read superblock [ 426.047389][ T8678] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 426.223097][ T8692] loop1: detected capacity change from 0 to 360 [ 426.227762][ T8691] loop0: detected capacity change from 0 to 1024 [ 426.265692][ T8696] loop5: detected capacity change from 0 to 4 [ 426.274350][ T8696] Dev loop5: unable to read RDB block 4 [ 426.274388][ T8696] loop5: unable to read partition table [ 426.274521][ T8696] loop5: partition table beyond EOD, truncated [ 426.275045][ T8696] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 426.424961][ T8701] loop5: detected capacity change from 0 to 4 [ 426.436096][ T8703] loop1: detected capacity change from 0 to 360 [ 426.436676][ T8701] Dev loop5: unable to read RDB block 4 [ 426.436710][ T8701] loop5: unable to read partition table [ 426.436840][ T8701] loop5: partition table beyond EOD, truncated [ 426.444276][ T8701] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 427.078125][ T8706] loop4: detected capacity change from 0 to 32766 [ 427.084211][ T8704] loop2: detected capacity change from 0 to 32766 00:47:18 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9200, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:18 executing program 0: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x202000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80006, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000480)={[{@bsdgroups}, {@sb={'sb', 0x3d, 0x80000001}}, {@usrquota}, {@noload}, {@mblk_io_submit}]}) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x27) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, 0xffffffffffffffff, 0x0, 0xe000) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x101280, 0x14) (async) r2 = socket(0x10, 0x803, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x800c0, 0x40) (async) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) setrlimit(0x7, &(0x7f00000002c0)={0x6, 0x9}) (async) r3 = socket(0x10, 0x0, 0xfffffffd) (async) unshare(0x40400) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x7fffffff) fcntl$dupfd(r4, 0x0, r3) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/22, 0x16}], 0x8, &(0x7f0000000880)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) connect(r2, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xc0) 00:47:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="620af8ff0c250021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f050000008ed8a25312a2e2c49e8020a69644a2f57ba32e8cf1cc1a100a9af698393aa0f3881f9c240456c35199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546020677b0c5077da80fb982c1eea484a415b76966118b64f751a0f70241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec28b48b45ef413f634eb763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364141215106bf04f658333719acd97cfa107d40224edc5465a932b77e74e80220d42bc6099ad2300000080006ef6c1ff0900000000000000c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b15867926602d94591c926abfb076719237c8d0e60b0eea24492a660583eecdb039ed3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a9b630200a04d5bb924cfe5f3185418d60532af9c4d2ec7c3272095e63c80aff9fa740b5b7632f32030910800000000000000a2a790d62c6faec2fed44da4928b3014ab2f70344e16cb9a6298060d6b2ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa47b7da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c0200000000000000000000000000030000000000000000000000a3aabacd5149f09ba585a4b2d02edc3e28dd271c896249ed85b980680b6c294c8320002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac00000000be83bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bffa901000000000000002abbba7fa725f38400be7c1f001b2cd317902f19e385be9c48dcbcf729433282830689da6b53b263339871429d120000003341bf4a00fcffffffffffffffe09fec2271fe01589646efd1cf870cd7bbf2d6775faadd36c711b02366fde4a5942973c4f38fcc918757f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b08249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c00000080000000002a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb0100000031efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b4142b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c366e3a06fb99e0aa7f23a054b0060477e005cbf6b1844ade2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335407acecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3e90e5c708ce65cd6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffeaac70bc94776a8525b86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998a0de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a409000000000000008485b3b8a8c9aa3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f841e2a75f8aa5fd37c33d86d44107c4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191eab6687ae26e9e0cda2c9e3a0a95e9571bf38ae1981c4238ecaee6f26d55c9e6bed5f2234539675cd0a6881bd1517a8250df98674152f94e32409e2d466483c17a65fc85fa3bce109b60000000000000000009cee560cb4c23d3a8d6550058dfaf622502aae9482aaacd503d876327283dd39adeac895822fada37f32544c74d06fa13a2326671b728c022d39f1b7bf90b258daa4714f11b9349a1bfe16460000000000000000d8263c92777303c86adc75ad2339d9cf6fc9683148432fb25e7922da48e61bba99087bfc9461c9d7669f63402d3b89c4140815713e90020000000000000000c086867e01eaa5ee892c51d5705794db23c67ebb7f477235952a4df51a1b610e5072ebcd9cfe6759bd99d5b3af171d8830b1fc9e4c7e3b914b2455fdc927a4c77c1390bdc862a34165d23b4d8da44917163630922c5f0661b9abdd00f796819a6de45fbc673a63a5714e2b8e8d41cfb091cf1ed294573187182ef521df682704d0fc3177bcf9ce28462176326a32a6273a24d8ba731c0506cdde0a61f03d91f8b94df32af08c4a530b8e5d390b1f23270c7fe30d30a732d2b928d44160548536bfb0288ba49fc020ea23db58025f25f58fc04924ef372573687b6ff84ce1a94629141bbc73db6c9a2fadc4e67aa1e9b8f518fe680375217173973692aa38a7c2ee5e608f81eca2f483245b7a6f458c57d078d34ccf2cce89331708dd0f27fb72920758d25ddec3b76c834d51a241273fcd87bcdbdb80297d57bd9956ce4b39a6d5636bf5b8067cff8b3d58888a07267168f2233e8cb67219c4cdaa37628419b3c1ac78ba41e86d4131795d4480bbf6f608c1eae68d266d2243328f71fddd06c4460cf01f3223b3a35e1c0e94ebd01c036b7aed3d973f8cdaf71ed66aa3fbf465ca80e9a42d9e1c691ed460d9dcf0332415b20dbf603edcc179edff40697505d81cefa29827f1a88538d2651defda85297edee5de935f35751e5b153302257ff02c17565b8a7fe1ff0ecf67f02ad339359d949a1ccde085dd6a0bc617cb7c120cccb3569961c903df4a89696c2bef90384f5d02bacd97c9b7da34c20f5f612941602128bad282cb7e310f01a76c119e141da4101c3c155564e189cb1ae139b1cd5b8c2fa2fd28d82670608d8a6045ee596c11ebeedb046a07d97531ae739c9fab35750450c1822d006609b59490c443ca743d22b1d4d7683207cf730713f36f7677d180413c9b7cd74d8eaf077a3e0c974aad3bbdba96f420eab7ee206f3af02390e95865165d27e607583882a78d64920cf1fb6c8ac84f8d508b749947d66d82c7131da00d1094a4b450799100edbd108543c2c127a31fae7aa1dbef8dafd2a077b3b12b6c53636d8db948b678f6c4c8af673e46cbd83ed14fa88b4d499243c08b06c0756e36ec7d0eac4fa920852f1e4d56910e95626357a53ebb08a1a0c698b10ba08312e4fffb000000000000000000000001fc7ed1965b46dd83aebb366ff343028526d2d9e246bc84ea40053b0158d17af426c085449137885e9c3c5af851e8ea49956b1b03a78822d5f09b97042320cc33995073c1c76de6832697f20b3ec13164fac4cfbb37526120d6515a72bbfe6ad3cc8248fa010d6f480c8c785a7e4e0070fe357840f3f7c01b7a9ce57436d4e38b88877616b07ecd5a82065a47905ec9f315e0eab65f1151b6d7e257a50cdb128930ea6f36e6a5eaebd741744fe3334e28b0691bd74bcccdd9770d5f2d225fddd43e639006fead16c7a91c230781ebff827276ee3eed21ab210d9d7d0a550c0d95ddf8910604341fb14841d00fb1a473ad86b50da8a029a512609fc6e94b1b2cf08cc333fdcca8bee3bcc1b0807fef755f8fea7f21169cc5235364f37d8a0f4c87ead3ba8ed0431143a3ab8da5d92d0000f3e62a2ddfacf205c8ce56630507e1b3c226e026eef78080cc243921e04d9dee9cdcbb7aa15e3b55993c87ac32fce6aca14450cfaed078fb83996546485bd3a1884b5e0d3028c2562fe22609238caa1116fb7fa53319f43739762e6d6e85fa8c0383053f8422de24288e17171203e628c236cfc9deed6de72f2c47a3ec0282d793554d88eedcde43a807fffb4c04a517daa57b405c9ff9472e6d6a10892a60a4156d8d545c777ff655db6309d5a930b0d7439f7d54ec90ae73ac07917c635fe60f442fd836b984b724c28a036e227d7483b203bb3808204a5b0895f0d174a8c838438440271c05aea61820ace71ac7664e655f0537e96dab4f33eaadc4bdcd0e0d365fbe798e841e47ba36996561f7ce7898d21ef59ca7463eba231a8875465dc6e00de772d901b42c08c5dee765fc51504100e23af70e001257329cc7e3a4e49090ef5d40366ca049642a04e4acabce9665d5952af490d8cae721cdf2bcdb96785ed66c7b6a70ad484bcdad679955a2358ad32f1d8a6ade4b899b06e3f0f50f8a836a651a7bde2fba89b33ecb08b112d0b5542eb189d530735bc1c29b82"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_misc(r2, &(0x7f0000001200)={'syz0', "b68aacd13fdcb257889e20acaadd7365181af3f8d2ea0596e2dc061c627ca8de4481005144352d21b7dcd46ae22be2cbb501b6a8c8e27ba31ab9da1be71517420a083b588cd2a8fbbbfb15243697fd37c9bc5071280d"}, 0x5a) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)=""/208) 00:47:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:18 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9300, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 427.286217][ T8711] loop0: detected capacity change from 0 to 1024 [ 427.292799][ T8717] loop1: detected capacity change from 0 to 360 [ 427.310426][ T8714] loop5: detected capacity change from 0 to 4 00:47:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 427.312176][ T8711] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.315021][ T8714] Dev loop5: unable to read RDB block 4 [ 427.315054][ T8714] loop5: unable to read partition table [ 427.315179][ T8714] loop5: partition table beyond EOD, truncated 00:47:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) write$binfmt_misc(r2, &(0x7f0000001200)={'syz0', "b68aacd13fdcb257889e20acaadd7365181af3f8d2ea0596e2dc061c627ca8de4481005144352d21b7dcd46ae22be2cbb501b6a8c8e27ba31ab9da1be71517420a083b588cd2a8fbbbfb15243697fd37c9bc5071280d"}, 0x5a) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)=""/208) [ 427.316201][ T8714] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 427.325136][ T8711] EXT4-fs (loop0): unable to read superblock 00:47:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 427.461684][ T8724] loop5: detected capacity change from 0 to 4 [ 427.474117][ T8724] Dev loop5: unable to read RDB block 4 [ 427.474157][ T8724] loop5: unable to read partition table [ 427.474285][ T8724] loop5: partition table beyond EOD, truncated [ 427.474820][ T8724] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 427.499943][ T8725] loop1: detected capacity change from 0 to 360 [ 427.638645][ T8734] loop5: detected capacity change from 0 to 4 [ 427.648180][ T8734] Dev loop5: unable to read RDB block 4 [ 427.648213][ T8734] loop5: unable to read partition table [ 427.648341][ T8734] loop5: partition table beyond EOD, truncated [ 427.648910][ T8734] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 427.665154][ T8738] loop1: detected capacity change from 0 to 360 [ 427.796738][ T8739] block nbd0: shutting down sockets [ 427.858118][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.858150][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 427.858212][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.858238][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 427.858287][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.858313][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 428.251229][ T8737] loop4: detected capacity change from 0 to 32766 [ 428.286767][ T8741] loop2: detected capacity change from 0 to 32766 00:47:20 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9200, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_misc(r2, &(0x7f0000001200)={'syz0', "b68aacd13fdcb257889e20acaadd7365181af3f8d2ea0596e2dc061c627ca8de4481005144352d21b7dcd46ae22be2cbb501b6a8c8e27ba31ab9da1be71517420a083b588cd2a8fbbbfb15243697fd37c9bc5071280d"}, 0x5a) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)=""/208) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x70000000, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) write$binfmt_misc(r2, &(0x7f0000001200)={'syz0', "b68aacd13fdcb257889e20acaadd7365181af3f8d2ea0596e2dc061c627ca8de4481005144352d21b7dcd46ae22be2cbb501b6a8c8e27ba31ab9da1be71517420a083b588cd2a8fbbbfb15243697fd37c9bc5071280d"}, 0x5a) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)=""/208) (async) 00:47:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:20 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9400, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 428.482944][ T8749] loop1: detected capacity change from 0 to 360 [ 428.503794][ T8753] loop5: detected capacity change from 0 to 4 [ 428.514920][ T8753] Dev loop5: unable to read RDB block 4 [ 428.514954][ T8753] loop5: unable to read partition table 00:47:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xa, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 428.515225][ T8753] loop5: partition table beyond EOD, truncated [ 428.517157][ T8753] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) [ 428.656945][ T8751] block nbd0: Device being setup by another task [ 428.665353][ T8751] block nbd0: shutting down sockets [ 428.666777][ T8764] loop1: detected capacity change from 0 to 360 00:47:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xb, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 428.688150][ T8766] loop5: detected capacity change from 0 to 4 [ 428.703222][ T8766] Dev loop5: unable to read RDB block 4 [ 428.703259][ T8766] loop5: unable to read partition table [ 428.703388][ T8766] loop5: partition table beyond EOD, truncated [ 428.708514][ T8766] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 428.808302][ T8768] loop1: detected capacity change from 0 to 360 [ 428.861826][ T8777] loop5: detected capacity change from 0 to 4 [ 428.868939][ T8777] Dev loop5: unable to read RDB block 4 [ 428.868979][ T8777] loop5: unable to read partition table [ 428.869105][ T8777] loop5: partition table beyond EOD, truncated [ 428.873957][ T8777] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 428.890934][ T8770] block nbd0: shutting down sockets [ 428.908798][ T3925] blk_print_req_error: 4 callbacks suppressed [ 428.908814][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.908841][ T3925] buffer_io_error: 4 callbacks suppressed [ 428.908852][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 428.927052][ T8771] block nbd3: shutting down sockets [ 429.378286][ T8780] loop2: detected capacity change from 0 to 32766 [ 429.417768][ T8776] loop4: detected capacity change from 0 to 32766 00:47:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xc, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:21 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9100, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 429.518276][ T8785] loop1: detected capacity change from 0 to 360 [ 429.522896][ T8787] loop5: detected capacity change from 0 to 4 00:47:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) [ 429.545644][ T8787] Dev loop5: unable to read RDB block 4 00:47:21 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9500, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:21 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="100000000600"/16, 0x10}]) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4000) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x2, 0x3, "b826083d4e78fe8fa3a3df31c72848b24c1aef2085b104943e12bb6fdaa4be98d61c8b72753f9c4beb0e9d404eb91cc941b7419d38d3a38720b57fc52e6e220544c9f104cf9b2c2a6e74b7a719a7f63cdb82b60af4aaf328cf"}, 0x69) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) mq_open(&(0x7f0000000240)='&\x00', 0x40, 0x10, &(0x7f0000000280)={0x200, 0x1, 0x2}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = inotify_add_watch(r3, &(0x7f0000000200)='\x00', 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) inotify_rm_watch(r4, r5) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) 00:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xd, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 429.545680][ T8787] loop5: unable to read partition table [ 429.545817][ T8787] loop5: partition table beyond EOD, truncated [ 429.556697][ T8787] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 429.718951][ T8796] loop1: detected capacity change from 0 to 360 [ 429.721382][ T8797] loop5: detected capacity change from 0 to 4 [ 429.737039][ T8797] Dev loop5: unable to read RDB block 4 [ 429.737079][ T8797] loop5: unable to read partition table 00:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 429.737203][ T8797] loop5: partition table beyond EOD, truncated 00:47:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xe, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10081, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) close_range(r2, r3, 0x2) [ 429.743865][ T8797] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 429.786705][ T8800] block nbd3: Device being setup by another task [ 429.806770][ T8800] block nbd3: shutting down sockets [ 429.880570][ T8804] loop5: detected capacity change from 0 to 4 [ 429.888931][ T8804] Dev loop5: unable to read RDB block 4 00:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xf, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 429.888964][ T8804] loop5: unable to read partition table [ 429.889090][ T8804] loop5: partition table beyond EOD, truncated [ 429.897339][ T8804] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 429.918758][ T8808] loop1: detected capacity change from 0 to 360 [ 429.948885][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.948917][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.978482][ T8805] block nbd3: shutting down sockets [ 430.064348][ T8816] loop1: detected capacity change from 0 to 360 [ 430.080797][ T8817] loop5: detected capacity change from 0 to 4 [ 430.083764][ T2980] Dev loop5: unable to read RDB block 4 [ 430.083796][ T2980] loop5: unable to read partition table [ 430.083921][ T2980] loop5: partition table beyond EOD, truncated [ 430.085724][ T8817] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 430.550610][ T8810] loop2: detected capacity change from 0 to 32766 [ 430.612814][ T8812] loop4: detected capacity change from 0 to 32766 00:47:22 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9100, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2100) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10081, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) close_range(r2, r3, 0x2) 00:47:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x26, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:22 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9600, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x10, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="100000000600"/16, 0x10}]) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4000) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x2, 0x3, "b826083d4e78fe8fa3a3df31c72848b24c1aef2085b104943e12bb6fdaa4be98d61c8b72753f9c4beb0e9d404eb91cc941b7419d38d3a38720b57fc52e6e220544c9f104cf9b2c2a6e74b7a719a7f63cdb82b60af4aaf328cf"}, 0x69) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) mq_open(&(0x7f0000000240)='&\x00', 0x40, 0x10, &(0x7f0000000280)={0x200, 0x1, 0x2}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = inotify_add_watch(r3, &(0x7f0000000200)='\x00', 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) inotify_rm_watch(r4, r5) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="100000000600"/16, 0x10}]) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4000) (async) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x2, 0x3, "b826083d4e78fe8fa3a3df31c72848b24c1aef2085b104943e12bb6fdaa4be98d61c8b72753f9c4beb0e9d404eb91cc941b7419d38d3a38720b57fc52e6e220544c9f104cf9b2c2a6e74b7a719a7f63cdb82b60af4aaf328cf"}, 0x69) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) (async) mq_open(&(0x7f0000000240)='&\x00', 0x40, 0x10, &(0x7f0000000280)={0x200, 0x1, 0x2}) (async) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) inotify_add_watch(r3, &(0x7f0000000200)='\x00', 0x6) (async) pipe(&(0x7f00000000c0)) (async) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) (async) inotify_rm_watch(r4, r5) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) (async) [ 430.764660][ T8822] loop5: detected capacity change from 0 to 4 [ 430.767450][ T8822] Dev loop5: unable to read RDB block 4 [ 430.767483][ T8822] loop5: unable to read partition table [ 430.767600][ T8822] loop5: partition table beyond EOD, truncated 00:47:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10081, 0x20) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) close_range(r2, r3, 0x2) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2100) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10081, 0x20) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) (async) close_range(r2, r3, 0x2) (async) 00:47:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x11, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2a, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 430.802371][ T8822] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 430.818202][ T8829] loop1: detected capacity change from 0 to 360 00:47:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="100000000600"/16, 0x10}]) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x4000) write$nbd(r1, &(0x7f0000000080)={0x67446698, 0x0, 0x0, 0x2, 0x3, "b826083d4e78fe8fa3a3df31c72848b24c1aef2085b104943e12bb6fdaa4be98d61c8b72753f9c4beb0e9d404eb91cc941b7419d38d3a38720b57fc52e6e220544c9f104cf9b2c2a6e74b7a719a7f63cdb82b60af4aaf328cf"}, 0x69) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) mq_open(&(0x7f0000000240)='&\x00', 0x40, 0x10, &(0x7f0000000280)={0x200, 0x1, 0x2}) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = inotify_add_watch(r3, &(0x7f0000000200)='\x00', 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) (async) inotify_rm_watch(r4, r5) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) [ 430.968334][ T8841] loop5: detected capacity change from 0 to 4 [ 430.971017][ T8841] Dev loop5: unable to read RDB block 4 [ 430.971051][ T8841] loop5: unable to read partition table 00:47:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2d, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x46, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 430.971187][ T8841] loop5: partition table beyond EOD, truncated [ 430.973207][ T8841] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 430.974800][ T8842] loop1: detected capacity change from 0 to 360 [ 431.034792][ T5002] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.034823][ T5002] Buffer I/O error on dev loop1, logical block 1, async page read [ 431.034886][ T5002] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.034912][ T5002] Buffer I/O error on dev loop1, logical block 2, async page read [ 431.034962][ T5002] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.034988][ T5002] Buffer I/O error on dev loop1, logical block 3, async page read [ 431.035037][ T5002] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.035063][ T5002] Buffer I/O error on dev loop1, logical block 4, async page read [ 431.035111][ T5002] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.035136][ T5002] Buffer I/O error on dev loop1, logical block 5, async page read [ 431.035183][ T5002] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.035208][ T5002] Buffer I/O error on dev loop1, logical block 6, async page read [ 431.035255][ T5002] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.035281][ T5002] Buffer I/O error on dev loop1, logical block 7, async page read [ 431.035861][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 431.035892][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 431.056825][ T8844] block nbd3: Device being setup by another task [ 431.106411][ T8844] block nbd3: shutting down sockets [ 431.169723][ T8853] loop1: detected capacity change from 0 to 360 [ 431.176399][ T8855] loop5: detected capacity change from 0 to 4 [ 431.184750][ T8855] Dev loop5: unable to read RDB block 4 [ 431.184783][ T8855] loop5: unable to read partition table [ 431.186129][ T8855] loop5: partition table beyond EOD, truncated [ 431.196640][ T8855] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 431.706084][ T8863] loop4: detected capacity change from 0 to 32766 [ 431.783429][ T8861] loop2: detected capacity change from 0 to 32766 00:47:23 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x48, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x400001) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 00:47:23 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 431.964749][ T8871] loop1: detected capacity change from 0 to 360 [ 431.984068][ T8873] loop5: detected capacity change from 0 to 4 [ 431.996002][ T8873] Dev loop5: unable to read RDB block 4 00:47:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4c, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 431.996040][ T8873] loop5: unable to read partition table [ 431.996169][ T8873] loop5: partition table beyond EOD, truncated 00:47:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) 00:47:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x400001) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 00:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 432.011339][ T8873] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 432.047191][ T8867] block nbd3: shutting down sockets [ 432.047874][ T8870] block nbd0: shutting down sockets [ 432.150775][ T8876] loop1: detected capacity change from 0 to 360 [ 432.196711][ T8883] loop5: detected capacity change from 0 to 4 00:47:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x55, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x400001) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) (async) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 432.235788][ T8883] Dev loop5: unable to read RDB block 4 [ 432.235827][ T8883] loop5: unable to read partition table [ 432.235952][ T8883] loop5: partition table beyond EOD, truncated [ 432.240655][ T8883] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 432.260698][ T8884] block nbd0: shutting down sockets [ 432.292625][ T8888] block nbd3: Device being setup by another task [ 432.299983][ T8888] block nbd3: shutting down sockets [ 432.354781][ T8898] loop1: detected capacity change from 0 to 360 [ 432.390192][ T8895] block nbd0: Device being setup by another task [ 432.396219][ T8895] block nbd0: shutting down sockets [ 432.793367][ T8882] loop4: detected capacity change from 0 to 32766 [ 432.845899][ T8900] loop2: detected capacity change from 0 to 32766 00:47:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x55, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x68, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x1000, 0x8, 0x1fda, 0x1f, 0x9, 0x0, 0xffffffff, [0x3, 0x8]}}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:24 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7400, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:24 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9800, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 433.019655][ T8904] loop1: detected capacity change from 0 to 360 [ 433.025807][ T8908] loop5: detected capacity change from 0 to 4 00:47:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 433.040552][ T8908] Dev loop5: unable to read RDB block 4 00:47:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6c, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x1000, 0x8, 0x1fda, 0x1f, 0x9, 0x0, 0xffffffff, [0x3, 0x8]}}) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 433.040585][ T8908] loop5: unable to read partition table [ 433.040714][ T8908] loop5: partition table beyond EOD, truncated [ 433.045903][ T8908] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 433.126826][ T8910] block nbd3: Device being setup by another task 00:47:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x74, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 433.127545][ T8905] block nbd3: shutting down sockets 00:47:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x68, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 433.137059][ T8911] block nbd0: Device being setup by another task [ 433.138170][ T8909] block nbd0: shutting down sockets [ 433.212558][ T8915] loop5: detected capacity change from 0 to 4 00:47:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x1000, 0x8, 0x1fda, 0x1f, 0x9, 0x0, 0xffffffff, [0x3, 0x8]}}) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 433.214880][ T8917] loop1: detected capacity change from 0 to 360 [ 433.221956][ T8915] Dev loop5: unable to read RDB block 4 00:47:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x7a, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 433.221989][ T8915] loop5: unable to read partition table [ 433.222127][ T8915] loop5: partition table beyond EOD, truncated [ 433.223087][ T8915] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 433.336719][ T8918] block nbd0: Device being setup by another task 00:47:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 433.337426][ T8918] block nbd0: shutting down sockets [ 433.366918][ T8921] block nbd3: Device being setup by another task [ 433.389866][ T8925] loop5: detected capacity change from 0 to 4 [ 433.393024][ T8924] loop1: detected capacity change from 0 to 360 [ 433.408160][ T8925] Dev loop5: unable to read RDB block 4 [ 433.408199][ T8925] loop5: unable to read partition table [ 433.408333][ T8925] loop5: partition table beyond EOD, truncated [ 433.414659][ T8925] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 433.532254][ T8938] loop5: detected capacity change from 0 to 4 [ 433.546752][ T8938] Dev loop5: unable to read RDB block 4 [ 433.546795][ T8938] loop5: unable to read partition table [ 433.546949][ T8938] loop5: partition table beyond EOD, truncated [ 433.550799][ T8938] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 433.567807][ T8941] loop1: detected capacity change from 0 to 360 [ 433.697673][ T8944] block nbd0: shutting down sockets [ 434.060882][ T8932] loop2: detected capacity change from 0 to 32766 [ 434.083130][ T8916] block nbd3: shutting down sockets [ 434.137839][ T8928] loop4: detected capacity change from 0 to 32766 00:47:25 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4202, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:26 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9900, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x90, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) 00:47:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) [ 434.315249][ T8949] loop1: detected capacity change from 0 to 360 [ 434.343000][ T8950] loop5: detected capacity change from 0 to 4 [ 434.344618][ T8950] Dev loop5: unable to read RDB block 4 [ 434.344652][ T8950] loop5: unable to read partition table [ 434.344778][ T8950] loop5: partition table beyond EOD, truncated [ 434.345388][ T8950] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xfe, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 434.387254][ T8952] block nbd0: shutting down sockets [ 434.459510][ T8953] block nbd3: Device being setup by another task [ 434.487119][ T8962] block nbd3: shutting down sockets 00:47:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r2, 0x0, r3, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x6) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:47:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x160, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 434.502761][ T8965] loop1: detected capacity change from 0 to 360 [ 434.555485][ T8967] loop5: detected capacity change from 0 to 4 [ 434.562865][ T8967] Dev loop5: unable to read RDB block 4 00:47:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 434.562898][ T8967] loop5: unable to read partition table [ 434.563039][ T8967] loop5: partition table beyond EOD, truncated [ 434.594603][ T8967] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 434.628910][ T3925] blk_print_req_error: 7 callbacks suppressed [ 434.628926][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.628964][ T3925] buffer_io_error: 7 callbacks suppressed [ 434.628975][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 434.665399][ T8971] block nbd3: shutting down sockets [ 434.693071][ T8983] loop1: detected capacity change from 0 to 360 [ 434.718011][ T8982] loop5: detected capacity change from 0 to 4 [ 434.727265][ T8982] Dev loop5: unable to read RDB block 4 [ 434.727297][ T8982] loop5: unable to read partition table [ 434.727429][ T8982] loop5: partition table beyond EOD, truncated [ 434.728090][ T8982] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 434.777526][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.777556][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 435.183269][ T8961] loop2: detected capacity change from 0 to 32766 [ 435.279275][ T8985] loop4: detected capacity change from 0 to 32766 00:47:27 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r4, &(0x7f0000000280)="e1a37c9698ddcd87b946a6b1f659c5e016fd1294597d3cb2812de717a4", 0x1d, 0x40000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2b9, @local}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x83, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="79ffffffb2e2ae7944dc8248b13b26782a31561eaed009725b67cb6951d78f657c52fa3677ca88a5c60592ba95adb9755283860466fb7d932a96dc612c11b59dea24a4e1b69dad821516fd85a2900bb406584bee8263c76233d539c7b35a3682b19214c29ca027ac0ebb0bd5ea702ccf07650e7d6e24add66adb021763ed133d3d924b8caad71725466319707b7f4f"], &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x2}, &(0x7f0000000100)=0x8) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:27 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9a00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:27 executing program 3: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5a02144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="940000000b060102000000000000000005000004800008800c00078008000b400000003f1c0007801800148014000240fc0000000000000000004300000000010c0007800500030004000000100007800c00148008000140ac1414aa100007800900120073797a31000000000c00078008000b4000000006100007800c001b4000000000000000030c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x4004115}, 0x10044) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) r5 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x400080, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3) fremovexattr(r2, &(0x7f0000000300)=@random={'btrfs.', '^#l[]\x00'}) 00:47:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x167, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:27 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9800, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 435.457115][ T8992] loop1: detected capacity change from 0 to 360 [ 435.480600][ T8994] loop5: detected capacity change from 0 to 4 00:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x180, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 435.485746][ T8994] Dev loop5: unable to read RDB block 4 00:47:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x168, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 435.485779][ T8994] loop5: unable to read partition table [ 435.486008][ T8994] loop5: partition table beyond EOD, truncated [ 435.487281][ T8994] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 435.524876][ T28] audit: type=1400 audit(1655254047.215:344): avc: denied { shutdown } for pid=8987 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:47:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x300, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x500, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 435.586601][ T8995] block nbd0: shutting down sockets [ 435.672804][ T9000] loop1: detected capacity change from 0 to 360 [ 435.735314][ T9004] loop5: detected capacity change from 0 to 4 [ 435.762061][ T9004] Dev loop5: unable to read RDB block 4 [ 435.762096][ T9004] loop5: unable to read partition table [ 435.762225][ T9004] loop5: partition table beyond EOD, truncated [ 435.766635][ T9004] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 435.823607][ T9009] loop1: detected capacity change from 0 to 360 [ 435.923588][ T9012] loop5: detected capacity change from 0 to 4 [ 435.948571][ T9012] Dev loop5: unable to read RDB block 4 [ 435.948611][ T9012] loop5: unable to read partition table [ 435.948736][ T9012] loop5: partition table beyond EOD, truncated [ 435.951557][ T9012] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 436.040544][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x410, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 436.040575][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 436.066779][ T9016] loop1: detected capacity change from 0 to 360 [ 436.178320][ T9018] loop5: detected capacity change from 0 to 4 [ 436.215108][ T9018] Dev loop5: unable to read RDB block 4 [ 436.215148][ T9018] loop5: unable to read partition table [ 436.215278][ T9018] loop5: partition table beyond EOD, truncated [ 436.228200][ T9018] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendto$inet6(r4, &(0x7f0000000280)="e1a37c9698ddcd87b946a6b1f659c5e016fd1294597d3cb2812de717a4", 0x1d, 0x40000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2b9, @local}, 0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x83, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="79ffffffb2e2ae7944dc8248b13b26782a31561eaed009725b67cb6951d78f657c52fa3677ca88a5c60592ba95adb9755283860466fb7d932a96dc612c11b59dea24a4e1b69dad821516fd85a2900bb406584bee8263c76233d539c7b35a3682b19214c29ca027ac0ebb0bd5ea702ccf07650e7d6e24add66adb021763ed133d3d924b8caad71725466319707b7f4f"], &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x80000001}, 0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x2}, &(0x7f0000000100)=0x8) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 436.307688][ T8989] block nbd3: shutting down sockets [ 436.532528][ T9003] loop4: detected capacity change from 0 to 32766 [ 436.586898][ T9006] loop2: detected capacity change from 0 to 32766 00:47:28 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9b00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x600, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r4, &(0x7f0000000280)="e1a37c9698ddcd87b946a6b1f659c5e016fd1294597d3cb2812de717a4", 0x1d, 0x40000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2b9, @local}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x83, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="79ffffffb2e2ae7944dc8248b13b26782a31561eaed009725b67cb6951d78f657c52fa3677ca88a5c60592ba95adb9755283860466fb7d932a96dc612c11b59dea24a4e1b69dad821516fd85a2900bb406584bee8263c76233d539c7b35a3682b19214c29ca027ac0ebb0bd5ea702ccf07650e7d6e24add66adb021763ed133d3d924b8caad71725466319707b7f4f"], &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x2}, &(0x7f0000000100)=0x8) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:28 executing program 3: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5a02144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="940000000b060102000000000000000005000004800008800c00078008000b400000003f1c0007801800148014000240fc0000000000000000004300000000010c0007800500030004000000100007800c00148008000140ac1414aa100007800900120073797a31000000000c00078008000b4000000006100007800c001b4000000000000000030c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x4004115}, 0x10044) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) (async) r5 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x400080, 0x8) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3) (async) fremovexattr(r2, &(0x7f0000000300)=@random={'btrfs.', '^#l[]\x00'}) 00:47:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(r4, &(0x7f0000000280)="e1a37c9698ddcd87b946a6b1f659c5e016fd1294597d3cb2812de717a4", 0x1d, 0x40000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2b9, @local}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x83, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="79ffffffb2e2ae7944dc8248b13b26782a31561eaed009725b67cb6951d78f657c52fa3677ca88a5c60592ba95adb9755283860466fb7d932a96dc612c11b59dea24a4e1b69dad821516fd85a2900bb406584bee8263c76233d539c7b35a3682b19214c29ca027ac0ebb0bd5ea702ccf07650e7d6e24add66adb021763ed133d3d924b8caad71725466319707b7f4f"], &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x2}, &(0x7f0000000100)=0x8) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x105000) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181042) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendto$inet6(r4, &(0x7f0000000280)="e1a37c9698ddcd87b946a6b1f659c5e016fd1294597d3cb2812de717a4", 0x1d, 0x40000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2b9, @local}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x83, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="79ffffffb2e2ae7944dc8248b13b26782a31561eaed009725b67cb6951d78f657c52fa3677ca88a5c60592ba95adb9755283860466fb7d932a96dc612c11b59dea24a4e1b69dad821516fd85a2900bb406584bee8263c76233d539c7b35a3682b19214c29ca027ac0ebb0bd5ea702ccf07650e7d6e24add66adb021763ed133d3d924b8caad71725466319707b7f4f"], &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x80000001}, 0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x2}, &(0x7f0000000100)=0x8) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) [ 436.702975][ T9026] loop1: detected capacity change from 0 to 360 [ 436.707926][ T9027] loop5: detected capacity change from 0 to 4 [ 436.721842][ T9027] Dev loop5: unable to read RDB block 4 [ 436.721880][ T9027] loop5: unable to read partition table [ 436.722008][ T9027] loop5: partition table beyond EOD, truncated 00:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 436.724041][ T9027] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:28 executing program 3: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5a02144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="940000000b060102000000000000000005000004800008800c00078008000b400000003f1c0007801800148014000240fc0000000000000000004300000000010c0007800500030004000000100007800c00148008000140ac1414aa100007800900120073797a31000000000c00078008000b4000000006100007800c001b4000000000000000030c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x4004115}, 0x10044) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) r5 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x400080, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3) fremovexattr(r2, &(0x7f0000000300)=@random={'btrfs.', '^#l[]\x00'}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5a02144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="940000000b060102000000000000000005000004800008800c00078008000b400000003f1c0007801800148014000240fc0000000000000000004300000000010c0007800500030004000000100007800c00148008000140ac1414aa100007800900120073797a31000000000c00078008000b4000000006100007800c001b4000000000000000030c000780060004404e200000"], 0x94}, 0x1, 0x0, 0x0, 0x4004115}, 0x10044) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) (async) openat(r2, &(0x7f0000000340)='./file0\x00', 0x400080, 0x8) (async) pipe(&(0x7f00000000c0)) (async) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) (async) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) (async) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3) (async) fremovexattr(r2, &(0x7f0000000300)=@random={'btrfs.', '^#l[]\x00'}) (async) [ 436.886701][ T9038] block nbd0: shutting down sockets 00:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 436.887478][ T9036] loop5: detected capacity change from 0 to 4 00:47:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3f) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x900, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 436.895176][ T9036] Dev loop5: unable to read RDB block 4 [ 436.895215][ T9036] loop5: unable to read partition table [ 436.895349][ T9036] loop5: partition table beyond EOD, truncated [ 436.896887][ T9036] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 436.931559][ T9039] loop1: detected capacity change from 0 to 360 [ 437.029648][ T9053] loop5: detected capacity change from 0 to 4 [ 437.041140][ T3926] Dev loop5: unable to read RDB block 4 [ 437.041178][ T3926] loop5: unable to read partition table [ 437.041317][ T3926] loop5: partition table beyond EOD, truncated [ 437.043155][ T9053] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 437.046907][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.046937][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 437.046996][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047022][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 437.047073][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047099][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 437.047149][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047175][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 437.047223][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047250][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 437.047298][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047323][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 437.047372][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.047398][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 437.174895][ T9073] loop1: detected capacity change from 0 to 360 [ 437.216375][ T9071] block nbd3: shutting down sockets [ 437.247194][ T9070] block nbd0: shutting down sockets [ 437.461835][ T9079] block nbd2: shutting down sockets [ 437.681342][ T9075] loop4: detected capacity change from 0 to 32766 00:47:29 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9c00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xa00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 437.843157][ T9082] loop5: detected capacity change from 0 to 4 [ 437.852549][ T9083] loop1: detected capacity change from 0 to 360 [ 437.869108][ T9082] Dev loop5: unable to read RDB block 4 [ 437.869149][ T9082] loop5: unable to read partition table [ 437.869301][ T9082] loop5: partition table beyond EOD, truncated [ 437.869993][ T9082] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:29 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9b00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:29 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x8) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x482d40, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000140)={0x2, &(0x7f0000000100)="17d4"}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = dup3(r0, r2, 0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000180)=0x10001) 00:47:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3f) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xb00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:29 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3f) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3f) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) [ 438.010915][ T9091] loop5: detected capacity change from 0 to 5 [ 438.020703][ T9091] Dev loop5: unable to read RDB block 5 [ 438.020738][ T9091] loop5: unable to read partition table [ 438.020862][ T9091] loop5: partition table beyond EOD, truncated 00:47:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xba3, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 438.026173][ T9091] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 438.031939][ T9093] loop1: detected capacity change from 0 to 360 [ 438.056746][ T9088] block nbd0: shutting down sockets [ 438.105437][ T9086] block nbd3: shutting down sockets 00:47:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xba3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 438.164570][ T9103] loop5: detected capacity change from 0 to 5 [ 438.189889][ T9103] Dev loop5: unable to read RDB block 5 [ 438.189925][ T9103] loop5: unable to read partition table [ 438.190054][ T9103] loop5: partition table beyond EOD, truncated [ 438.190585][ T9103] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 438.202282][ T9105] loop1: detected capacity change from 0 to 360 [ 438.227004][ T9100] block nbd0: shutting down sockets [ 438.331696][ T9115] loop5: detected capacity change from 0 to 5 [ 438.337139][ T9115] Dev loop5: unable to read RDB block 5 [ 438.337176][ T9115] loop5: unable to read partition table [ 438.337304][ T9115] loop5: partition table beyond EOD, truncated [ 438.337892][ T9115] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 438.736015][ T9102] loop4: detected capacity change from 0 to 32766 [ 438.778870][ T9094] loop2: detected capacity change from 0 to 32766 00:47:30 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9d00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xc00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r6, 0x0, r8, 0x0, 0xaa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0x1, 0x80, 0x101, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x10000, 0xaea}}) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x8, 0x8, 0x3, 0x5, {{0x1d, 0x4, 0x3, 0x2b, 0x74, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xbb, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7a}, {@broadcast, 0x1}, {@broadcast, 0xd753}, {@empty, 0x10001}]}, @rr={0x7, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x2e, [@rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x2, [{@broadcast}]}, @end]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) r12 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) [ 438.899766][ T9119] loop1: detected capacity change from 0 to 360 00:47:30 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9b00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:30 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x8) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x482d40, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000140)={0x2, &(0x7f0000000100)="17d4"}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r4 = dup3(r0, r2, 0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$NBD_DO_IT(r5, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async, rerun: 32) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000180)=0x10001) (rerun: 32) 00:47:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xc77, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc77, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 438.997419][ T9123] loop5: detected capacity change from 0 to 6 [ 439.001516][ T9123] Dev loop5: unable to read RDB block 6 [ 439.001549][ T9123] loop5: unable to read partition table [ 439.001688][ T9123] loop5: partition table beyond EOD, truncated 00:47:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xd00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 439.002200][ T9123] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 439.020449][ T9126] block nbd0: shutting down sockets 00:47:30 executing program 3: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x8) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x482d40, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000140)={0x2, &(0x7f0000000100)="17d4"}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r4 = dup3(r0, r2, 0x80000) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_DO_IT(r5, 0xab03) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000180)=0x10001) [ 439.076380][ T9129] loop1: detected capacity change from 0 to 360 00:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 439.224453][ T9134] loop5: detected capacity change from 0 to 6 [ 439.233674][ T9134] Dev loop5: unable to read RDB block 6 [ 439.233708][ T9134] loop5: unable to read partition table 00:47:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xe00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 439.233832][ T9134] loop5: partition table beyond EOD, truncated [ 439.234754][ T9134] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 439.246837][ T9139] loop1: detected capacity change from 0 to 360 [ 439.338214][ T9140] block nbd3: Device being setup by another task [ 439.344567][ T9140] block nbd3: shutting down sockets [ 439.401690][ T9145] loop5: detected capacity change from 0 to 6 [ 439.422950][ T9145] Dev loop5: unable to read RDB block 6 [ 439.422985][ T9145] loop5: unable to read partition table [ 439.423136][ T9145] loop5: partition table beyond EOD, truncated [ 439.430424][ T9145] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 439.455178][ T9148] loop1: detected capacity change from 0 to 360 [ 439.658198][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.916839][ T9150] loop2: detected capacity change from 0 to 32766 [ 440.037464][ T9138] loop4: detected capacity change from 0 to 32766 00:47:31 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9e00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x120) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r4, 0x0, r5, 0x0, 0xaa, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000880)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/194, 0xc2}], 0xa, &(0x7f00000007c0)=""/189, 0xbd}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x571001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r6, 0x0, r7, 0x0, 0xaa, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) 00:47:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xf00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r6, 0x0, r8, 0x0, 0xaa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0x1, 0x80, 0x101, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x10000, 0xaea}}) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x8, 0x8, 0x3, 0x5, {{0x1d, 0x4, 0x3, 0x2b, 0x74, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xbb, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7a}, {@broadcast, 0x1}, {@broadcast, 0xd753}, {@empty, 0x10001}]}, @rr={0x7, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x2e, [@rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x2, [{@broadcast}]}, @end]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) r12 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r6, 0x0, r8, 0x0, 0xaa, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0x1, 0x80, 0x101, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x10000, 0xaea}}) (async) ioctl$NBD_DO_IT(r7, 0xab03) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40044) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x8, 0x8, 0x3, 0x5, {{0x1d, 0x4, 0x3, 0x2b, 0x74, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xbb, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7a}, {@broadcast, 0x1}, {@broadcast, 0xd753}, {@empty, 0x10001}]}, @rr={0x7, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x2e, [@rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x2, [{@broadcast}]}, @end]}}}}}) (async) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) (async) 00:47:31 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4202, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 440.261210][ T9159] loop1: detected capacity change from 0 to 360 [ 440.262410][ T9154] loop5: detected capacity change from 0 to 7 00:47:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1020, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 440.282762][ T9154] Dev loop5: unable to read RDB block 7 [ 440.282796][ T9154] loop5: unable to read partition table [ 440.283004][ T9154] loop5: partition table beyond EOD, truncated [ 440.286086][ T9154] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 440.421484][ T9164] block nbd0: shutting down sockets 00:47:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000011c0)={'veth0\x00', 0x0}) splice(r6, 0x0, r8, 0x0, 0xaa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0x1, 0x80, 0x101, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x10000, 0xaea}}) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x8, 0x8, 0x3, 0x5, {{0x1d, 0x4, 0x3, 0x2b, 0x74, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xbb, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7a}, {@broadcast, 0x1}, {@broadcast, 0xd753}, {@empty, 0x10001}]}, @rr={0x7, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x2e, [@rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x2, [{@broadcast}]}, @end]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) r12 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r3, 0x0, r4, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r6, 0x0, r8, 0x0, 0xaa, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0x1, 0x80, 0x101, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x10000, 0xaea}}) (async) ioctl$NBD_DO_IT(r7, 0xab03) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x40044) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x8, 0x8, 0x3, 0x5, {{0x1d, 0x4, 0x3, 0x2b, 0x74, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x24, 0xbb, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7a}, {@broadcast, 0x1}, {@broadcast, 0xd753}, {@empty, 0x10001}]}, @rr={0x7, 0x13, 0xc8, [@dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0x2e, [@rand_addr=0x64010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x4}, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x2, [{@broadcast}]}, @end]}}}}}) (async) sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getnexthop={0x4c, 0x6a, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) (async) [ 440.449972][ T9169] loop5: detected capacity change from 0 to 8 00:47:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1100, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 440.475154][ T9171] loop1: detected capacity change from 0 to 360 [ 440.480219][ T9169] Dev loop5: unable to read RDB block 8 [ 440.480259][ T9169] loop5: unable to read partition table [ 440.480400][ T9169] loop5: partition table beyond EOD, truncated 00:47:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 440.485284][ T9169] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 440.523900][ T5002] blk_print_req_error: 25 callbacks suppressed [ 440.523915][ T5002] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.523943][ T5002] buffer_io_error: 25 callbacks suppressed [ 440.523955][ T5002] Buffer I/O error on dev loop1, logical block 1, async page read [ 440.524014][ T5002] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524040][ T5002] Buffer I/O error on dev loop1, logical block 2, async page read [ 440.524090][ T5002] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524116][ T5002] Buffer I/O error on dev loop1, logical block 3, async page read [ 440.524165][ T5002] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524191][ T5002] Buffer I/O error on dev loop1, logical block 4, async page read [ 440.524240][ T5002] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524265][ T5002] Buffer I/O error on dev loop1, logical block 5, async page read [ 440.524313][ T5002] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524339][ T5002] Buffer I/O error on dev loop1, logical block 6, async page read [ 440.524395][ T5002] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.524421][ T5002] Buffer I/O error on dev loop1, logical block 7, async page read [ 440.528660][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.528689][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 440.528745][ T3925] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.528770][ T3925] Buffer I/O error on dev loop5, logical block 2, async page read [ 440.528820][ T3925] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.528845][ T3925] Buffer I/O error on dev loop5, logical block 3, async page read [ 440.675084][ T9179] loop1: detected capacity change from 0 to 360 [ 440.687380][ T9180] loop5: detected capacity change from 0 to 8 [ 440.691786][ T9180] Dev loop5: unable to read RDB block 8 [ 440.691818][ T9180] loop5: unable to read partition table [ 440.691959][ T9180] loop5: partition table beyond EOD, truncated [ 440.704509][ T9180] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 440.729626][ T9182] block nbd0: shutting down sockets [ 440.838855][ T9198] loop1: detected capacity change from 0 to 360 [ 441.440965][ T9183] loop4: detected capacity change from 0 to 32766 00:47:33 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9f00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1100, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x1) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x181102, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 00:47:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x120) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r4, 0x0, r5, 0x0, 0xaa, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000880)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/194, 0xc2}], 0xa, &(0x7f00000007c0)=""/189, 0xbd}, 0x2000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x571001, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r6, 0x0, r7, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) 00:47:33 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x84, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) [ 441.612292][ T9209] loop1: detected capacity change from 0 to 360 [ 441.617870][ T9203] loop5: detected capacity change from 0 to 8 [ 441.620085][ T9203] Dev loop5: unable to read RDB block 8 [ 441.620117][ T9203] loop5: unable to read partition table [ 441.620236][ T9203] loop5: partition table beyond EOD, truncated [ 441.623563][ T9203] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1f00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2010, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x120) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r4, 0x0, r5, 0x0, 0xaa, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000880)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/194, 0xc2}], 0xa, &(0x7f00000007c0)=""/189, 0xbd}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x571001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) splice(r6, 0x0, r7, 0x0, 0xaa, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x120) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r4, 0x0, r5, 0x0, 0xaa, 0x0) (async) recvmsg$can_bcm(r4, &(0x7f0000000880)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/194, 0xc2}], 0xa, &(0x7f00000007c0)=""/189, 0xbd}, 0x2000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x571001, 0x0) (async) pipe(&(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000011c0)={'veth0\x00'}) (async) splice(r6, 0x0, r7, 0x0, 0xaa, 0x0) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) (async) 00:47:33 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x1) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x181102, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 441.727352][ T9214] block nbd0: Device being setup by another task [ 441.730062][ T28] audit: type=1400 audit(1655254053.425:345): avc: denied { read write } for pid=9208 comm="syz-executor.0" name="btrfs-control" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 00:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 441.730746][ T28] audit: type=1400 audit(1655254053.425:346): avc: denied { open } for pid=9208 comm="syz-executor.0" path="/dev/btrfs-control" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 00:47:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2d00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 441.730960][ T28] audit: type=1400 audit(1655254053.425:347): avc: denied { ioctl } for pid=9208 comm="syz-executor.0" path="/dev/btrfs-control" dev="devtmpfs" ino=1114 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 441.731229][ T9210] block nbd0: shutting down sockets [ 441.792362][ T9219] loop1: detected capacity change from 0 to 360 [ 441.804745][ T9220] loop5: detected capacity change from 0 to 15 [ 441.839526][ T9220] Dev loop5: unable to read RDB block 15 [ 441.839604][ T9220] loop5: unable to read partition table [ 441.839816][ T9220] loop5: partition table beyond EOD, truncated [ 441.844811][ T9220] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 441.926714][ T9224] block nbd0: Device being setup by another task [ 441.933054][ T9224] block nbd0: shutting down sockets [ 441.984605][ T9236] loop5: detected capacity change from 0 to 16 [ 441.989450][ T9236] loop5: unable to read partition table [ 441.989584][ T9236] loop5: partition table beyond EOD, truncated [ 441.990559][ T9236] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 442.028838][ T9238] loop1: detected capacity change from 0 to 360 [ 442.375680][ T9212] loop2: detected capacity change from 0 to 32766 [ 442.488244][ T9235] loop4: detected capacity change from 0 to 32766 00:47:34 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa000, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DO_IT(r3, 0xab03) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = dup2(r2, r5) io_setup(0x5ff, &(0x7f0000000040)=0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="100000000600"/16, 0x10}]) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="6ca889fe523f1ba0dddf17f5522d1c0490ca3a98fa149a2802765c86b5bf8fe34d5983d1d1b7f7e30ccff20c0f608ff24c438bd7314c34140862bcce29d8e0dc7a8c271ae0156d54c68778643d843e83560fbdab7e40c196ff8fae31d7e48932566134c5e2cd4792025b6b684ff9a46a2b2dba006ed122d5e1d948ad04989ef3d6e1f6e44feba0879f46aafead6dc874aa6c84c1c8ac42155deefe2c10ba93e584e3b60fe55296c041c30a71e4ca4e6de4f2c47ebcf72f95308ed668d6875a7f23481f9117053f2f5515fedbff82494cb0352122e3544d6018c1679331e0f98994e0d3b3948e2cc4c1", 0xe9, 0x7, 0x0, 0x1, r6}]) close(r5) mknodat$null(r3, &(0x7f0000000380)='./file0\x00', 0x20, 0x103) 00:47:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x1) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x181102, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x1) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x181102, 0x0) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) (async) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) (async) 00:47:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x1) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x181102, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 442.675289][ T9245] loop5: detected capacity change from 0 to 16 [ 442.685693][ T9247] loop1: detected capacity change from 0 to 360 [ 442.699746][ T9245] loop5: unable to read partition table 00:47:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2600, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 442.699894][ T9245] loop5: partition table beyond EOD, truncated [ 442.700909][ T9245] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$NBD_DO_IT(r3, 0xab03) (async) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) r6 = dup2(r2, r5) (async, rerun: 32) io_setup(0x5ff, &(0x7f0000000040)=0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="100000000600"/16, 0x10}]) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="6ca889fe523f1ba0dddf17f5522d1c0490ca3a98fa149a2802765c86b5bf8fe34d5983d1d1b7f7e30ccff20c0f608ff24c438bd7314c34140862bcce29d8e0dc7a8c271ae0156d54c68778643d843e83560fbdab7e40c196ff8fae31d7e48932566134c5e2cd4792025b6b684ff9a46a2b2dba006ed122d5e1d948ad04989ef3d6e1f6e44feba0879f46aafead6dc874aa6c84c1c8ac42155deefe2c10ba93e584e3b60fe55296c041c30a71e4ca4e6de4f2c47ebcf72f95308ed668d6875a7f23481f9117053f2f5515fedbff82494cb0352122e3544d6018c1679331e0f98994e0d3b3948e2cc4c1", 0xe9, 0x7, 0x0, 0x1, r6}]) (async) close(r5) (async) mknodat$null(r3, &(0x7f0000000380)='./file0\x00', 0x20, 0x103) [ 442.757667][ T9243] block nbd0: shutting down sockets 00:47:34 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9e00, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 442.799566][ T9240] block nbd3: shutting down sockets [ 442.801952][ T9249] block nbd2: shutting down sockets 00:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2a00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 442.888208][ T9255] loop1: detected capacity change from 0 to 360 [ 442.898348][ T9256] loop5: detected capacity change from 0 to 19 [ 442.907459][ T9256] loop5: unable to read partition table [ 442.907596][ T9256] loop5: partition table beyond EOD, truncated [ 442.909700][ T9256] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 442.976819][ T9260] block nbd0: shutting down sockets [ 443.050951][ T9267] loop5: detected capacity change from 0 to 21 [ 443.057209][ T9267] loop5: unable to read partition table [ 443.057342][ T9267] loop5: partition table beyond EOD, truncated [ 443.058097][ T9265] block nbd3: shutting down sockets [ 443.070498][ T9267] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 443.445589][ T9261] loop2: detected capacity change from 0 to 32766 [ 443.506834][ T9270] loop4: detected capacity change from 0 to 32766 00:47:35 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa100, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4800, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NBD_DO_IT(r3, 0xab03) io_setup(0x5ff, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = dup2(r2, r5) io_setup(0x5ff, &(0x7f0000000040)=0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="100000000600"/16, 0x10}]) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="6ca889fe523f1ba0dddf17f5522d1c0490ca3a98fa149a2802765c86b5bf8fe34d5983d1d1b7f7e30ccff20c0f608ff24c438bd7314c34140862bcce29d8e0dc7a8c271ae0156d54c68778643d843e83560fbdab7e40c196ff8fae31d7e48932566134c5e2cd4792025b6b684ff9a46a2b2dba006ed122d5e1d948ad04989ef3d6e1f6e44feba0879f46aafead6dc874aa6c84c1c8ac42155deefe2c10ba93e584e3b60fe55296c041c30a71e4ca4e6de4f2c47ebcf72f95308ed668d6875a7f23481f9117053f2f5515fedbff82494cb0352122e3544d6018c1679331e0f98994e0d3b3948e2cc4c1", 0xe9, 0x7, 0x0, 0x1, r6}]) close(r5) mknodat$null(r3, &(0x7f0000000380)='./file0\x00', 0x20, 0x103) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) io_setup(0x5ff, &(0x7f0000000040)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) dup2(r2, r5) (async) io_setup(0x5ff, &(0x7f0000000040)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000240000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="100000000600"/16, 0x10}]) (async) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0xf0ff1f, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)="100000000600"/16, 0x10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000240)="6ca889fe523f1ba0dddf17f5522d1c0490ca3a98fa149a2802765c86b5bf8fe34d5983d1d1b7f7e30ccff20c0f608ff24c438bd7314c34140862bcce29d8e0dc7a8c271ae0156d54c68778643d843e83560fbdab7e40c196ff8fae31d7e48932566134c5e2cd4792025b6b684ff9a46a2b2dba006ed122d5e1d948ad04989ef3d6e1f6e44feba0879f46aafead6dc874aa6c84c1c8ac42155deefe2c10ba93e584e3b60fe55296c041c30a71e4ca4e6de4f2c47ebcf72f95308ed668d6875a7f23481f9117053f2f5515fedbff82494cb0352122e3544d6018c1679331e0f98994e0d3b3948e2cc4c1", 0xe9, 0x7, 0x0, 0x1, r6}]) (async) close(r5) (async) mknodat$null(r3, &(0x7f0000000380)='./file0\x00', 0x20, 0x103) (async) 00:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:35 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 443.634042][ T9278] loop5: detected capacity change from 0 to 31 [ 443.636050][ T9275] loop1: detected capacity change from 0 to 360 [ 443.638109][ T9278] loop5: unable to read partition table [ 443.638231][ T9278] loop5: partition table beyond EOD, truncated 00:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 443.653662][ T9278] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 443.718374][ T9280] block nbd0: shutting down sockets [ 443.762388][ T9296] loop1: detected capacity change from 0 to 360 00:47:35 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 00:47:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 443.793973][ T9285] block nbd3: Device being setup by another task 00:47:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x5500, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 443.813223][ T9285] block nbd3: shutting down sockets [ 443.866245][ T9298] loop5: detected capacity change from 0 to 32 [ 443.910818][ T9298] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4552, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 444.026596][ T9304] block nbd0: Device being setup by another task [ 444.026744][ T9302] block nbd0: shutting down sockets [ 444.027055][ T9299] block nbd3: shutting down sockets [ 444.048851][ T9307] loop1: detected capacity change from 0 to 360 [ 444.069823][ T9309] loop5: detected capacity change from 0 to 34 [ 444.084989][ T9309] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 444.480540][ T9310] loop2: detected capacity change from 0 to 32766 [ 444.551546][ T9312] loop4: detected capacity change from 0 to 32766 00:47:36 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa200, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@can={0x1d, r4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="9e5183bf790caabf99e03599a758e35f0fcf65482e0b32a9a74aa9584fb2b642ccd7d10cd17663cfc5b92c10db88d32f7b2c7229f0ee9d85e82fe739826aef041ccfd41ae0a0ea8b28a8e399ee1116ae01eaff1b2cf03f998f901c641ee1c0b55a99ea88186be8ba71cd444c177a886f8a8b62727ad80234285cc0cc4e0e071b33de3a11dd48ba3c4e525d9ed5be392e4ae09b4d48748262ca72789ecf0f137ac0da64a40734efd593b2fe5a", 0xac}], 0x1}, 0x80) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 00:47:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6001, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4600, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x1269) [ 444.713521][ T9320] loop5: detected capacity change from 0 to 35 [ 444.722441][ T9319] loop1: detected capacity change from 0 to 360 [ 444.742421][ T9320] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6701, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@can={0x1d, r4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="9e5183bf790caabf99e03599a758e35f0fcf65482e0b32a9a74aa9584fb2b642ccd7d10cd17663cfc5b92c10db88d32f7b2c7229f0ee9d85e82fe739826aef041ccfd41ae0a0ea8b28a8e399ee1116ae01eaff1b2cf03f998f901c641ee1c0b55a99ea88186be8ba71cd444c177a886f8a8b62727ad80234285cc0cc4e0e071b33de3a11dd48ba3c4e525d9ed5be392e4ae09b4d48748262ca72789ecf0f137ac0da64a40734efd593b2fe5a", 0xac}], 0x1}, 0x80) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) [ 444.816586][ T9322] block nbd3: Device being setup by another task [ 444.818122][ T9316] block nbd3: shutting down sockets [ 444.818920][ T9323] block nbd0: shutting down sockets [ 444.927786][ T9326] loop5: detected capacity change from 0 to 36 [ 444.932011][ T9331] loop1: detected capacity change from 0 to 360 [ 444.943269][ T9326] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6800, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 444.986607][ T9330] block nbd3: Device being setup by another task [ 444.986799][ T9325] block nbd3: shutting down sockets [ 445.046576][ T9333] block nbd0: Device being setup by another task [ 445.079854][ T9333] block nbd0: shutting down sockets [ 445.095426][ T9342] loop1: detected capacity change from 0 to 360 [ 445.098067][ T9343] loop5: detected capacity change from 0 to 38 [ 445.112506][ T9343] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 445.117537][ T9336] block nbd2: shutting down sockets [ 445.471003][ T9340] loop4: detected capacity change from 0 to 32766 00:47:37 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa300, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0xa, 0x2, 0x11) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)={0x45c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_FRAME={0x38d, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x2c0}}, 0x1, @default, 0x6, @val={0x0, 0x17, @random="1051d9cfb221b64de396bf8f47490e27cb18319725df93"}, @val={0x1, 0x1, [{0x16}]}, @void, @val={0x4, 0x6, {0x3, 0xff, 0x1, 0x4}}, @void, @val={0x5, 0x8d, {0x1f, 0x87, 0x8, "da7dbd86e3cda8070f81be79192b4bb8b5baccfc0e87c1f0ee5b3003b067173cdc9fe29409e64ae1d86f0990051e0f874bc03ce341cc8d553e4f991705071efcd47494afff95a6159d32c1f04eb93e9dad89b89c0cf70392e210f8cd28c31091450d3b62bde31511e61e286d52cf2c640988f29b2123ef87265bc01c577121011852b6f590e79e36fa49"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xff, 0x8c, 0xa9}}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x7, 0x0, {0x1, 0xccb, 0x0, 0x40, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x7, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0xff, 0x1}}, @void, [{0xdd, 0xeb, "4a89ca767890d623b2b9c696b6de1fbe03d5c692be72cbb3052ff1e25809b21dc9607d09120ed50b92348060a0193e58b8275d76020f43288e192c8215a081eb4f86223dc1141649b691f55317100bb148c84648ba69fd4dae10d9fb1778930ff1d145eec0eae98f1b0a0327c9855dfe1a79ee104be1edad6d20a3b48887f60089fc4ad5a7d9e1b125fe2a3324ad304156d9973b373cbd43d8dc880c644bcadb4b688d696a643d4cb36cc5c9e93060faebca49d5e66ebe85e5b98fb13991e7a1de58cb1f51e37a1d08640a0c86c8f023baa92d3ca06a47cf660282818a14d8ace3c3be6a545364c727aad9"}, {0xdd, 0x49, "c989eaf418e8171c44fbfb79393054689677790d2c84af07c6e9d76d1c05a262ddae60e92a4d4488b9d80b860712b8b5dccde2b4f5167d8e314d47d7f6cc5f158f95eb72678d8ad187"}, {0xdd, 0x1b, "ed351a6c154de07a174cd13312f48fa6550922f8348bd29967faad"}, {0xdd, 0x6, "68c518401354"}, {0xdd, 0x13, "d51e849754800255cd0dae6fac2793a498e7e2"}, {0xdd, 0x89, "37485aa8b0b1812269f51d0bd12144af16717db2e8c1c4eab4e49e0d30f4d0463381516334bc164952654561bd96f85914b4f9dda15e1b405ac2ea9e87b35875f796e614d72cf0b8dd66784aec6f41f318200524e239aeebc07d9846e1f1efe2d5163a70e971cebacd736d325747ead7d7d5a4e46a4682ab02fb42327d6a8ab48357ecece2fb98fa18"}, {0xdd, 0x20, "f4af9617eea5400690da4c05778b8436da37a38e514f72fea166d43907d7a812"}, {0xdd, 0x5e, "d2bd207bbf421bb277ea3d687288eafd6ccdfe270628fdc21ff00117a8ec1aaeeab5fde887069cd80b3c8230aa667832a0d5e1bc9b90057b5b7f149c10e08b83ed57d52e5cce1e3313f7234468ddf66307863247af65b722c9f0f322a1f9"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x9e, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac, {0xe, 0x4}}, @ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8e2, 0x800, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x70, "424c5c8c78fa021f258a924b9bc718769b310e900d7c7f07fc3f2fc76dbdcaec833f915124271cfeba89df837ba3b2a0e40d5036c19b24e1f3c4fe79b4d7f685f3943112e78c92919b2f4ff127fb4d6c8c1a8549ef97631810f0f621eabd1bffa9acfa68f8f94851e0474a0fea75db81"}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c09e0e000000000000d103ea3d80400050be324ad50eba8395f07e9c69ca367aa763397aa4c44e2bd702d9803aa50b9c64017952ce0000000004bd32e901fc43524bd9403a435634cf1bf73d4948a2e216da57eeb68af437adc30c5d5a61984c300274d250eb786d56bf9789ed4f17d02ffdc0651942b6867f6456e6bbd34e25840000000000000000cf80948d36b6c0da357a2ea82ae4503bf9b6dda5b839996f6d21081d64ade054b136da", @ANYRES16=r3, @ANYBLOB="0d0000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000400130002fe06000802110000010000"], 0x34}}, 0x0) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000ffdbdf250f0000000c009900030000002100000054ef15823bf6"], 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x40400d0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@can={0x1d, r4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="9e5183bf790caabf99e03599a758e35f0fcf65482e0b32a9a74aa9584fb2b642ccd7d10cd17663cfc5b92c10db88d32f7b2c7229f0ee9d85e82fe739826aef041ccfd41ae0a0ea8b28a8e399ee1116ae01eaff1b2cf03f998f901c641ee1c0b55a99ea88186be8ba71cd444c177a886f8a8b62727ad80234285cc0cc4e0e071b33de3a11dd48ba3c4e525d9ed5be392e4ae09b4d48748262ca72789ecf0f137ac0da64a40734efd593b2fe5a", 0xac}], 0x1}, 0x80) r6 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 00:47:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6801, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:37 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 1) 00:47:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5245, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 445.626599][ T9349] loop1: detected capacity change from 0 to 360 [ 445.632683][ T9351] loop5: detected capacity change from 0 to 41 00:47:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:37 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 2) 00:47:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5500, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 445.658001][ T9351] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x7400, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 445.739089][ T9362] loop1: detected capacity change from 0 to 360 00:47:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = open(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x1a5) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:37 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 3) [ 445.808140][ T9367] loop5: detected capacity change from 0 to 42 [ 445.826656][ T9364] block nbd3: Device being setup by another task [ 445.830457][ T9367] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 445.915375][ T9372] loop1: detected capacity change from 0 to 360 [ 445.964830][ T9345] block nbd3: shutting down sockets [ 446.308962][ T9376] loop4: detected capacity change from 0 to 32766 00:47:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (rerun: 64) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x1a5) ioctl$NBD_DO_IT(r3, 0xab03) (async, rerun: 64) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 00:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x770c, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0xa, 0x2, 0x11) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)={0x45c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_FRAME={0x38d, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x2c0}}, 0x1, @default, 0x6, @val={0x0, 0x17, @random="1051d9cfb221b64de396bf8f47490e27cb18319725df93"}, @val={0x1, 0x1, [{0x16}]}, @void, @val={0x4, 0x6, {0x3, 0xff, 0x1, 0x4}}, @void, @val={0x5, 0x8d, {0x1f, 0x87, 0x8, "da7dbd86e3cda8070f81be79192b4bb8b5baccfc0e87c1f0ee5b3003b067173cdc9fe29409e64ae1d86f0990051e0f874bc03ce341cc8d553e4f991705071efcd47494afff95a6159d32c1f04eb93e9dad89b89c0cf70392e210f8cd28c31091450d3b62bde31511e61e286d52cf2c640988f29b2123ef87265bc01c577121011852b6f590e79e36fa49"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xff, 0x8c, 0xa9}}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x7, 0x0, {0x1, 0xccb, 0x0, 0x40, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x7, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0xff, 0x1}}, @void, [{0xdd, 0xeb, "4a89ca767890d623b2b9c696b6de1fbe03d5c692be72cbb3052ff1e25809b21dc9607d09120ed50b92348060a0193e58b8275d76020f43288e192c8215a081eb4f86223dc1141649b691f55317100bb148c84648ba69fd4dae10d9fb1778930ff1d145eec0eae98f1b0a0327c9855dfe1a79ee104be1edad6d20a3b48887f60089fc4ad5a7d9e1b125fe2a3324ad304156d9973b373cbd43d8dc880c644bcadb4b688d696a643d4cb36cc5c9e93060faebca49d5e66ebe85e5b98fb13991e7a1de58cb1f51e37a1d08640a0c86c8f023baa92d3ca06a47cf660282818a14d8ace3c3be6a545364c727aad9"}, {0xdd, 0x49, "c989eaf418e8171c44fbfb79393054689677790d2c84af07c6e9d76d1c05a262ddae60e92a4d4488b9d80b860712b8b5dccde2b4f5167d8e314d47d7f6cc5f158f95eb72678d8ad187"}, {0xdd, 0x1b, "ed351a6c154de07a174cd13312f48fa6550922f8348bd29967faad"}, {0xdd, 0x6, "68c518401354"}, {0xdd, 0x13, "d51e849754800255cd0dae6fac2793a498e7e2"}, {0xdd, 0x89, "37485aa8b0b1812269f51d0bd12144af16717db2e8c1c4eab4e49e0d30f4d0463381516334bc164952654561bd96f85914b4f9dda15e1b405ac2ea9e87b35875f796e614d72cf0b8dd66784aec6f41f318200524e239aeebc07d9846e1f1efe2d5163a70e971cebacd736d325747ead7d7d5a4e46a4682ab02fb42327d6a8ab48357ecece2fb98fa18"}, {0xdd, 0x20, "f4af9617eea5400690da4c05778b8436da37a38e514f72fea166d43907d7a812"}, {0xdd, 0x5e, "d2bd207bbf421bb277ea3d687288eafd6ccdfe270628fdc21ff00117a8ec1aaeeab5fde887069cd80b3c8230aa667832a0d5e1bc9b90057b5b7f149c10e08b83ed57d52e5cce1e3313f7234468ddf66307863247af65b722c9f0f322a1f9"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x9e, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac, {0xe, 0x4}}, @ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8e2, 0x800, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x70, "424c5c8c78fa021f258a924b9bc718769b310e900d7c7f07fc3f2fc76dbdcaec833f915124271cfeba89df837ba3b2a0e40d5036c19b24e1f3c4fe79b4d7f685f3943112e78c92919b2f4ff127fb4d6c8c1a8549ef97631810f0f621eabd1bffa9acfa68f8f94851e0474a0fea75db81"}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c09e0e000000000000d103ea3d80400050be324ad50eba8395f07e9c69ca367aa763397aa4c44e2bd702d9803aa50b9c64017952ce0000000004bd32e901fc43524bd9403a435634cf1bf73d4948a2e216da57eeb68af437adc30c5d5a61984c300274d250eb786d56bf9789ed4f17d02ffdc0651942b6867f6456e6bbd34e25840000000000000000cf80948d36b6c0da357a2ea82ae4503bf9b6dda5b839996f6d21081d64ade054b136da", @ANYRES16=r3, @ANYBLOB="0d0000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000400130002fe06000802110000010000"], 0x34}}, 0x0) (async) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000ffdbdf250f0000000c009900030000002100000054ef15823bf6"], 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x40400d0) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:38 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa400, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 4) [ 446.434692][ T9387] loop1: detected capacity change from 0 to 360 [ 446.435908][ T9388] loop5: detected capacity change from 0 to 48 00:47:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 5) [ 446.453835][ T9388] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x7a00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r3 = open(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x1a5) ioctl$NBD_DO_IT(r3, 0xab03) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400080) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) open(&(0x7f00000000c0)='./file0\x00', 0xc000, 0x1a5) (async) ioctl$NBD_DO_IT(r3, 0xab03) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) [ 446.595330][ T9395] block nbd3: shutting down sockets 00:47:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0xa, 0x2, 0x11) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)={0x45c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_FRAME={0x38d, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x2c0}}, 0x1, @default, 0x6, @val={0x0, 0x17, @random="1051d9cfb221b64de396bf8f47490e27cb18319725df93"}, @val={0x1, 0x1, [{0x16}]}, @void, @val={0x4, 0x6, {0x3, 0xff, 0x1, 0x4}}, @void, @val={0x5, 0x8d, {0x1f, 0x87, 0x8, "da7dbd86e3cda8070f81be79192b4bb8b5baccfc0e87c1f0ee5b3003b067173cdc9fe29409e64ae1d86f0990051e0f874bc03ce341cc8d553e4f991705071efcd47494afff95a6159d32c1f04eb93e9dad89b89c0cf70392e210f8cd28c31091450d3b62bde31511e61e286d52cf2c640988f29b2123ef87265bc01c577121011852b6f590e79e36fa49"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xff, 0x8c, 0xa9}}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x7, 0x0, {0x1, 0xccb, 0x0, 0x40, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x7, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0xff, 0x1}}, @void, [{0xdd, 0xeb, "4a89ca767890d623b2b9c696b6de1fbe03d5c692be72cbb3052ff1e25809b21dc9607d09120ed50b92348060a0193e58b8275d76020f43288e192c8215a081eb4f86223dc1141649b691f55317100bb148c84648ba69fd4dae10d9fb1778930ff1d145eec0eae98f1b0a0327c9855dfe1a79ee104be1edad6d20a3b48887f60089fc4ad5a7d9e1b125fe2a3324ad304156d9973b373cbd43d8dc880c644bcadb4b688d696a643d4cb36cc5c9e93060faebca49d5e66ebe85e5b98fb13991e7a1de58cb1f51e37a1d08640a0c86c8f023baa92d3ca06a47cf660282818a14d8ace3c3be6a545364c727aad9"}, {0xdd, 0x49, "c989eaf418e8171c44fbfb79393054689677790d2c84af07c6e9d76d1c05a262ddae60e92a4d4488b9d80b860712b8b5dccde2b4f5167d8e314d47d7f6cc5f158f95eb72678d8ad187"}, {0xdd, 0x1b, "ed351a6c154de07a174cd13312f48fa6550922f8348bd29967faad"}, {0xdd, 0x6, "68c518401354"}, {0xdd, 0x13, "d51e849754800255cd0dae6fac2793a498e7e2"}, {0xdd, 0x89, "37485aa8b0b1812269f51d0bd12144af16717db2e8c1c4eab4e49e0d30f4d0463381516334bc164952654561bd96f85914b4f9dda15e1b405ac2ea9e87b35875f796e614d72cf0b8dd66784aec6f41f318200524e239aeebc07d9846e1f1efe2d5163a70e971cebacd736d325747ead7d7d5a4e46a4682ab02fb42327d6a8ab48357ecece2fb98fa18"}, {0xdd, 0x20, "f4af9617eea5400690da4c05778b8436da37a38e514f72fea166d43907d7a812"}, {0xdd, 0x5e, "d2bd207bbf421bb277ea3d687288eafd6ccdfe270628fdc21ff00117a8ec1aaeeab5fde887069cd80b3c8230aa667832a0d5e1bc9b90057b5b7f149c10e08b83ed57d52e5cce1e3313f7234468ddf66307863247af65b722c9f0f322a1f9"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x9e, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac, {0xe, 0x4}}, @ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8e2, 0x800, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x70, "424c5c8c78fa021f258a924b9bc718769b310e900d7c7f07fc3f2fc76dbdcaec833f915124271cfeba89df837ba3b2a0e40d5036c19b24e1f3c4fe79b4d7f685f3943112e78c92919b2f4ff127fb4d6c8c1a8549ef97631810f0f621eabd1bffa9acfa68f8f94851e0474a0fea75db81"}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c09e0e000000000000d103ea3d80400050be324ad50eba8395f07e9c69ca367aa763397aa4c44e2bd702d9803aa50b9c64017952ce0000000004bd32e901fc43524bd9403a435634cf1bf73d4948a2e216da57eeb68af437adc30c5d5a61984c300274d250eb786d56bf9789ed4f17d02ffdc0651942b6867f6456e6bbd34e25840000000000000000cf80948d36b6c0da357a2ea82ae4503bf9b6dda5b839996f6d21081d64ade054b136da", @ANYRES16=r3, @ANYBLOB="0d0000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000400130002fe06000802110000010000"], 0x34}}, 0x0) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000ffdbdf250f0000000c009900030000002100000054ef15823bf6"], 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x40400d0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0xa, 0x2, 0x11) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)={0x45c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_FRAME={0x38d, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x2c0}}, 0x1, @default, 0x6, @val={0x0, 0x17, @random="1051d9cfb221b64de396bf8f47490e27cb18319725df93"}, @val={0x1, 0x1, [{0x16}]}, @void, @val={0x4, 0x6, {0x3, 0xff, 0x1, 0x4}}, @void, @val={0x5, 0x8d, {0x1f, 0x87, 0x8, "da7dbd86e3cda8070f81be79192b4bb8b5baccfc0e87c1f0ee5b3003b067173cdc9fe29409e64ae1d86f0990051e0f874bc03ce341cc8d553e4f991705071efcd47494afff95a6159d32c1f04eb93e9dad89b89c0cf70392e210f8cd28c31091450d3b62bde31511e61e286d52cf2c640988f29b2123ef87265bc01c577121011852b6f590e79e36fa49"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xff, 0x8c, 0xa9}}, @val={0x2d, 0x1a, {0x8000, 0x2, 0x7, 0x0, {0x1, 0xccb, 0x0, 0x40, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x7, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0xff, 0x1}}, @void, [{0xdd, 0xeb, "4a89ca767890d623b2b9c696b6de1fbe03d5c692be72cbb3052ff1e25809b21dc9607d09120ed50b92348060a0193e58b8275d76020f43288e192c8215a081eb4f86223dc1141649b691f55317100bb148c84648ba69fd4dae10d9fb1778930ff1d145eec0eae98f1b0a0327c9855dfe1a79ee104be1edad6d20a3b48887f60089fc4ad5a7d9e1b125fe2a3324ad304156d9973b373cbd43d8dc880c644bcadb4b688d696a643d4cb36cc5c9e93060faebca49d5e66ebe85e5b98fb13991e7a1de58cb1f51e37a1d08640a0c86c8f023baa92d3ca06a47cf660282818a14d8ace3c3be6a545364c727aad9"}, {0xdd, 0x49, "c989eaf418e8171c44fbfb79393054689677790d2c84af07c6e9d76d1c05a262ddae60e92a4d4488b9d80b860712b8b5dccde2b4f5167d8e314d47d7f6cc5f158f95eb72678d8ad187"}, {0xdd, 0x1b, "ed351a6c154de07a174cd13312f48fa6550922f8348bd29967faad"}, {0xdd, 0x6, "68c518401354"}, {0xdd, 0x13, "d51e849754800255cd0dae6fac2793a498e7e2"}, {0xdd, 0x89, "37485aa8b0b1812269f51d0bd12144af16717db2e8c1c4eab4e49e0d30f4d0463381516334bc164952654561bd96f85914b4f9dda15e1b405ac2ea9e87b35875f796e614d72cf0b8dd66784aec6f41f318200524e239aeebc07d9846e1f1efe2d5163a70e971cebacd736d325747ead7d7d5a4e46a4682ab02fb42327d6a8ab48357ecece2fb98fa18"}, {0xdd, 0x20, "f4af9617eea5400690da4c05778b8436da37a38e514f72fea166d43907d7a812"}, {0xdd, 0x5e, "d2bd207bbf421bb277ea3d687288eafd6ccdfe270628fdc21ff00117a8ec1aaeeab5fde887069cd80b3c8230aa667832a0d5e1bc9b90057b5b7f149c10e08b83ed57d52e5cce1e3313f7234468ddf66307863247af65b722c9f0f322a1f9"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x9e, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac, {0xe, 0x4}}, @ver_80211n={0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x8e2, 0x800, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x70, "424c5c8c78fa021f258a924b9bc718769b310e900d7c7f07fc3f2fc76dbdcaec833f915124271cfeba89df837ba3b2a0e40d5036c19b24e1f3c4fe79b4d7f685f3943112e78c92919b2f4ff127fb4d6c8c1a8549ef97631810f0f621eabd1bffa9acfa68f8f94851e0474a0fea75db81"}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c09e0e000000000000d103ea3d80400050be324ad50eba8395f07e9c69ca367aa763397aa4c44e2bd702d9803aa50b9c64017952ce0000000004bd32e901fc43524bd9403a435634cf1bf73d4948a2e216da57eeb68af437adc30c5d5a61984c300274d250eb786d56bf9789ed4f17d02ffdc0651942b6867f6456e6bbd34e25840000000000000000cf80948d36b6c0da357a2ea82ae4503bf9b6dda5b839996f6d21081d64ade054b136da", @ANYRES16=r3, @ANYBLOB="0d0000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000400130002fe06000802110000010000"], 0x34}}, 0x0) (async) socket(0xa, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000329bd7000ffdbdf250f0000000c009900030000002100000054ef15823bf6"], 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x40400d0) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) [ 446.629991][ T9400] loop1: detected capacity change from 0 to 360 [ 446.635617][ T9401] loop5: detected capacity change from 0 to 52 00:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8100, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 6) [ 446.649023][ T9401] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 446.687292][ T3925] blk_print_req_error: 17 callbacks suppressed [ 446.687308][ T3925] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:47:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 7) 00:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7400, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 446.687335][ T3925] buffer_io_error: 17 callbacks suppressed [ 446.687346][ T3925] Buffer I/O error on dev loop1, logical block 1, async page read [ 446.687404][ T3925] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687430][ T3925] Buffer I/O error on dev loop1, logical block 2, async page read [ 446.687480][ T3925] I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687505][ T3925] Buffer I/O error on dev loop1, logical block 3, async page read [ 446.687553][ T3925] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687578][ T3925] Buffer I/O error on dev loop1, logical block 4, async page read [ 446.687626][ T3925] I/O error, dev loop1, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687651][ T3925] Buffer I/O error on dev loop1, logical block 5, async page read [ 446.687700][ T3925] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687725][ T3925] Buffer I/O error on dev loop1, logical block 6, async page read [ 446.687773][ T3925] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 446.687799][ T3925] Buffer I/O error on dev loop1, logical block 7, async page read [ 446.801620][ T9414] loop1: detected capacity change from 0 to 360 [ 446.810375][ T9415] loop5: detected capacity change from 0 to 54 [ 446.844508][ T9415] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 446.862910][ T9406] block nbd3: Device being setup by another task [ 446.939650][ T9403] block nbd3: shutting down sockets [ 446.952854][ T9434] loop5: detected capacity change from 0 to 58 [ 446.977696][ T9434] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 447.439905][ T9433] loop4: detected capacity change from 0 to 32766 00:47:39 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa500, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x9000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3f) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xc0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400400) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) getpeername(r5, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000200)=0x80) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 00:47:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="07010005660200000103000007000000ff03000003000000000000000000000063fd96f75600c353bd31ac6b7d29a3f52043ae7256331264549aa621fe064983d61dcdc78e8221e48f65e536d4dca251489c96ec15d400ea6590a019a3fe93d64dfe128e4455e10c4a746973358ebc3dce8b1cff15221aa81b6a419b8ca0f902f4b1c6f3c6e3369a9b0f20b740c2aac6cf9fc5471ba642a1f616322dc8dadc39d3eccd97f750a200086f5ffd86f9cb0baa06666ca80eef031a1440980c5fce2c240b106e97695b0f4afe00a05db7f8a6ffffffffad0c65ee06a809b8be06c5bc00"/1486], 0x5e0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 00:47:39 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 8) 00:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x770c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:39 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 9) [ 447.578105][ T9445] loop5: detected capacity change from 0 to 59 [ 447.585444][ T9445] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xa30b, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 447.599525][ T9446] loop1: detected capacity change from 0 to 360 00:47:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 32) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="07010005660200000103000007000000ff03000003000000000000000000000063fd96f75600c353bd31ac6b7d29a3f52043ae7256331264549aa621fe064983d61dcdc78e8221e48f65e536d4dca251489c96ec15d400ea6590a019a3fe93d64dfe128e4455e10c4a746973358ebc3dce8b1cff15221aa81b6a419b8ca0f902f4b1c6f3c6e3369a9b0f20b740c2aac6cf9fc5471ba642a1f616322dc8dadc39d3eccd97f750a200086f5ffd86f9cb0baa06666ca80eef031a1440980c5fce2c240b106e97695b0f4afe00a05db7f8a6ffffffffad0c65ee06a809b8be06c5bc00"/1486], 0x5e0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 00:47:39 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 10) [ 447.686723][ T9448] block nbd3: Device being setup by another task [ 447.686999][ T9438] block nbd3: shutting down sockets 00:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 447.744283][ T9454] loop5: detected capacity change from 0 to 61 [ 447.756839][ T9454] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 447.764889][ T9457] loop1: detected capacity change from 0 to 360 [ 447.787762][ T3925] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.787794][ T3925] Buffer I/O error on dev loop5, logical block 0, async page read [ 447.787924][ T3925] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.787952][ T3925] Buffer I/O error on dev loop5, logical block 2, async page read [ 447.788001][ T3925] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 447.788027][ T3925] Buffer I/O error on dev loop5, logical block 3, async page read [ 447.877105][ T9459] block nbd3: Device being setup by another task [ 447.885062][ T9464] loop5: detected capacity change from 0 to 72 [ 447.900030][ T9464] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 447.930893][ T9459] block nbd3: Device being setup by another task [ 448.046698][ T9459] block nbd3: Device being setup by another task [ 448.086832][ T9459] block nbd3: Device being setup by another task [ 448.166676][ T9459] block nbd3: Device being setup by another task [ 448.202816][ T9459] block nbd3: Device being setup by another task [ 448.273604][ T9466] loop4: detected capacity change from 0 to 32766 [ 448.316691][ T9459] block nbd3: Device being setup by another task 00:47:40 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa600, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xedc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 448.366746][ T9459] block nbd3: Device being setup by another task 00:47:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3f) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xc0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) (async) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400400) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) getpeername(r5, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000200)=0x80) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 00:47:40 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 11) 00:47:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa30b, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 448.416129][ T9469] loop1: detected capacity change from 0 to 360 00:47:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xfeff, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) [ 448.460315][ T9473] loop5: detected capacity change from 0 to 81 [ 448.466715][ T9459] block nbd3: Device being setup by another task 00:47:40 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 12) [ 448.481963][ T9473] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 448.506760][ T9459] block nbd3: Device being setup by another task [ 448.588070][ T9459] block nbd3: Device being setup by another task [ 448.607873][ T9479] loop1: detected capacity change from 0 to 360 00:47:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="07010005660200000103000007000000ff03000003000000000000000000000063fd96f75600c353bd31ac6b7d29a3f52043ae7256331264549aa621fe064983d61dcdc78e8221e48f65e536d4dca251489c96ec15d400ea6590a019a3fe93d64dfe128e4455e10c4a746973358ebc3dce8b1cff15221aa81b6a419b8ca0f902f4b1c6f3c6e3369a9b0f20b740c2aac6cf9fc5471ba642a1f616322dc8dadc39d3eccd97f750a200086f5ffd86f9cb0baa06666ca80eef031a1440980c5fce2c240b106e97695b0f4afe00a05db7f8a6ffffffffad0c65ee06a809b8be06c5bc00"/1486], 0x5e0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="07010005660200000103000007000000ff03000003000000000000000000000063fd96f75600c353bd31ac6b7d29a3f52043ae7256331264549aa621fe064983d61dcdc78e8221e48f65e536d4dca251489c96ec15d400ea6590a019a3fe93d64dfe128e4455e10c4a746973358ebc3dce8b1cff15221aa81b6a419b8ca0f902f4b1c6f3c6e3369a9b0f20b740c2aac6cf9fc5471ba642a1f616322dc8dadc39d3eccd97f750a200086f5ffd86f9cb0baa06666ca80eef031a1440980c5fce2c240b106e97695b0f4afe00a05db7f8a6ffffffffad0c65ee06a809b8be06c5bc00"/1486], 0x5e0) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) [ 448.629436][ T9459] block nbd3: Device being setup by another task [ 448.629745][ T9458] block nbd3: shutting down sockets 00:47:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xff00, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3f) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xc0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) (async) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400400) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) getpeername(r5, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000200)=0x80) (async) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) [ 448.657021][ T9484] loop5: detected capacity change from 0 to 118 00:47:40 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 13) [ 448.678842][ T9484] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 448.786798][ T9498] loop1: detected capacity change from 0 to 360 [ 448.797317][ T9489] block nbd3: Device being setup by another task [ 448.803487][ T9489] block nbd3: shutting down sockets [ 449.183147][ T9502] loop4: detected capacity change from 0 to 32766 00:47:41 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa700, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) 00:47:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x758) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 00:47:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xff0f, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:41 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/em28xx', 0x212001, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC], 0xfffffd88) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00'}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xaa, 0x8) socket$netlink(0x10, 0x3, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:47:41 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 14) 00:47:41 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 15) [ 449.338460][ T9512] loop1: detected capacity change from 0 to 360 [ 449.344166][ T9514] loop5: detected capacity change from 0 to 127 [ 449.369176][ T9514] EXT4-fs (loop5): ea_inode feature is not supported for Hurd 00:47:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xfffe, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 449.401516][ T9516] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 1170; err -12 [ 449.434127][ T9517] block nbd3: Device being setup by another task [ 449.435315][ T9511] nbd3: detected capacity change from 0 to 3760 00:47:41 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) (fail_nth: 16) [ 449.447211][ T9518] block nbd0: shutting down sockets 00:47:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x32957, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c90", 0x3}, {0x0, 0x0, 0x16800}, {&(0x7f0000000080)="a3", 0x1, 0xd}], 0x8100, &(0x7f0000000100)={[{@fat=@dos1xfloppy}]}) 00:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 449.483289][ T9520] loop1: detected capacity change from 0 to 360 [ 449.528985][ T9522] loop5: detected capacity change from 0 to 127 [ 449.539731][ T9522] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 449.660922][ T9527] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 1171; err -12 [ 449.690495][ T9530] loop5: detected capacity change from 0 to 127 [ 449.693649][ T9531] loop1: detected capacity change from 0 to 404 [ 449.707400][ T9530] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 450.042679][ T9525] loop4: detected capacity change from 0 to 32766 00:47:41 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="e76101e9f1000000000078", 0xfffffeac}, {0x0}], 0x804, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa800, &(0x7f0000001a40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180), 0xd}]) 00:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000000280)) [ 450.168872][ T49] block nbd3: Receive control failed (result -104) [ 450.194739][ T9535] loop5: detected capacity change from 0 to 127 [ 450.204179][ T9535] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 450.503666][ T9537] loop4: detected capacity change from 0 to 32766 [ 455.656772][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 4 seconds [ 461.416693][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 8 seconds [ 467.178393][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 12 seconds [ 472.936619][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 16 seconds [ 478.696630][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 20 seconds [ 484.466656][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 24 seconds [ 490.216697][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 28 seconds [ 495.978967][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 32 seconds [ 501.098288][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.736578][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 36 seconds [ 507.496638][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 40 seconds [ 511.013500][ T2980] udevd[2980]: worker [5002] /devices/virtual/block/nbd3 is taking a long time [ 513.266655][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 44 seconds [ 519.016650][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 48 seconds [ 524.776804][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 52 seconds [ 530.536555][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 56 seconds [ 536.296560][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 60 seconds [ 542.056640][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 64 seconds [ 547.816609][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 68 seconds [ 553.576776][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 72 seconds [ 559.336651][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 76 seconds [ 562.537637][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.096679][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 80 seconds [ 570.856536][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 84 seconds [ 576.616650][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 88 seconds [ 582.376713][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 92 seconds [ 588.137004][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 96 seconds [ 593.896552][ T9] block nbd3: Possible stuck request ffff88801e790000: control (read@0,4096B). Runtime 100 seconds [ 597.736682][ T29] INFO: task udevd:5002 blocked for more than 143 seconds. [ 597.744019][ T29] Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 597.752063][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.761009][ T29] task:udevd state:D stack:26168 pid: 5002 ppid: 2980 flags:0x00004000 [ 597.770323][ T29] Call Trace: [ 597.773602][ T29] [ 597.776801][ T29] __schedule+0xa00/0x4b30 [ 597.781241][ T29] ? io_schedule_timeout+0x140/0x140 [ 597.787968][ T29] ? io_schedule_timeout+0x140/0x140 [ 597.793286][ T29] ? preempt_schedule_thunk+0x16/0x18 [ 597.799214][ T29] ? preempt_schedule_common+0x59/0xc0 [ 597.804708][ T29] schedule+0xd2/0x1f0 [ 597.809120][ T29] io_schedule+0xba/0x130 [ 597.813481][ T29] folio_wait_bit_common+0x4f2/0xa90 [ 597.818953][ T29] ? next_uptodate_page+0x810/0x810 [ 597.824332][ T29] ? end_buffer_async_read_io+0x300/0x300 [ 597.830674][ T29] ? folio_unlock+0xc0/0xc0 [ 597.835195][ T29] ? alloc_pages+0x1b2/0x310 [ 597.839933][ T29] do_read_cache_folio+0x4ff/0x760 [ 597.845076][ T29] ? blkdev_writepages+0x20/0x20 [ 597.850088][ T29] read_cache_page+0x59/0x2a0 [ 597.854776][ T29] read_part_sector+0xf6/0x920 [ 597.859608][ T29] ? adfspart_check_ADFS+0x410/0x410 [ 597.864902][ T29] adfspart_check_ICS+0x9a/0x690 [ 597.869908][ T29] ? __alloc_pages+0x3da/0x510 [ 597.874680][ T29] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 597.881506][ T29] ? adfspart_check_ADFS+0x410/0x410 [ 597.888950][ T29] ? snprintf+0xbb/0xf0 [ 597.893188][ T29] ? vsprintf+0x30/0x30 [ 597.897595][ T29] ? alloc_pages+0x1b2/0x310 [ 597.902211][ T29] ? adfspart_check_ADFS+0x410/0x410 [ 597.907624][ T29] bdev_disk_changed+0x629/0xf60 [ 597.912678][ T29] ? iput.part.0+0x73/0x820 [ 597.917409][ T29] blkdev_get_whole+0x18a/0x2d0 [ 597.922275][ T29] blkdev_get_by_dev.part.0+0x5ec/0xb90 [ 597.927946][ T29] ? devcgroup_check_permission+0x1ab/0x440 [ 597.934273][ T29] blkdev_get_by_dev+0x6b/0x80 [ 597.939248][ T29] blkdev_open+0x13c/0x2c0 [ 597.943681][ T29] do_dentry_open+0x4a1/0x11f0 [ 597.948576][ T29] ? blkdev_close+0x80/0x80 [ 597.953102][ T29] path_openat+0x1c71/0x2910 [ 597.957825][ T29] ? path_lookupat+0x860/0x860 [ 597.962606][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 597.968683][ T29] do_filp_open+0x1aa/0x400 [ 597.973202][ T29] ? may_open_dev+0xf0/0xf0 [ 597.977880][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 597.982837][ T29] ? _find_next_bit+0x1e3/0x260 [ 597.987821][ T29] ? _raw_spin_unlock+0x24/0x40 [ 597.992685][ T29] ? alloc_fd+0x2f0/0x670 [ 597.997896][ T29] do_sys_openat2+0x16d/0x4c0 [ 598.002600][ T29] ? find_held_lock+0x2d/0x110 [ 598.007899][ T29] ? build_open_flags+0x6f0/0x6f0 [ 598.012953][ T29] ? lock_downgrade+0x6e0/0x6e0 [ 598.018065][ T29] __x64_sys_openat+0x13f/0x1f0 [ 598.022913][ T29] ? __ia32_sys_open+0x1c0/0x1c0 [ 598.028089][ T29] ? syscall_enter_from_user_mode+0x21/0x70 [ 598.034481][ T29] ? syscall_enter_from_user_mode+0x21/0x70 [ 598.041041][ T29] do_syscall_64+0x35/0xb0 [ 598.045492][ T29] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 598.051647][ T29] RIP: 0033:0x7fd3b9b25697 [ 598.056054][ T29] RSP: 002b:00007ffcc6631ba0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 598.064841][ T29] RAX: ffffffffffffffda RBX: 00005628bbb2e9c0 RCX: 00007fd3b9b25697 [ 598.073234][ T29] RDX: 00000000000a0800 RSI: 00005628bbaff7e0 RDI: 00000000ffffff9c [ 598.081436][ T29] RBP: 00005628bbaff7e0 R08: 0000000000000001 R09: 00007ffcc66b3080 [ 598.089707][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 598.097880][ T29] R13: 00005628bbb0f040 R14: 0000000000000001 R15: 00005628bbaf32c0 [ 598.105865][ T29] [ 598.110770][ T29] INFO: task syz-executor.3:9511 blocked for more than 143 seconds. [ 598.119123][ T29] Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 598.127070][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.136333][ T29] task:syz-executor.3 state:D stack:28376 pid: 9511 ppid: 3640 flags:0x00004004 [ 598.145865][ T29] Call Trace: [ 598.149384][ T29] [ 598.152307][ T29] __schedule+0xa00/0x4b30 [ 598.157391][ T29] ? io_schedule_timeout+0x140/0x140 [ 598.162713][ T29] schedule+0xd2/0x1f0 [ 598.167154][ T29] schedule_preempt_disabled+0xf/0x20 [ 598.172556][ T29] __mutex_lock+0xa70/0x1350 [ 598.177626][ T29] ? blkdev_put+0xbc/0x770 [ 598.182077][ T29] ? mutex_lock_io_nested+0x1190/0x1190 [ 598.188048][ T29] ? do_raw_spin_unlock+0x171/0x230 [ 598.193279][ T29] ? filemap_check_errors+0xa5/0x150 [ 598.198860][ T29] blkdev_put+0xbc/0x770 [ 598.203112][ T29] blkdev_close+0x64/0x80 [ 598.207869][ T29] __fput+0x277/0x9d0 [ 598.211870][ T29] ? blkdev_fsync+0xa0/0xa0 [ 598.219983][ T29] task_work_run+0xdd/0x1a0 [ 598.224571][ T29] exit_to_user_mode_prepare+0x23c/0x250 [ 598.230317][ T29] syscall_exit_to_user_mode+0x19/0x50 [ 598.235791][ T29] do_syscall_64+0x42/0xb0 [ 598.241353][ T29] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 598.247355][ T29] RIP: 0033:0x7f7c35889109 [ 598.251776][ T29] RSP: 002b:00007f7c3691f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.260331][ T29] RAX: 0000000000000000 RBX: 00007f7c3599bf60 RCX: 00007f7c35889109 [ 598.268468][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 598.278056][ T29] RBP: 00007f7c358e305d R08: 0000000000000000 R09: 0000000000000000 [ 598.286051][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.294112][ T29] R13: 00007ffca1abfb7f R14: 00007f7c3691f300 R15: 0000000000022000 [ 598.302796][ T29] [ 598.306095][ T29] [ 598.306095][ T29] Showing all locks held in the system: [ 598.317287][ T29] 1 lock held by khungtaskd/29: [ 598.322158][ T29] #0: ffffffff8bd84020 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 598.332387][ T29] 3 locks held by kworker/u4:2/42: [ 598.337929][ T29] 2 locks held by getty/3293: [ 598.343488][ T29] #0: ffff88801c549098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 598.353408][ T29] #1: ffffc90001c482e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 598.363644][ T29] 1 lock held by udevd/5002: [ 598.368322][ T29] #0: ffff88801e724118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev.part.0+0x9b/0xb90 [ 598.379620][ T29] 1 lock held by syz-executor.3/9511: [ 598.384998][ T29] #0: ffff88801e724118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xbc/0x770 [ 598.394722][ T29] [ 598.399163][ T29] ============================================= [ 598.399163][ T29] [ 598.407957][ T29] NMI backtrace for cpu 0 [ 598.412290][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 598.422170][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.432222][ T29] Call Trace: [ 598.435495][ T29] [ 598.438421][ T29] dump_stack_lvl+0xcd/0x134 [ 598.443016][ T29] nmi_cpu_backtrace.cold+0x47/0x144 [ 598.448323][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 598.453541][ T29] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 598.459522][ T29] watchdog+0xc22/0xf90 [ 598.463716][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 598.469697][ T29] kthread+0x2e9/0x3a0 [ 598.473789][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 598.479421][ T29] ret_from_fork+0x1f/0x30 [ 598.483841][ T29] [ 598.487738][ T29] Sending NMI from CPU 0 to CPUs 1: [ 598.492969][ C1] NMI backtrace for cpu 1 [ 598.492979][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 598.493002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.493014][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 598.493093][ C1] RIP: 0010:ip6t_do_table+0xce1/0x1a40 [ 598.493150][ C1] Code: f6 ff ff e8 b1 3a 51 f9 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 74 08 3c 03 0f 8e b4 0c 00 00 49 63 5c 24 20 <31> ff 89 de e8 c6 36 51 f9 85 db 0f 88 6d 02 00 00 e8 79 3a 51 f9 [ 598.493169][ C1] RSP: 0018:ffffc900003f88d8 EFLAGS: 00000246 [ 598.493184][ C1] RAX: 0000000000000000 RBX: fffffffffffffffe RCX: 0000000000000100 [ 598.493197][ C1] RDX: ffff888016d0e200 RSI: ffffffff8828682f RDI: ffff888079d2d108 [ 598.493211][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 598.493224][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888079d2d0e8 [ 598.493236][ C1] R13: ffff888079d2d0f0 R14: dffffc0000000000 R15: ffff888079d2d040 [ 598.493250][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 598.493270][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.493284][ C1] CR2: 000000c009884fc8 CR3: 000000007dded000 CR4: 00000000003506e0 [ 598.493298][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 598.493310][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 598.493323][ C1] Call Trace: [ 598.493328][ C1] [ 598.493337][ C1] ? __local_bh_enable_ip+0xa0/0x120 [ 598.493377][ C1] ? ip6t_do_table+0xbdb/0x1a40 [ 598.493395][ C1] ? __do_replace+0x890/0x890 [ 598.493413][ C1] ? nf_conntrack_in+0x87d/0x1790 [ 598.493476][ C1] ip6table_mangle_hook+0xb9/0x6c0 [ 598.493496][ C1] ? __do_replace+0x890/0x890 [ 598.493514][ C1] ? ip6table_mangle_net_pre_exit+0x20/0x20 [ 598.493536][ C1] nf_hook_slow+0xc5/0x1f0 [ 598.493571][ C1] nf_hook.constprop.0+0x3ac/0x650 [ 598.493662][ C1] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 598.493689][ C1] ? ip6_sublist_rcv+0xe50/0xe50 [ 598.493713][ C1] ? ip6_rcv_finish_core.constprop.0.isra.0+0x570/0x570 [ 598.493740][ C1] ipv6_rcv+0x9e/0x3b0 [ 598.493761][ C1] ? ip6_rcv_core+0x1d60/0x1d60 [ 598.493784][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 598.493826][ C1] ? __netif_receive_skb_core+0x3920/0x3920 [ 598.493852][ C1] ? mark_held_locks+0x9f/0xe0 [ 598.493876][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 598.493894][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 598.493918][ C1] __netif_receive_skb+0x24/0x1b0 [ 598.493943][ C1] process_backlog+0x3a0/0x7c0 [ 598.493988][ C1] ? mark_held_locks+0x9f/0xe0 [ 598.494011][ C1] __napi_poll+0xb3/0x6e0 [ 598.494035][ C1] net_rx_action+0x9c1/0xd90 [ 598.494060][ C1] ? napi_threaded_poll+0x520/0x520 [ 598.494084][ C1] ? __wake_up_locked_sync_key+0x20/0x20 [ 598.494128][ C1] __do_softirq+0x29b/0x9c2 [ 598.494153][ C1] do_softirq.part.0+0xde/0x130 [ 598.494171][ C1] [ 598.494177][ C1] [ 598.494182][ C1] ? wg_socket_send_skb_to_peer+0x14b/0x220 [ 598.494206][ C1] __local_bh_enable_ip+0x102/0x120 [ 598.494225][ C1] wg_socket_send_skb_to_peer+0x14b/0x220 [ 598.494250][ C1] wg_packet_tx_worker+0x1a7/0x720 [ 598.494274][ C1] process_one_work+0x996/0x1610 [ 598.494296][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 598.494317][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 598.494335][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 598.494358][ C1] worker_thread+0x665/0x1080 [ 598.494383][ C1] ? process_one_work+0x1610/0x1610 [ 598.494403][ C1] kthread+0x2e9/0x3a0 [ 598.494420][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 598.494440][ C1] ret_from_fork+0x1f/0x30 [ 598.494464][ C1] [ 598.495728][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 598.866182][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc2-syzkaller-00049-g24625f7d91fb #0 [ 598.876056][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.886094][ T29] Call Trace: [ 598.889369][ T29] [ 598.892308][ T29] dump_stack_lvl+0xcd/0x134 [ 598.897169][ T29] panic+0x2d7/0x636 [ 598.901064][ T29] ? panic_print_sys_info.part.0+0x10b/0x10b [ 598.907030][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 598.912214][ T29] ? preempt_schedule_thunk+0x16/0x18 [ 598.917584][ T29] ? watchdog.cold+0x5/0x143 [ 598.922162][ T29] watchdog.cold+0x16/0x143 [ 598.926650][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 598.932616][ T29] kthread+0x2e9/0x3a0 [ 598.936677][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 598.942325][ T29] ret_from_fork+0x1f/0x30 [ 598.946762][ T29] [ 598.950081][ T29] Kernel Offset: disabled [ 598.954417][ T29] Rebooting in 86400 seconds..