ion_unit={0xc, 0x24, 0x8, 0x4, 0x3, 0x7, "5febd9c2e2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x81, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x0, 0x44, "01"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8001, 0x81, 0xa3, "4de5216a8a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x4b, "", "6b02"}]}, {{0x9, 0x5, 0x1, 0x9, 0x5a7, 0x40, 0x8, 0x25, {0x7, 0x25, 0x1, 0x3, 0x7, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xff55, 0x0, "06d304"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x6, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc1, 0xe0, {0x7, 0x25, 0x1, 0x1, 0x5, 0xa0ed}}}}}}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x300, 0x40, 0x2, 0x5, 0xff, 0x3}, 0x5e, &(0x7f0000001c80)={0x5, 0xf, 0x5e, 0x1, [@generic={0x59, 0x10, 0x4, "587c38aaae04eca289b6f894efaea7892ae5fc34a4364c164b4adffc2982e57ba5b9126f356b5510c4f320845b76ebbcdcd71781230271b8c398a342ea440ecb953d032b6bb3a42fbc59ea70256b90cffaf5d91d3069"}]}, 0x7, [{0x7f, &(0x7f0000001d00)=@string={0x7f, 0x3, "a78344abb525f49402bb56332cad9ab534421c23607c37e35d81356ba3aa5a93efef3a84e185c55ac37c18e0426737e505fb901093cdfede5a623d920d55cfab6c162c15db2bfc89a0094bf3f0309dcd0570b3de0ab6e8d5986b9617112cca1444b2198107655e27c40344cb6465d16ec83b60285bd745da8bceb963dd"}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x280a}}, {0x3a, &(0x7f0000001dc0)=@string={0x3a, 0x3, "24a86aa1b0355e3131ebc30fff24c4adad8576870fc85679a23606d2a10b2d24e509ec48ea2ed694831c6d3f877fa4f4c0c9d839cbaa1342"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x80a}}, {0xd5, &(0x7f0000001e40)=@string={0xd5, 0x3, "a7deba6ea2fa0b991910d4e9b288cc50e22d9b6cf1a23870ad11625d6168208252d635827d4753dd73611b93d95f2f589553e74db41d789c34d14190ebdc53fba5251c5985a02f69c811cb274dfba3263241f32cc9a3e0cbe79b56aca7d82e1e7afbf288878c7ec921c570d7e4127b1b8f7633bf5ca6a98da2e863fa8e98f8dc1fbabaf5fea02f5076aa6f7de389c5ede8a5e53c22e6a126621853f98c2074150e8b8822e0745e2c5d758be3ce0afd8ac9e903541f6249d1bf7dfc13001fe1ddceff91d14036152fb019252625c782f7bf630d"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x68b1}}, {0x55, &(0x7f0000001f80)=@string={0x55, 0x3, "b9c7ddac8ed03fc19778684673376f90b2f9e651df739727bbcfa00e74b5ffd3650153d2232f2938a32a1a706913893c640a3b4aa7f65677fe1be4f5c7128288736bb76f7431db68024457d4f03ed470312380"}}]}) syz_usb_control_io(r3, &(0x7f0000002400)={0x2c, &(0x7f0000002080)={0x0, 0xb, 0xf8, {0xf8, 0x8, "416983b0469f9dfd63414a24220b0b097fa2794f7f47fb2ad7ee19ff94fec853f3c9898dd2f95023d93058c039f7f9ef1b32097e59efa3fb1968d081575aa435765a0858577390c1f3c68acff11c4daf0fc554cf574e4501e49787992fd7bb0d0ca7ce1ec037313c24df9506c09cc7453a0150c40c98c8af0076ea1ea25ba5b0363d1ec6484ceb210240c5ee5705f7c7c06051765af10d2d524720b61c49f42705076615194d6531cc23b9ed66aa6b9ae620579740925c7fd66da5e6eb9674007896d1dcaeae2b39e2c7e3b5c04236ab4678ccdb6063460613cb5b969ef5b3f3361368f2a4413c0f02e832be461f40be35f18f19692e"}}, &(0x7f0000002180)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "6a051f3bdb46396f4397e231d49dec76fe4412b2a073aa8905021cd5207aab94289883269fe3ded2d2e5d22f49def566b534653f583fd01d8432f715a9a97a60c1884ac2203c16d52fb19be3d0c4bc499c68f2b051dc4f8826d253651948804453f0b68d249322416f5fce81045e8a40153b173ab59ca4a0aa3d7af2273bc50ee57c6b0c4428c4c73d"}}, &(0x7f0000002240)={0x0, 0xf, 0x11e, {0x5, 0xf, 0x11e, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x3, 0xf, 0x7f, [0xff0000]}, @generic={0xd6, 0x10, 0x2, "18df37710239e99d7fcf91bfaea34e57a39fe3395742fb1be8eea869560a855d39995ad3070aa4fa6d8190975eabf8e54aea29c1f879dc4f66d25f810753298a1daa82833a57c3703f06929ea989b7d538cff82cb4624ecf06720dfe7562a7e6c1fda23eb075b2624e4dfd486a0101041d01cae78d2e1c9c033b961315b93ad5292a03391cc9d6e657e5297254916db47c537d1979656f287ade73c32fcb8ac519472d0d52534aecab05f2ba5fffcfc67051c95b92a4675ffcc00cc70d72c0b75bf958f2778ad413036b2e7f253172a38d9dcb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "d48b46900e997ca1a0e99ab52a8546d9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x20, 0x6b, 0x100, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0x6, 0x200}]}}, &(0x7f0000002380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x57, 0x2, "d9edb3f5", "31b8a666"}}, &(0x7f00000023c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x60, 0x3, 0x0, 0xfa, 0x8001, 0x40}}}, &(0x7f00000028c0)={0x84, &(0x7f0000002440)={0x0, 0x3f, 0x99, "8450975c9f4c799d446501ec9b90cc75efbb3dea869ca3eb99df5793e6a4d74d592cbe3a535baafe9caa6469b9374745b7550e93a096963e4c61f4bc10217253b63ed1621b77cc74826c815d0d7fdd4819df37479bbe10c3e159fa84ab8aa4633ae989d804e744f650a081236d3c91c825ed846492aaedcd5a4c2061642424887233f69f0560d57a98bcf226a8575b133a8b422f3bccca0d4f"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002580)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000025c0)={0x20, 0x0, 0x8, {0x120, 0x40, [0xf0]}}, &(0x7f0000002600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000002640)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000002680)={0x40, 0xb, 0x2, '\f+'}, &(0x7f00000026c0)={0x40, 0xf, 0x2, 0x667}, &(0x7f0000002700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002740)={0x40, 0x17, 0x6, @local}, &(0x7f0000002780)={0x40, 0x19, 0x2, "94bc"}, &(0x7f00000027c0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000002800)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000002840)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000002880)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000001880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x250, 0x0, 0x0, 0x0, 0xff, 0x20}, 0x5, &(0x7f0000001900)={0x5, 0xf, 0x5}, 0x4, [{0x2a, &(0x7f0000001940)=@string={0x2a, 0x3, "7ed76cf9e52a99e050d7e893a2206a72c3806bca222636a8062bc02dd2c405ceaf94c19d47c837c3"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x403}}, {0xff, &(0x7f00000019c0)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x406}}]}) [ 819.569084][ T6684] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 819.576797][ T6684] loop2: detected capacity change from 0 to 16 [ 819.584356][ T6684] erofs: (device loop2): mounted with root inode @ nid 36. [ 819.601584][ T6691] FAULT_INJECTION: forcing a failure. [ 819.601584][ T6691] name failslab, interval 1, probability 0, space 0, times 0 [ 819.614048][ T6691] CPU: 1 PID: 6691 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 819.623958][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 819.633938][ T6691] Call Trace: [ 819.637073][ T6691] [ 819.639844][ T6691] dump_stack_lvl+0x151/0x1b7 [ 819.644363][ T6691] ? bfq_pos_tree_add_move+0x43e/0x43e [ 819.649655][ T6691] dump_stack+0x15/0x17 [ 819.653640][ T6691] should_fail+0x3c0/0x510 [ 819.656998][ T3394] usb 5-1: device descriptor read/64, error 18 [ 819.657980][ T6691] __should_failslab+0x9f/0xe0 [ 819.658004][ T6691] should_failslab+0x9/0x20 [ 819.672915][ T6691] kmem_cache_alloc+0x4f/0x2f0 [ 819.677517][ T6691] ? security_file_alloc+0x29/0x140 [ 819.682552][ T6691] security_file_alloc+0x29/0x140 [ 819.687415][ T6691] __alloc_file+0xb1/0x2a0 [ 819.691658][ T6691] alloc_empty_file+0xac/0x1b0 [ 819.696264][ T6691] path_openat+0xff/0x2ea0 [ 819.700510][ T6691] ? stack_trace_save+0x12d/0x1f0 [ 819.705373][ T6691] ? __stack_depot_save+0x34/0x4b0 [ 819.710319][ T6691] ? __kasan_slab_alloc+0xc4/0xe0 [ 819.715175][ T6691] ? getname_flags+0xba/0x510 [ 819.719691][ T6691] ? getname+0x19/0x20 [ 819.723598][ T6691] ? do_filp_open+0x4f0/0x4f0 [ 819.728108][ T6691] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 819.734014][ T6691] do_filp_open+0x277/0x4f0 [ 819.738381][ T6691] ? vfs_tmpfile+0x290/0x290 [ 819.742801][ T6691] do_sys_openat2+0x13b/0x500 [ 819.747295][ T6691] ? userfaultfd_unmap_prep+0x4d0/0x4d0 [ 819.752680][ T6691] ? do_sys_open+0x220/0x220 [ 819.757101][ T6691] __x64_sys_openat+0x243/0x290 [ 819.761800][ T6691] ? __ia32_sys_open+0x270/0x270 17:23:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 10) [ 819.766562][ T6691] ? debug_smp_processor_id+0x17/0x20 [ 819.771775][ T6691] do_syscall_64+0x44/0xd0 [ 819.776021][ T6691] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 819.777077][ T3394] usb usb5-port1: attempt power cycle [ 819.781749][ T6691] RIP: 0033:0x7fe9fd681234 [ 819.781770][ T6691] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 819.781786][ T6691] RSP: 002b:00007fe9fc420ec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 17:23:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2ffb8eaf}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x6, 0x2, 0x5, 0x0, 0xffffff81}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff}, @map_fd={0x18, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 819.818906][ T6691] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd681234 [ 819.826710][ T6691] RDX: 0000000000000002 RSI: 00007fe9fc420fe0 RDI: 00000000ffffff9c [ 819.834528][ T6691] RBP: 00007fe9fc420fe0 R08: 0000000000000000 R09: 0000000000000178 [ 819.842331][ T6691] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 819.850157][ T6691] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 819.858046][ T6691] [ 819.945966][ T6696] loop1: detected capacity change from 0 to 16 [ 819.957611][ T6696] erofs: (device loop1): mounted with root inode @ nid 36. [ 819.977054][ T1762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.990177][ T1762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.000024][ T1762] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 820.009276][ T6698] FAULT_INJECTION: forcing a failure. [ 820.009276][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 820.021797][ T1754] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 820.029432][ T1762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.038013][ T6698] CPU: 1 PID: 6698 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 820.048005][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 820.057894][ T6698] Call Trace: [ 820.061120][ T6698] [ 820.063914][ T6698] dump_stack_lvl+0x151/0x1b7 [ 820.068414][ T6698] ? bfq_pos_tree_add_move+0x43e/0x43e [ 820.073712][ T6698] ? __alloc_pages+0x3a8/0x7c0 [ 820.078309][ T6698] dump_stack+0x15/0x17 [ 820.082302][ T6698] should_fail+0x3c0/0x510 [ 820.086559][ T6698] __should_failslab+0x9f/0xe0 [ 820.091167][ T6698] should_failslab+0x9/0x20 [ 820.095522][ T6698] kmem_cache_alloc+0x4f/0x2f0 [ 820.100094][ T6698] ? __anon_vma_prepare+0x56/0x430 [ 820.105049][ T6698] __anon_vma_prepare+0x56/0x430 [ 820.109814][ T6698] wp_page_copy+0x1275/0x1920 [ 820.114326][ T6698] ? __pte_map_lock+0x47e/0x660 [ 820.119014][ T6698] ? __kasan_check_write+0x14/0x20 [ 820.123962][ T6698] ? _raw_spin_lock+0xa3/0x1b0 [ 820.128563][ T6698] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 820.134385][ T6698] ? __pte_map_lock+0x47e/0x660 [ 820.139063][ T6698] ? vm_normal_page+0x1e1/0x1f0 [ 820.143750][ T6698] do_wp_page+0x7a4/0xb40 [ 820.147921][ T6698] handle_pte_fault+0x547/0x11d0 [ 820.152691][ T6698] ? __kasan_slab_alloc+0xb2/0xe0 [ 820.157548][ T6698] ? kmem_cache_alloc+0x189/0x2f0 [ 820.162410][ T6698] ? vm_area_alloc+0x24/0x130 [ 820.166926][ T6698] ? do_syscall_64+0x44/0xd0 [ 820.171352][ T6698] ? cgroup_rstat_updated+0xe5/0x380 [ 820.176476][ T6698] ? fault_around_bytes_set+0xc0/0xc0 [ 820.181682][ T6698] do_handle_mm_fault+0x2073/0x2370 [ 820.186723][ T6698] ? numa_migrate_prep+0xe0/0xe0 [ 820.191491][ T6698] ? mmap_region+0xf9c/0x1af0 [ 820.196000][ T6698] ? __kasan_check_write+0x14/0x20 [ 820.200950][ T6698] ? down_read_trylock+0x17a/0x1d0 [ 820.205896][ T6698] ? __init_rwsem+0x1c0/0x1c0 [ 820.210413][ T6698] ? __find_vma+0x30/0x150 [ 820.214661][ T6698] do_user_addr_fault+0x6ca/0x1220 [ 820.219609][ T6698] ? do_kern_addr_fault+0x80/0x80 [ 820.224469][ T6698] ? vm_mmap_pgoff+0x26a/0x420 [ 820.229069][ T6698] ? debug_smp_processor_id+0x17/0x20 [ 820.234275][ T6698] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 820.240180][ T6698] ? exit_to_user_mode_prepare+0x2b/0x40 [ 820.245646][ T6698] exc_page_fault+0x68/0x1a0 [ 820.250162][ T6698] asm_exc_page_fault+0x27/0x30 [ 820.254847][ T6698] RIP: 0033:0x7fd49bf970c0 [ 820.259102][ T6698] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 820.278543][ T6698] RSP: 002b:00007fd49ad2a600 EFLAGS: 00010206 [ 820.284452][ T6698] RAX: 0000000000000400 RBX: 00007fd49ad2a660 RCX: 000000000000002d 17:23:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 820.292258][ T6698] RDX: 00007fd49290b000 RSI: 000000000000004f RDI: 00007fd49ad2a700 [ 820.300063][ T6698] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000c6 [ 820.307876][ T6698] R10: 0000000000000010 R11: 00007fd49ad2a660 R12: 00007fd49ad2a670 [ 820.315690][ T6698] R13: 00007fd49ad2a700 R14: 0000000000000001 R15: 00000000000000e2 [ 820.323506][ T6698] [ 820.326743][ T1762] usb 1-1: config 0 descriptor?? [ 820.328114][ T6698] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 820.364188][ T6698] loop2: detected capacity change from 0 to 16 [ 820.397217][ T3394] usb 5-1: new high-speed USB device number 32 using dummy_hcd 17:23:45 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 26) [ 820.407912][ T6698] erofs: (device loop2): mounted with root inode @ nid 36. [ 820.503283][ T6704] FAULT_INJECTION: forcing a failure. [ 820.503283][ T6704] name failslab, interval 1, probability 0, space 0, times 0 [ 820.515773][ T6704] CPU: 1 PID: 6704 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 820.525682][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 820.535579][ T6704] Call Trace: [ 820.538700][ T6704] [ 820.541482][ T6704] dump_stack_lvl+0x151/0x1b7 [ 820.545990][ T6704] ? bfq_pos_tree_add_move+0x43e/0x43e [ 820.551287][ T6704] dump_stack+0x15/0x17 [ 820.555277][ T6704] should_fail+0x3c0/0x510 [ 820.559530][ T6704] ? alloc_workqueue+0x1d0/0x11d0 [ 820.564390][ T6704] __should_failslab+0x9f/0xe0 [ 820.568996][ T6704] should_failslab+0x9/0x20 [ 820.573332][ T6704] kmem_cache_alloc_trace+0x4a/0x310 [ 820.578453][ T6704] ? alloc_workqueue+0x156/0x11d0 [ 820.583313][ T6704] alloc_workqueue+0x1d0/0x11d0 [ 820.588001][ T6704] ? stack_trace_save+0x1f0/0x1f0 [ 820.592866][ T6704] ? _raw_spin_unlock+0x4d/0x70 [ 820.597556][ T6704] ? bd_prepare_to_claim+0x388/0x420 [ 820.602668][ T6704] ? loop_attr_do_show_dio+0xc0/0xc0 [ 820.607787][ T6704] ? loop_configure+0x7f6/0x1640 [ 820.612562][ T6704] ? apply_workqueue_attrs+0x720/0x720 [ 820.617857][ T6704] ? loop_set_status_from_info+0x5fd/0x7a0 [ 820.623496][ T6704] loop_configure+0x8c7/0x1640 [ 820.628098][ T6704] lo_ioctl+0x8cd/0x25e0 [ 820.632177][ T6704] ? is_bpf_text_address+0x1a2/0x1c0 [ 820.637298][ T6704] ? lo_release+0x200/0x200 [ 820.641637][ T6704] ? stack_trace_save+0x1f0/0x1f0 [ 820.646499][ T6704] ? __kernel_text_address+0x9a/0x110 [ 820.651705][ T6704] ? unwind_get_return_address+0x4c/0x90 [ 820.657169][ T6704] ? arch_stack_walk+0xf8/0x140 [ 820.661871][ T6704] ? avc_has_perm_noaudit+0x358/0x450 [ 820.667067][ T6704] ? memcpy+0x56/0x70 [ 820.670975][ T6704] ? memset+0x35/0x40 [ 820.674791][ T6704] ? fsnotify+0x5ad/0x2240 [ 820.679047][ T6704] ? __kasan_check_write+0x14/0x20 [ 820.683990][ T6704] ? _raw_spin_lock+0xa3/0x1b0 [ 820.688591][ T6704] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 820.693804][ T6704] ? _raw_spin_unlock+0x4d/0x70 [ 820.698486][ T6704] ? find_inode_fast+0x459/0x480 17:23:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2ffb8eaf}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @generic={0x6, 0x2, 0x5, 0x0, 0xffffff81}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff}, @map_fd={0x18, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 820.703261][ T6704] ? __kasan_check_write+0x14/0x20 [ 820.708204][ T6704] ? mutex_unlock+0xa2/0x110 [ 820.712632][ T6704] ? __mutex_lock_slowpath+0x10/0x10 [ 820.718542][ T6704] ? is_bpf_text_address+0x1a2/0x1c0 [ 820.723666][ T6704] ? is_module_text_address+0xe1/0x140 [ 820.728951][ T6704] ? stack_trace_save+0x1f0/0x1f0 [ 820.733813][ T6704] ? __kernel_text_address+0x9a/0x110 [ 820.739026][ T6704] ? unwind_get_return_address+0x4c/0x90 [ 820.744495][ T6704] ? arch_stack_walk+0xf8/0x140 [ 820.749182][ T6704] ? stack_trace_save+0x12d/0x1f0 17:23:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 11) [ 820.754041][ T6704] ? stack_trace_snprint+0x100/0x100 [ 820.759150][ T6704] ? avc_has_extended_perms+0x718/0x1210 [ 820.764622][ T6704] ? memcpy+0x56/0x70 [ 820.768441][ T6704] ? avc_has_extended_perms+0xb9c/0x1210 [ 820.773908][ T6704] ? kasan_set_track+0x4c/0x70 [ 820.778512][ T6704] ? kasan_set_free_info+0x23/0x40 [ 820.783453][ T6704] ? ____kasan_slab_free+0x126/0x160 [ 820.788577][ T6704] ? __kasan_slab_free+0x11/0x20 [ 820.793352][ T6704] ? slab_free_freelist_hook+0xc9/0x1a0 [ 820.798731][ T6704] ? kmem_cache_free+0x11a/0x2e0 [ 820.803504][ T6704] ? putname+0x10b/0x160 [ 820.807584][ T6704] ? avc_flush+0x2b0/0x2b0 [ 820.811839][ T6704] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 820.817913][ T6704] ? blkdev_common_ioctl+0x570/0x1ec0 [ 820.823115][ T6704] ? kasan_quarantine_put+0x34/0x1b0 [ 820.828237][ T6704] ? blkdev_bszset+0x240/0x240 [ 820.832838][ T6704] ? ioctl_has_perm+0x3df/0x560 [ 820.837529][ T6704] ? has_cap_mac_admin+0xb0/0xb0 [ 820.842302][ T6704] ? kmem_cache_free+0x11a/0x2e0 [ 820.847074][ T6704] ? putname+0x10b/0x160 [ 820.851154][ T6704] ? selinux_file_ioctl+0x3c9/0x530 [ 820.856187][ T6704] ? lo_release+0x200/0x200 [ 820.860525][ T6704] blkdev_ioctl+0x2e9/0x620 [ 820.864873][ T6704] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 820.870161][ T6704] ? __fget_files+0x310/0x370 [ 820.874684][ T6704] block_ioctl+0xb0/0xf0 [ 820.878754][ T6704] ? blkdev_iopoll+0x100/0x100 [ 820.883352][ T6704] __se_sys_ioctl+0x115/0x190 [ 820.887878][ T6704] __x64_sys_ioctl+0x7b/0x90 [ 820.892294][ T6704] do_syscall_64+0x44/0xd0 [ 820.896548][ T6704] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 820.902273][ T6704] RIP: 0033:0x7fe9fd6cee97 [ 820.906527][ T6704] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 820.925970][ T6704] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.934275][ T6704] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 820.942026][ T6704] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 820.949838][ T6704] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 820.957656][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.965458][ T6704] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 820.973274][ T6704] [ 821.012360][ T1762] lg-g15 0003:046D:C225.007C: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 821.056784][ T6711] loop1: detected capacity change from 0 to 16 [ 821.063772][ T6711] erofs: (device loop1): mounted with root inode @ nid 36. [ 821.117040][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.127972][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.129803][ T6713] FAULT_INJECTION: forcing a failure. [ 821.129803][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 821.137958][ T1754] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 821.159138][ T1754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.170409][ T1754] usb 4-1: config 0 descriptor?? [ 821.180807][ T6713] CPU: 1 PID: 6713 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 821.190788][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 821.200675][ T6713] Call Trace: [ 821.203798][ T6713] [ 821.206577][ T6713] dump_stack_lvl+0x151/0x1b7 [ 821.211088][ T6713] ? bfq_pos_tree_add_move+0x43e/0x43e [ 821.216384][ T6713] dump_stack+0x15/0x17 [ 821.220377][ T6713] should_fail+0x3c0/0x510 [ 821.224630][ T6713] __should_failslab+0x9f/0xe0 [ 821.229236][ T6713] should_failslab+0x9/0x20 [ 821.233742][ T6713] kmem_cache_alloc+0x4f/0x2f0 [ 821.238341][ T6713] ? __anon_vma_prepare+0xa3/0x430 [ 821.243376][ T6713] __anon_vma_prepare+0xa3/0x430 [ 821.248149][ T6713] wp_page_copy+0x1275/0x1920 [ 821.252662][ T6713] ? __pte_map_lock+0x47e/0x660 [ 821.257350][ T6713] ? __kasan_check_write+0x14/0x20 [ 821.262297][ T6713] ? _raw_spin_lock+0xa3/0x1b0 [ 821.266895][ T6713] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 821.272728][ T6713] ? __pte_map_lock+0x47e/0x660 [ 821.277406][ T6713] ? vm_normal_page+0x1e1/0x1f0 [ 821.282086][ T6713] do_wp_page+0x7a4/0xb40 [ 821.286255][ T6713] handle_pte_fault+0x547/0x11d0 [ 821.291027][ T6713] ? __kasan_slab_alloc+0xb2/0xe0 [ 821.295884][ T6713] ? kmem_cache_alloc+0x189/0x2f0 [ 821.300745][ T6713] ? vm_area_alloc+0x24/0x130 [ 821.305278][ T6713] ? do_syscall_64+0x44/0xd0 [ 821.309691][ T6713] ? cgroup_rstat_updated+0xe5/0x380 [ 821.314807][ T6713] ? fault_around_bytes_set+0xc0/0xc0 [ 821.320014][ T6713] do_handle_mm_fault+0x2073/0x2370 [ 821.325053][ T6713] ? numa_migrate_prep+0xe0/0xe0 [ 821.329930][ T6713] ? mmap_region+0xf9c/0x1af0 [ 821.334433][ T6713] ? __kasan_check_write+0x14/0x20 [ 821.339377][ T6713] ? down_read_trylock+0x17a/0x1d0 [ 821.344354][ T6713] ? __init_rwsem+0x1c0/0x1c0 [ 821.348839][ T6713] ? __find_vma+0x30/0x150 [ 821.353083][ T6713] do_user_addr_fault+0x6ca/0x1220 [ 821.358032][ T6713] ? do_kern_addr_fault+0x80/0x80 [ 821.362889][ T6713] ? vm_mmap_pgoff+0x26a/0x420 [ 821.367499][ T6713] ? debug_smp_processor_id+0x17/0x20 [ 821.372697][ T6713] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 821.378600][ T6713] ? exit_to_user_mode_prepare+0x2b/0x40 [ 821.384069][ T6713] exc_page_fault+0x68/0x1a0 [ 821.388498][ T6713] asm_exc_page_fault+0x27/0x30 [ 821.393207][ T6713] RIP: 0033:0x7fd49bf970c0 [ 821.397440][ T6713] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 821.416875][ T6713] RSP: 002b:00007fd49ad2a600 EFLAGS: 00010206 [ 821.422785][ T6713] RAX: 0000000000000400 RBX: 00007fd49ad2a660 RCX: 000000000000002d [ 821.430594][ T6713] RDX: 00007fd49290b000 RSI: 000000000000004f RDI: 00007fd49ad2a700 [ 821.438399][ T6713] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000c6 [ 821.446212][ T6713] R10: 0000000000000010 R11: 00007fd49ad2a660 R12: 00007fd49ad2a670 [ 821.454026][ T6713] R13: 00007fd49ad2a700 R14: 0000000000000001 R15: 00000000000000e2 [ 821.461838][ T6713] [ 821.464878][ T6713] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 821.467522][ T1762] usb 1-1: USB disconnect, device number 96 [ 821.475237][ T3394] usb 5-1: device not accepting address 32, error -71 [ 821.485828][ T6713] loop2: detected capacity change from 0 to 16 [ 821.492828][ T6713] erofs: (device loop2): mounted with root inode @ nid 36. [ 821.857026][ T3394] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 821.897653][ T6690] udc-core: couldn't find an available UDC or it's busy [ 821.897707][ T6715] udc-core: couldn't find an available UDC or it's busy [ 821.904422][ T6690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.918722][ T6715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.926366][ T6716] udc-core: couldn't find an available UDC or it's busy [ 821.933261][ T6716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:23:47 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 27) 17:23:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 12) 17:23:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close_range(0xffffffffffffffff, r2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x88, {0x88, 0xe, "b88057cf61e47aaa11272b529314a4c741c2fe18830c2ae7392d0bc88a2b9a820de526857c97a5cdce6e746e268adbdf4108d6f14cd6342058ff6979365c87bd5ebddbc11110d80e97b8f6ea575bc74e62fc596b57e3a908fff3c77130330b2cace144d600e1eba4bfaf20fb2b435130239af14b978d140848c01645475f24ce3d9263abbe14"}}, &(0x7f0000000140)={0x0, 0x3, 0x68, @string={0x68, 0x3, "c07b1a744bbd3e1ee547b1327d1215f15bd71346dee2b0eaaf4476d3e0fee7b8123932900831f16e698c2ae8d50fa3d75a3632bd1c60baee730d68f6273fc257a7eb5e927bb3127f3b2b185348bb9d9cf48257e7cf2b0ac8f7115b3e249335d0ff3ce1979e63"}}, &(0x7f0000002100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "b3ad9235"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9, 0x1, {0x22, 0x47e}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x6e, "b0bb9fb9ece3dfbe44f8b8710cacb919272c9f575413a34b4c90c1410c49d7ffc3fb035d235bff9a54702289563f99828c022755f69531d1854bdc107ad26226ed5e4f5aa5e2b161c609afafa2d8eecca618646130f2d55465f5cd225d39dce1757cdae029a8c518a319f7d4ea4c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x2a, "0f51b06d4e3a2824cb82295f2ddb0849dde980c6a8a5fa471bc51427789ac6a2e85cd4e46492f51d0000"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00224100dd0088"], 0x0}, 0x0) [ 821.941373][ T6716] udc-core: couldn't find an available UDC or it's busy [ 821.942890][ T1754] lg-g15 0003:046D:C225.007D: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 821.949329][ T3394] usb 5-1: Invalid ep0 maxpacket: 0 [ 821.960691][ T6716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.966262][ T3394] usb usb5-port1: unable to enumerate USB device [ 822.039800][ T6725] FAULT_INJECTION: forcing a failure. [ 822.039800][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 822.052328][ T6725] CPU: 1 PID: 6725 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 822.062302][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 822.072199][ T6725] Call Trace: [ 822.075320][ T6725] [ 822.078100][ T6725] dump_stack_lvl+0x151/0x1b7 [ 822.082611][ T6725] ? bfq_pos_tree_add_move+0x43e/0x43e [ 822.087905][ T6725] ? __stack_depot_save+0x34/0x4b0 [ 822.092852][ T6725] dump_stack+0x15/0x17 [ 822.096860][ T6725] should_fail+0x3c0/0x510 [ 822.101096][ T6725] ? apply_wqattrs_prepare+0x62/0x1290 [ 822.106391][ T6725] __should_failslab+0x9f/0xe0 [ 822.110991][ T6725] should_failslab+0x9/0x20 [ 822.115331][ T6725] kmem_cache_alloc_trace+0x4a/0x310 [ 822.120454][ T6725] apply_wqattrs_prepare+0x62/0x1290 [ 822.125575][ T6725] ? __kasan_check_write+0x14/0x20 [ 822.130521][ T6725] ? mutex_lock+0xb6/0x130 [ 822.134773][ T6725] ? wait_for_completion_killable_timeout+0x10/0x10 [ 822.141283][ T6725] ? vsnprintf+0x1c02/0x1ce0 [ 822.141990][ T3394] usb 4-1: USB disconnect, device number 79 [ 822.145706][ T6725] apply_workqueue_attrs+0x149/0x720 [ 822.145735][ T6725] ? alloc_workqueue_attrs+0xc0/0xc0 [ 822.161679][ T6725] ? ptr_to_hashval+0x60/0x60 [ 822.166191][ T6725] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 822.171578][ T6725] ? preempt_count_add+0x90/0x1a0 [ 822.176433][ T6725] alloc_workqueue+0xcc1/0x11d0 [ 822.181124][ T6725] ? stack_trace_save+0x1f0/0x1f0 [ 822.186003][ T6725] ? loop_configure+0x7f6/0x1640 [ 822.190753][ T6725] ? apply_workqueue_attrs+0x720/0x720 [ 822.196049][ T6725] ? loop_set_status_from_info+0x5fd/0x7a0 [ 822.201691][ T6725] loop_configure+0x8c7/0x1640 [ 822.206294][ T6725] lo_ioctl+0x8cd/0x25e0 [ 822.210370][ T6725] ? is_bpf_text_address+0x1a2/0x1c0 [ 822.215490][ T6725] ? lo_release+0x200/0x200 [ 822.219829][ T6725] ? stack_trace_save+0x1f0/0x1f0 [ 822.224711][ T6725] ? __kernel_text_address+0x9a/0x110 [ 822.229913][ T6725] ? unwind_get_return_address+0x4c/0x90 [ 822.235453][ T6725] ? arch_stack_walk+0xf8/0x140 [ 822.240140][ T6725] ? avc_has_perm_noaudit+0x358/0x450 [ 822.245349][ T6725] ? memcpy+0x56/0x70 [ 822.249164][ T6725] ? memset+0x35/0x40 [ 822.252985][ T6725] ? fsnotify+0x5ad/0x2240 [ 822.257237][ T6725] ? __kasan_check_write+0x14/0x20 [ 822.262194][ T6725] ? _raw_spin_lock+0xa3/0x1b0 [ 822.266788][ T6725] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 822.272006][ T6725] ? _raw_spin_unlock+0x4d/0x70 [ 822.277198][ T6725] ? find_inode_fast+0x459/0x480 [ 822.281973][ T6725] ? __kasan_check_write+0x14/0x20 [ 822.286920][ T6725] ? mutex_unlock+0xa2/0x110 [ 822.291348][ T6725] ? __mutex_lock_slowpath+0x10/0x10 [ 822.296475][ T6725] ? is_bpf_text_address+0x1a2/0x1c0 [ 822.301594][ T6725] ? is_module_text_address+0xe1/0x140 [ 822.306892][ T6725] ? stack_trace_save+0x1f0/0x1f0 [ 822.311742][ T6725] ? __kernel_text_address+0x9a/0x110 [ 822.316951][ T6725] ? unwind_get_return_address+0x4c/0x90 [ 822.322440][ T6725] ? arch_stack_walk+0xf8/0x140 [ 822.327225][ T6725] ? stack_trace_save+0x12d/0x1f0 [ 822.332525][ T6725] ? stack_trace_snprint+0x100/0x100 [ 822.337634][ T6725] ? avc_has_extended_perms+0x718/0x1210 [ 822.343454][ T6725] ? memcpy+0x56/0x70 [ 822.347270][ T6725] ? avc_has_extended_perms+0xb9c/0x1210 [ 822.352735][ T6725] ? kasan_set_track+0x4c/0x70 [ 822.357336][ T6725] ? kasan_set_free_info+0x23/0x40 [ 822.362282][ T6725] ? ____kasan_slab_free+0x126/0x160 [ 822.367404][ T6725] ? __kasan_slab_free+0x11/0x20 [ 822.372178][ T6725] ? slab_free_freelist_hook+0xc9/0x1a0 [ 822.377558][ T6725] ? kmem_cache_free+0x11a/0x2e0 [ 822.382346][ T6725] ? putname+0x10b/0x160 [ 822.386413][ T6725] ? avc_flush+0x2b0/0x2b0 [ 822.390663][ T6725] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 822.395276][ T6725] ? blkdev_common_ioctl+0x570/0x1ec0 [ 822.400473][ T6725] ? kasan_quarantine_put+0x34/0x1b0 [ 822.405593][ T6725] ? blkdev_bszset+0x240/0x240 [ 822.410368][ T6725] ? ioctl_has_perm+0x3df/0x560 [ 822.415052][ T6725] ? has_cap_mac_admin+0xb0/0xb0 [ 822.419835][ T6725] ? kmem_cache_free+0x11a/0x2e0 [ 822.424602][ T6725] ? putname+0x10b/0x160 [ 822.428681][ T6725] ? selinux_file_ioctl+0x3c9/0x530 [ 822.433714][ T6725] ? lo_release+0x200/0x200 [ 822.438056][ T6725] blkdev_ioctl+0x2e9/0x620 [ 822.442397][ T6725] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 822.447685][ T6725] ? __fget_files+0x310/0x370 [ 822.452203][ T6725] block_ioctl+0xb0/0xf0 [ 822.456279][ T6725] ? blkdev_iopoll+0x100/0x100 [ 822.460878][ T6725] __se_sys_ioctl+0x115/0x190 [ 822.465393][ T6725] __x64_sys_ioctl+0x7b/0x90 [ 822.469825][ T6725] do_syscall_64+0x44/0xd0 [ 822.474075][ T6725] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 822.479801][ T6725] RIP: 0033:0x7fe9fd6cee97 [ 822.484056][ T6725] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 822.503669][ T6725] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.512000][ T6725] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 822.519813][ T6725] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 822.527633][ T6725] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 822.535436][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.543245][ T6725] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 822.551073][ T6725] [ 822.557793][ T6728] FAULT_INJECTION: forcing a failure. [ 822.557793][ T6728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.576768][ T6726] loop1: detected capacity change from 0 to 16 [ 822.594183][ T6726] erofs: (device loop1): mounted with root inode @ nid 36. [ 822.618114][ T6728] CPU: 0 PID: 6728 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 822.628185][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 822.638080][ T6728] Call Trace: [ 822.641205][ T6728] [ 822.643981][ T6728] dump_stack_lvl+0x151/0x1b7 [ 822.648497][ T6728] ? bfq_pos_tree_add_move+0x43e/0x43e [ 822.653791][ T6728] dump_stack+0x15/0x17 [ 822.657783][ T6728] should_fail+0x3c0/0x510 [ 822.662037][ T6728] should_fail_alloc_page+0x58/0x70 [ 822.667070][ T6728] __alloc_pages+0x1de/0x7c0 [ 822.671668][ T6728] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 822.677920][ T6728] ? __count_vm_events+0x30/0x30 [ 822.682700][ T6728] ? up_write+0x56/0x120 [ 822.686774][ T6728] ? __anon_vma_prepare+0x36c/0x430 [ 822.691809][ T6728] wp_page_copy+0x1d9/0x1920 [ 822.696237][ T6728] ? __kasan_check_write+0x14/0x20 [ 822.701176][ T6728] ? _raw_spin_lock+0xa3/0x1b0 [ 822.705777][ T6728] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 822.711600][ T6728] ? __pte_map_lock+0x47e/0x660 [ 822.716278][ T6728] ? vm_normal_page+0x1e1/0x1f0 [ 822.720965][ T6728] do_wp_page+0x7a4/0xb40 [ 822.725133][ T6728] handle_pte_fault+0x547/0x11d0 [ 822.729907][ T6728] ? irqentry_exit_cond_resched+0x2b/0x30 [ 822.735465][ T6728] ? cgroup_rstat_updated+0xe5/0x380 [ 822.740582][ T6728] ? fault_around_bytes_set+0xc0/0xc0 [ 822.745789][ T6728] do_handle_mm_fault+0x2073/0x2370 [ 822.750827][ T6728] ? numa_migrate_prep+0xe0/0xe0 [ 822.755600][ T6728] ? rwsem_mark_wake+0x644/0x7e0 [ 822.760371][ T6728] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 822.766449][ T6728] ? __kasan_check_write+0x14/0x20 [ 822.771395][ T6728] ? down_read_trylock+0x17a/0x1d0 [ 822.776341][ T6728] ? __init_rwsem+0x1c0/0x1c0 [ 822.780855][ T6728] ? __find_vma+0x30/0x150 [ 822.785109][ T6728] do_user_addr_fault+0x6ca/0x1220 [ 822.790057][ T6728] ? do_kern_addr_fault+0x80/0x80 [ 822.794915][ T6728] ? vm_mmap_pgoff+0x26a/0x420 [ 822.799517][ T6728] ? switch_fpu_return+0xe/0x10 [ 822.804201][ T6728] ? exit_to_user_mode_prepare+0x2b/0x40 [ 822.809820][ T6728] exc_page_fault+0x68/0x1a0 [ 822.814241][ T6728] asm_exc_page_fault+0x27/0x30 [ 822.818919][ T6728] RIP: 0033:0x7fd49bf970c0 [ 822.823187][ T6728] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 822.842614][ T6728] RSP: 002b:00007fd49ad2a600 EFLAGS: 00010206 [ 822.848517][ T6728] RAX: 0000000000000400 RBX: 00007fd49ad2a660 RCX: 000000000000002d [ 822.856326][ T6728] RDX: 00007fd49290b000 RSI: 000000000000004f RDI: 00007fd49ad2a700 [ 822.864147][ T6728] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000c6 [ 822.871957][ T6728] R10: 0000000000000010 R11: 00007fd49ad2a660 R12: 00007fd49ad2a670 [ 822.879765][ T6728] R13: 00007fd49ad2a700 R14: 0000000000000001 R15: 00000000000000e2 [ 822.887580][ T6728] 17:23:48 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 28) [ 822.896574][ T6728] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 822.907940][ T6728] loop2: detected capacity change from 0 to 16 17:23:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x63, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x1, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x81, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x3f, 0x20, 0x0, 0x8, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x145b}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "a58b0867ddd67052d8b91b79c827f61f238ce6c7bba645b8c1bd166095691c83ca9c3afa8e009d2628eb6da9076d0375ec12fc33a191c7f978ed1425ec21306b204a044dfcc52c4ce03e12a829ffaab64302fcba7e701fa63797c62cc1034fc7baead54acf27273a2c3c97d06e8ba6fc150f18e5a516b7e1de96c18c386c441ffbe858b3153d5dcac9e0ab7692753ece817b4dc92b2a6bc5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000f220000000033a50d51772f64000cb35760122220009058103"], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000380)={0x20, 0x8, 0x27, {0x27, 0x6, "bffb5010b6d916ca31a8bd0918006710665e22d9bf47e1efbd8fd2d66a282adae1f4dea4f2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000400)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0xc, "8da98d58"}, @main=@item_4={0x3, 0x0, 0x8, "c14c4aca"}, @local=@item_012={0x1, 0x2, 0x7, "10"}, @local=@item_4={0x3, 0x2, 0x4, "90420b02"}, @local=@item_4={0x3, 0x2, 0x3, "1f4ca8fe"}, @local=@item_4={0x3, 0x2, 0x3, "337cd27d"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xfb, 0x1, {0x22, 0xbe1}}}}, &(0x7f0000000680)={0xfffffffffffffe7a, &(0x7f00000004c0)={0x20, 0x0, 0x73, "d937ba37fb456cf64240877905c1260748821d3c13fba9bb6dc4bcb1e3b1892e5b042c626529e31ee1ea70a428c64ea7ab2186fdca6e68d3205b9bc7215d5d662ed14e8fb87706377d8b6e8ad64be10afbe86edd44218a70984433631ed3102cbd1eca0c7d4adc4cd31dbeed9f2aeb7f32742f"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x1, 0x68, "626725ab9375e234b4c0928e96e338d0feda7daef518c5b7be030d4f413ddf4852d9d1c94fcd9c1bd8ab24064d6c2beda8088602cb2116ff443f13c6d9ea9087cacb764987a62b96aa1156e991c0a1d8265789d8a7dccaa30883eefc6c81e806e6864457e31b74c2"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x24, &(0x7f00000006c0)={0x20, 0x2, 0x6d, {0x6d, 0x2, "3cba37f775a834c70f116cba833d740fa16cd6af546186fe937ed178c6251c46f1d8e388de53bbb4009aef017304656cc23da597b629646e25dacfb58b585a9f4be908f635638b25407f28e4f8eac634dc3d4efba7f32da474be87b0ab7c0b64c7069d259780a8793ad677"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000780)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x7, "19"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4da}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x10, 0x90, "16ed9af22ee7b18be1876f28464dbe4b960fb57703a4da5a82004e6e342d72682c394cbd36836555bb06386124a0cfe188933faf71f34bb2aa319e440991de33923cbcf5c4d12b75ded6f7f0790a42ca5e5404e9dd9077795febcc2d99cdd501821255c8b45582c47cecd0aee198b5dbc58168d7fc3879aada406143f4c134b62fff3ac8f0e6f2345c52662e70be199a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x1, 0xb2, "27c160cdb9653c892571f3a611fbd134c695956023b93fc1601f4211bf36b0256701116a6f8b2771412466652afa3581e8ad96c445e5cc52196443d6aed167dc44719826fe35a52d363c21a045c2fcf78d5342f266e846539d22c9f754df21af85778d5cc23ac23de441093f7ca8b7121b60453a39ccda6ee448c4f4ee7fe303e6306e57bb9e92a5ffd5c52d9c0366a0908ff434d629f4522223defe821d536951434eba547fbef42e55bb543f4487fbbcdd"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0xef}}) 17:23:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 822.954801][ T6728] erofs: (device loop2): mounted with root inode @ nid 36. [ 822.957029][ T1754] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 823.021780][ T6734] FAULT_INJECTION: forcing a failure. [ 823.021780][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 823.034297][ T6734] CPU: 0 PID: 6734 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 823.044160][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.054141][ T6734] Call Trace: [ 823.057266][ T6734] [ 823.060038][ T6734] dump_stack_lvl+0x151/0x1b7 [ 823.064555][ T6734] ? bfq_pos_tree_add_move+0x43e/0x43e [ 823.069851][ T6734] dump_stack+0x15/0x17 [ 823.073838][ T6734] should_fail+0x3c0/0x510 [ 823.078096][ T6734] ? apply_wqattrs_prepare+0x99/0x1290 [ 823.083394][ T6734] __should_failslab+0x9f/0xe0 [ 823.087995][ T6734] should_failslab+0x9/0x20 [ 823.092415][ T6734] kmem_cache_alloc_trace+0x4a/0x310 [ 823.097534][ T6734] ? apply_wqattrs_prepare+0x62/0x1290 [ 823.102829][ T6734] apply_wqattrs_prepare+0x99/0x1290 [ 823.107948][ T6734] ? __kasan_check_write+0x14/0x20 [ 823.112901][ T6734] ? mutex_lock+0xb6/0x130 [ 823.117152][ T6734] ? wait_for_completion_killable_timeout+0x10/0x10 [ 823.123574][ T6734] ? vsnprintf+0x1c02/0x1ce0 [ 823.128001][ T6734] apply_workqueue_attrs+0x149/0x720 [ 823.133130][ T6734] ? alloc_workqueue_attrs+0xc0/0xc0 [ 823.138240][ T6734] ? ptr_to_hashval+0x60/0x60 [ 823.142753][ T6734] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 823.148133][ T6734] ? preempt_count_add+0x90/0x1a0 [ 823.152995][ T6734] alloc_workqueue+0xcc1/0x11d0 [ 823.157681][ T6734] ? stack_trace_save+0x1f0/0x1f0 [ 823.162546][ T6734] ? loop_configure+0x7f6/0x1640 [ 823.167313][ T6734] ? apply_workqueue_attrs+0x720/0x720 [ 823.172611][ T6734] ? loop_set_status_from_info+0x5fd/0x7a0 [ 823.178252][ T6734] loop_configure+0x8c7/0x1640 [ 823.182854][ T6734] lo_ioctl+0x8cd/0x25e0 [ 823.186932][ T6734] ? is_bpf_text_address+0x1a2/0x1c0 [ 823.192053][ T6734] ? lo_release+0x200/0x200 [ 823.196396][ T6734] ? stack_trace_save+0x1f0/0x1f0 [ 823.201253][ T6734] ? __kernel_text_address+0x9a/0x110 [ 823.206463][ T6734] ? unwind_get_return_address+0x4c/0x90 [ 823.211926][ T6734] ? arch_stack_walk+0xf8/0x140 [ 823.216614][ T6734] ? avc_has_perm_noaudit+0x358/0x450 [ 823.221823][ T6734] ? memcpy+0x56/0x70 [ 823.225643][ T6734] ? memset+0x35/0x40 [ 823.229459][ T6734] ? fsnotify+0x5ad/0x2240 [ 823.233712][ T6734] ? __kasan_check_write+0x14/0x20 [ 823.238658][ T6734] ? _raw_spin_lock+0xa3/0x1b0 [ 823.243261][ T6734] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 823.248475][ T6734] ? _raw_spin_unlock+0x4d/0x70 [ 823.253153][ T6734] ? find_inode_fast+0x459/0x480 [ 823.258019][ T6734] ? __kasan_check_write+0x14/0x20 [ 823.262961][ T6734] ? mutex_unlock+0xa2/0x110 [ 823.267387][ T6734] ? __mutex_lock_slowpath+0x10/0x10 [ 823.272512][ T6734] ? is_bpf_text_address+0x1a2/0x1c0 [ 823.277633][ T6734] ? is_module_text_address+0xe1/0x140 [ 823.282926][ T6734] ? stack_trace_save+0x1f0/0x1f0 [ 823.287789][ T6734] ? __kernel_text_address+0x9a/0x110 [ 823.292991][ T6734] ? unwind_get_return_address+0x4c/0x90 [ 823.298461][ T6734] ? arch_stack_walk+0xf8/0x140 [ 823.303149][ T6734] ? stack_trace_save+0x12d/0x1f0 [ 823.308007][ T6734] ? stack_trace_snprint+0x100/0x100 [ 823.313127][ T6734] ? avc_has_extended_perms+0x718/0x1210 [ 823.318598][ T6734] ? memcpy+0x56/0x70 [ 823.322415][ T6734] ? avc_has_extended_perms+0xb9c/0x1210 [ 823.327885][ T6734] ? kasan_set_track+0x4c/0x70 [ 823.332483][ T6734] ? kasan_set_free_info+0x23/0x40 [ 823.337430][ T6734] ? ____kasan_slab_free+0x126/0x160 [ 823.342554][ T6734] ? __kasan_slab_free+0x11/0x20 [ 823.347327][ T6734] ? slab_free_freelist_hook+0xc9/0x1a0 [ 823.352705][ T6734] ? kmem_cache_free+0x11a/0x2e0 [ 823.357481][ T6734] ? putname+0x10b/0x160 [ 823.361561][ T6734] ? avc_flush+0x2b0/0x2b0 [ 823.365813][ T6734] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 823.370417][ T6734] ? blkdev_common_ioctl+0x570/0x1ec0 [ 823.375629][ T6734] ? kasan_quarantine_put+0x34/0x1b0 [ 823.380743][ T6734] ? blkdev_bszset+0x240/0x240 [ 823.385341][ T6734] ? ioctl_has_perm+0x3df/0x560 [ 823.390028][ T6734] ? has_cap_mac_admin+0xb0/0xb0 [ 823.394802][ T6734] ? kmem_cache_free+0x11a/0x2e0 [ 823.399576][ T6734] ? putname+0x10b/0x160 [ 823.403742][ T6734] ? selinux_file_ioctl+0x3c9/0x530 [ 823.408949][ T6734] ? lo_release+0x200/0x200 [ 823.413290][ T6734] blkdev_ioctl+0x2e9/0x620 [ 823.417631][ T6734] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 823.422922][ T6734] ? __fget_files+0x310/0x370 [ 823.427435][ T6734] block_ioctl+0xb0/0xf0 [ 823.431516][ T6734] ? blkdev_iopoll+0x100/0x100 [ 823.436114][ T6734] __se_sys_ioctl+0x115/0x190 [ 823.440630][ T6734] __x64_sys_ioctl+0x7b/0x90 [ 823.445055][ T6734] do_syscall_64+0x44/0xd0 [ 823.449309][ T6734] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 823.455036][ T6734] RIP: 0033:0x7fe9fd6cee97 [ 823.459291][ T6734] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.478730][ T6734] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.486975][ T6734] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 823.494786][ T6734] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 823.502609][ T6734] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 823.510415][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 17:23:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:23:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 13) [ 823.518224][ T6734] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 823.526036][ T6734] [ 823.604982][ T6742] loop1: detected capacity change from 0 to 16 [ 823.612294][ T6742] erofs: (device loop1): mounted with root inode @ nid 36. [ 823.687435][ T6744] FAULT_INJECTION: forcing a failure. [ 823.687435][ T6744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.707004][ T6744] CPU: 1 PID: 6744 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 823.716988][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 823.726883][ T6744] Call Trace: [ 823.729999][ T6744] [ 823.732777][ T6744] dump_stack_lvl+0x151/0x1b7 [ 823.737291][ T6744] ? bfq_pos_tree_add_move+0x43e/0x43e [ 823.742584][ T6744] ? lru_cache_disable+0x30/0x30 [ 823.747357][ T6744] dump_stack+0x15/0x17 [ 823.751351][ T6744] should_fail+0x3c0/0x510 [ 823.755604][ T6744] should_fail_alloc_page+0x58/0x70 [ 823.760641][ T6744] __alloc_pages+0x1de/0x7c0 [ 823.765066][ T6744] ? __mod_memcg_lruvec_state+0x11c/0x1b0 [ 823.770622][ T6744] ? __count_vm_events+0x30/0x30 [ 823.775391][ T6744] ? __kasan_check_write+0x14/0x20 [ 823.780337][ T6744] ? _raw_spin_trylock+0xe2/0x1e0 [ 823.785199][ T6744] ? __lock_text_start+0x8/0x8 [ 823.789801][ T6744] wp_page_copy+0x1d9/0x1920 [ 823.794227][ T6744] ? __kasan_check_write+0x14/0x20 [ 823.799176][ T6744] ? _raw_spin_trylock+0xe2/0x1e0 [ 823.804036][ T6744] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 823.809865][ T6744] ? __pte_map_lock+0x594/0x660 [ 823.814540][ T6744] ? vm_normal_page+0x1e1/0x1f0 [ 823.819223][ T6744] do_wp_page+0x7a4/0xb40 [ 823.823389][ T6744] handle_pte_fault+0x547/0x11d0 [ 823.828163][ T6744] ? __kasan_slab_alloc+0xb2/0xe0 [ 823.833032][ T6744] ? kmem_cache_alloc+0x189/0x2f0 [ 823.837895][ T6744] ? vm_area_alloc+0x24/0x130 [ 823.842402][ T6744] ? do_syscall_64+0x44/0xd0 [ 823.846825][ T6744] ? cgroup_rstat_updated+0xe5/0x380 [ 823.851956][ T6744] ? fault_around_bytes_set+0xc0/0xc0 [ 823.857162][ T6744] ? do_handle_mm_fault+0x142f/0x2370 [ 823.862360][ T6744] ? memcpy+0x56/0x70 [ 823.866177][ T6744] do_handle_mm_fault+0x2073/0x2370 [ 823.871214][ T6744] ? numa_migrate_prep+0xe0/0xe0 [ 823.876001][ T6744] ? mmap_region+0xf9c/0x1af0 [ 823.880503][ T6744] ? __kasan_check_write+0x14/0x20 [ 823.885448][ T6744] ? down_read_trylock+0x17a/0x1d0 [ 823.890400][ T6744] ? __init_rwsem+0x1c0/0x1c0 [ 823.894919][ T6744] ? do_user_addr_fault+0xad2/0x1220 [ 823.900032][ T6744] ? access_error+0x251/0x270 [ 823.904547][ T6744] do_user_addr_fault+0xb5d/0x1220 [ 823.909493][ T6744] ? do_kern_addr_fault+0x80/0x80 [ 823.914351][ T6744] ? vm_mmap_pgoff+0x26a/0x420 [ 823.918952][ T6744] ? debug_smp_processor_id+0x17/0x20 [ 823.924160][ T6744] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 823.930059][ T6744] ? exit_to_user_mode_prepare+0x2b/0x40 [ 823.935527][ T6744] exc_page_fault+0x68/0x1a0 [ 823.939956][ T6744] asm_exc_page_fault+0x27/0x30 [ 823.944639][ T6744] RIP: 0033:0x7fd49bf970c0 [ 823.948894][ T6744] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 823.968335][ T6744] RSP: 002b:00007fd49ad2a600 EFLAGS: 00010202 [ 823.974236][ T6744] RAX: 0000000000001fd2 RBX: 00007fd49ad2a660 RCX: 0000000000000004 17:23:49 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 29) [ 823.982047][ T6744] RDX: 00007fd49290b000 RSI: 0000000000000000 RDI: 00007fd49ad2a700 [ 823.989863][ T6744] RBP: 000000000000002b R08: 0000000000000008 R09: 00000000000000c6 [ 823.997672][ T6744] R10: 0000000000000010 R11: 00007fd49ad2a660 R12: 00007fd49ad2a670 [ 824.005507][ T6744] R13: 00007fd49ad2a700 R14: 0000000000000001 R15: 000000000000001f [ 824.013383][ T6744] [ 824.020549][ T6744] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 824.031016][ T6744] loop2: detected capacity change from 0 to 16 [ 824.041762][ T6744] erofs: (device loop2): mounted with root inode @ nid 36. [ 824.049000][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.067311][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.076850][ T1754] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 824.087010][ T3394] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 824.089632][ T6747] FAULT_INJECTION: forcing a failure. [ 824.089632][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 824.107045][ T1754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.115423][ T6747] CPU: 1 PID: 6747 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 824.125394][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 824.135463][ T6747] Call Trace: [ 824.138584][ T6747] [ 824.141362][ T6747] dump_stack_lvl+0x151/0x1b7 [ 824.145875][ T6747] ? bfq_pos_tree_add_move+0x43e/0x43e [ 824.151168][ T6747] dump_stack+0x15/0x17 [ 824.155160][ T6747] should_fail+0x3c0/0x510 [ 824.159412][ T6747] ? apply_wqattrs_prepare+0x127/0x1290 [ 824.164796][ T6747] __should_failslab+0x9f/0xe0 [ 824.169396][ T6747] should_failslab+0x9/0x20 [ 824.173754][ T6747] kmem_cache_alloc_trace+0x4a/0x310 [ 824.178856][ T6747] ? apply_wqattrs_prepare+0x99/0x1290 [ 824.184149][ T6747] apply_wqattrs_prepare+0x127/0x1290 [ 824.189378][ T6747] ? __kasan_check_write+0x14/0x20 [ 824.194305][ T6747] ? mutex_lock+0xb6/0x130 [ 824.198557][ T6747] ? wait_for_completion_killable_timeout+0x10/0x10 [ 824.204987][ T6747] ? vsnprintf+0x1c02/0x1ce0 [ 824.209407][ T6747] apply_workqueue_attrs+0x149/0x720 [ 824.214529][ T6747] ? alloc_workqueue_attrs+0xc0/0xc0 [ 824.219648][ T6747] ? ptr_to_hashval+0x60/0x60 [ 824.224161][ T6747] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 824.229540][ T6747] ? preempt_count_add+0x90/0x1a0 [ 824.234401][ T6747] alloc_workqueue+0xcc1/0x11d0 [ 824.239175][ T6747] ? stack_trace_save+0x1f0/0x1f0 [ 824.244040][ T6747] ? loop_configure+0x7f6/0x1640 [ 824.248813][ T6747] ? apply_workqueue_attrs+0x720/0x720 [ 824.254104][ T6747] ? loop_set_status_from_info+0x5fd/0x7a0 [ 824.259746][ T6747] loop_configure+0x8c7/0x1640 [ 824.264352][ T6747] lo_ioctl+0x8cd/0x25e0 [ 824.268425][ T6747] ? is_bpf_text_address+0x1a2/0x1c0 [ 824.273549][ T6747] ? lo_release+0x200/0x200 [ 824.278062][ T6747] ? stack_trace_save+0x1f0/0x1f0 [ 824.282921][ T6747] ? __kernel_text_address+0x9a/0x110 [ 824.288128][ T6747] ? unwind_get_return_address+0x4c/0x90 [ 824.293595][ T6747] ? arch_stack_walk+0xf8/0x140 [ 824.298291][ T6747] ? avc_has_perm_noaudit+0x358/0x450 [ 824.303490][ T6747] ? memcpy+0x56/0x70 [ 824.307310][ T6747] ? memset+0x35/0x40 [ 824.311128][ T6747] ? fsnotify+0x5ad/0x2240 [ 824.315381][ T6747] ? __kasan_check_write+0x14/0x20 [ 824.320329][ T6747] ? _raw_spin_lock+0xa3/0x1b0 [ 824.324926][ T6747] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 824.330139][ T6747] ? _raw_spin_unlock+0x4d/0x70 [ 824.334827][ T6747] ? find_inode_fast+0x459/0x480 17:23:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 824.339599][ T6747] ? __kasan_check_write+0x14/0x20 [ 824.344553][ T6747] ? mutex_unlock+0xa2/0x110 [ 824.349054][ T6747] ? __mutex_lock_slowpath+0x10/0x10 [ 824.354180][ T6747] ? is_bpf_text_address+0x1a2/0x1c0 [ 824.359302][ T6747] ? is_module_text_address+0xe1/0x140 [ 824.364603][ T6747] ? stack_trace_save+0x1f0/0x1f0 [ 824.369473][ T6747] ? __kernel_text_address+0x9a/0x110 [ 824.374667][ T6747] ? unwind_get_return_address+0x4c/0x90 [ 824.380127][ T6747] ? arch_stack_walk+0xf8/0x140 [ 824.384822][ T6747] ? stack_trace_save+0x12d/0x1f0 [ 824.389677][ T6747] ? stack_trace_snprint+0x100/0x100 [ 824.394797][ T6747] ? avc_has_extended_perms+0x718/0x1210 [ 824.400266][ T6747] ? memcpy+0x56/0x70 [ 824.404086][ T6747] ? avc_has_extended_perms+0xb9c/0x1210 [ 824.409566][ T6747] ? kasan_set_track+0x4c/0x70 [ 824.414163][ T6747] ? kasan_set_free_info+0x23/0x40 [ 824.419200][ T6747] ? ____kasan_slab_free+0x126/0x160 [ 824.424318][ T6747] ? __kasan_slab_free+0x11/0x20 [ 824.429088][ T6747] ? slab_free_freelist_hook+0xc9/0x1a0 [ 824.434469][ T6747] ? kmem_cache_free+0x11a/0x2e0 [ 824.439243][ T6747] ? putname+0x10b/0x160 17:23:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 14) [ 824.443325][ T6747] ? avc_flush+0x2b0/0x2b0 [ 824.447591][ T6747] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 824.452175][ T6747] ? blkdev_common_ioctl+0x570/0x1ec0 [ 824.457388][ T6747] ? kasan_quarantine_put+0x34/0x1b0 [ 824.462503][ T6747] ? blkdev_bszset+0x240/0x240 [ 824.467101][ T6747] ? ioctl_has_perm+0x3df/0x560 [ 824.471791][ T6747] ? has_cap_mac_admin+0xb0/0xb0 [ 824.476562][ T6747] ? kmem_cache_free+0x11a/0x2e0 [ 824.481435][ T6747] ? putname+0x10b/0x160 [ 824.485500][ T6747] ? selinux_file_ioctl+0x3c9/0x530 [ 824.490535][ T6747] ? lo_release+0x200/0x200 [ 824.495139][ T6747] blkdev_ioctl+0x2e9/0x620 [ 824.499477][ T6747] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 824.504770][ T6747] ? __fget_files+0x310/0x370 [ 824.509283][ T6747] block_ioctl+0xb0/0xf0 [ 824.513361][ T6747] ? blkdev_iopoll+0x100/0x100 [ 824.517962][ T6747] __se_sys_ioctl+0x115/0x190 [ 824.522483][ T6747] __x64_sys_ioctl+0x7b/0x90 [ 824.526901][ T6747] do_syscall_64+0x44/0xd0 [ 824.531157][ T6747] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 824.536882][ T6747] RIP: 0033:0x7fe9fd6cee97 [ 824.541317][ T6747] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 824.560756][ T6747] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.568997][ T6747] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 824.576823][ T6747] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 824.584623][ T6747] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 824.592432][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.600243][ T6747] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 824.608055][ T6747] [ 824.614608][ T1754] usb 1-1: config 0 descriptor?? [ 824.702038][ T6754] loop1: detected capacity change from 0 to 16 [ 824.709661][ T6754] erofs: (device loop1): mounted with root inode @ nid 36. [ 824.753994][ T6755] FAULT_INJECTION: forcing a failure. [ 824.753994][ T6755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.777092][ T3409] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 824.786982][ T6755] CPU: 1 PID: 6755 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 824.796963][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 824.806857][ T6755] Call Trace: [ 824.809973][ T6755] [ 824.812751][ T6755] dump_stack_lvl+0x151/0x1b7 [ 824.817267][ T6755] ? bfq_pos_tree_add_move+0x43e/0x43e [ 824.822561][ T6755] dump_stack+0x15/0x17 [ 824.826549][ T6755] should_fail+0x3c0/0x510 [ 824.830803][ T6755] should_fail_alloc_page+0x58/0x70 [ 824.835837][ T6755] __alloc_pages+0x1de/0x7c0 [ 824.840265][ T6755] ? __mod_memcg_lruvec_state+0x11c/0x1b0 [ 824.845819][ T6755] ? __count_vm_events+0x30/0x30 [ 824.850599][ T6755] ? __kasan_check_write+0x14/0x20 [ 824.855540][ T6755] ? _raw_spin_trylock+0xe2/0x1e0 [ 824.860415][ T6755] ? __lock_text_start+0x8/0x8 [ 824.865088][ T6755] wp_page_copy+0x1d9/0x1920 [ 824.869523][ T6755] ? __kasan_check_write+0x14/0x20 [ 824.874460][ T6755] ? _raw_spin_trylock+0xe2/0x1e0 [ 824.879319][ T6755] ? insert_page_into_pte_locked+0x3b0/0x3b0 [ 824.885137][ T6755] ? __pte_map_lock+0x594/0x660 [ 824.889834][ T6755] ? vm_normal_page+0x1e1/0x1f0 [ 824.894508][ T6755] do_wp_page+0x7a4/0xb40 [ 824.898676][ T6755] handle_pte_fault+0x547/0x11d0 [ 824.903452][ T6755] ? __kasan_slab_alloc+0xb2/0xe0 [ 824.908307][ T6755] ? kmem_cache_alloc+0x189/0x2f0 [ 824.913176][ T6755] ? vm_area_alloc+0x24/0x130 [ 824.917682][ T6755] ? do_syscall_64+0x44/0xd0 [ 824.922110][ T6755] ? cgroup_rstat_updated+0xe5/0x380 [ 824.927229][ T6755] ? fault_around_bytes_set+0xc0/0xc0 [ 824.932436][ T6755] ? do_handle_mm_fault+0x142f/0x2370 [ 824.937647][ T6755] ? memcpy+0x56/0x70 [ 824.941467][ T6755] do_handle_mm_fault+0x2073/0x2370 [ 824.946503][ T6755] ? numa_migrate_prep+0xe0/0xe0 [ 824.951276][ T6755] ? mmap_region+0xf9c/0x1af0 [ 824.955785][ T6755] ? __kasan_check_write+0x14/0x20 [ 824.960733][ T6755] ? down_read_trylock+0x17a/0x1d0 [ 824.965706][ T6755] ? __init_rwsem+0x1c0/0x1c0 [ 824.970214][ T6755] ? do_user_addr_fault+0xad2/0x1220 [ 824.975316][ T6755] ? access_error+0x251/0x270 [ 824.979827][ T6755] do_user_addr_fault+0xb5d/0x1220 [ 824.984782][ T6755] ? do_kern_addr_fault+0x80/0x80 [ 824.989894][ T6755] ? vm_mmap_pgoff+0x26a/0x420 [ 824.994507][ T6755] ? debug_smp_processor_id+0x17/0x20 [ 824.999703][ T6755] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 825.005607][ T6755] ? exit_to_user_mode_prepare+0x2b/0x40 [ 825.011072][ T6755] exc_page_fault+0x68/0x1a0 [ 825.015503][ T6755] asm_exc_page_fault+0x27/0x30 [ 825.020216][ T6755] RIP: 0033:0x7fd49bf970c0 [ 825.024441][ T6755] Code: e8 e5 fe ff ff 41 89 c7 85 c0 78 40 3d ff 00 00 00 7f 2f 49 8b 45 10 49 3b 45 08 0f 84 19 01 00 00 45 85 ff 74 0c 49 8b 55 00 <44> 88 3c 02 49 8b 45 10 48 83 c0 01 49 89 45 10 eb be 66 0f 1f 44 [ 825.043879][ T6755] RSP: 002b:00007fd49ad2a600 EFLAGS: 00010202 17:23:50 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 30) [ 825.049784][ T6755] RAX: 0000000000001fd2 RBX: 00007fd49ad2a660 RCX: 0000000000000004 [ 825.057602][ T6755] RDX: 00007fd49290b000 RSI: 0000000000000000 RDI: 00007fd49ad2a700 [ 825.065404][ T6755] RBP: 000000000000002b R08: 0000000000000008 R09: 00000000000000c6 [ 825.073217][ T6755] R10: 0000000000000010 R11: 00007fd49ad2a660 R12: 00007fd49ad2a670 [ 825.081116][ T6755] R13: 00007fd49ad2a700 R14: 0000000000000001 R15: 000000000000001f [ 825.088928][ T6755] [ 825.092885][ T6755] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 825.109102][ T6755] loop2: detected capacity change from 0 to 16 [ 825.120970][ T6755] erofs: (device loop2): mounted with root inode @ nid 36. [ 825.158935][ T6758] FAULT_INJECTION: forcing a failure. [ 825.158935][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 825.187010][ T6758] CPU: 1 PID: 6758 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 825.196992][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.206877][ T6758] Call Trace: [ 825.210004][ T6758] [ 825.212788][ T6758] dump_stack_lvl+0x151/0x1b7 [ 825.217297][ T6758] ? bfq_pos_tree_add_move+0x43e/0x43e [ 825.222590][ T6758] dump_stack+0x15/0x17 [ 825.226582][ T6758] should_fail+0x3c0/0x510 [ 825.230836][ T6758] __should_failslab+0x9f/0xe0 [ 825.235434][ T6758] should_failslab+0x9/0x20 [ 825.239775][ T6758] kmem_cache_alloc+0x4f/0x2f0 [ 825.244373][ T6758] ? apply_wqattrs_prepare+0x7fb/0x1290 [ 825.249758][ T6758] apply_wqattrs_prepare+0x7fb/0x1290 [ 825.254964][ T6758] ? mutex_lock+0xb6/0x130 [ 825.259220][ T6758] apply_workqueue_attrs+0x149/0x720 [ 825.264340][ T6758] ? alloc_workqueue_attrs+0xc0/0xc0 [ 825.269455][ T6758] ? ptr_to_hashval+0x60/0x60 [ 825.273971][ T6758] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 825.279354][ T6758] ? preempt_count_add+0x90/0x1a0 [ 825.284211][ T6758] alloc_workqueue+0xcc1/0x11d0 [ 825.288902][ T6758] ? stack_trace_save+0x1f0/0x1f0 [ 825.293765][ T6758] ? loop_configure+0x7f6/0x1640 [ 825.298534][ T6758] ? apply_workqueue_attrs+0x720/0x720 [ 825.303830][ T6758] ? loop_set_status_from_info+0x5fd/0x7a0 [ 825.309468][ T6758] loop_configure+0x8c7/0x1640 [ 825.314070][ T6758] lo_ioctl+0x8cd/0x25e0 [ 825.318152][ T6758] ? is_bpf_text_address+0x1a2/0x1c0 [ 825.323270][ T6758] ? lo_release+0x200/0x200 [ 825.327610][ T6758] ? stack_trace_save+0x1f0/0x1f0 [ 825.332467][ T6758] ? __kernel_text_address+0x9a/0x110 [ 825.337676][ T6758] ? unwind_get_return_address+0x4c/0x90 [ 825.343144][ T6758] ? arch_stack_walk+0xf8/0x140 [ 825.347833][ T6758] ? avc_has_perm_noaudit+0x358/0x450 [ 825.353039][ T6758] ? memcpy+0x56/0x70 [ 825.356860][ T6758] ? memset+0x35/0x40 [ 825.360677][ T6758] ? fsnotify+0x5ad/0x2240 [ 825.364935][ T6758] ? __kasan_check_write+0x14/0x20 [ 825.369878][ T6758] ? _raw_spin_lock+0xa3/0x1b0 [ 825.374478][ T6758] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 825.379686][ T6758] ? _raw_spin_unlock+0x4d/0x70 [ 825.384372][ T6758] ? find_inode_fast+0x459/0x480 [ 825.389148][ T6758] ? __kasan_check_write+0x14/0x20 [ 825.394092][ T6758] ? mutex_unlock+0xa2/0x110 [ 825.398520][ T6758] ? __mutex_lock_slowpath+0x10/0x10 [ 825.403644][ T6758] ? is_bpf_text_address+0x1a2/0x1c0 [ 825.408761][ T6758] ? is_module_text_address+0xe1/0x140 [ 825.414054][ T6758] ? stack_trace_save+0x1f0/0x1f0 [ 825.418915][ T6758] ? __kernel_text_address+0x9a/0x110 [ 825.424126][ T6758] ? unwind_get_return_address+0x4c/0x90 [ 825.429593][ T6758] ? arch_stack_walk+0xf8/0x140 [ 825.434281][ T6758] ? stack_trace_save+0x12d/0x1f0 [ 825.439141][ T6758] ? stack_trace_snprint+0x100/0x100 [ 825.444268][ T6758] ? avc_has_extended_perms+0x718/0x1210 [ 825.449727][ T6758] ? memcpy+0x56/0x70 [ 825.453547][ T6758] ? avc_has_extended_perms+0xb9c/0x1210 17:23:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, 0x0, 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 15) [ 825.459040][ T6758] ? kasan_set_track+0x4c/0x70 [ 825.463611][ T6758] ? kasan_set_free_info+0x23/0x40 [ 825.468557][ T6758] ? ____kasan_slab_free+0x126/0x160 [ 825.473684][ T6758] ? __kasan_slab_free+0x11/0x20 [ 825.478456][ T6758] ? slab_free_freelist_hook+0xc9/0x1a0 [ 825.483841][ T6758] ? kmem_cache_free+0x11a/0x2e0 [ 825.488614][ T6758] ? putname+0x10b/0x160 [ 825.492689][ T6758] ? avc_flush+0x2b0/0x2b0 [ 825.496952][ T6758] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 825.501542][ T6758] ? blkdev_common_ioctl+0x570/0x1ec0 [ 825.506746][ T6758] ? kasan_quarantine_put+0x34/0x1b0 [ 825.511868][ T6758] ? blkdev_bszset+0x240/0x240 [ 825.516466][ T6758] ? ioctl_has_perm+0x3df/0x560 [ 825.521154][ T6758] ? has_cap_mac_admin+0xb0/0xb0 [ 825.525934][ T6758] ? kmem_cache_free+0x11a/0x2e0 [ 825.530703][ T6758] ? putname+0x10b/0x160 [ 825.534782][ T6758] ? selinux_file_ioctl+0x3c9/0x530 [ 825.539815][ T6758] ? lo_release+0x200/0x200 [ 825.544154][ T6758] blkdev_ioctl+0x2e9/0x620 [ 825.548495][ T6758] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 825.553789][ T6758] ? __fget_files+0x310/0x370 [ 825.558304][ T6758] block_ioctl+0xb0/0xf0 [ 825.562382][ T6758] ? blkdev_iopoll+0x100/0x100 [ 825.566982][ T6758] __se_sys_ioctl+0x115/0x190 [ 825.571508][ T6758] __x64_sys_ioctl+0x7b/0x90 [ 825.575921][ T6758] do_syscall_64+0x44/0xd0 [ 825.580176][ T6758] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 825.585908][ T6758] RIP: 0033:0x7fe9fd6cee97 [ 825.590173][ T6758] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 825.609601][ T6758] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.617844][ T6758] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 825.625854][ T6758] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 825.633674][ T6758] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 825.641477][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.649287][ T6758] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 825.657110][ T6758] [ 825.677875][ T1754] lg-g15 0003:046D:C225.007E: item fetching failed at offset 0/1 [ 825.685535][ T1754] lg-g15: probe of 0003:046D:C225.007E failed with error -22 [ 825.727148][ T3394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.738183][ T3394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.748041][ T3394] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 825.761982][ T6765] loop1: detected capacity change from 0 to 16 [ 825.768194][ T3394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.800996][ T6765] erofs: (device loop1): mounted with root inode @ nid 36. [ 825.813447][ T6766] FAULT_INJECTION: forcing a failure. [ 825.813447][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.814947][ T3394] usb 4-1: config 0 descriptor?? [ 825.826358][ T6766] CPU: 1 PID: 6766 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 825.831171][ T3409] usb 5-1: device descriptor read/64, error 18 [ 825.841054][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 825.841075][ T6766] Call Trace: [ 825.841088][ T6766] [ 825.841095][ T6766] dump_stack_lvl+0x151/0x1b7 [ 825.867347][ T6766] ? bfq_pos_tree_add_move+0x43e/0x43e [ 825.872735][ T6766] ? __kasan_check_read+0x11/0x20 [ 825.877591][ T6766] dump_stack+0x15/0x17 [ 825.881583][ T6766] should_fail+0x3c0/0x510 [ 825.885838][ T6766] should_fail_usercopy+0x1a/0x20 [ 825.890700][ T6766] copy_page_from_iter_atomic+0x433/0x11c0 [ 825.896339][ T6766] ? pipe_zero+0x4d0/0x4d0 [ 825.900590][ T6766] ? ktime_get_coarse_real_ts64+0x13a/0x150 [ 825.906318][ T6766] generic_perform_write+0x343/0x5d0 [ 825.911440][ T6766] ? grab_cache_page_write_begin+0xa0/0xa0 [ 825.917076][ T6766] ? file_remove_privs+0x690/0x690 [ 825.922026][ T6766] ? __kasan_check_write+0x14/0x20 [ 825.926980][ T6766] ? down_write+0xdd/0x140 [ 825.931233][ T6766] __generic_file_write_iter+0x25b/0x4b0 [ 825.936699][ T6766] generic_file_write_iter+0xaf/0x1c0 [ 825.941910][ T6766] vfs_write+0xc8d/0x1050 [ 825.946075][ T6766] ? file_end_write+0x1b0/0x1b0 [ 825.950754][ T6766] ? __fget_files+0x310/0x370 [ 825.955271][ T6766] ? __fdget_pos+0x1fe/0x310 [ 825.959693][ T6766] ? ksys_write+0x77/0x2c0 [ 825.963948][ T6766] ksys_write+0x198/0x2c0 [ 825.968118][ T6766] ? __ia32_sys_read+0x90/0x90 [ 825.972898][ T6766] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 825.978789][ T6766] __x64_sys_write+0x7b/0x90 [ 825.983218][ T6766] do_syscall_64+0x44/0xd0 [ 825.987474][ T6766] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 825.993201][ T6766] RIP: 0033:0x7fd49bfabe2f [ 825.997457][ T6766] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 826.016889][ T6766] RSP: 002b:00007fd49ad2af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 826.025139][ T6766] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfabe2f [ 826.032946][ T6766] RDX: 0000000000002000 RSI: 00007fd49290b000 RDI: 0000000000000006 [ 826.040758][ T6766] RBP: 00007fd49290b000 R08: 0000000000000000 R09: 0000000000000178 [ 826.048570][ T6766] R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000000 [ 826.056380][ T6766] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 826.064194][ T6766] [ 826.072842][ T6766] loop2: detected capacity change from 0 to 16 [ 826.078893][ T3394] usb 4-1: can't set config #0, error -71 [ 826.120032][ T3394] usb 4-1: USB disconnect, device number 80 [ 826.144268][ T6766] erofs: (device loop2): mounted with root inode @ nid 36. [ 826.346995][ T3409] usb 5-1: device descriptor read/64, error 18 17:23:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 64) ioctl$TIOCSBRK(r0, 0x5427) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close_range(0xffffffffffffffff, r2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x88, {0x88, 0xe, "b88057cf61e47aaa11272b529314a4c741c2fe18830c2ae7392d0bc88a2b9a820de526857c97a5cdce6e746e268adbdf4108d6f14cd6342058ff6979365c87bd5ebddbc11110d80e97b8f6ea575bc74e62fc596b57e3a908fff3c77130330b2cace144d600e1eba4bfaf20fb2b435130239af14b978d140848c01645475f24ce3d9263abbe14"}}, &(0x7f0000000140)={0x0, 0x3, 0x68, @string={0x68, 0x3, "c07b1a744bbd3e1ee547b1327d1215f15bd71346dee2b0eaaf4476d3e0fee7b8123932900831f16e698c2ae8d50fa3d75a3632bd1c60baee730d68f6273fc257a7eb5e927bb3127f3b2b185348bb9d9cf48257e7cf2b0ac8f7115b3e249335d0ff3ce1979e63"}}, &(0x7f0000002100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "b3ad9235"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9, 0x1, {0x22, 0x47e}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x6e, "b0bb9fb9ece3dfbe44f8b8710cacb919272c9f575413a34b4c90c1410c49d7ffc3fb035d235bff9a54702289563f99828c022755f69531d1854bdc107ad26226ed5e4f5aa5e2b161c609afafa2d8eecca618646130f2d55465f5cd225d39dce1757cdae029a8c518a319f7d4ea4c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x2a, "0f51b06d4e3a2824cb82295f2ddb0849dde980c6a8a5fa471bc51427789ac6a2e85cd4e46492f51d0000"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00224100dd0088"], 0x0}, 0x0) (rerun: 64) 17:23:52 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 31) 17:23:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x63, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x1, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x81, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x3f, 0x20, 0x0, 0x8, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x145b}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "a58b0867ddd67052d8b91b79c827f61f238ce6c7bba645b8c1bd166095691c83ca9c3afa8e009d2628eb6da9076d0375ec12fc33a191c7f978ed1425ec21306b204a044dfcc52c4ce03e12a829ffaab64302fcba7e701fa63797c62cc1034fc7baead54acf27273a2c3c97d06e8ba6fc150f18e5a516b7e1de96c18c386c441ffbe858b3153d5dcac9e0ab7692753ece817b4dc92b2a6bc5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44b}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000f220000000033a50d51772f64000cb35760122220009058103"], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000380)={0x20, 0x8, 0x27, {0x27, 0x6, "bffb5010b6d916ca31a8bd0918006710665e22d9bf47e1efbd8fd2d66a282adae1f4dea4f2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000400)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0xc, "8da98d58"}, @main=@item_4={0x3, 0x0, 0x8, "c14c4aca"}, @local=@item_012={0x1, 0x2, 0x7, "10"}, @local=@item_4={0x3, 0x2, 0x4, "90420b02"}, @local=@item_4={0x3, 0x2, 0x3, "1f4ca8fe"}, @local=@item_4={0x3, 0x2, 0x3, "337cd27d"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xfb, 0x1, {0x22, 0xbe1}}}}, &(0x7f0000000680)={0xfffffffffffffe7a, &(0x7f00000004c0)={0x20, 0x0, 0x73, "d937ba37fb456cf64240877905c1260748821d3c13fba9bb6dc4bcb1e3b1892e5b042c626529e31ee1ea70a428c64ea7ab2186fdca6e68d3205b9bc7215d5d662ed14e8fb87706377d8b6e8ad64be10afbe86edd44218a70984433631ed3102cbd1eca0c7d4adc4cd31dbeed9f2aeb7f32742f"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x1, 0x68, "626725ab9375e234b4c0928e96e338d0feda7daef518c5b7be030d4f413ddf4852d9d1c94fcd9c1bd8ab24064d6c2beda8088602cb2116ff443f13c6d9ea9087cacb764987a62b96aa1156e991c0a1d8265789d8a7dccaa30883eefc6c81e806e6864457e31b74c2"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) (rerun: 32) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x24, &(0x7f00000006c0)={0x20, 0x2, 0x6d, {0x6d, 0x2, "3cba37f775a834c70f116cba833d740fa16cd6af546186fe937ed178c6251c46f1d8e388de53bbb4009aef017304656cc23da597b629646e25dacfb58b585a9f4be908f635638b25407f28e4f8eac634dc3d4efba7f32da474be87b0ab7c0b64c7069d259780a8793ad677"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000780)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x7, "19"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4da}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x10, 0x90, "16ed9af22ee7b18be1876f28464dbe4b960fb57703a4da5a82004e6e342d72682c394cbd36836555bb06386124a0cfe188933faf71f34bb2aa319e440991de33923cbcf5c4d12b75ded6f7f0790a42ca5e5404e9dd9077795febcc2d99cdd501821255c8b45582c47cecd0aee198b5dbc58168d7fc3879aada406143f4c134b62fff3ac8f0e6f2345c52662e70be199a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x1, 0xb2, "27c160cdb9653c892571f3a611fbd134c695956023b93fc1601f4211bf36b0256701116a6f8b2771412466652afa3581e8ad96c445e5cc52196443d6aed167dc44719826fe35a52d363c21a045c2fcf78d5342f266e846539d22c9f754df21af85778d5cc23ac23de441093f7ca8b7121b60453a39ccda6ee448c4f4ee7fe303e6306e57bb9e92a5ffd5c52d9c0366a0908ff434d629f4522223defe821d536951434eba547fbef42e55bb543f4487fbbcdd"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0xef}}) 17:23:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:23:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 16) [ 826.996232][ T3394] usb 1-1: USB disconnect, device number 97 [ 827.077200][ T6783] FAULT_INJECTION: forcing a failure. [ 827.077200][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 827.077928][ T6784] loop1: detected capacity change from 0 to 16 [ 827.089823][ T6783] CPU: 0 PID: 6783 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 827.105595][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.115487][ T6783] Call Trace: [ 827.118633][ T6783] [ 827.121383][ T6783] dump_stack_lvl+0x151/0x1b7 [ 827.125902][ T6783] ? bfq_pos_tree_add_move+0x43e/0x43e [ 827.131197][ T6783] dump_stack+0x15/0x17 [ 827.135183][ T6783] should_fail+0x3c0/0x510 [ 827.139435][ T6783] ? kobject_uevent_env+0x26c/0x730 [ 827.144482][ T6783] __should_failslab+0x9f/0xe0 [ 827.149073][ T6783] should_failslab+0x9/0x20 [ 827.153410][ T6783] kmem_cache_alloc_trace+0x4a/0x310 [ 827.158530][ T6783] ? alloc_workqueue+0xfaf/0x11d0 [ 827.163392][ T6783] ? stack_trace_save+0x1f0/0x1f0 [ 827.168250][ T6783] ? dev_uevent_filter+0xb0/0xb0 [ 827.173289][ T6783] kobject_uevent_env+0x26c/0x730 [ 827.178150][ T6783] disk_force_media_change+0x199/0x290 [ 827.183443][ T6783] ? bdev_check_media_change+0x4c0/0x4c0 [ 827.188909][ T6783] ? loop_set_status_from_info+0x5fd/0x7a0 [ 827.194553][ T6783] loop_configure+0x92f/0x1640 [ 827.199155][ T6783] lo_ioctl+0x8cd/0x25e0 [ 827.203232][ T6783] ? is_bpf_text_address+0x1a2/0x1c0 [ 827.208350][ T6783] ? lo_release+0x200/0x200 [ 827.212691][ T6783] ? stack_trace_save+0x1f0/0x1f0 [ 827.217553][ T6783] ? __kernel_text_address+0x9a/0x110 [ 827.221202][ T6784] erofs: (device loop1): mounted with root inode @ nid 36. [ 827.222846][ T6783] ? unwind_get_return_address+0x4c/0x90 [ 827.222872][ T6783] ? arch_stack_walk+0xf8/0x140 [ 827.240297][ T6783] ? avc_has_perm_noaudit+0x358/0x450 [ 827.245497][ T6783] ? memcpy+0x56/0x70 [ 827.249321][ T6783] ? memset+0x35/0x40 [ 827.251369][ T6782] FAULT_INJECTION: forcing a failure. [ 827.251369][ T6782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 827.253134][ T6783] ? fsnotify+0x5ad/0x2240 [ 827.253158][ T6783] ? __kasan_check_write+0x14/0x20 [ 827.275443][ T6783] ? _raw_spin_lock+0xa3/0x1b0 [ 827.280043][ T6783] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 827.285250][ T6783] ? _raw_spin_unlock+0x4d/0x70 [ 827.289935][ T6783] ? find_inode_fast+0x459/0x480 [ 827.294710][ T6783] ? __kasan_check_write+0x14/0x20 [ 827.299659][ T6783] ? mutex_unlock+0xa2/0x110 [ 827.304084][ T6783] ? __mutex_lock_slowpath+0x10/0x10 [ 827.309207][ T6783] ? is_bpf_text_address+0x1a2/0x1c0 [ 827.314327][ T6783] ? is_module_text_address+0xe1/0x140 [ 827.319619][ T6783] ? stack_trace_save+0x1f0/0x1f0 [ 827.324491][ T6783] ? __kernel_text_address+0x9a/0x110 [ 827.329687][ T6783] ? unwind_get_return_address+0x4c/0x90 [ 827.335157][ T6783] ? arch_stack_walk+0xf8/0x140 [ 827.339846][ T6783] ? stack_trace_save+0x12d/0x1f0 [ 827.344701][ T6783] ? stack_trace_snprint+0x100/0x100 [ 827.349824][ T6783] ? avc_has_extended_perms+0x718/0x1210 [ 827.355293][ T6783] ? memcpy+0x56/0x70 [ 827.359110][ T6783] ? avc_has_extended_perms+0xb9c/0x1210 [ 827.364581][ T6783] ? kasan_set_track+0x4c/0x70 [ 827.369177][ T6783] ? kasan_set_free_info+0x23/0x40 [ 827.374127][ T6783] ? ____kasan_slab_free+0x126/0x160 [ 827.379256][ T6783] ? __kasan_slab_free+0x11/0x20 [ 827.384112][ T6783] ? slab_free_freelist_hook+0xc9/0x1a0 [ 827.389489][ T6783] ? kmem_cache_free+0x11a/0x2e0 [ 827.394260][ T6783] ? putname+0x10b/0x160 [ 827.398343][ T6783] ? avc_flush+0x2b0/0x2b0 [ 827.402593][ T6783] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 827.407197][ T6783] ? blkdev_common_ioctl+0x570/0x1ec0 [ 827.412403][ T6783] ? kasan_quarantine_put+0x34/0x1b0 [ 827.417523][ T6783] ? blkdev_bszset+0x240/0x240 [ 827.422123][ T6783] ? ioctl_has_perm+0x3df/0x560 [ 827.426810][ T6783] ? has_cap_mac_admin+0xb0/0xb0 [ 827.431582][ T6783] ? kmem_cache_free+0x11a/0x2e0 [ 827.436358][ T6783] ? putname+0x10b/0x160 [ 827.440449][ T6783] ? selinux_file_ioctl+0x3c9/0x530 [ 827.445471][ T6783] ? lo_release+0x200/0x200 [ 827.449808][ T6783] blkdev_ioctl+0x2e9/0x620 [ 827.454150][ T6783] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 827.459442][ T6783] ? __fget_files+0x310/0x370 [ 827.463957][ T6783] block_ioctl+0xb0/0xf0 [ 827.468036][ T6783] ? blkdev_iopoll+0x100/0x100 [ 827.472638][ T6783] __se_sys_ioctl+0x115/0x190 [ 827.477149][ T6783] __x64_sys_ioctl+0x7b/0x90 [ 827.481600][ T6783] do_syscall_64+0x44/0xd0 [ 827.485832][ T6783] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 827.491561][ T6783] RIP: 0033:0x7fe9fd6cee97 [ 827.495811][ T6783] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.515254][ T6783] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.523501][ T6783] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 827.531309][ T6783] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 827.539123][ T6783] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 827.546945][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.554759][ T6783] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 827.562558][ T6783] [ 827.565422][ T6782] CPU: 1 PID: 6782 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 827.575401][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.585294][ T6782] Call Trace: [ 827.588419][ T6782] [ 827.591197][ T6782] dump_stack_lvl+0x151/0x1b7 [ 827.595711][ T6782] ? bfq_pos_tree_add_move+0x43e/0x43e [ 827.601003][ T6782] ? avc_has_perm_noaudit+0x2ec/0x450 [ 827.606645][ T6782] dump_stack+0x15/0x17 [ 827.610636][ T6782] should_fail+0x3c0/0x510 [ 827.614890][ T6782] should_fail_alloc_page+0x58/0x70 [ 827.620016][ T6782] __alloc_pages+0x1de/0x7c0 [ 827.624440][ T6782] ? __count_vm_events+0x30/0x30 [ 827.629211][ T6782] ? __kasan_check_read+0x11/0x20 [ 827.634179][ T6782] ? __vm_enough_memory+0x118/0x310 [ 827.639203][ T6782] shmem_alloc_and_acct_page+0x4a0/0xa20 [ 827.644662][ T6782] ? shmem_swapin_page+0x15c0/0x15c0 [ 827.649784][ T6782] ? xas_start+0x2ca/0x410 [ 827.654035][ T6782] ? xas_load+0x2b9/0x2e0 [ 827.658200][ T6782] ? pagecache_get_page+0xcc8/0xdb0 [ 827.663235][ T6782] ? page_cache_prev_miss+0x430/0x430 [ 827.668442][ T6782] ? _raw_spin_lock_irqsave+0x210/0x210 [ 827.673943][ T6782] ? lru_cache_add+0x273/0x530 [ 827.678519][ T6782] shmem_getpage_gfp+0x1487/0x25f0 [ 827.683475][ T6782] ? shmem_getpage+0xa0/0xa0 [ 827.687893][ T6782] ? fault_in_safe_writeable+0x240/0x240 [ 827.693360][ T6782] ? __kasan_check_write+0x14/0x20 [ 827.698310][ T6782] ? shmem_write_end+0x786/0x8a0 [ 827.703080][ T6782] shmem_write_begin+0xc8/0x1b0 [ 827.707771][ T6782] generic_perform_write+0x2cd/0x5d0 [ 827.712890][ T6782] ? grab_cache_page_write_begin+0xa0/0xa0 [ 827.718530][ T6782] ? file_remove_privs+0x690/0x690 [ 827.723480][ T6782] ? __kasan_check_write+0x14/0x20 [ 827.728433][ T6782] ? down_write+0xdd/0x140 [ 827.732690][ T6782] __generic_file_write_iter+0x25b/0x4b0 [ 827.738155][ T6782] generic_file_write_iter+0xaf/0x1c0 [ 827.743354][ T6782] vfs_write+0xc8d/0x1050 [ 827.747520][ T6782] ? file_end_write+0x1b0/0x1b0 [ 827.752208][ T6782] ? __fget_files+0x310/0x370 [ 827.756720][ T6782] ? __fdget_pos+0x1fe/0x310 [ 827.761145][ T6782] ? ksys_write+0x77/0x2c0 [ 827.765409][ T6782] ksys_write+0x198/0x2c0 [ 827.769653][ T6782] ? __ia32_sys_read+0x90/0x90 [ 827.774252][ T6782] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 827.780157][ T6782] __x64_sys_write+0x7b/0x90 [ 827.784584][ T6782] do_syscall_64+0x44/0xd0 [ 827.788832][ T6782] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 827.794562][ T6782] RIP: 0033:0x7fd49bfabe2f [ 827.798820][ T6782] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 827.818258][ T6782] RSP: 002b:00007fd49ad4bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 827.826502][ T6782] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfabe2f [ 827.834321][ T6782] RDX: 0000000000002000 RSI: 00007fd49292c000 RDI: 0000000000000006 [ 827.842127][ T6782] RBP: 00007fd49292c000 R08: 0000000000000000 R09: 0000000000000178 [ 827.849937][ T6782] R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000000 [ 827.857746][ T6782] R13: 00007fd49ad4bfdc R14: 00007fd49ad4bfe0 R15: 0000000020000242 [ 827.865571][ T6782] [ 827.870108][ T6783] loop5: detected capacity change from 0 to 16 17:23:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 827.882839][ T6783] erofs: (device loop5): mounted with root inode @ nid 36. [ 827.937003][ T3409] usb 5-1: new high-speed USB device number 35 using dummy_hcd 17:23:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 17) 17:23:53 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 32) [ 827.996752][ T6788] loop1: detected capacity change from 0 to 16 [ 828.011090][ T6788] erofs: (device loop1): mounted with root inode @ nid 36. [ 828.027027][ T1754] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 828.113699][ T6794] FAULT_INJECTION: forcing a failure. [ 828.113699][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 828.126332][ T6794] CPU: 0 PID: 6794 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 828.126661][ T6795] FAULT_INJECTION: forcing a failure. [ 828.126661][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 828.136299][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 828.158697][ T6794] Call Trace: [ 828.161815][ T6794] [ 828.164594][ T6794] dump_stack_lvl+0x151/0x1b7 [ 828.169111][ T6794] ? bfq_pos_tree_add_move+0x43e/0x43e [ 828.174401][ T6794] dump_stack+0x15/0x17 [ 828.178395][ T6794] should_fail+0x3c0/0x510 [ 828.182647][ T6794] ? kobject_get_path+0xb8/0x1a0 [ 828.187427][ T6794] __should_failslab+0x9f/0xe0 [ 828.192020][ T6794] should_failslab+0x9/0x20 [ 828.196360][ T6794] __kmalloc+0x6d/0x350 [ 828.200356][ T6794] ? strlen+0x3f/0x80 [ 828.204174][ T6794] kobject_get_path+0xb8/0x1a0 [ 828.208775][ T6794] kobject_uevent_env+0x282/0x730 [ 828.213634][ T6794] disk_force_media_change+0x199/0x290 [ 828.218926][ T6794] ? bdev_check_media_change+0x4c0/0x4c0 [ 828.224397][ T6794] loop_configure+0x92f/0x1640 [ 828.228993][ T6794] ? sysvec_reschedule_ipi+0x7e/0x150 [ 828.234201][ T6794] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 828.239672][ T6794] lo_ioctl+0x8cd/0x25e0 [ 828.243749][ T6794] ? switch_mm_irqs_off+0x57f/0x860 [ 828.248784][ T6794] ? lo_release+0x200/0x200 [ 828.253124][ T6794] ? __kasan_check_write+0x14/0x20 [ 828.258070][ T6794] ? __switch_to+0x617/0x1170 [ 828.262581][ T6794] ? native_set_ldt+0x360/0x360 [ 828.267272][ T6794] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 828.272738][ T6794] ? compat_start_thread+0x20/0x20 [ 828.277685][ T6794] ? switch_mm_irqs_off+0x57f/0x860 [ 828.282719][ T6794] ? _raw_spin_unlock+0x4d/0x70 [ 828.287406][ T6794] ? finish_task_switch+0x173/0x710 [ 828.292531][ T6794] ? __schedule+0xaae/0x1010 [ 828.296955][ T6794] ? __kasan_check_write+0x14/0x20 [ 828.301913][ T6794] ? __switch_to+0x617/0x1170 [ 828.306414][ T6794] ? native_set_ldt+0x360/0x360 [ 828.311101][ T6794] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 828.316568][ T6794] ? compat_start_thread+0x20/0x20 [ 828.321517][ T6794] ? switch_mm_irqs_off+0x57f/0x860 [ 828.326553][ T6794] ? _raw_spin_unlock+0x4d/0x70 [ 828.331239][ T6794] ? finish_task_switch+0x173/0x710 [ 828.336273][ T6794] ? __schedule+0xaae/0x1010 [ 828.340698][ T6794] ? release_firmware_map_entry+0x193/0x193 [ 828.346425][ T6794] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 828.351896][ T6794] ? compat_start_thread+0x20/0x20 [ 828.356845][ T6794] ? __kasan_check_read+0x11/0x20 [ 828.361704][ T6794] ? preempt_schedule_irq+0xef/0x140 [ 828.366821][ T6794] ? __cond_resched+0x20/0x20 [ 828.371338][ T6794] ? avc_has_extended_perms+0x718/0x1210 [ 828.376807][ T6794] ? irqentry_exit_cond_resched+0x2b/0x30 [ 828.382360][ T6794] ? irqentry_exit+0x30/0x40 [ 828.386784][ T6794] ? sysvec_reschedule_ipi+0x7e/0x150 [ 828.391992][ T6794] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 828.397546][ T6794] ? __se_sys_ioctl+0x5d/0x190 [ 828.402149][ T6794] ? __sanitizer_cov_trace_switch+0xf/0x110 [ 828.407886][ T6794] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 828.412479][ T6794] ? blkdev_common_ioctl+0x570/0x1ec0 [ 828.417686][ T6794] ? ioctl_has_perm+0x1f7/0x560 [ 828.422373][ T6794] ? blkdev_bszset+0x240/0x240 [ 828.426975][ T6794] ? ioctl_has_perm+0x3df/0x560 [ 828.431658][ T6794] ? has_cap_mac_admin+0xb0/0xb0 [ 828.436432][ T6794] ? switch_mm_irqs_off+0x57f/0x860 [ 828.441466][ T6794] ? selinux_file_ioctl+0x3c9/0x530 [ 828.446500][ T6794] ? lo_release+0x200/0x200 [ 828.450837][ T6794] blkdev_ioctl+0x2e9/0x620 [ 828.455179][ T6794] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 828.460473][ T6794] ? __fget_files+0x310/0x370 [ 828.465204][ T6794] block_ioctl+0xb0/0xf0 [ 828.469291][ T6794] ? blkdev_iopoll+0x100/0x100 [ 828.473882][ T6794] __se_sys_ioctl+0x115/0x190 [ 828.478389][ T6794] __x64_sys_ioctl+0x7b/0x90 [ 828.482818][ T6794] do_syscall_64+0x44/0xd0 [ 828.487069][ T6794] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 828.492796][ T6794] RIP: 0033:0x7fe9fd6cee97 [ 828.497051][ T6794] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 828.516492][ T6794] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.524737][ T6794] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 828.532549][ T6794] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 828.540366][ T6794] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 828.548172][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.555983][ T6794] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 828.563797][ T6794] [ 828.566662][ T6795] CPU: 1 PID: 6795 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 828.567372][ T3394] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 828.576727][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 828.576744][ T6795] Call Trace: [ 828.576750][ T6795] [ 828.576757][ T6795] dump_stack_lvl+0x151/0x1b7 [ 828.576781][ T6795] ? bfq_pos_tree_add_move+0x43e/0x43e [ 828.609711][ T6795] ? __alloc_pages+0x3a8/0x7c0 [ 828.614308][ T6795] dump_stack+0x15/0x17 [ 828.618316][ T6795] should_fail+0x3c0/0x510 [ 828.622592][ T6795] __should_failslab+0x9f/0xe0 [ 828.627154][ T6795] should_failslab+0x9/0x20 [ 828.631493][ T6795] kmem_cache_alloc+0x4f/0x2f0 [ 828.636091][ T6795] ? xas_create+0x60e/0x1630 [ 828.640518][ T6795] xas_create+0x60e/0x1630 [ 828.644773][ T6795] ? percpu_ref_put+0xc0/0xc0 [ 828.649286][ T6795] xas_create_range+0x1f0/0x710 [ 828.653975][ T6795] shmem_add_to_page_cache+0x860/0xef0 [ 828.659268][ T6795] ? put_page+0xa0/0xa0 [ 828.663258][ T6795] ? _raw_spin_lock_irqsave+0x210/0x210 [ 828.668639][ T6795] ? lru_cache_add+0x273/0x530 [ 828.673239][ T6795] shmem_getpage_gfp+0x16c7/0x25f0 [ 828.678198][ T6795] ? shmem_getpage+0xa0/0xa0 [ 828.682612][ T6795] ? fault_in_safe_writeable+0x240/0x240 [ 828.688082][ T6795] ? __kasan_check_write+0x14/0x20 [ 828.693039][ T6795] ? shmem_write_end+0x786/0x8a0 [ 828.697807][ T6795] shmem_write_begin+0xc8/0x1b0 [ 828.702492][ T6795] generic_perform_write+0x2cd/0x5d0 [ 828.707613][ T6795] ? grab_cache_page_write_begin+0xa0/0xa0 [ 828.713255][ T6795] ? file_remove_privs+0x690/0x690 [ 828.718198][ T6795] ? __kasan_check_write+0x14/0x20 [ 828.723144][ T6795] ? down_write+0xdd/0x140 [ 828.727402][ T6795] __generic_file_write_iter+0x25b/0x4b0 [ 828.732867][ T6795] generic_file_write_iter+0xaf/0x1c0 [ 828.738075][ T6795] vfs_write+0xc8d/0x1050 [ 828.742248][ T6795] ? file_end_write+0x1b0/0x1b0 [ 828.746931][ T6795] ? __fget_files+0x310/0x370 [ 828.751444][ T6795] ? __fdget_pos+0x1fe/0x310 [ 828.755865][ T6795] ? ksys_write+0x77/0x2c0 [ 828.760119][ T6795] ksys_write+0x198/0x2c0 [ 828.764485][ T6795] ? __ia32_sys_read+0x90/0x90 [ 828.769084][ T6795] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 828.774989][ T6795] __x64_sys_write+0x7b/0x90 [ 828.779413][ T6795] do_syscall_64+0x44/0xd0 [ 828.783666][ T6795] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 828.789395][ T6795] RIP: 0033:0x7fd49bfabe2f [ 828.793651][ T6795] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 828.813089][ T6795] RSP: 002b:00007fd49ad2af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 828.821334][ T6795] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfabe2f [ 828.829204][ T6795] RDX: 0000000000002000 RSI: 00007fd49290b000 RDI: 0000000000000006 [ 828.836958][ T6795] RBP: 00007fd49290b000 R08: 0000000000000000 R09: 0000000000000178 [ 828.844773][ T6795] R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000000 [ 828.852580][ T6795] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 828.860395][ T6795] 17:23:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 828.865052][ T6794] loop5: detected capacity change from 0 to 16 [ 828.876171][ T6794] erofs: (device loop5): mounted with root inode @ nid 36. [ 828.893173][ T6795] loop2: detected capacity change from 0 to 16 [ 828.901143][ T6795] erofs: (device loop2): mounted with root inode @ nid 36. 17:23:54 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 33) [ 828.976502][ T6799] loop1: detected capacity change from 0 to 16 [ 828.990931][ T6799] erofs: (device loop1): mounted with root inode @ nid 36. [ 829.007042][ T3409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:23:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 18) [ 829.032648][ T3409] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 829.055574][ T3409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.064170][ T3409] usb 5-1: config 0 descriptor?? [ 829.094897][ T6802] FAULT_INJECTION: forcing a failure. [ 829.094897][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 829.107665][ T6802] CPU: 0 PID: 6802 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 829.117617][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 829.127514][ T6802] Call Trace: [ 829.130637][ T6802] [ 829.133415][ T6802] dump_stack_lvl+0x151/0x1b7 [ 829.137940][ T6802] ? bfq_pos_tree_add_move+0x43e/0x43e [ 829.143219][ T6802] ? vsnprintf+0x1c02/0x1ce0 [ 829.147647][ T6802] dump_stack+0x15/0x17 [ 829.151641][ T6802] should_fail+0x3c0/0x510 [ 829.155894][ T6802] __should_failslab+0x9f/0xe0 [ 829.160495][ T6802] should_failslab+0x9/0x20 [ 829.164835][ T6802] kmem_cache_alloc+0x4f/0x2f0 [ 829.169432][ T6802] ? __alloc_skb+0xbc/0x550 [ 829.173772][ T6802] __alloc_skb+0xbc/0x550 [ 829.177939][ T6802] alloc_uevent_skb+0x7f/0x230 [ 829.182539][ T6802] kobject_uevent_net_broadcast+0x321/0x5a0 [ 829.188271][ T6802] kobject_uevent_env+0x540/0x730 [ 829.193129][ T6802] disk_force_media_change+0x199/0x290 [ 829.198425][ T6802] ? bdev_check_media_change+0x4c0/0x4c0 [ 829.203890][ T6802] ? loop_set_status_from_info+0x5fd/0x7a0 [ 829.209530][ T6802] loop_configure+0x92f/0x1640 [ 829.214140][ T6802] lo_ioctl+0x8cd/0x25e0 [ 829.218212][ T6802] ? is_bpf_text_address+0x1a2/0x1c0 [ 829.223332][ T6802] ? lo_release+0x200/0x200 [ 829.227672][ T6802] ? stack_trace_save+0x1f0/0x1f0 [ 829.232533][ T6802] ? __kernel_text_address+0x9a/0x110 [ 829.237737][ T6802] ? unwind_get_return_address+0x4c/0x90 [ 829.243207][ T6802] ? arch_stack_walk+0xf8/0x140 [ 829.247895][ T6802] ? avc_has_perm_noaudit+0x358/0x450 [ 829.253101][ T6802] ? memcpy+0x56/0x70 [ 829.256919][ T6802] ? memset+0x35/0x40 [ 829.260761][ T6802] ? fsnotify+0x5ad/0x2240 [ 829.264993][ T6802] ? __kasan_check_write+0x14/0x20 [ 829.269940][ T6802] ? _raw_spin_lock+0xa3/0x1b0 [ 829.274555][ T6802] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 829.279750][ T6802] ? _raw_spin_unlock+0x4d/0x70 [ 829.284436][ T6802] ? find_inode_fast+0x459/0x480 [ 829.289215][ T6802] ? __kasan_check_write+0x14/0x20 [ 829.294154][ T6802] ? mutex_unlock+0xa2/0x110 [ 829.298584][ T6802] ? __mutex_lock_slowpath+0x10/0x10 [ 829.303704][ T6802] ? is_bpf_text_address+0x1a2/0x1c0 [ 829.308823][ T6802] ? is_module_text_address+0xe1/0x140 [ 829.314116][ T6802] ? stack_trace_save+0x1f0/0x1f0 [ 829.318981][ T6802] ? __kernel_text_address+0x9a/0x110 [ 829.324186][ T6802] ? unwind_get_return_address+0x4c/0x90 [ 829.329653][ T6802] ? arch_stack_walk+0xf8/0x140 [ 829.334347][ T6802] ? stack_trace_save+0x12d/0x1f0 [ 829.339200][ T6802] ? stack_trace_snprint+0x100/0x100 [ 829.344327][ T6802] ? avc_has_extended_perms+0x718/0x1210 [ 829.349791][ T6802] ? memcpy+0x56/0x70 [ 829.353608][ T6802] ? avc_has_extended_perms+0xb9c/0x1210 [ 829.359077][ T6802] ? kasan_set_track+0x4c/0x70 [ 829.363677][ T6802] ? kasan_set_free_info+0x23/0x40 [ 829.368625][ T6802] ? ____kasan_slab_free+0x126/0x160 [ 829.373747][ T6802] ? __kasan_slab_free+0x11/0x20 [ 829.378520][ T6802] ? slab_free_freelist_hook+0xc9/0x1a0 [ 829.383901][ T6802] ? kmem_cache_free+0x11a/0x2e0 [ 829.388671][ T6802] ? putname+0x10b/0x160 [ 829.392752][ T6802] ? avc_flush+0x2b0/0x2b0 [ 829.397009][ T6802] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 829.401608][ T6802] ? blkdev_common_ioctl+0x570/0x1ec0 [ 829.406816][ T6802] ? kasan_quarantine_put+0x34/0x1b0 [ 829.411936][ T6802] ? blkdev_bszset+0x240/0x240 [ 829.416534][ T6802] ? ioctl_has_perm+0x3df/0x560 [ 829.421221][ T6802] ? has_cap_mac_admin+0xb0/0xb0 [ 829.426010][ T6802] ? kmem_cache_free+0x11a/0x2e0 [ 829.430769][ T6802] ? putname+0x10b/0x160 [ 829.434846][ T6802] ? selinux_file_ioctl+0x3c9/0x530 [ 829.439883][ T6802] ? lo_release+0x200/0x200 [ 829.444221][ T6802] blkdev_ioctl+0x2e9/0x620 [ 829.448561][ T6802] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 829.453858][ T6802] ? __fget_files+0x310/0x370 [ 829.458371][ T6802] block_ioctl+0xb0/0xf0 [ 829.462451][ T6802] ? blkdev_iopoll+0x100/0x100 [ 829.467058][ T6802] __se_sys_ioctl+0x115/0x190 [ 829.471562][ T6802] __x64_sys_ioctl+0x7b/0x90 [ 829.475990][ T6802] do_syscall_64+0x44/0xd0 [ 829.480240][ T6802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 829.485969][ T6802] RIP: 0033:0x7fe9fd6cee97 [ 829.490224][ T6802] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 829.509761][ T6802] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.518007][ T6802] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 829.525823][ T6802] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 829.533635][ T6802] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 829.541449][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.549253][ T6802] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 829.557066][ T6802] [ 829.560854][ T6802] loop5: detected capacity change from 0 to 16 [ 829.567069][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.567149][ T3409] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 829.587553][ T6802] erofs: (device loop5): mounted with root inode @ nid 36. [ 829.592467][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.607960][ T1754] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 829.617493][ T1754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.625755][ T1754] usb 4-1: config 0 descriptor?? [ 829.657109][ T3394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.667984][ T3394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.678295][ T3394] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 829.688142][ T3394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.700159][ T3394] usb 1-1: config 0 descriptor?? [ 829.737443][ T6807] FAULT_INJECTION: forcing a failure. [ 829.737443][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.750309][ T6807] CPU: 1 PID: 6807 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 829.760284][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 829.770166][ T6807] Call Trace: [ 829.773289][ T6807] [ 829.776065][ T6807] dump_stack_lvl+0x151/0x1b7 [ 829.780577][ T6807] ? bfq_pos_tree_add_move+0x43e/0x43e [ 829.785873][ T6807] ? __kasan_check_read+0x11/0x20 [ 829.790732][ T6807] dump_stack+0x15/0x17 [ 829.794751][ T6807] should_fail+0x3c0/0x510 [ 829.798980][ T6807] should_fail_usercopy+0x1a/0x20 [ 829.803929][ T6807] copy_page_from_iter_atomic+0x433/0x11c0 [ 829.809570][ T6807] ? pipe_zero+0x4d0/0x4d0 [ 829.813821][ T6807] ? __kasan_check_write+0x14/0x20 [ 829.818769][ T6807] ? shmem_write_end+0x786/0x8a0 [ 829.823541][ T6807] generic_perform_write+0x343/0x5d0 [ 829.828662][ T6807] ? grab_cache_page_write_begin+0xa0/0xa0 [ 829.834304][ T6807] ? file_remove_privs+0x690/0x690 [ 829.839251][ T6807] ? __kasan_check_write+0x14/0x20 [ 829.844208][ T6807] ? down_write+0xdd/0x140 [ 829.848460][ T6807] __generic_file_write_iter+0x25b/0x4b0 [ 829.853926][ T6807] generic_file_write_iter+0xaf/0x1c0 [ 829.859130][ T6807] vfs_write+0xc8d/0x1050 [ 829.863427][ T6807] ? file_end_write+0x1b0/0x1b0 [ 829.868134][ T6807] ? __fget_files+0x310/0x370 [ 829.872621][ T6807] ? __fdget_pos+0x1fe/0x310 [ 829.877042][ T6807] ? ksys_write+0x77/0x2c0 [ 829.881470][ T6807] ksys_write+0x198/0x2c0 [ 829.885636][ T6807] ? __ia32_sys_read+0x90/0x90 [ 829.890321][ T6807] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 829.896225][ T6807] __x64_sys_write+0x7b/0x90 [ 829.900649][ T6807] do_syscall_64+0x44/0xd0 [ 829.904903][ T6807] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 829.910717][ T6807] RIP: 0033:0x7fd49bfabe2f [ 829.914984][ T6807] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 829.934414][ T6807] RSP: 002b:00007fd49ad2af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 829.942657][ T6807] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfabe2f [ 829.950468][ T6807] RDX: 0000000000002000 RSI: 00007fd49290b000 RDI: 0000000000000006 [ 829.958281][ T6807] RBP: 00007fd49290b000 R08: 0000000000000000 R09: 0000000000000178 [ 829.966091][ T6807] R10: 0000000000002000 R11: 0000000000000293 R12: 0000000000000000 [ 829.973942][ T6807] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 829.981722][ T6807] [ 829.986561][ T6777] udc-core: couldn't find an available UDC or it's busy [ 829.986572][ T6811] udc-core: couldn't find an available UDC or it's busy [ 829.986585][ T6811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 829.995889][ T6777] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 830.004436][ T6811] udc-core: couldn't find an available UDC or it's busy [ 830.009233][ T6807] loop2: detected capacity change from 0 to 16 [ 830.015413][ T6811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 830.052482][ T6807] erofs: (device loop2): mounted with root inode @ nid 36. [ 830.061532][ T1754] lg-g15 0003:046D:C225.007F: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 830.207939][ T3394] lg-g15 0003:046D:C225.0080: item fetching failed at offset 0/1 [ 830.215645][ T3394] lg-g15: probe of 0003:046D:C225.0080 failed with error -22 [ 830.260484][ T3394] usb 4-1: USB disconnect, device number 81 [ 831.027808][ T1762] usb 5-1: USB disconnect, device number 35 17:23:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 64) ioctl$TIOCSBRK(r0, 0x5427) (rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close_range(0xffffffffffffffff, r2, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x88, {0x88, 0xe, "b88057cf61e47aaa11272b529314a4c741c2fe18830c2ae7392d0bc88a2b9a820de526857c97a5cdce6e746e268adbdf4108d6f14cd6342058ff6979365c87bd5ebddbc11110d80e97b8f6ea575bc74e62fc596b57e3a908fff3c77130330b2cace144d600e1eba4bfaf20fb2b435130239af14b978d140848c01645475f24ce3d9263abbe14"}}, &(0x7f0000000140)={0x0, 0x3, 0x68, @string={0x68, 0x3, "c07b1a744bbd3e1ee547b1327d1215f15bd71346dee2b0eaaf4476d3e0fee7b8123932900831f16e698c2ae8d50fa3d75a3632bd1c60baee730d68f6273fc257a7eb5e927bb3127f3b2b185348bb9d9cf48257e7cf2b0ac8f7115b3e249335d0ff3ce1979e63"}}, &(0x7f0000002100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "b3ad9235"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9, 0x1, {0x22, 0x47e}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x20, 0x31, 0x6e, "b0bb9fb9ece3dfbe44f8b8710cacb919272c9f575413a34b4c90c1410c49d7ffc3fb035d235bff9a54702289563f99828c022755f69531d1854bdc107ad26226ed5e4f5aa5e2b161c609afafa2d8eecca618646130f2d55465f5cd225d39dce1757cdae029a8c518a319f7d4ea4c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x2a, "0f51b06d4e3a2824cb82295f2ddb0849dde980c6a8a5fa471bc51427789ac6a2e85cd4e46492f51d0000"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00224100dd0088"], 0x0}, 0x0) 17:23:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:56 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 34) 17:23:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 19) 17:23:56 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x63, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x1, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x81, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x3f, 0x20, 0x0, 0x8, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x145b}}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "a58b0867ddd67052d8b91b79c827f61f238ce6c7bba645b8c1bd166095691c83ca9c3afa8e009d2628eb6da9076d0375ec12fc33a191c7f978ed1425ec21306b204a044dfcc52c4ce03e12a829ffaab64302fcba7e701fa63797c62cc1034fc7baead54acf27273a2c3c97d06e8ba6fc150f18e5a516b7e1de96c18c386c441ffbe858b3153d5dcac9e0ab7692753ece817b4dc92b2a6bc5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44b}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e101090224000100000000090400000903000000f220000000033a50d51772f64000cb35760122220009058103"], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000380)={0x20, 0x8, 0x27, {0x27, 0x6, "bffb5010b6d916ca31a8bd0918006710665e22d9bf47e1efbd8fd2d66a282adae1f4dea4f2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000400)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0xc, "8da98d58"}, @main=@item_4={0x3, 0x0, 0x8, "c14c4aca"}, @local=@item_012={0x1, 0x2, 0x7, "10"}, @local=@item_4={0x3, 0x2, 0x4, "90420b02"}, @local=@item_4={0x3, 0x2, 0x3, "1f4ca8fe"}, @local=@item_4={0x3, 0x2, 0x3, "337cd27d"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xfb, 0x1, {0x22, 0xbe1}}}}, &(0x7f0000000680)={0xfffffffffffffe7a, &(0x7f00000004c0)={0x20, 0x0, 0x73, "d937ba37fb456cf64240877905c1260748821d3c13fba9bb6dc4bcb1e3b1892e5b042c626529e31ee1ea70a428c64ea7ab2186fdca6e68d3205b9bc7215d5d662ed14e8fb87706377d8b6e8ad64be10afbe86edd44218a70984433631ed3102cbd1eca0c7d4adc4cd31dbeed9f2aeb7f32742f"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x1, 0x68, "626725ab9375e234b4c0928e96e338d0feda7daef518c5b7be030d4f413ddf4852d9d1c94fcd9c1bd8ab24064d6c2beda8088602cb2116ff443f13c6d9ea9087cacb764987a62b96aa1156e991c0a1d8265789d8a7dccaa30883eefc6c81e806e6864457e31b74c2"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x6}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r2, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x24, &(0x7f00000006c0)={0x20, 0x2, 0x6d, {0x6d, 0x2, "3cba37f775a834c70f116cba833d740fa16cd6af546186fe937ed178c6251c46f1d8e388de53bbb4009aef017304656cc23da597b629646e25dacfb58b585a9f4be908f635638b25407f28e4f8eac634dc3d4efba7f32da474be87b0ab7c0b64c7069d259780a8793ad677"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000780)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x7, "19"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4da}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x10, 0x90, "16ed9af22ee7b18be1876f28464dbe4b960fb57703a4da5a82004e6e342d72682c394cbd36836555bb06386124a0cfe188933faf71f34bb2aa319e440991de33923cbcf5c4d12b75ded6f7f0790a42ca5e5404e9dd9077795febcc2d99cdd501821255c8b45582c47cecd0aee198b5dbc58168d7fc3879aada406143f4c134b62fff3ac8f0e6f2345c52662e70be199a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x1, 0xb2, "27c160cdb9653c892571f3a611fbd134c695956023b93fc1601f4211bf36b0256701116a6f8b2771412466652afa3581e8ad96c445e5cc52196443d6aed167dc44719826fe35a52d363c21a045c2fcf78d5342f266e846539d22c9f754df21af85778d5cc23ac23de441093f7ca8b7121b60453a39ccda6ee448c4f4ee7fe303e6306e57bb9e92a5ffd5c52d9c0366a0908ff434d629f4522223defe821d536951434eba547fbef42e55bb543f4487fbbcdd"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0xef}}) 17:23:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 831.348929][ T1762] usb 1-1: USB disconnect, device number 98 [ 831.421007][ T6828] FAULT_INJECTION: forcing a failure. [ 831.421007][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 831.433579][ T6828] CPU: 1 PID: 6828 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 831.443649][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 831.453553][ T6828] Call Trace: [ 831.456667][ T6828] [ 831.459442][ T6828] dump_stack_lvl+0x151/0x1b7 [ 831.463955][ T6828] ? bfq_pos_tree_add_move+0x43e/0x43e [ 831.469254][ T6828] dump_stack+0x15/0x17 [ 831.473243][ T6828] should_fail+0x3c0/0x510 [ 831.477496][ T6828] ? alloc_uevent_skb+0x7f/0x230 [ 831.482268][ T6828] __should_failslab+0x9f/0xe0 [ 831.486868][ T6828] should_failslab+0x9/0x20 [ 831.491213][ T6828] __kmalloc_track_caller+0x6c/0x350 [ 831.496329][ T6828] ? kmem_cache_alloc+0x1c1/0x2f0 [ 831.501186][ T6828] ? __alloc_skb+0xbc/0x550 [ 831.505527][ T6828] ? alloc_uevent_skb+0x7f/0x230 [ 831.510300][ T6828] __alloc_skb+0x10e/0x550 [ 831.514553][ T6828] alloc_uevent_skb+0x7f/0x230 [ 831.519157][ T6828] kobject_uevent_net_broadcast+0x321/0x5a0 [ 831.524884][ T6828] kobject_uevent_env+0x540/0x730 [ 831.529747][ T6828] disk_force_media_change+0x199/0x290 [ 831.535037][ T6828] ? bdev_check_media_change+0x4c0/0x4c0 [ 831.540510][ T6828] ? loop_set_status_from_info+0x5fd/0x7a0 [ 831.546162][ T6828] loop_configure+0x92f/0x1640 [ 831.550750][ T6828] lo_ioctl+0x8cd/0x25e0 [ 831.554828][ T6828] ? is_bpf_text_address+0x1a2/0x1c0 [ 831.559948][ T6828] ? lo_release+0x200/0x200 [ 831.564285][ T6828] ? stack_trace_save+0x1f0/0x1f0 [ 831.569147][ T6828] ? __kernel_text_address+0x9a/0x110 [ 831.574357][ T6828] ? unwind_get_return_address+0x4c/0x90 [ 831.579825][ T6828] ? arch_stack_walk+0xf8/0x140 [ 831.584512][ T6828] ? avc_has_perm_noaudit+0x358/0x450 [ 831.589717][ T6828] ? memcpy+0x56/0x70 [ 831.593535][ T6828] ? memset+0x35/0x40 [ 831.597357][ T6828] ? fsnotify+0x5ad/0x2240 [ 831.601607][ T6828] ? __kasan_check_write+0x14/0x20 [ 831.606557][ T6828] ? _raw_spin_lock+0xa3/0x1b0 [ 831.611156][ T6828] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 831.616362][ T6828] ? _raw_spin_unlock+0x4d/0x70 [ 831.621057][ T6828] ? find_inode_fast+0x459/0x480 [ 831.625851][ T6828] ? __kasan_check_write+0x14/0x20 [ 831.630771][ T6828] ? mutex_unlock+0xa2/0x110 [ 831.635203][ T6828] ? __mutex_lock_slowpath+0x10/0x10 [ 831.640319][ T6828] ? is_bpf_text_address+0x1a2/0x1c0 [ 831.645440][ T6828] ? is_module_text_address+0xe1/0x140 [ 831.650738][ T6828] ? stack_trace_save+0x1f0/0x1f0 [ 831.655593][ T6828] ? __kernel_text_address+0x9a/0x110 [ 831.660799][ T6828] ? unwind_get_return_address+0x4c/0x90 [ 831.666269][ T6828] ? arch_stack_walk+0xf8/0x140 [ 831.670957][ T6828] ? stack_trace_save+0x12d/0x1f0 [ 831.675824][ T6828] ? stack_trace_snprint+0x100/0x100 [ 831.680936][ T6828] ? avc_has_extended_perms+0x718/0x1210 [ 831.686404][ T6828] ? memcpy+0x56/0x70 [ 831.690226][ T6828] ? avc_has_extended_perms+0xb9c/0x1210 [ 831.695692][ T6828] ? kasan_set_track+0x4c/0x70 [ 831.700295][ T6828] ? kasan_set_free_info+0x23/0x40 [ 831.705242][ T6828] ? ____kasan_slab_free+0x126/0x160 [ 831.705642][ T6831] FAULT_INJECTION: forcing a failure. [ 831.705642][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 831.710358][ T6828] ? __kasan_slab_free+0x11/0x20 [ 831.710381][ T6828] ? slab_free_freelist_hook+0xc9/0x1a0 [ 831.710400][ T6828] ? kmem_cache_free+0x11a/0x2e0 [ 831.710416][ T6828] ? putname+0x10b/0x160 [ 831.710432][ T6828] ? avc_flush+0x2b0/0x2b0 [ 831.746037][ T6828] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 831.750640][ T6828] ? blkdev_common_ioctl+0x570/0x1ec0 [ 831.755839][ T6828] ? kasan_quarantine_put+0x34/0x1b0 [ 831.760961][ T6828] ? blkdev_bszset+0x240/0x240 [ 831.765561][ T6828] ? ioctl_has_perm+0x3df/0x560 [ 831.770246][ T6828] ? has_cap_mac_admin+0xb0/0xb0 [ 831.775023][ T6828] ? kmem_cache_free+0x11a/0x2e0 [ 831.779796][ T6828] ? putname+0x10b/0x160 [ 831.783873][ T6828] ? selinux_file_ioctl+0x3c9/0x530 [ 831.788907][ T6828] ? lo_release+0x200/0x200 [ 831.793245][ T6828] blkdev_ioctl+0x2e9/0x620 [ 831.797588][ T6828] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 831.802880][ T6828] ? __fget_files+0x310/0x370 [ 831.807400][ T6828] block_ioctl+0xb0/0xf0 [ 831.811481][ T6828] ? blkdev_iopoll+0x100/0x100 [ 831.816078][ T6828] __se_sys_ioctl+0x115/0x190 [ 831.820679][ T6828] __x64_sys_ioctl+0x7b/0x90 [ 831.825109][ T6828] do_syscall_64+0x44/0xd0 [ 831.829374][ T6828] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 831.835172][ T6828] RIP: 0033:0x7fe9fd6cee97 [ 831.839421][ T6828] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 831.858949][ T6828] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.867200][ T6828] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 831.875005][ T6828] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 831.882815][ T6828] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 831.890628][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.898445][ T6828] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 831.906254][ T6828] [ 831.909755][ T6831] CPU: 1 PID: 6831 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 831.912673][ T6828] loop5: detected capacity change from 0 to 16 [ 831.919710][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 831.919726][ T6831] Call Trace: [ 831.919733][ T6831] [ 831.919740][ T6831] dump_stack_lvl+0x151/0x1b7 [ 831.919765][ T6831] ? bfq_pos_tree_add_move+0x43e/0x43e [ 831.919781][ T6831] ? down_write+0xdd/0x140 [ 831.925926][ T6830] loop1: detected capacity change from 0 to 16 [ 831.935687][ T6831] dump_stack+0x15/0x17 [ 831.935716][ T6831] should_fail+0x3c0/0x510 [ 831.935733][ T6831] __should_failslab+0x9f/0xe0 [ 831.935751][ T6831] should_failslab+0x9/0x20 [ 831.978916][ T6831] kmem_cache_alloc+0x4f/0x2f0 [ 831.983501][ T6831] ? vm_area_dup+0x26/0x1d0 [ 831.987840][ T6831] vm_area_dup+0x26/0x1d0 [ 831.992006][ T6831] __split_vma+0xc0/0x480 [ 831.996259][ T6831] __do_munmap+0x434/0x1ad0 [ 832.000598][ T6831] ? __kasan_check_write+0x14/0x20 [ 832.005551][ T6831] ? down_write_killable+0xdd/0x150 [ 832.010582][ T6831] ? down_write+0x140/0x140 [ 832.014918][ T6831] ? blocking_notifier_call_chain+0xff/0x140 [ 832.020736][ T6831] __do_sys_munmap+0x15e/0x280 [ 832.025335][ T6831] ? vma_gap_callbacks_rotate+0x230/0x230 [ 832.030900][ T6831] ? debug_smp_processor_id+0x17/0x20 [ 832.036111][ T6831] __x64_sys_munmap+0x5b/0x70 [ 832.040745][ T6831] do_syscall_64+0x44/0xd0 [ 832.044951][ T6831] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 832.050676][ T6831] RIP: 0033:0x7fd49bffa187 [ 832.054932][ T6831] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.074378][ T6831] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 832.082623][ T6831] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bffa187 [ 832.090441][ T6831] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00007fd49290b000 [ 832.098242][ T6831] RBP: 00007fd49290b000 R08: 0000000000000000 R09: 0000000000000178 [ 832.106064][ T6831] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 832.113864][ T6831] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 832.121681][ T6831] [ 832.126357][ T6828] erofs: (device loop5): mounted with root inode @ nid 36. [ 832.127827][ T6830] erofs: (device loop1): mounted with root inode @ nid 36. 17:23:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 20) 17:23:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:57 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 35) [ 832.267007][ T1754] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 832.274440][ T1723] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 832.367017][ T1762] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 832.375943][ T6840] loop1: detected capacity change from 0 to 16 [ 832.383426][ T6840] erofs: (device loop1): mounted with root inode @ nid 36. [ 832.391767][ T6841] FAULT_INJECTION: forcing a failure. [ 832.391767][ T6841] name failslab, interval 1, probability 0, space 0, times 0 [ 832.405511][ T6841] CPU: 1 PID: 6841 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 832.409907][ T6842] FAULT_INJECTION: forcing a failure. [ 832.409907][ T6842] name failslab, interval 1, probability 0, space 0, times 0 [ 832.415491][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 832.415513][ T6841] Call Trace: [ 832.415521][ T6841] [ 832.415529][ T6841] dump_stack_lvl+0x151/0x1b7 [ 832.448218][ T6841] ? bfq_pos_tree_add_move+0x43e/0x43e [ 832.453504][ T6841] dump_stack+0x15/0x17 [ 832.457497][ T6841] should_fail+0x3c0/0x510 [ 832.461750][ T6841] __should_failslab+0x9f/0xe0 [ 832.466365][ T6841] should_failslab+0x9/0x20 [ 832.470703][ T6841] kmem_cache_alloc+0x4f/0x2f0 [ 832.475290][ T6841] ? skb_clone+0x1df/0x3d0 [ 832.479543][ T6841] skb_clone+0x1df/0x3d0 [ 832.483623][ T6841] netlink_broadcast_filtered+0x638/0x11b0 [ 832.489270][ T6841] netlink_broadcast+0x3a/0x50 [ 832.493863][ T6841] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 832.499596][ T6841] kobject_uevent_env+0x540/0x730 [ 832.504456][ T6841] disk_force_media_change+0x199/0x290 [ 832.509743][ T6841] ? bdev_check_media_change+0x4c0/0x4c0 [ 832.515220][ T6841] ? loop_set_status_from_info+0x5fd/0x7a0 [ 832.520866][ T6841] loop_configure+0x92f/0x1640 [ 832.525454][ T6841] lo_ioctl+0x8cd/0x25e0 [ 832.529545][ T6841] ? is_bpf_text_address+0x1a2/0x1c0 [ 832.534656][ T6841] ? lo_release+0x200/0x200 [ 832.538993][ T6841] ? stack_trace_save+0x1f0/0x1f0 [ 832.544272][ T6841] ? __kernel_text_address+0x9a/0x110 [ 832.549482][ T6841] ? unwind_get_return_address+0x4c/0x90 [ 832.554947][ T6841] ? arch_stack_walk+0xf8/0x140 [ 832.559634][ T6841] ? avc_has_perm_noaudit+0x358/0x450 [ 832.564852][ T6841] ? memcpy+0x56/0x70 [ 832.568663][ T6841] ? memset+0x35/0x40 [ 832.572489][ T6841] ? fsnotify+0x5ad/0x2240 [ 832.576737][ T6841] ? __kasan_check_write+0x14/0x20 [ 832.581690][ T6841] ? _raw_spin_lock+0xa3/0x1b0 [ 832.586286][ T6841] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 832.591488][ T6841] ? _raw_spin_unlock+0x4d/0x70 [ 832.596172][ T6841] ? find_inode_fast+0x459/0x480 [ 832.600952][ T6841] ? __kasan_check_write+0x14/0x20 [ 832.605894][ T6841] ? mutex_unlock+0xa2/0x110 [ 832.610329][ T6841] ? __mutex_lock_slowpath+0x10/0x10 [ 832.615453][ T6841] ? is_bpf_text_address+0x1a2/0x1c0 [ 832.620567][ T6841] ? is_module_text_address+0xe1/0x140 [ 832.625879][ T6841] ? stack_trace_save+0x1f0/0x1f0 [ 832.630724][ T6841] ? __kernel_text_address+0x9a/0x110 [ 832.635926][ T6841] ? unwind_get_return_address+0x4c/0x90 [ 832.641396][ T6841] ? arch_stack_walk+0xf8/0x140 [ 832.646082][ T6841] ? stack_trace_save+0x12d/0x1f0 [ 832.650942][ T6841] ? stack_trace_snprint+0x100/0x100 [ 832.656060][ T6841] ? avc_has_extended_perms+0x718/0x1210 [ 832.661530][ T6841] ? memcpy+0x56/0x70 [ 832.665351][ T6841] ? avc_has_extended_perms+0xb9c/0x1210 [ 832.670830][ T6841] ? kasan_set_track+0x4c/0x70 [ 832.675420][ T6841] ? kasan_set_free_info+0x23/0x40 [ 832.680367][ T6841] ? ____kasan_slab_free+0x126/0x160 [ 832.685493][ T6841] ? __kasan_slab_free+0x11/0x20 [ 832.690257][ T6841] ? slab_free_freelist_hook+0xc9/0x1a0 [ 832.695643][ T6841] ? kmem_cache_free+0x11a/0x2e0 [ 832.700414][ T6841] ? putname+0x10b/0x160 [ 832.704501][ T6841] ? avc_flush+0x2b0/0x2b0 [ 832.708750][ T6841] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 832.713354][ T6841] ? blkdev_common_ioctl+0x570/0x1ec0 [ 832.718556][ T6841] ? kasan_quarantine_put+0x34/0x1b0 [ 832.723676][ T6841] ? blkdev_bszset+0x240/0x240 [ 832.728275][ T6841] ? ioctl_has_perm+0x3df/0x560 [ 832.733048][ T6841] ? has_cap_mac_admin+0xb0/0xb0 [ 832.737907][ T6841] ? kmem_cache_free+0x11a/0x2e0 [ 832.742694][ T6841] ? putname+0x10b/0x160 [ 832.746767][ T6841] ? selinux_file_ioctl+0x3c9/0x530 [ 832.751803][ T6841] ? lo_release+0x200/0x200 [ 832.756137][ T6841] blkdev_ioctl+0x2e9/0x620 [ 832.760479][ T6841] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 832.765769][ T6841] ? __fget_files+0x310/0x370 [ 832.770283][ T6841] block_ioctl+0xb0/0xf0 [ 832.774361][ T6841] ? blkdev_iopoll+0x100/0x100 [ 832.778975][ T6841] __se_sys_ioctl+0x115/0x190 [ 832.783486][ T6841] __x64_sys_ioctl+0x7b/0x90 [ 832.787908][ T6841] do_syscall_64+0x44/0xd0 [ 832.792156][ T6841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 832.797906][ T6841] RIP: 0033:0x7fe9fd6cee97 [ 832.802148][ T6841] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.821587][ T6841] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.829822][ T6841] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 832.837640][ T6841] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 832.845989][ T6841] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 832.853799][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.861618][ T6841] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 832.869427][ T6841] [ 832.872694][ T6842] CPU: 1 PID: 6842 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 832.872914][ T6841] loop5: detected capacity change from 0 to 16 [ 832.882676][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 832.882688][ T6842] Call Trace: [ 832.882693][ T6842] [ 832.882700][ T6842] dump_stack_lvl+0x151/0x1b7 [ 832.882727][ T6842] ? bfq_pos_tree_add_move+0x43e/0x43e [ 832.882748][ T6842] dump_stack+0x15/0x17 [ 832.882765][ T6842] should_fail+0x3c0/0x510 [ 832.882781][ T6842] __should_failslab+0x9f/0xe0 [ 832.908421][ T6841] erofs: (device loop5): mounted with root inode @ nid 36. [ 832.908961][ T6842] should_failslab+0x9/0x20 [ 832.938568][ T6842] kmem_cache_alloc+0x4f/0x2f0 [ 832.943160][ T6842] ? anon_vma_clone+0xa1/0x4f0 [ 832.947760][ T6842] anon_vma_clone+0xa1/0x4f0 [ 832.952188][ T6842] __split_vma+0x193/0x480 [ 832.956442][ T6842] __do_munmap+0x434/0x1ad0 [ 832.961214][ T6842] ? __kasan_check_write+0x14/0x20 [ 832.966160][ T6842] ? down_write_killable+0xdd/0x150 [ 832.971203][ T6842] ? down_write+0x140/0x140 [ 832.975708][ T6842] ? blocking_notifier_call_chain+0xff/0x140 [ 832.981525][ T6842] __do_sys_munmap+0x15e/0x280 [ 832.986123][ T6842] ? vma_gap_callbacks_rotate+0x230/0x230 [ 832.991677][ T6842] ? debug_smp_processor_id+0x17/0x20 [ 832.996888][ T6842] __x64_sys_munmap+0x5b/0x70 [ 833.001397][ T6842] do_syscall_64+0x44/0xd0 [ 833.005659][ T6842] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 833.011378][ T6842] RIP: 0033:0x7fd49bffa187 [ 833.015638][ T6842] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 833.035078][ T6842] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 833.043320][ T6842] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bffa187 [ 833.051137][ T6842] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00007fd49290b000 [ 833.058947][ T6842] RBP: 00007fd49290b000 R08: 0000000000000000 R09: 0000000000000178 [ 833.066753][ T6842] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 833.074565][ T6842] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 833.082381][ T6842] [ 833.086001][ T6842] loop2: detected capacity change from 0 to 16 [ 833.092902][ T6842] erofs: (device loop2): mounted with root inode @ nid 36. 17:23:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:23:58 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 36) [ 833.247113][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.257933][ T1723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 833.271535][ T6848] loop1: detected capacity change from 0 to 16 [ 833.276200][ T1754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.288873][ T6849] FAULT_INJECTION: forcing a failure. [ 833.288873][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 833.290660][ T1723] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 833.301496][ T6848] erofs: (device loop1): mounted with root inode @ nid 36. [ 833.319925][ T1754] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 833.330324][ T6849] CPU: 0 PID: 6849 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 833.338617][ T1754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.340404][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 833.340420][ T6849] Call Trace: [ 833.340426][ T6849] [ 833.350537][ T1723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.358196][ T6849] dump_stack_lvl+0x151/0x1b7 [ 833.358224][ T6849] ? bfq_pos_tree_add_move+0x43e/0x43e [ 833.370161][ T1723] usb 5-1: config 0 descriptor?? [ 833.371910][ T6849] ? avc_denied+0x1b0/0x1b0 [ 833.377359][ T1754] usb 4-1: config 0 descriptor?? [ 833.381717][ T6849] ? __x64_sys_ioctl+0x7b/0x90 [ 833.400294][ T6849] dump_stack+0x15/0x17 [ 833.404289][ T6849] should_fail+0x3c0/0x510 [ 833.408543][ T6849] __should_failslab+0x9f/0xe0 [ 833.413175][ T6849] should_failslab+0x9/0x20 [ 833.417479][ T6849] kmem_cache_alloc+0x4f/0x2f0 [ 833.422102][ T6849] ? __kernfs_new_node+0xdb/0x6e0 [ 833.426942][ T6849] __kernfs_new_node+0xdb/0x6e0 [ 833.431631][ T6849] ? kernfs_new_node+0x170/0x170 [ 833.436403][ T6849] ? selinux_sb_statfs+0x1b4/0x250 [ 833.441350][ T6849] ? selinux_sb_show_options+0x600/0x600 [ 833.446900][ T6849] ? ____kasan_slab_free+0x131/0x160 [ 833.452025][ T6849] ? __kasan_slab_free+0x11/0x20 [ 833.456799][ T6849] ? shmem_statfs+0x221/0x2b0 [ 833.461308][ T6849] kernfs_create_dir_ns+0x9b/0x230 [ 833.466266][ T6849] internal_create_group+0x29d/0xf60 [ 833.471466][ T6849] ? get_super+0x1ee/0x210 [ 833.475806][ T6849] ? sysfs_create_group+0x30/0x30 [ 833.480670][ T6849] ? __kasan_check_write+0x14/0x20 [ 833.485613][ T6849] sysfs_create_group+0x1f/0x30 [ 833.490302][ T6849] loop_configure+0x1077/0x1640 [ 833.494989][ T6849] lo_ioctl+0x8cd/0x25e0 [ 833.499066][ T6849] ? is_bpf_text_address+0x1a2/0x1c0 [ 833.504187][ T6849] ? lo_release+0x200/0x200 [ 833.508525][ T6849] ? stack_trace_save+0x1f0/0x1f0 [ 833.513388][ T6849] ? __kernel_text_address+0x9a/0x110 [ 833.518600][ T6849] ? unwind_get_return_address+0x4c/0x90 [ 833.524068][ T6849] ? arch_stack_walk+0xf8/0x140 [ 833.528752][ T6849] ? avc_has_perm_noaudit+0x358/0x450 [ 833.533959][ T6849] ? memcpy+0x56/0x70 [ 833.537773][ T6849] ? memset+0x35/0x40 [ 833.541593][ T6849] ? fsnotify+0x5ad/0x2240 [ 833.545846][ T6849] ? __kasan_check_write+0x14/0x20 [ 833.550798][ T6849] ? _raw_spin_lock+0xa3/0x1b0 [ 833.555394][ T6849] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 833.560603][ T6849] ? _raw_spin_unlock+0x4d/0x70 [ 833.565289][ T6849] ? find_inode_fast+0x459/0x480 [ 833.570064][ T6849] ? __kasan_check_write+0x14/0x20 [ 833.575012][ T6849] ? mutex_unlock+0xa2/0x110 [ 833.579434][ T6849] ? __mutex_lock_slowpath+0x10/0x10 [ 833.584570][ T6849] ? is_bpf_text_address+0x1a2/0x1c0 [ 833.589678][ T6849] ? is_module_text_address+0xe1/0x140 [ 833.594973][ T6849] ? stack_trace_save+0x1f0/0x1f0 [ 833.599840][ T6849] ? __kernel_text_address+0x9a/0x110 [ 833.605040][ T6849] ? unwind_get_return_address+0x4c/0x90 [ 833.610513][ T6849] ? arch_stack_walk+0xf8/0x140 [ 833.615197][ T6849] ? stack_trace_save+0x12d/0x1f0 [ 833.620058][ T6849] ? stack_trace_snprint+0x100/0x100 [ 833.625178][ T6849] ? avc_has_extended_perms+0x718/0x1210 [ 833.630644][ T6849] ? memcpy+0x56/0x70 [ 833.634469][ T6849] ? avc_has_extended_perms+0xb9c/0x1210 [ 833.639932][ T6849] ? kasan_set_track+0x4c/0x70 [ 833.644530][ T6849] ? kasan_set_free_info+0x23/0x40 [ 833.649479][ T6849] ? ____kasan_slab_free+0x126/0x160 [ 833.654603][ T6849] ? __kasan_slab_free+0x11/0x20 [ 833.659371][ T6849] ? slab_free_freelist_hook+0xc9/0x1a0 [ 833.664757][ T6849] ? kmem_cache_free+0x11a/0x2e0 [ 833.669529][ T6849] ? putname+0x10b/0x160 [ 833.673608][ T6849] ? avc_flush+0x2b0/0x2b0 [ 833.677864][ T6849] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 833.682464][ T6849] ? blkdev_common_ioctl+0x570/0x1ec0 [ 833.687766][ T6849] ? kasan_quarantine_put+0x34/0x1b0 [ 833.692876][ T6849] ? blkdev_bszset+0x240/0x240 [ 833.697477][ T6849] ? ioctl_has_perm+0x3df/0x560 [ 833.702163][ T6849] ? has_cap_mac_admin+0xb0/0xb0 [ 833.707108][ T6849] ? kmem_cache_free+0x11a/0x2e0 [ 833.711884][ T6849] ? putname+0x10b/0x160 [ 833.716142][ T6849] ? selinux_file_ioctl+0x3c9/0x530 [ 833.721172][ T6849] ? lo_release+0x200/0x200 [ 833.725513][ T6849] blkdev_ioctl+0x2e9/0x620 [ 833.729849][ T6849] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 833.735145][ T6849] ? __fget_files+0x310/0x370 [ 833.739662][ T6849] block_ioctl+0xb0/0xf0 [ 833.743737][ T6849] ? blkdev_iopoll+0x100/0x100 [ 833.748340][ T6849] __se_sys_ioctl+0x115/0x190 [ 833.752848][ T6849] __x64_sys_ioctl+0x7b/0x90 [ 833.757278][ T6849] do_syscall_64+0x44/0xd0 [ 833.761618][ T6849] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 833.767352][ T6849] RIP: 0033:0x7fe9fd6cee97 [ 833.771601][ T6849] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 833.791045][ T6849] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.799285][ T6849] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 833.807094][ T6849] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 833.814909][ T6849] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 833.822721][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.830531][ T6849] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 833.838344][ T6849] 17:23:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 21) [ 833.847545][ T6849] loop5: detected capacity change from 0 to 16 [ 833.861320][ T6849] erofs: (device loop5): mounted with root inode @ nid 36. [ 833.881100][ T1723] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 833.929703][ T1762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.963447][ T1762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.973325][ T1762] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 833.983044][ T1762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.991663][ T1762] usb 1-1: config 0 descriptor?? [ 834.047561][ T6854] FAULT_INJECTION: forcing a failure. [ 834.047561][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 834.095107][ T6854] CPU: 1 PID: 6854 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 834.105097][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 834.114990][ T6854] Call Trace: [ 834.118112][ T6854] [ 834.120889][ T6854] dump_stack_lvl+0x151/0x1b7 [ 834.125403][ T6854] ? bfq_pos_tree_add_move+0x43e/0x43e [ 834.130870][ T6854] ? __kasan_check_read+0x11/0x20 [ 834.135730][ T6854] ? call_rcu+0xe0f/0x1400 [ 834.139983][ T6854] dump_stack+0x15/0x17 [ 834.144409][ T6854] should_fail+0x3c0/0x510 [ 834.148665][ T6854] __should_failslab+0x9f/0xe0 [ 834.153262][ T6854] should_failslab+0x9/0x20 [ 834.157602][ T6854] kmem_cache_alloc+0x4f/0x2f0 [ 834.162209][ T6854] ? vm_stat_account+0xf0/0xf0 [ 834.166801][ T6854] ? getname_flags+0xba/0x510 [ 834.171322][ T6854] getname_flags+0xba/0x510 [ 834.175656][ T6854] getname+0x19/0x20 [ 834.179388][ T6854] do_sys_openat2+0xd2/0x500 [ 834.183813][ T6854] ? userfaultfd_unmap_prep+0x4d0/0x4d0 [ 834.189196][ T6854] ? do_sys_open+0x220/0x220 [ 834.193624][ T6854] __x64_sys_openat+0x243/0x290 [ 834.198309][ T6854] ? __ia32_sys_open+0x270/0x270 [ 834.203082][ T6854] ? debug_smp_processor_id+0x17/0x20 [ 834.208290][ T6854] do_syscall_64+0x44/0xd0 [ 834.212545][ T6854] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 834.218272][ T6854] RIP: 0033:0x7fd49bfac234 [ 834.222526][ T6854] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 834.241969][ T6854] RSP: 002b:00007fd49ad2aec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 834.250210][ T6854] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfac234 [ 834.258022][ T6854] RDX: 0000000000000002 RSI: 00007fd49ad2afe0 RDI: 00000000ffffff9c [ 834.265833][ T6854] RBP: 00007fd49ad2afe0 R08: 0000000000000000 R09: 0000000000000178 [ 834.273646][ T6854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 834.281468][ T6854] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 834.289271][ T6854] [ 834.292742][ T6820] udc-core: couldn't find an available UDC or it's busy [ 834.304634][ T6820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 834.528168][ T1762] lg-g15 0003:046D:C225.0081: item fetching failed at offset 0/1 [ 834.535881][ T1762] lg-g15: probe of 0003:046D:C225.0081 failed with error -22 [ 834.545084][ T1754] lg-g15 0003:046D:C225.0082: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 834.727316][ T6820] udc-core: couldn't find an available UDC or it's busy [ 834.734189][ T6820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 834.742126][ T6855] udc-core: couldn't find an available UDC or it's busy [ 834.749054][ T6855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 834.756772][ T1762] usb 4-1: USB disconnect, device number 82 17:24:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000bc7b0fededac330500092100000001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:01 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 37) 17:24:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 22) 17:24:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x89, {0x89, 0x6, "96442b23fa10563c95e789669f1f98dfbbc0a4d4c19dd9877c540fb9f5f9f95795ea468646c29222844fde7e2c9347f179c8eb288eb3536174bbe08bd7a435a243969162d201cc46e59c8c6bf7e3d3cdf34a05b4e7d6c742de9b4c05342f5c93572d827a1fa0d769707823f717008cdfe9fd6d211d7599cb0bc1469d93e10b09e0459c68baba7a"}}, &(0x7f0000000140)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "1839721fbc6998982bb27fd6a877c9636d9a8623e46f044a495576625b513b1885292843fe652eb37a9de856cf0d8a963ce643b01ed324576d043ad37a3df4af71f4f78f6e0063e8e1143d318e162af02ca426e180b458e8949895696ca12bbd7509cb8f82c7ee546d8f4e3f1cca3665579e6b49b3334722b176e2b2123fd19e884bc58ba12f1201247d22ac054a3c0c2a1c0c688e9d5859b0861f425e798d8963d0395a9b89ab7a"}}, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x4, "42315bc5"}, @main=@item_4={0x3, 0x0, 0x8, "149e02c9"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0xce0}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0xf, 0x6a, "464fe08e170344fe2b126a4567ad844f7694bf012c948fb905c2c80f5f10b70abc4f1a394e25f9cecd04bf1e8cfd56696b32827b0ee5c695fe2e9108d96504212f08a40d53085b5434a82b36dc865571cabdbd0b04c98872a33166643f1e434ec805e003d2ab51e5dbe3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x1, 0xc1, "e2017c3b219894f9204d54b54dd07a1c03e8574394c94b91c118a9fa04094d03529021252cd33a9d20a750685ada43507ad13ceb23540ef8b811c3a88cc09cc7312357f566044c9febffd19f93703175dbf35e561cf1cf5b7ddab122b5df3658139e05a1e98cfb108718d90774c235e8b1b2bb4985c0ece489eb9daaf531a92739b25e30deb0499dbb303b8655f66797eb70dc7fb7244f89e671f0e905114511aff7b15e90571c69dfc4b5136b57fce45e1514933f139e137d9cb36ec6d1373d7c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x9}}) [ 835.561294][ T1754] usb 1-1: USB disconnect, device number 99 [ 835.627968][ T6871] loop1: detected capacity change from 0 to 16 [ 835.628954][ T6873] FAULT_INJECTION: forcing a failure. [ 835.628954][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 835.642449][ T6871] erofs: (device loop1): mounted with root inode @ nid 36. [ 835.673247][ T6873] CPU: 0 PID: 6873 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 835.683244][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 835.693136][ T6873] Call Trace: [ 835.696259][ T6873] [ 835.699051][ T6873] dump_stack_lvl+0x151/0x1b7 [ 835.703553][ T6873] ? bfq_pos_tree_add_move+0x43e/0x43e [ 835.708845][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.713794][ T6873] dump_stack+0x15/0x17 [ 835.717790][ T6873] should_fail+0x3c0/0x510 [ 835.722040][ T6873] __should_failslab+0x9f/0xe0 [ 835.726643][ T6873] should_failslab+0x9/0x20 [ 835.730986][ T6873] kmem_cache_alloc+0x4f/0x2f0 [ 835.735580][ T6873] ? __kernfs_new_node+0xdb/0x6e0 [ 835.740441][ T6873] __kernfs_new_node+0xdb/0x6e0 [ 835.745566][ T6873] ? kernfs_new_node+0x170/0x170 [ 835.750332][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.755284][ T6873] ? down_write+0xdd/0x140 [ 835.759534][ T6873] ? down_read_killable+0x250/0x250 [ 835.764571][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.769513][ T6873] ? up_write+0x56/0x120 [ 835.773594][ T6873] kernfs_new_node+0x97/0x170 [ 835.778112][ T6873] __kernfs_create_file+0x4a/0x270 [ 835.783053][ T6873] sysfs_add_file_mode_ns+0x273/0x320 [ 835.788785][ T6873] internal_create_group+0x55e/0xf60 [ 835.793904][ T6873] ? get_super+0x1ee/0x210 [ 835.798160][ T6873] ? sysfs_create_group+0x30/0x30 [ 835.803018][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.807966][ T6873] sysfs_create_group+0x1f/0x30 [ 835.812714][ T6873] loop_configure+0x1077/0x1640 [ 835.817350][ T6873] lo_ioctl+0x8cd/0x25e0 [ 835.821419][ T6873] ? is_bpf_text_address+0x1a2/0x1c0 [ 835.826540][ T6873] ? lo_release+0x200/0x200 [ 835.830877][ T6873] ? stack_trace_save+0x1f0/0x1f0 [ 835.835738][ T6873] ? __kernel_text_address+0x9a/0x110 [ 835.840945][ T6873] ? unwind_get_return_address+0x4c/0x90 [ 835.846761][ T6873] ? arch_stack_walk+0xf8/0x140 [ 835.851446][ T6873] ? avc_has_perm_noaudit+0x358/0x450 [ 835.856654][ T6873] ? memcpy+0x56/0x70 [ 835.860478][ T6873] ? memset+0x35/0x40 [ 835.864301][ T6873] ? fsnotify+0x5ad/0x2240 [ 835.868545][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.873504][ T6873] ? _raw_spin_lock+0xa3/0x1b0 [ 835.878093][ T6873] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 835.883308][ T6873] ? _raw_spin_unlock+0x4d/0x70 [ 835.888524][ T6873] ? find_inode_fast+0x459/0x480 [ 835.893295][ T6873] ? __kasan_check_write+0x14/0x20 [ 835.898333][ T6873] ? mutex_unlock+0xa2/0x110 [ 835.902754][ T6873] ? __mutex_lock_slowpath+0x10/0x10 [ 835.907897][ T6873] ? is_bpf_text_address+0x1a2/0x1c0 [ 835.912998][ T6873] ? is_module_text_address+0xe1/0x140 [ 835.918293][ T6873] ? stack_trace_save+0x1f0/0x1f0 [ 835.923151][ T6873] ? __kernel_text_address+0x9a/0x110 [ 835.928357][ T6873] ? unwind_get_return_address+0x4c/0x90 [ 835.933835][ T6873] ? arch_stack_walk+0xf8/0x140 [ 835.938516][ T6873] ? stack_trace_save+0x12d/0x1f0 [ 835.943376][ T6873] ? stack_trace_snprint+0x100/0x100 [ 835.948493][ T6873] ? avc_has_extended_perms+0x718/0x1210 [ 835.953962][ T6873] ? memcpy+0x56/0x70 [ 835.957781][ T6873] ? avc_has_extended_perms+0xb9c/0x1210 [ 835.963258][ T6873] ? kasan_set_track+0x4c/0x70 [ 835.967850][ T6873] ? kasan_set_free_info+0x23/0x40 [ 835.972795][ T6873] ? ____kasan_slab_free+0x126/0x160 [ 835.977921][ T6873] ? __kasan_slab_free+0x11/0x20 [ 835.982778][ T6873] ? slab_free_freelist_hook+0xc9/0x1a0 [ 835.988168][ T6873] ? kmem_cache_free+0x11a/0x2e0 [ 835.992935][ T6873] ? putname+0x10b/0x160 [ 835.997011][ T6873] ? avc_flush+0x2b0/0x2b0 [ 836.001267][ T6873] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 836.005869][ T6873] ? blkdev_common_ioctl+0x570/0x1ec0 [ 836.011072][ T6873] ? kasan_quarantine_put+0x34/0x1b0 [ 836.016280][ T6873] ? blkdev_bszset+0x240/0x240 [ 836.020879][ T6873] ? ioctl_has_perm+0x3df/0x560 [ 836.025568][ T6873] ? has_cap_mac_admin+0xb0/0xb0 [ 836.030346][ T6873] ? kmem_cache_free+0x11a/0x2e0 [ 836.035294][ T6873] ? putname+0x10b/0x160 [ 836.039368][ T6873] ? selinux_file_ioctl+0x3c9/0x530 [ 836.044401][ T6873] ? lo_release+0x200/0x200 [ 836.048741][ T6873] blkdev_ioctl+0x2e9/0x620 [ 836.053080][ T6873] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 836.058378][ T6873] ? __fget_files+0x310/0x370 [ 836.062979][ T6873] block_ioctl+0xb0/0xf0 [ 836.067053][ T6873] ? blkdev_iopoll+0x100/0x100 [ 836.071663][ T6873] __se_sys_ioctl+0x115/0x190 [ 836.076169][ T6873] __x64_sys_ioctl+0x7b/0x90 [ 836.080594][ T6873] do_syscall_64+0x44/0xd0 [ 836.084848][ T6873] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 836.090575][ T6873] RIP: 0033:0x7fe9fd6cee97 [ 836.094831][ T6873] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 836.114445][ T6873] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.127639][ T6873] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 836.135449][ T6873] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 836.143259][ T6873] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 836.151075][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.158887][ T6873] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 836.166699][ T6873] [ 836.169696][ T1754] usb 1-1: new high-speed USB device number 100 using dummy_hcd 17:24:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 836.175298][ T3409] usb 5-1: USB disconnect, device number 36 [ 836.187842][ T6874] FAULT_INJECTION: forcing a failure. [ 836.187842][ T6874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.214145][ T6874] CPU: 1 PID: 6874 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 836.224132][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 836.234023][ T6874] Call Trace: [ 836.237147][ T6874] [ 836.239922][ T6874] dump_stack_lvl+0x151/0x1b7 [ 836.244786][ T6874] ? bfq_pos_tree_add_move+0x43e/0x43e [ 836.250080][ T6874] dump_stack+0x15/0x17 [ 836.254071][ T6874] should_fail+0x3c0/0x510 [ 836.258326][ T6874] should_fail_usercopy+0x1a/0x20 [ 836.263186][ T6874] strncpy_from_user+0x24/0x2b0 [ 836.267871][ T6874] getname_flags+0xf2/0x510 [ 836.272212][ T6874] getname+0x19/0x20 [ 836.275942][ T6874] do_sys_openat2+0xd2/0x500 [ 836.280374][ T6874] ? userfaultfd_unmap_prep+0x4d0/0x4d0 [ 836.285750][ T6874] ? do_sys_open+0x220/0x220 [ 836.290179][ T6874] __x64_sys_openat+0x243/0x290 [ 836.294870][ T6874] ? __ia32_sys_open+0x270/0x270 [ 836.299638][ T6874] ? switch_fpu_return+0xe/0x10 [ 836.304324][ T6874] do_syscall_64+0x44/0xd0 [ 836.308577][ T6874] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 836.314480][ T6874] RIP: 0033:0x7fd49bfac234 [ 836.318732][ T6874] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 836.338260][ T6874] RSP: 002b:00007fd49ad2aec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 836.346506][ T6874] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfac234 [ 836.354338][ T6874] RDX: 0000000000000002 RSI: 00007fd49ad2afe0 RDI: 00000000ffffff9c [ 836.362393][ T6874] RBP: 00007fd49ad2afe0 R08: 0000000000000000 R09: 0000000000000178 [ 836.370202][ T6874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 17:24:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 836.378126][ T6874] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 836.385940][ T6874] [ 836.389040][ T6873] loop5: detected capacity change from 0 to 16 [ 836.399035][ T6873] erofs: (device loop5): mounted with root inode @ nid 36. [ 836.477012][ T3394] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 836.486870][ T6880] loop1: detected capacity change from 0 to 16 [ 836.493856][ T6880] erofs: (device loop1): mounted with root inode @ nid 36. 17:24:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 23) 17:24:02 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 38) [ 836.626537][ T6886] FAULT_INJECTION: forcing a failure. [ 836.626537][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 836.646018][ T6886] CPU: 1 PID: 6886 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 836.656002][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 836.665901][ T6886] Call Trace: [ 836.669024][ T6886] [ 836.671799][ T6886] dump_stack_lvl+0x151/0x1b7 [ 836.676352][ T6886] ? bfq_pos_tree_add_move+0x43e/0x43e [ 836.681606][ T6886] ? selinux_kernfs_init_security+0x1a8/0x760 [ 836.687511][ T6886] dump_stack+0x15/0x17 [ 836.691502][ T6886] should_fail+0x3c0/0x510 [ 836.695755][ T6886] __should_failslab+0x9f/0xe0 [ 836.700356][ T6886] should_failslab+0x9/0x20 [ 836.704701][ T6886] kmem_cache_alloc+0x4f/0x2f0 [ 836.709299][ T6886] ? __kernfs_new_node+0xdb/0x6e0 [ 836.714153][ T6886] __kernfs_new_node+0xdb/0x6e0 [ 836.718843][ T6886] ? down_read_killable+0x250/0x250 [ 836.723878][ T6886] ? kernfs_new_node+0x170/0x170 [ 836.728662][ T6886] ? __kasan_check_write+0x14/0x20 [ 836.733599][ T6886] ? up_write+0x56/0x120 [ 836.737676][ T6886] ? kernfs_activate+0x409/0x420 [ 836.742449][ T6886] kernfs_new_node+0x97/0x170 [ 836.746966][ T6886] __kernfs_create_file+0x4a/0x270 [ 836.751918][ T6886] sysfs_add_file_mode_ns+0x273/0x320 [ 836.757121][ T6886] internal_create_group+0x55e/0xf60 [ 836.762240][ T6886] ? get_super+0x1ee/0x210 [ 836.766494][ T6886] ? sysfs_create_group+0x30/0x30 [ 836.771351][ T6886] ? __kasan_check_write+0x14/0x20 [ 836.776303][ T6886] sysfs_create_group+0x1f/0x30 [ 836.780984][ T6886] loop_configure+0x1077/0x1640 [ 836.785680][ T6886] lo_ioctl+0x8cd/0x25e0 [ 836.789750][ T6886] ? is_bpf_text_address+0x1a2/0x1c0 [ 836.794882][ T6886] ? lo_release+0x200/0x200 [ 836.799220][ T6886] ? stack_trace_save+0x1f0/0x1f0 [ 836.804072][ T6886] ? __kernel_text_address+0x9a/0x110 [ 836.809281][ T6886] ? unwind_get_return_address+0x4c/0x90 [ 836.814749][ T6886] ? arch_stack_walk+0xf8/0x140 [ 836.819444][ T6886] ? avc_has_perm_noaudit+0x358/0x450 [ 836.824645][ T6886] ? memcpy+0x56/0x70 [ 836.828561][ T6886] ? memset+0x35/0x40 [ 836.832366][ T6886] ? fsnotify+0x5ad/0x2240 [ 836.836618][ T6886] ? __kasan_check_write+0x14/0x20 [ 836.841655][ T6886] ? _raw_spin_lock+0xa3/0x1b0 [ 836.846256][ T6886] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 836.851463][ T6886] ? _raw_spin_unlock+0x4d/0x70 [ 836.856149][ T6886] ? find_inode_fast+0x459/0x480 [ 836.860925][ T6886] ? __kasan_check_write+0x14/0x20 [ 836.865869][ T6886] ? mutex_unlock+0xa2/0x110 [ 836.870300][ T6886] ? __mutex_lock_slowpath+0x10/0x10 [ 836.875421][ T6886] ? is_bpf_text_address+0x1a2/0x1c0 [ 836.880540][ T6886] ? is_module_text_address+0xe1/0x140 [ 836.885966][ T6886] ? stack_trace_save+0x1f0/0x1f0 [ 836.890845][ T6886] ? __kernel_text_address+0x9a/0x110 [ 836.896032][ T6886] ? unwind_get_return_address+0x4c/0x90 [ 836.901499][ T6886] ? arch_stack_walk+0xf8/0x140 [ 836.906190][ T6886] ? stack_trace_save+0x12d/0x1f0 [ 836.911048][ T6886] ? stack_trace_snprint+0x100/0x100 [ 836.916170][ T6886] ? avc_has_extended_perms+0x718/0x1210 [ 836.921987][ T6886] ? memcpy+0x56/0x70 [ 836.925801][ T6886] ? avc_has_extended_perms+0xb9c/0x1210 [ 836.931281][ T6886] ? kasan_set_track+0x4c/0x70 [ 836.935872][ T6886] ? kasan_set_free_info+0x23/0x40 [ 836.940819][ T6886] ? ____kasan_slab_free+0x126/0x160 [ 836.945938][ T6886] ? __kasan_slab_free+0x11/0x20 [ 836.950711][ T6886] ? slab_free_freelist_hook+0xc9/0x1a0 [ 836.956092][ T6886] ? kmem_cache_free+0x11a/0x2e0 [ 836.960865][ T6886] ? putname+0x10b/0x160 [ 836.964947][ T6886] ? avc_flush+0x2b0/0x2b0 [ 836.969200][ T6886] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 836.973812][ T6886] ? blkdev_common_ioctl+0x570/0x1ec0 [ 836.979007][ T6886] ? kasan_quarantine_put+0x34/0x1b0 [ 836.984127][ T6886] ? blkdev_bszset+0x240/0x240 [ 836.988727][ T6886] ? ioctl_has_perm+0x3df/0x560 [ 836.993419][ T6886] ? has_cap_mac_admin+0xb0/0xb0 [ 836.998193][ T6886] ? kmem_cache_free+0x11a/0x2e0 [ 837.002962][ T6886] ? putname+0x10b/0x160 [ 837.007041][ T6886] ? selinux_file_ioctl+0x3c9/0x530 [ 837.012080][ T6886] ? lo_release+0x200/0x200 [ 837.016414][ T6886] blkdev_ioctl+0x2e9/0x620 [ 837.020755][ T6886] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 837.026058][ T6886] ? __fget_files+0x310/0x370 [ 837.030564][ T6886] block_ioctl+0xb0/0xf0 [ 837.034643][ T6886] ? blkdev_iopoll+0x100/0x100 [ 837.039244][ T6886] __se_sys_ioctl+0x115/0x190 [ 837.043759][ T6886] __x64_sys_ioctl+0x7b/0x90 [ 837.048184][ T6886] do_syscall_64+0x44/0xd0 [ 837.052436][ T6886] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 837.058162][ T6886] RIP: 0033:0x7fe9fd6cee97 [ 837.062419][ T6886] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 837.081864][ T6886] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.090108][ T6886] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 837.097919][ T6886] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 837.105729][ T6886] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 837.113537][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.121351][ T6886] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 837.129164][ T6886] [ 837.140550][ T6887] FAULT_INJECTION: forcing a failure. [ 837.140550][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 837.153154][ T6887] CPU: 1 PID: 6887 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 837.163134][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 837.173022][ T6887] Call Trace: [ 837.176144][ T6887] [ 837.178922][ T6887] dump_stack_lvl+0x151/0x1b7 [ 837.183436][ T6887] ? bfq_pos_tree_add_move+0x43e/0x43e [ 837.188731][ T6887] dump_stack+0x15/0x17 [ 837.192723][ T6887] should_fail+0x3c0/0x510 [ 837.196975][ T6887] __should_failslab+0x9f/0xe0 [ 837.201575][ T6887] should_failslab+0x9/0x20 [ 837.205915][ T6887] kmem_cache_alloc+0x4f/0x2f0 [ 837.210515][ T6887] ? __alloc_file+0x29/0x2a0 [ 837.214942][ T6887] ? stack_trace_save+0x1f0/0x1f0 [ 837.219800][ T6887] __alloc_file+0x29/0x2a0 [ 837.224053][ T6887] alloc_empty_file+0xac/0x1b0 [ 837.228657][ T6887] path_openat+0xff/0x2ea0 [ 837.232906][ T6887] ? stack_trace_save+0x12d/0x1f0 [ 837.237768][ T6887] ? __stack_depot_save+0x34/0x4b0 [ 837.242716][ T6887] ? __kasan_slab_alloc+0xc4/0xe0 [ 837.247576][ T6887] ? getname_flags+0xba/0x510 [ 837.252089][ T6887] ? getname+0x19/0x20 [ 837.255993][ T6887] ? do_filp_open+0x4f0/0x4f0 [ 837.260507][ T6887] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 837.266412][ T6887] do_filp_open+0x277/0x4f0 [ 837.270750][ T6887] ? vfs_tmpfile+0x290/0x290 [ 837.275179][ T6887] do_sys_openat2+0x13b/0x500 [ 837.279687][ T6887] ? userfaultfd_unmap_prep+0x4d0/0x4d0 [ 837.285069][ T6887] ? do_sys_open+0x220/0x220 [ 837.289496][ T6887] __x64_sys_openat+0x243/0x290 [ 837.294183][ T6887] ? __ia32_sys_open+0x270/0x270 [ 837.298956][ T6887] ? debug_smp_processor_id+0x17/0x20 [ 837.304170][ T6887] do_syscall_64+0x44/0xd0 [ 837.308417][ T6887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 837.314146][ T6887] RIP: 0033:0x7fd49bfac234 [ 837.318399][ T6887] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 837.337927][ T6887] RSP: 002b:00007fd49ad2aec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 837.346432][ T6887] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfac234 [ 837.354249][ T6887] RDX: 0000000000000002 RSI: 00007fd49ad2afe0 RDI: 00000000ffffff9c [ 837.362055][ T6887] RBP: 00007fd49ad2afe0 R08: 0000000000000000 R09: 0000000000000178 [ 837.369866][ T6887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 17:24:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 837.377679][ T6887] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 837.385493][ T6887] [ 837.396250][ T6886] loop5: detected capacity change from 0 to 16 [ 837.407038][ T1754] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 837.409030][ T3409] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 837.425883][ T1754] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 837.452561][ T1754] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 837.462621][ T6886] erofs: (device loop5): mounted with root inode @ nid 36. [ 837.480386][ T1754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.503533][ T1754] usb 1-1: config 0 descriptor?? [ 837.529717][ T6891] loop1: detected capacity change from 0 to 16 [ 837.539087][ T6891] erofs: (device loop1): mounted with root inode @ nid 36. [ 837.577058][ T3394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.592237][ T3394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.610649][ T3394] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 17:24:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 24) 17:24:03 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 39) [ 837.628363][ T3394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.643012][ T3394] usb 4-1: config 0 descriptor?? [ 837.748124][ T6897] FAULT_INJECTION: forcing a failure. [ 837.748124][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 837.762744][ T6898] FAULT_INJECTION: forcing a failure. [ 837.762744][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 837.790806][ T6897] CPU: 1 PID: 6897 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 837.800794][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 837.810684][ T6897] Call Trace: [ 837.813810][ T6897] [ 837.816587][ T6897] dump_stack_lvl+0x151/0x1b7 [ 837.821104][ T6897] ? bfq_pos_tree_add_move+0x43e/0x43e [ 837.826397][ T6897] ? selinux_kernfs_init_security+0x1a8/0x760 [ 837.832473][ T6897] dump_stack+0x15/0x17 [ 837.836462][ T6897] should_fail+0x3c0/0x510 [ 837.840717][ T6897] __should_failslab+0x9f/0xe0 [ 837.845317][ T6897] should_failslab+0x9/0x20 [ 837.849665][ T6897] kmem_cache_alloc+0x4f/0x2f0 [ 837.854257][ T6897] ? __kernfs_new_node+0xdb/0x6e0 [ 837.859119][ T6897] __kernfs_new_node+0xdb/0x6e0 [ 837.863804][ T6897] ? down_read_killable+0x250/0x250 [ 837.868840][ T6897] ? kernfs_new_node+0x170/0x170 [ 837.873613][ T6897] ? __kasan_check_write+0x14/0x20 [ 837.878561][ T6897] ? up_write+0x56/0x120 [ 837.882639][ T6897] ? kernfs_activate+0x409/0x420 [ 837.887412][ T6897] kernfs_new_node+0x97/0x170 [ 837.891926][ T6897] __kernfs_create_file+0x4a/0x270 [ 837.896875][ T6897] sysfs_add_file_mode_ns+0x273/0x320 [ 837.902080][ T6897] internal_create_group+0x55e/0xf60 [ 837.907204][ T6897] ? get_super+0x1ee/0x210 [ 837.911465][ T6897] ? sysfs_create_group+0x30/0x30 [ 837.916322][ T6897] ? __kasan_check_write+0x14/0x20 [ 837.921273][ T6897] sysfs_create_group+0x1f/0x30 [ 837.925949][ T6897] loop_configure+0x1077/0x1640 [ 837.930640][ T6897] lo_ioctl+0x8cd/0x25e0 [ 837.934713][ T6897] ? is_bpf_text_address+0x1a2/0x1c0 [ 837.939834][ T6897] ? lo_release+0x200/0x200 [ 837.944612][ T6897] ? stack_trace_save+0x1f0/0x1f0 [ 837.949471][ T6897] ? __kernel_text_address+0x9a/0x110 [ 837.954679][ T6897] ? unwind_get_return_address+0x4c/0x90 [ 837.960144][ T6897] ? arch_stack_walk+0xf8/0x140 [ 837.964829][ T6897] ? avc_has_perm_noaudit+0x358/0x450 [ 837.970039][ T6897] ? memcpy+0x56/0x70 [ 837.973857][ T6897] ? memset+0x35/0x40 [ 837.977685][ T6897] ? fsnotify+0x5ad/0x2240 [ 837.981948][ T6897] ? __kasan_check_write+0x14/0x20 [ 837.986967][ T6897] ? _raw_spin_lock+0xa3/0x1b0 [ 837.991606][ T6897] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 837.996779][ T6897] ? _raw_spin_unlock+0x4d/0x70 [ 838.001456][ T6897] ? find_inode_fast+0x459/0x480 [ 838.006239][ T6897] ? __kasan_check_write+0x14/0x20 [ 838.011181][ T6897] ? mutex_unlock+0xa2/0x110 [ 838.015605][ T6897] ? __mutex_lock_slowpath+0x10/0x10 [ 838.020729][ T6897] ? is_bpf_text_address+0x1a2/0x1c0 [ 838.025846][ T6897] ? is_module_text_address+0xe1/0x140 [ 838.031150][ T6897] ? stack_trace_save+0x1f0/0x1f0 [ 838.036183][ T6897] ? __kernel_text_address+0x9a/0x110 [ 838.041773][ T6897] ? unwind_get_return_address+0x4c/0x90 [ 838.047245][ T6897] ? arch_stack_walk+0xf8/0x140 [ 838.051926][ T6897] ? stack_trace_save+0x12d/0x1f0 [ 838.056787][ T6897] ? stack_trace_snprint+0x100/0x100 [ 838.061906][ T6897] ? avc_has_extended_perms+0x718/0x1210 [ 838.067377][ T6897] ? memcpy+0x56/0x70 [ 838.071193][ T6897] ? avc_has_extended_perms+0xb9c/0x1210 [ 838.076662][ T6897] ? kasan_set_track+0x4c/0x70 [ 838.081262][ T6897] ? kasan_set_free_info+0x23/0x40 [ 838.086207][ T6897] ? ____kasan_slab_free+0x126/0x160 [ 838.091399][ T6897] ? __kasan_slab_free+0x11/0x20 [ 838.096113][ T6897] ? slab_free_freelist_hook+0xc9/0x1a0 [ 838.101485][ T6897] ? kmem_cache_free+0x11a/0x2e0 [ 838.106256][ T6897] ? putname+0x10b/0x160 [ 838.110335][ T6897] ? avc_flush+0x2b0/0x2b0 [ 838.114595][ T6897] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 838.119195][ T6897] ? blkdev_common_ioctl+0x570/0x1ec0 [ 838.124398][ T6897] ? kasan_quarantine_put+0x34/0x1b0 [ 838.129517][ T6897] ? blkdev_bszset+0x240/0x240 [ 838.134117][ T6897] ? ioctl_has_perm+0x3df/0x560 [ 838.138806][ T6897] ? has_cap_mac_admin+0xb0/0xb0 [ 838.144021][ T6897] ? kmem_cache_free+0x11a/0x2e0 [ 838.148791][ T6897] ? putname+0x10b/0x160 [ 838.152866][ T6897] ? selinux_file_ioctl+0x3c9/0x530 [ 838.157900][ T6897] ? lo_release+0x200/0x200 [ 838.162243][ T6897] blkdev_ioctl+0x2e9/0x620 [ 838.166586][ T6897] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 838.171874][ T6897] ? __fget_files+0x310/0x370 [ 838.176390][ T6897] block_ioctl+0xb0/0xf0 [ 838.180469][ T6897] ? blkdev_iopoll+0x100/0x100 [ 838.185067][ T6897] __se_sys_ioctl+0x115/0x190 [ 838.189581][ T6897] __x64_sys_ioctl+0x7b/0x90 [ 838.194005][ T6897] do_syscall_64+0x44/0xd0 [ 838.198263][ T6897] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 838.203988][ T6897] RIP: 0033:0x7fe9fd6cee97 [ 838.208245][ T6897] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 838.227781][ T6897] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.236018][ T6897] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 838.243827][ T6897] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 838.251639][ T6897] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 838.259450][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.267260][ T6897] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 838.275075][ T6897] [ 838.284628][ T6898] CPU: 1 PID: 6898 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 838.294615][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 838.304519][ T6898] Call Trace: [ 838.307634][ T6898] [ 838.310412][ T6898] dump_stack_lvl+0x151/0x1b7 [ 838.314931][ T6898] ? bfq_pos_tree_add_move+0x43e/0x43e [ 838.320225][ T6898] dump_stack+0x15/0x17 [ 838.324214][ T6898] should_fail+0x3c0/0x510 [ 838.328474][ T6898] __should_failslab+0x9f/0xe0 [ 838.333066][ T6898] should_failslab+0x9/0x20 [ 838.337402][ T6898] kmem_cache_alloc+0x4f/0x2f0 [ 838.342012][ T6898] ? security_file_alloc+0x29/0x140 [ 838.347035][ T6898] security_file_alloc+0x29/0x140 [ 838.351895][ T6898] __alloc_file+0xb1/0x2a0 [ 838.356150][ T6898] alloc_empty_file+0xac/0x1b0 [ 838.360748][ T6898] path_openat+0xff/0x2ea0 [ 838.365004][ T6898] ? stack_trace_save+0x12d/0x1f0 [ 838.369865][ T6898] ? __stack_depot_save+0x34/0x4b0 [ 838.374812][ T6898] ? __kasan_slab_alloc+0xc4/0xe0 [ 838.379679][ T6898] ? getname_flags+0xba/0x510 [ 838.384182][ T6898] ? getname+0x19/0x20 [ 838.388089][ T6898] ? do_filp_open+0x4f0/0x4f0 [ 838.392601][ T6898] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 838.398507][ T6898] do_filp_open+0x277/0x4f0 [ 838.402848][ T6898] ? vfs_tmpfile+0x290/0x290 [ 838.407277][ T6898] do_sys_openat2+0x13b/0x500 [ 838.411869][ T6898] ? userfaultfd_unmap_prep+0x4d0/0x4d0 [ 838.417250][ T6898] ? do_sys_open+0x220/0x220 [ 838.421682][ T6898] __x64_sys_openat+0x243/0x290 [ 838.426371][ T6898] ? __ia32_sys_open+0x270/0x270 [ 838.431140][ T6898] ? debug_smp_processor_id+0x17/0x20 [ 838.436348][ T6898] do_syscall_64+0x44/0xd0 [ 838.440598][ T6898] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 838.446503][ T6898] RIP: 0033:0x7fd49bfac234 [ 838.450755][ T6898] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 838.470204][ T6898] RSP: 002b:00007fd49ad2aec0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 838.478441][ T6898] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bfac234 [ 838.486252][ T6898] RDX: 0000000000000002 RSI: 00007fd49ad2afe0 RDI: 00000000ffffff9c [ 838.494072][ T6898] RBP: 00007fd49ad2afe0 R08: 0000000000000000 R09: 0000000000000178 [ 838.501876][ T6898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 838.509709][ T6898] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 838.517528][ T6898] [ 838.520744][ T6897] loop5: detected capacity change from 0 to 16 [ 838.557114][ T3409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.582382][ T3409] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 838.608135][ T3409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.632094][ T3409] usb 5-1: config 0 descriptor?? [ 838.638752][ T3394] lg-g15 0003:046D:C225.0083: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 838.656837][ T6897] erofs: (device loop5): mounted with root inode @ nid 36. [ 838.687465][ T3409] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 17:24:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000bc7b0fededac330500092100000001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 25) 17:24:04 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 40) [ 838.766125][ T3409] usb 1-1: USB disconnect, device number 100 [ 838.833917][ T6910] loop1: detected capacity change from 0 to 16 [ 838.841451][ T3394] usb 4-1: USB disconnect, device number 83 [ 838.849643][ T6910] erofs: (device loop1): mounted with root inode @ nid 36. [ 838.866905][ T6912] FAULT_INJECTION: forcing a failure. [ 838.866905][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 838.892535][ T6913] FAULT_INJECTION: forcing a failure. [ 838.892535][ T6913] name failslab, interval 1, probability 0, space 0, times 0 [ 838.897299][ T6912] CPU: 0 PID: 6912 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 838.914941][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 838.924917][ T6912] Call Trace: [ 838.928039][ T6912] [ 838.930919][ T6912] dump_stack_lvl+0x151/0x1b7 [ 838.935439][ T6912] ? bfq_pos_tree_add_move+0x43e/0x43e [ 838.940734][ T6912] ? __kasan_check_read+0x11/0x20 [ 838.945586][ T6912] ? preempt_schedule_irq+0xef/0x140 [ 838.950707][ T6912] ? __cond_resched+0x20/0x20 [ 838.955230][ T6912] dump_stack+0x15/0x17 [ 838.959213][ T6912] should_fail+0x3c0/0x510 [ 838.963465][ T6912] __should_failslab+0x9f/0xe0 [ 838.968064][ T6912] should_failslab+0x9/0x20 [ 838.972414][ T6912] kmem_cache_alloc+0x4f/0x2f0 [ 838.977004][ T6912] ? __kernfs_new_node+0xdb/0x6e0 [ 838.981869][ T6912] __kernfs_new_node+0xdb/0x6e0 [ 838.986554][ T6912] ? down_read_killable+0x250/0x250 [ 838.991595][ T6912] ? kernfs_new_node+0x170/0x170 [ 838.996368][ T6912] ? __kasan_check_write+0x14/0x20 [ 839.001307][ T6912] ? up_write+0x56/0x120 [ 839.005394][ T6912] ? kernfs_activate+0x409/0x420 [ 839.010162][ T6912] kernfs_new_node+0x97/0x170 [ 839.014677][ T6912] __kernfs_create_file+0x4a/0x270 [ 839.019627][ T6912] sysfs_add_file_mode_ns+0x273/0x320 [ 839.024833][ T6912] internal_create_group+0x55e/0xf60 [ 839.029951][ T6912] ? get_super+0x1ee/0x210 [ 839.034207][ T6912] ? sysfs_create_group+0x30/0x30 [ 839.039065][ T6912] ? __kasan_check_write+0x14/0x20 [ 839.044008][ T6912] sysfs_create_group+0x1f/0x30 [ 839.048695][ T6912] loop_configure+0x1077/0x1640 [ 839.053387][ T6912] lo_ioctl+0x8cd/0x25e0 [ 839.057464][ T6912] ? compat_start_thread+0x20/0x20 [ 839.062417][ T6912] ? __kasan_check_write+0x14/0x20 [ 839.067359][ T6912] ? lo_release+0x200/0x200 [ 839.071790][ T6912] ? __kasan_check_write+0x14/0x20 [ 839.076735][ T6912] ? __switch_to+0x617/0x1170 [ 839.081249][ T6912] ? native_set_ldt+0x360/0x360 [ 839.085932][ T6912] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 839.091411][ T6912] ? compat_start_thread+0x20/0x20 [ 839.096347][ T6912] ? switch_mm_irqs_off+0x57f/0x860 [ 839.101411][ T6912] ? _raw_spin_unlock+0x4d/0x70 [ 839.106069][ T6912] ? finish_task_switch+0x173/0x710 [ 839.111104][ T6912] ? __schedule+0xaae/0x1010 [ 839.115529][ T6912] ? release_firmware_map_entry+0x193/0x193 [ 839.121256][ T6912] ? _raw_spin_lock+0xa3/0x1b0 [ 839.125856][ T6912] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 839.131065][ T6912] ? release_firmware_map_entry+0x193/0x193 [ 839.136804][ T6912] ? preempt_schedule+0xd9/0xe0 [ 839.141480][ T6912] ? __kasan_check_read+0x11/0x20 [ 839.146341][ T6912] ? preempt_schedule_common+0xcb/0x100 [ 839.151722][ T6912] ? preempt_schedule+0xd9/0xe0 [ 839.156410][ T6912] ? schedule_preempt_disabled+0x20/0x20 [ 839.161875][ T6912] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 839.167354][ T6912] ? preempt_schedule_thunk+0x16/0x18 [ 839.172551][ T6912] ? is_bpf_text_address+0x1a2/0x1c0 [ 839.177674][ T6912] ? is_module_text_address+0x102/0x140 [ 839.183054][ T6912] ? stack_trace_save+0x1f0/0x1f0 [ 839.187913][ T6912] ? __kasan_check_write+0x14/0x20 [ 839.192862][ T6912] ? __switch_to+0x617/0x1170 [ 839.197375][ T6912] ? native_set_ldt+0x360/0x360 [ 839.202062][ T6912] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 839.207532][ T6912] ? compat_start_thread+0x20/0x20 [ 839.212477][ T6912] ? switch_mm_irqs_off+0x57f/0x860 [ 839.217522][ T6912] ? avc_has_extended_perms+0x718/0x1210 [ 839.222980][ T6912] ? memcpy+0x56/0x70 [ 839.226798][ T6912] ? avc_has_extended_perms+0xb9c/0x1210 [ 839.232265][ T6912] ? kasan_set_track+0x4c/0x70 [ 839.236865][ T6912] ? kasan_set_free_info+0x23/0x40 [ 839.241814][ T6912] ? avc_flush+0x2b0/0x2b0 [ 839.246066][ T6912] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 839.250671][ T6912] ? blkdev_common_ioctl+0x570/0x1ec0 [ 839.255872][ T6912] ? blkdev_bszset+0x240/0x240 [ 839.260475][ T6912] ? ioctl_has_perm+0x3df/0x560 [ 839.265160][ T6912] ? has_cap_mac_admin+0xb0/0xb0 [ 839.269939][ T6912] ? switch_mm_irqs_off+0x57f/0x860 [ 839.274995][ T6912] ? selinux_file_ioctl+0x3c9/0x530 [ 839.280002][ T6912] ? lo_release+0x200/0x200 [ 839.284339][ T6912] blkdev_ioctl+0x2e9/0x620 [ 839.288680][ T6912] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 839.293973][ T6912] ? __fget_files+0x310/0x370 [ 839.298487][ T6912] block_ioctl+0xb0/0xf0 [ 839.302654][ T6912] ? blkdev_iopoll+0x100/0x100 [ 839.307346][ T6912] __se_sys_ioctl+0x115/0x190 [ 839.311858][ T6912] __x64_sys_ioctl+0x7b/0x90 [ 839.316287][ T6912] do_syscall_64+0x44/0xd0 [ 839.320540][ T6912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 839.326268][ T6912] RIP: 0033:0x7fe9fd6cee97 [ 839.330520][ T6912] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 839.349961][ T6912] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.358205][ T6912] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 839.366016][ T6912] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 839.373836][ T6912] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 839.381641][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.389455][ T6912] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 839.397266][ T6912] [ 839.401436][ T6913] CPU: 0 PID: 6913 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 839.411418][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 839.421311][ T6913] Call Trace: [ 839.424517][ T6913] [ 839.427295][ T6913] dump_stack_lvl+0x151/0x1b7 [ 839.432070][ T6913] ? bfq_pos_tree_add_move+0x43e/0x43e [ 839.437366][ T6913] ? is_module_text_address+0xe1/0x140 [ 839.442659][ T6913] ? stack_trace_save+0x1f0/0x1f0 [ 839.447519][ T6913] dump_stack+0x15/0x17 [ 839.451523][ T6913] should_fail+0x3c0/0x510 [ 839.455774][ T6913] ? alloc_workqueue+0x156/0x11d0 [ 839.460632][ T6913] __should_failslab+0x9f/0xe0 [ 839.465312][ T6913] should_failslab+0x9/0x20 [ 839.469661][ T6913] __kmalloc+0x6d/0x350 [ 839.473646][ T6913] alloc_workqueue+0x156/0x11d0 [ 839.477072][ T6912] loop5: detected capacity change from 0 to 16 [ 839.478333][ T6913] ? stack_trace_save+0x1f0/0x1f0 [ 839.478356][ T6913] ? _raw_spin_unlock+0x4d/0x70 [ 839.494043][ T6913] ? bd_prepare_to_claim+0x388/0x420 [ 839.499163][ T6913] ? loop_attr_do_show_dio+0xc0/0xc0 [ 839.504407][ T6913] ? loop_configure+0x7f6/0x1640 [ 839.507204][ T6912] erofs: (device loop5): mounted with root inode @ nid 36. [ 839.509174][ T6913] ? apply_workqueue_attrs+0x720/0x720 [ 839.509200][ T6913] ? loop_set_status_from_info+0x5fd/0x7a0 [ 839.509221][ T6913] loop_configure+0x8c7/0x1640 [ 839.531749][ T6913] lo_ioctl+0x8cd/0x25e0 [ 839.535824][ T6913] ? is_bpf_text_address+0x1a2/0x1c0 [ 839.540944][ T6913] ? lo_release+0x200/0x200 [ 839.545282][ T6913] ? stack_trace_save+0x1f0/0x1f0 [ 839.550265][ T6913] ? __kernel_text_address+0x9a/0x110 [ 839.555469][ T6913] ? unwind_get_return_address+0x4c/0x90 [ 839.561102][ T6913] ? arch_stack_walk+0xf8/0x140 [ 839.565741][ T6913] ? avc_has_perm_noaudit+0x358/0x450 [ 839.570947][ T6913] ? memcpy+0x56/0x70 [ 839.574768][ T6913] ? memset+0x35/0x40 [ 839.578588][ T6913] ? fsnotify+0x5ad/0x2240 [ 839.582856][ T6913] ? __kasan_check_write+0x14/0x20 [ 839.587794][ T6913] ? _raw_spin_lock+0xa3/0x1b0 [ 839.592417][ T6913] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 839.597596][ T6913] ? _raw_spin_unlock+0x4d/0x70 [ 839.602278][ T6913] ? find_inode_fast+0x459/0x480 [ 839.607058][ T6913] ? __kasan_check_write+0x14/0x20 [ 839.611998][ T6913] ? mutex_unlock+0xa2/0x110 [ 839.616426][ T6913] ? __mutex_lock_slowpath+0x10/0x10 [ 839.621547][ T6913] ? is_bpf_text_address+0x1a2/0x1c0 [ 839.626671][ T6913] ? is_module_text_address+0xe1/0x140 [ 839.631959][ T6913] ? stack_trace_save+0x1f0/0x1f0 [ 839.636823][ T6913] ? __kernel_text_address+0x9a/0x110 [ 839.642456][ T6913] ? unwind_get_return_address+0x4c/0x90 [ 839.647924][ T6913] ? arch_stack_walk+0xf8/0x140 [ 839.652612][ T6913] ? stack_trace_save+0x12d/0x1f0 [ 839.657473][ T6913] ? stack_trace_snprint+0x100/0x100 [ 839.662765][ T6913] ? avc_has_extended_perms+0x718/0x1210 [ 839.668235][ T6913] ? memcpy+0x56/0x70 [ 839.672086][ T6913] ? avc_has_extended_perms+0xb9c/0x1210 [ 839.677523][ T6913] ? kasan_set_track+0x4c/0x70 [ 839.682121][ T6913] ? kasan_set_free_info+0x23/0x40 [ 839.687100][ T6913] ? ____kasan_slab_free+0x126/0x160 [ 839.692195][ T6913] ? __kasan_slab_free+0x11/0x20 [ 839.696964][ T6913] ? slab_free_freelist_hook+0xc9/0x1a0 [ 839.702344][ T6913] ? kmem_cache_free+0x11a/0x2e0 [ 839.707117][ T6913] ? putname+0x10b/0x160 [ 839.711312][ T6913] ? avc_flush+0x2b0/0x2b0 [ 839.715565][ T6913] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 839.720170][ T6913] ? blkdev_common_ioctl+0x570/0x1ec0 [ 839.725372][ T6913] ? kasan_quarantine_put+0x34/0x1b0 [ 839.730493][ T6913] ? blkdev_bszset+0x240/0x240 [ 839.735100][ T6913] ? ioctl_has_perm+0x3df/0x560 [ 839.739783][ T6913] ? has_cap_mac_admin+0xb0/0xb0 [ 839.744560][ T6913] ? kmem_cache_free+0x11a/0x2e0 [ 839.749356][ T6913] ? putname+0x10b/0x160 [ 839.753415][ T6913] ? selinux_file_ioctl+0x3c9/0x530 [ 839.758471][ T6913] ? lo_release+0x200/0x200 [ 839.762783][ T6913] blkdev_ioctl+0x2e9/0x620 [ 839.767122][ T6913] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 839.772423][ T6913] ? __fget_files+0x310/0x370 [ 839.776932][ T6913] block_ioctl+0xb0/0xf0 [ 839.781012][ T6913] ? blkdev_iopoll+0x100/0x100 [ 839.785606][ T6913] __se_sys_ioctl+0x115/0x190 [ 839.790121][ T6913] __x64_sys_ioctl+0x7b/0x90 [ 839.794546][ T6913] do_syscall_64+0x44/0xd0 [ 839.798800][ T6913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 839.804529][ T6913] RIP: 0033:0x7fd49bff9e97 [ 839.808783][ T6913] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 839.828226][ T6913] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.836586][ T6913] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 839.844387][ T6913] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 839.852200][ T6913] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 839.860098][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.867909][ T6913] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 839.875725][ T6913] 17:24:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x89, {0x89, 0x6, "96442b23fa10563c95e789669f1f98dfbbc0a4d4c19dd9877c540fb9f5f9f95795ea468646c29222844fde7e2c9347f179c8eb288eb3536174bbe08bd7a435a243969162d201cc46e59c8c6bf7e3d3cdf34a05b4e7d6c742de9b4c05342f5c93572d827a1fa0d769707823f717008cdfe9fd6d211d7599cb0bc1469d93e10b09e0459c68baba7a"}}, &(0x7f0000000140)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "1839721fbc6998982bb27fd6a877c9636d9a8623e46f044a495576625b513b1885292843fe652eb37a9de856cf0d8a963ce643b01ed324576d043ad37a3df4af71f4f78f6e0063e8e1143d318e162af02ca426e180b458e8949895696ca12bbd7509cb8f82c7ee546d8f4e3f1cca3665579e6b49b3334722b176e2b2123fd19e884bc58ba12f1201247d22ac054a3c0c2a1c0c688e9d5859b0861f425e798d8963d0395a9b89ab7a"}}, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x4, "42315bc5"}, @main=@item_4={0x3, 0x0, 0x8, "149e02c9"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0xce0}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0xf, 0x6a, "464fe08e170344fe2b126a4567ad844f7694bf012c948fb905c2c80f5f10b70abc4f1a394e25f9cecd04bf1e8cfd56696b32827b0ee5c695fe2e9108d96504212f08a40d53085b5434a82b36dc865571cabdbd0b04c98872a33166643f1e434ec805e003d2ab51e5dbe3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x1, 0xc1, "e2017c3b219894f9204d54b54dd07a1c03e8574394c94b91c118a9fa04094d03529021252cd33a9d20a750685ada43507ad13ceb23540ef8b811c3a88cc09cc7312357f566044c9febffd19f93703175dbf35e561cf1cf5b7ddab122b5df3658139e05a1e98cfb108718d90774c235e8b1b2bb4985c0ece489eb9daaf531a92739b25e30deb0499dbb303b8655f66797eb70dc7fb7244f89e671f0e905114511aff7b15e90571c69dfc4b5136b57fce45e1514933f139e137d9cb36ec6d1373d7c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x9}}) [ 840.147012][ T3409] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 840.467047][ T1723] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 840.507054][ T3409] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 840.517681][ T3409] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.526524][ T3409] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 840.535875][ T3409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.545088][ T3409] usb 1-1: config 0 descriptor?? 17:24:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:06 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 41) 17:24:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 26) [ 840.594553][ T3409] usb 5-1: USB disconnect, device number 37 [ 840.667956][ T6929] loop1: detected capacity change from 0 to 16 [ 840.681440][ T6929] erofs: (device loop1): mounted with root inode @ nid 36. [ 840.682303][ T6930] FAULT_INJECTION: forcing a failure. [ 840.682303][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 840.717048][ T6930] CPU: 1 PID: 6930 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 840.727038][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 840.736934][ T6930] Call Trace: [ 840.740053][ T6930] [ 840.742830][ T6930] dump_stack_lvl+0x151/0x1b7 [ 840.747646][ T6930] ? bfq_pos_tree_add_move+0x43e/0x43e [ 840.752902][ T6930] ? selinux_kernfs_init_security+0x1a8/0x760 [ 840.758806][ T6930] dump_stack+0x15/0x17 [ 840.762793][ T6930] should_fail+0x3c0/0x510 [ 840.767049][ T6930] __should_failslab+0x9f/0xe0 [ 840.771646][ T6930] should_failslab+0x9/0x20 [ 840.775989][ T6930] kmem_cache_alloc+0x4f/0x2f0 [ 840.780588][ T6930] ? __kernfs_new_node+0xdb/0x6e0 [ 840.785451][ T6930] __kernfs_new_node+0xdb/0x6e0 [ 840.790135][ T6930] ? down_read_killable+0x250/0x250 [ 840.795168][ T6930] ? kernfs_new_node+0x170/0x170 [ 840.799944][ T6930] ? __kasan_check_write+0x14/0x20 [ 840.804886][ T6930] ? up_write+0x56/0x120 [ 840.808976][ T6930] ? kernfs_activate+0x409/0x420 [ 840.813745][ T6930] kernfs_new_node+0x97/0x170 [ 840.818256][ T6930] __kernfs_create_file+0x4a/0x270 [ 840.823204][ T6930] sysfs_add_file_mode_ns+0x273/0x320 [ 840.828411][ T6930] internal_create_group+0x55e/0xf60 [ 840.833529][ T6930] ? get_super+0x1ee/0x210 [ 840.837782][ T6930] ? sysfs_create_group+0x30/0x30 [ 840.842642][ T6930] ? __kasan_check_write+0x14/0x20 [ 840.847599][ T6930] sysfs_create_group+0x1f/0x30 [ 840.852279][ T6930] loop_configure+0x1077/0x1640 [ 840.856967][ T6930] lo_ioctl+0x8cd/0x25e0 [ 840.861060][ T6930] ? is_bpf_text_address+0x1a2/0x1c0 [ 840.866166][ T6930] ? lo_release+0x200/0x200 [ 840.870507][ T6930] ? stack_trace_save+0x1f0/0x1f0 [ 840.875373][ T6930] ? __kernel_text_address+0x9a/0x110 [ 840.880575][ T6930] ? unwind_get_return_address+0x4c/0x90 [ 840.886150][ T6930] ? arch_stack_walk+0xf8/0x140 [ 840.890841][ T6930] ? avc_has_perm_noaudit+0x358/0x450 [ 840.896047][ T6930] ? memcpy+0x56/0x70 [ 840.899861][ T6930] ? memset+0x35/0x40 [ 840.903684][ T6930] ? fsnotify+0x5ad/0x2240 [ 840.907934][ T6930] ? __kasan_check_write+0x14/0x20 [ 840.912880][ T6930] ? _raw_spin_lock+0xa3/0x1b0 [ 840.917483][ T6930] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 840.922692][ T6930] ? _raw_spin_unlock+0x4d/0x70 [ 840.927378][ T6930] ? find_inode_fast+0x459/0x480 [ 840.932152][ T6930] ? __kasan_check_write+0x14/0x20 [ 840.937095][ T6930] ? mutex_unlock+0xa2/0x110 [ 840.941523][ T6930] ? __mutex_lock_slowpath+0x10/0x10 [ 840.946647][ T6930] ? is_bpf_text_address+0x1a2/0x1c0 [ 840.951762][ T6930] ? is_module_text_address+0xe1/0x140 [ 840.957056][ T6930] ? stack_trace_save+0x1f0/0x1f0 [ 840.961919][ T6930] ? __kernel_text_address+0x9a/0x110 [ 840.967129][ T6930] ? unwind_get_return_address+0x4c/0x90 [ 840.972594][ T6930] ? arch_stack_walk+0xf8/0x140 [ 840.977284][ T6930] ? stack_trace_save+0x12d/0x1f0 [ 840.982143][ T6930] ? stack_trace_snprint+0x100/0x100 [ 840.987271][ T6930] ? avc_has_extended_perms+0x718/0x1210 [ 840.992729][ T6930] ? memcpy+0x56/0x70 [ 840.996548][ T6930] ? avc_has_extended_perms+0xb9c/0x1210 [ 841.002015][ T6930] ? kasan_set_track+0x4c/0x70 [ 841.006619][ T6930] ? kasan_set_free_info+0x23/0x40 [ 841.011563][ T6930] ? ____kasan_slab_free+0x126/0x160 [ 841.016689][ T6930] ? __kasan_slab_free+0x11/0x20 [ 841.016993][ T3409] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 841.021462][ T6930] ? slab_free_freelist_hook+0xc9/0x1a0 [ 841.021494][ T6930] ? kmem_cache_free+0x11a/0x2e0 [ 841.038990][ T6930] ? putname+0x10b/0x160 [ 841.043072][ T6930] ? avc_flush+0x2b0/0x2b0 [ 841.047323][ T6930] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 841.051928][ T6930] ? blkdev_common_ioctl+0x570/0x1ec0 [ 841.057170][ T6930] ? kasan_quarantine_put+0x34/0x1b0 [ 841.062251][ T6930] ? blkdev_bszset+0x240/0x240 [ 841.066853][ T6930] ? ioctl_has_perm+0x3df/0x560 [ 841.071546][ T6930] ? has_cap_mac_admin+0xb0/0xb0 [ 841.076324][ T6930] ? kmem_cache_free+0x11a/0x2e0 [ 841.081088][ T6930] ? putname+0x10b/0x160 [ 841.085164][ T6930] ? selinux_file_ioctl+0x3c9/0x530 [ 841.090198][ T6930] ? lo_release+0x200/0x200 [ 841.094539][ T6930] blkdev_ioctl+0x2e9/0x620 [ 841.098881][ T6930] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 841.104171][ T6930] ? __fget_files+0x310/0x370 [ 841.108692][ T6930] block_ioctl+0xb0/0xf0 [ 841.112767][ T6930] ? blkdev_iopoll+0x100/0x100 [ 841.117363][ T6930] __se_sys_ioctl+0x115/0x190 [ 841.121879][ T6930] __x64_sys_ioctl+0x7b/0x90 [ 841.126304][ T6930] do_syscall_64+0x44/0xd0 [ 841.130556][ T6930] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 841.136295][ T6930] RIP: 0033:0x7fe9fd6cee97 [ 841.140538][ T6930] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 841.160100][ T6930] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.168342][ T6930] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 841.176156][ T6930] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 841.183968][ T6930] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 841.191776][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.199611][ T6930] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 841.207415][ T6930] [ 841.212899][ T6931] FAULT_INJECTION: forcing a failure. [ 841.212899][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 841.225384][ T6931] CPU: 1 PID: 6931 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 841.235291][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 841.245179][ T6931] Call Trace: [ 841.248298][ T6931] [ 841.251076][ T6931] dump_stack_lvl+0x151/0x1b7 [ 841.255591][ T6931] ? bfq_pos_tree_add_move+0x43e/0x43e [ 841.260889][ T6931] ? is_module_text_address+0xe1/0x140 [ 841.266178][ T6931] ? stack_trace_save+0x1f0/0x1f0 [ 841.271039][ T6931] dump_stack+0x15/0x17 [ 841.275031][ T6931] should_fail+0x3c0/0x510 [ 841.279286][ T6931] ? alloc_workqueue+0x156/0x11d0 [ 841.284147][ T6931] __should_failslab+0x9f/0xe0 [ 841.288747][ T6931] should_failslab+0x9/0x20 [ 841.293085][ T6931] __kmalloc+0x6d/0x350 [ 841.297077][ T6931] alloc_workqueue+0x156/0x11d0 [ 841.301764][ T6931] ? stack_trace_save+0x1f0/0x1f0 [ 841.306654][ T6931] ? _raw_spin_unlock+0x4d/0x70 [ 841.311313][ T6931] ? bd_prepare_to_claim+0x388/0x420 [ 841.316435][ T6931] ? loop_attr_do_show_dio+0xc0/0xc0 [ 841.321555][ T6931] ? loop_configure+0x7f6/0x1640 [ 841.326415][ T6931] ? apply_workqueue_attrs+0x720/0x720 [ 841.331718][ T6931] ? loop_set_status_from_info+0x5fd/0x7a0 [ 841.337398][ T6931] loop_configure+0x8c7/0x1640 [ 841.341958][ T6931] lo_ioctl+0x8cd/0x25e0 [ 841.346032][ T6931] ? is_bpf_text_address+0x1a2/0x1c0 [ 841.351149][ T6931] ? lo_release+0x200/0x200 [ 841.355491][ T6931] ? stack_trace_save+0x1f0/0x1f0 [ 841.360349][ T6931] ? __kernel_text_address+0x9a/0x110 [ 841.365556][ T6931] ? unwind_get_return_address+0x4c/0x90 [ 841.371028][ T6931] ? arch_stack_walk+0xf8/0x140 [ 841.375710][ T6931] ? avc_has_perm_noaudit+0x358/0x450 [ 841.380930][ T6931] ? memcpy+0x56/0x70 [ 841.384740][ T6931] ? memset+0x35/0x40 [ 841.388559][ T6931] ? fsnotify+0x5ad/0x2240 [ 841.392811][ T6931] ? __kasan_check_write+0x14/0x20 [ 841.397756][ T6931] ? _raw_spin_lock+0xa3/0x1b0 [ 841.402356][ T6931] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 841.407567][ T6931] ? _raw_spin_unlock+0x4d/0x70 [ 841.412252][ T6931] ? find_inode_fast+0x459/0x480 [ 841.417031][ T6931] ? __kasan_check_write+0x14/0x20 [ 841.421973][ T6931] ? mutex_unlock+0xa2/0x110 [ 841.426403][ T6931] ? __mutex_lock_slowpath+0x10/0x10 [ 841.431528][ T6931] ? is_bpf_text_address+0x1a2/0x1c0 [ 841.436643][ T6931] ? is_module_text_address+0xe1/0x140 [ 841.441942][ T6931] ? stack_trace_save+0x1f0/0x1f0 [ 841.446798][ T6931] ? __kernel_text_address+0x9a/0x110 [ 841.452004][ T6931] ? unwind_get_return_address+0x4c/0x90 [ 841.457471][ T6931] ? arch_stack_walk+0xf8/0x140 [ 841.462161][ T6931] ? stack_trace_save+0x12d/0x1f0 [ 841.467020][ T6931] ? stack_trace_snprint+0x100/0x100 [ 841.472140][ T6931] ? avc_has_extended_perms+0x718/0x1210 [ 841.477609][ T6931] ? memcpy+0x56/0x70 [ 841.481425][ T6931] ? avc_has_extended_perms+0xb9c/0x1210 [ 841.486895][ T6931] ? kasan_set_track+0x4c/0x70 [ 841.491494][ T6931] ? kasan_set_free_info+0x23/0x40 [ 841.496450][ T6931] ? ____kasan_slab_free+0x126/0x160 [ 841.501563][ T6931] ? __kasan_slab_free+0x11/0x20 [ 841.506338][ T6931] ? slab_free_freelist_hook+0xc9/0x1a0 [ 841.511718][ T6931] ? kmem_cache_free+0x11a/0x2e0 [ 841.516489][ T6931] ? putname+0x10b/0x160 [ 841.520573][ T6931] ? avc_flush+0x2b0/0x2b0 [ 841.524824][ T6931] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 841.529432][ T6931] ? blkdev_common_ioctl+0x570/0x1ec0 [ 841.534629][ T6931] ? kasan_quarantine_put+0x34/0x1b0 [ 841.539753][ T6931] ? blkdev_bszset+0x240/0x240 [ 841.544705][ T6931] ? ioctl_has_perm+0x3df/0x560 [ 841.549386][ T6931] ? has_cap_mac_admin+0xb0/0xb0 [ 841.554163][ T6931] ? kmem_cache_free+0x11a/0x2e0 [ 841.558936][ T6931] ? putname+0x10b/0x160 [ 841.563015][ T6931] ? selinux_file_ioctl+0x3c9/0x530 [ 841.568046][ T6931] ? lo_release+0x200/0x200 [ 841.572386][ T6931] blkdev_ioctl+0x2e9/0x620 [ 841.576727][ T6931] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 841.582021][ T6931] ? __fget_files+0x310/0x370 [ 841.586535][ T6931] block_ioctl+0xb0/0xf0 [ 841.590613][ T6931] ? blkdev_iopoll+0x100/0x100 [ 841.595213][ T6931] __se_sys_ioctl+0x115/0x190 [ 841.599728][ T6931] __x64_sys_ioctl+0x7b/0x90 [ 841.604152][ T6931] do_syscall_64+0x44/0xd0 [ 841.608410][ T6931] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 841.614135][ T6931] RIP: 0033:0x7fd49bff9e97 [ 841.618390][ T6931] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 841.637829][ T6931] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.646075][ T6931] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 841.653885][ T6931] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 841.661696][ T6931] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 17:24:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 841.669507][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.677320][ T6931] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 841.685138][ T6931] [ 841.688343][ T6930] loop5: detected capacity change from 0 to 16 [ 841.747127][ T6930] erofs: (device loop5): mounted with root inode @ nid 36. [ 841.787046][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.803230][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.824139][ T1723] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 841.834363][ T6936] loop1: detected capacity change from 0 to 16 17:24:07 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 42) [ 841.850256][ T6936] erofs: (device loop1): mounted with root inode @ nid 36. [ 841.859629][ T1723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.867064][ T3409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.877610][ T1723] usb 4-1: config 0 descriptor?? [ 841.883660][ T3409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.904229][ T3409] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 841.929037][ T3409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.946918][ T3409] usb 5-1: config 0 descriptor?? 17:24:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 27) [ 841.970952][ T6939] FAULT_INJECTION: forcing a failure. [ 841.970952][ T6939] name failslab, interval 1, probability 0, space 0, times 0 [ 841.985496][ T6939] CPU: 1 PID: 6939 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 841.987639][ T3409] usbhid 5-1:0.0: can't add hid device: -22 [ 841.995474][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 842.011140][ T3409] usbhid: probe of 5-1:0.0 failed with error -22 [ 842.011184][ T6939] Call Trace: [ 842.020471][ T6939] [ 842.023247][ T6939] dump_stack_lvl+0x151/0x1b7 [ 842.027763][ T6939] ? bfq_pos_tree_add_move+0x43e/0x43e [ 842.033057][ T6939] ? selinux_kernfs_init_security+0x1a8/0x760 [ 842.038965][ T6939] dump_stack+0x15/0x17 [ 842.043210][ T6939] should_fail+0x3c0/0x510 [ 842.047463][ T6939] __should_failslab+0x9f/0xe0 [ 842.052066][ T6939] should_failslab+0x9/0x20 [ 842.056404][ T6939] kmem_cache_alloc+0x4f/0x2f0 [ 842.061007][ T6939] ? __kernfs_new_node+0xdb/0x6e0 [ 842.065867][ T6939] __kernfs_new_node+0xdb/0x6e0 [ 842.070554][ T6939] ? down_read_killable+0x250/0x250 [ 842.075588][ T6939] ? kernfs_new_node+0x170/0x170 [ 842.080362][ T6939] ? __kasan_check_write+0x14/0x20 [ 842.085305][ T6939] ? up_write+0x56/0x120 [ 842.089393][ T6939] ? kernfs_activate+0x409/0x420 [ 842.094158][ T6939] kernfs_new_node+0x97/0x170 [ 842.098674][ T6939] __kernfs_create_file+0x4a/0x270 [ 842.103623][ T6939] sysfs_add_file_mode_ns+0x273/0x320 [ 842.108827][ T6939] internal_create_group+0x55e/0xf60 [ 842.113949][ T6939] ? get_super+0x1ee/0x210 [ 842.118204][ T6939] ? sysfs_create_group+0x30/0x30 [ 842.123063][ T6939] ? __kasan_check_write+0x14/0x20 [ 842.128010][ T6939] sysfs_create_group+0x1f/0x30 [ 842.132697][ T6939] loop_configure+0x1077/0x1640 [ 842.137392][ T6939] lo_ioctl+0x8cd/0x25e0 [ 842.141461][ T6939] ? is_bpf_text_address+0x1a2/0x1c0 [ 842.146581][ T6939] ? lo_release+0x200/0x200 [ 842.150926][ T6939] ? stack_trace_save+0x1f0/0x1f0 [ 842.155782][ T6939] ? __kernel_text_address+0x9a/0x110 [ 842.160994][ T6939] ? unwind_get_return_address+0x4c/0x90 [ 842.166457][ T6939] ? arch_stack_walk+0xf8/0x140 [ 842.171148][ T6939] ? avc_has_perm_noaudit+0x358/0x450 [ 842.176355][ T6939] ? memcpy+0x56/0x70 [ 842.180171][ T6939] ? memset+0x35/0x40 [ 842.183992][ T6939] ? fsnotify+0x5ad/0x2240 [ 842.188242][ T6939] ? __kasan_check_write+0x14/0x20 [ 842.193190][ T6939] ? _raw_spin_lock+0xa3/0x1b0 [ 842.197789][ T6939] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 842.203010][ T6939] ? _raw_spin_unlock+0x4d/0x70 [ 842.207685][ T6939] ? find_inode_fast+0x459/0x480 [ 842.212461][ T6939] ? __kasan_check_write+0x14/0x20 [ 842.217405][ T6939] ? mutex_unlock+0xa2/0x110 [ 842.221831][ T6939] ? __mutex_lock_slowpath+0x10/0x10 [ 842.226955][ T6939] ? is_bpf_text_address+0x1a2/0x1c0 [ 842.232074][ T6939] ? is_module_text_address+0xe1/0x140 [ 842.237367][ T6939] ? stack_trace_save+0x1f0/0x1f0 [ 842.242228][ T6939] ? __kernel_text_address+0x9a/0x110 [ 842.247437][ T6939] ? unwind_get_return_address+0x4c/0x90 [ 842.252908][ T6939] ? arch_stack_walk+0xf8/0x140 [ 842.257593][ T6939] ? stack_trace_save+0x12d/0x1f0 [ 842.262455][ T6939] ? stack_trace_snprint+0x100/0x100 [ 842.267579][ T6939] ? avc_has_extended_perms+0x718/0x1210 [ 842.273045][ T6939] ? memcpy+0x56/0x70 [ 842.276859][ T6939] ? avc_has_extended_perms+0xb9c/0x1210 [ 842.282330][ T6939] ? kasan_set_track+0x4c/0x70 [ 842.286924][ T6939] ? kasan_set_free_info+0x23/0x40 [ 842.291876][ T6939] ? ____kasan_slab_free+0x126/0x160 [ 842.296997][ T6939] ? __kasan_slab_free+0x11/0x20 [ 842.301768][ T6939] ? slab_free_freelist_hook+0xc9/0x1a0 [ 842.307150][ T6939] ? kmem_cache_free+0x11a/0x2e0 [ 842.311922][ T6939] ? putname+0x10b/0x160 [ 842.316004][ T6939] ? avc_flush+0x2b0/0x2b0 [ 842.320256][ T6939] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 842.324859][ T6939] ? blkdev_common_ioctl+0x570/0x1ec0 [ 842.330064][ T6939] ? kasan_quarantine_put+0x34/0x1b0 [ 842.335196][ T6939] ? blkdev_bszset+0x240/0x240 [ 842.339783][ T6939] ? ioctl_has_perm+0x3df/0x560 [ 842.344997][ T6939] ? has_cap_mac_admin+0xb0/0xb0 [ 842.349769][ T6939] ? kmem_cache_free+0x11a/0x2e0 [ 842.354544][ T6939] ? putname+0x10b/0x160 [ 842.358622][ T6939] ? selinux_file_ioctl+0x3c9/0x530 [ 842.363658][ T6939] ? lo_release+0x200/0x200 [ 842.367998][ T6939] blkdev_ioctl+0x2e9/0x620 [ 842.372337][ T6939] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 842.377627][ T6939] ? __fget_files+0x310/0x370 [ 842.382231][ T6939] block_ioctl+0xb0/0xf0 [ 842.386311][ T6939] ? blkdev_iopoll+0x100/0x100 [ 842.390908][ T6939] __se_sys_ioctl+0x115/0x190 [ 842.395434][ T6939] __x64_sys_ioctl+0x7b/0x90 [ 842.399852][ T6939] do_syscall_64+0x44/0xd0 [ 842.404098][ T6939] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 842.409825][ T6939] RIP: 0033:0x7fe9fd6cee97 [ 842.414090][ T6939] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.433527][ T6939] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.441770][ T6939] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 842.449672][ T6939] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 842.457481][ T6939] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 842.465289][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.473106][ T6939] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 842.480920][ T6939] [ 842.487598][ T6944] FAULT_INJECTION: forcing a failure. [ 842.487598][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 842.490877][ T3408] usb 1-1: USB disconnect, device number 101 [ 842.500149][ T6944] CPU: 1 PID: 6944 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 842.500177][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 842.500188][ T6944] Call Trace: [ 842.500195][ T6944] [ 842.500202][ T6944] dump_stack_lvl+0x151/0x1b7 [ 842.500228][ T6944] ? bfq_pos_tree_add_move+0x43e/0x43e [ 842.500250][ T6944] dump_stack+0x15/0x17 [ 842.500268][ T6944] should_fail+0x3c0/0x510 [ 842.500286][ T6944] ? alloc_workqueue+0x1d0/0x11d0 [ 842.500303][ T6944] __should_failslab+0x9f/0xe0 [ 842.500322][ T6944] should_failslab+0x9/0x20 [ 842.500339][ T6944] kmem_cache_alloc_trace+0x4a/0x310 [ 842.500360][ T6944] ? alloc_workqueue+0x156/0x11d0 [ 842.500384][ T6944] alloc_workqueue+0x1d0/0x11d0 [ 842.500401][ T6944] ? stack_trace_save+0x1f0/0x1f0 [ 842.500419][ T6944] ? _raw_spin_unlock+0x4d/0x70 [ 842.500437][ T6944] ? bd_prepare_to_claim+0x388/0x420 [ 842.500455][ T6944] ? loop_attr_do_show_dio+0xc0/0xc0 [ 842.500474][ T6944] ? loop_configure+0x7f6/0x1640 [ 842.500491][ T6944] ? apply_workqueue_attrs+0x720/0x720 [ 842.500509][ T6944] ? loop_set_status_from_info+0x5fd/0x7a0 [ 842.500528][ T6944] loop_configure+0x8c7/0x1640 17:24:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000bc7b0fededac330500092100000001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 842.500548][ T6944] lo_ioctl+0x8cd/0x25e0 [ 842.500565][ T6944] ? is_bpf_text_address+0x1a2/0x1c0 [ 842.500584][ T6944] ? lo_release+0x200/0x200 [ 842.500600][ T6944] ? stack_trace_save+0x1f0/0x1f0 [ 842.500616][ T6944] ? __kernel_text_address+0x9a/0x110 [ 842.500635][ T6944] ? unwind_get_return_address+0x4c/0x90 [ 842.500652][ T6944] ? arch_stack_walk+0xf8/0x140 [ 842.500669][ T6944] ? avc_has_perm_noaudit+0x358/0x450 [ 842.500688][ T6944] ? memcpy+0x56/0x70 [ 842.500704][ T6944] ? memset+0x35/0x40 [ 842.500719][ T6944] ? fsnotify+0x5ad/0x2240 [ 842.500735][ T6944] ? __kasan_check_write+0x14/0x20 [ 842.500752][ T6944] ? _raw_spin_lock+0xa3/0x1b0 [ 842.500768][ T6944] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 842.500786][ T6944] ? _raw_spin_unlock+0x4d/0x70 [ 842.500802][ T6944] ? find_inode_fast+0x459/0x480 [ 842.500822][ T6944] ? __kasan_check_write+0x14/0x20 [ 842.500855][ T6944] ? mutex_unlock+0xa2/0x110 [ 842.500874][ T6944] ? __mutex_lock_slowpath+0x10/0x10 [ 842.500898][ T6944] ? is_bpf_text_address+0x1a2/0x1c0 [ 842.500917][ T6944] ? is_module_text_address+0xe1/0x140 [ 842.500935][ T6944] ? stack_trace_save+0x1f0/0x1f0 [ 842.500951][ T6944] ? __kernel_text_address+0x9a/0x110 [ 842.500971][ T6944] ? unwind_get_return_address+0x4c/0x90 [ 842.500990][ T6944] ? arch_stack_walk+0xf8/0x140 [ 842.501009][ T6944] ? stack_trace_save+0x12d/0x1f0 [ 842.501026][ T6944] ? stack_trace_snprint+0x100/0x100 [ 842.501043][ T6944] ? avc_has_extended_perms+0x718/0x1210 [ 842.501062][ T6944] ? memcpy+0x56/0x70 [ 842.501079][ T6944] ? avc_has_extended_perms+0xb9c/0x1210 [ 842.501097][ T6944] ? kasan_set_track+0x4c/0x70 [ 842.501116][ T6944] ? kasan_set_free_info+0x23/0x40 [ 842.501132][ T6944] ? ____kasan_slab_free+0x126/0x160 [ 842.501150][ T6944] ? __kasan_slab_free+0x11/0x20 [ 842.501166][ T6944] ? slab_free_freelist_hook+0xc9/0x1a0 [ 842.501185][ T6944] ? kmem_cache_free+0x11a/0x2e0 [ 842.501202][ T6944] ? putname+0x10b/0x160 [ 842.501217][ T6944] ? avc_flush+0x2b0/0x2b0 [ 842.501234][ T6944] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 842.501258][ T6944] ? blkdev_common_ioctl+0x570/0x1ec0 [ 842.501275][ T6944] ? kasan_quarantine_put+0x34/0x1b0 [ 842.501293][ T6944] ? blkdev_bszset+0x240/0x240 [ 842.501310][ T6944] ? ioctl_has_perm+0x3df/0x560 [ 842.501327][ T6944] ? has_cap_mac_admin+0xb0/0xb0 [ 842.501344][ T6944] ? kmem_cache_free+0x11a/0x2e0 [ 842.501367][ T6944] ? putname+0x10b/0x160 [ 842.501382][ T6944] ? selinux_file_ioctl+0x3c9/0x530 [ 842.501401][ T6944] ? lo_release+0x200/0x200 [ 842.501417][ T6944] blkdev_ioctl+0x2e9/0x620 [ 842.501434][ T6944] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 842.501451][ T6944] ? __fget_files+0x310/0x370 [ 842.501472][ T6944] block_ioctl+0xb0/0xf0 [ 842.501490][ T6944] ? blkdev_iopoll+0x100/0x100 [ 842.501505][ T6944] __se_sys_ioctl+0x115/0x190 [ 842.501525][ T6944] __x64_sys_ioctl+0x7b/0x90 [ 842.501544][ T6944] do_syscall_64+0x44/0xd0 [ 842.501563][ T6944] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 842.501581][ T6944] RIP: 0033:0x7fd49bff9e97 [ 842.501598][ T6944] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.501612][ T6944] RSP: 002b:00007fd49ad09f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.501632][ T6944] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 842.501646][ T6944] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 842.501658][ T6944] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 842.501670][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.501682][ T6944] R13: 00007fd49ad09fdc R14: 00007fd49ad09fe0 R15: 0000000020000242 [ 842.501699][ T6944] [ 842.502929][ T6939] loop5: detected capacity change from 0 to 16 [ 842.504665][ T6939] erofs: (device loop5): mounted with root inode @ nid 36. [ 843.027584][ T1723] lg-g15 0003:046D:C225.0084: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 843.028346][ T3408] usb 1-1: new high-speed USB device number 102 using dummy_hcd 17:24:08 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 43) 17:24:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 28) [ 843.132926][ T6957] loop1: detected capacity change from 0 to 16 [ 843.140413][ T6957] erofs: (device loop1): mounted with root inode @ nid 36. [ 843.177464][ T6959] FAULT_INJECTION: forcing a failure. [ 843.177464][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 843.190138][ T6959] CPU: 0 PID: 6959 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 843.200211][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 843.210111][ T6959] Call Trace: [ 843.213234][ T6959] [ 843.216009][ T6959] dump_stack_lvl+0x151/0x1b7 [ 843.220520][ T6959] ? bfq_pos_tree_add_move+0x43e/0x43e [ 843.225811][ T6959] ? selinux_kernfs_init_security+0x1a8/0x760 [ 843.231718][ T6959] dump_stack+0x15/0x17 [ 843.235709][ T6959] should_fail+0x3c0/0x510 [ 843.239961][ T6959] __should_failslab+0x9f/0xe0 [ 843.244562][ T6959] should_failslab+0x9/0x20 [ 843.248900][ T6959] kmem_cache_alloc+0x4f/0x2f0 [ 843.253499][ T6959] ? __kernfs_new_node+0xdb/0x6e0 [ 843.258362][ T6959] __kernfs_new_node+0xdb/0x6e0 [ 843.263053][ T6959] ? down_read_killable+0x250/0x250 [ 843.268081][ T6959] ? kernfs_new_node+0x170/0x170 [ 843.272852][ T6959] ? __kasan_check_write+0x14/0x20 [ 843.277804][ T6959] ? up_write+0x56/0x120 [ 843.281883][ T6959] ? kernfs_activate+0x409/0x420 [ 843.286660][ T6959] kernfs_new_node+0x97/0x170 [ 843.291170][ T6959] __kernfs_create_file+0x4a/0x270 [ 843.296116][ T6959] sysfs_add_file_mode_ns+0x273/0x320 [ 843.301327][ T6959] internal_create_group+0x55e/0xf60 [ 843.306452][ T6959] ? get_super+0x1ee/0x210 [ 843.310696][ T6959] ? sysfs_create_group+0x30/0x30 [ 843.315559][ T6959] ? __kasan_check_write+0x14/0x20 [ 843.320504][ T6959] sysfs_create_group+0x1f/0x30 [ 843.325189][ T6959] loop_configure+0x1077/0x1640 [ 843.329891][ T6959] lo_ioctl+0x8cd/0x25e0 [ 843.333962][ T6959] ? is_bpf_text_address+0x1a2/0x1c0 [ 843.339078][ T6959] ? lo_release+0x200/0x200 [ 843.343418][ T6959] ? stack_trace_save+0x1f0/0x1f0 [ 843.348282][ T6959] ? __kernel_text_address+0x9a/0x110 [ 843.353485][ T6959] ? unwind_get_return_address+0x4c/0x90 [ 843.358958][ T6959] ? arch_stack_walk+0xf8/0x140 [ 843.363642][ T6959] ? avc_has_perm_noaudit+0x358/0x450 [ 843.368849][ T6959] ? memcpy+0x56/0x70 [ 843.372668][ T6959] ? memset+0x35/0x40 [ 843.376485][ T6959] ? fsnotify+0x5ad/0x2240 [ 843.380741][ T6959] ? __kasan_check_write+0x14/0x20 [ 843.385685][ T6959] ? _raw_spin_lock+0xa3/0x1b0 [ 843.390293][ T6959] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 843.395496][ T6959] ? _raw_spin_unlock+0x4d/0x70 [ 843.400185][ T6959] ? find_inode_fast+0x459/0x480 [ 843.404960][ T6959] ? __kasan_check_write+0x14/0x20 [ 843.409903][ T6959] ? mutex_unlock+0xa2/0x110 [ 843.414327][ T6959] ? __mutex_lock_slowpath+0x10/0x10 [ 843.419454][ T6959] ? is_bpf_text_address+0x1a2/0x1c0 [ 843.424573][ T6959] ? is_module_text_address+0xe1/0x140 [ 843.429866][ T6959] ? stack_trace_save+0x1f0/0x1f0 [ 843.434730][ T6959] ? __kernel_text_address+0x9a/0x110 [ 843.439936][ T6959] ? unwind_get_return_address+0x4c/0x90 [ 843.445400][ T6959] ? arch_stack_walk+0xf8/0x140 [ 843.450100][ T6959] ? stack_trace_save+0x12d/0x1f0 [ 843.454951][ T6959] ? stack_trace_snprint+0x100/0x100 [ 843.460071][ T6959] ? avc_has_extended_perms+0x718/0x1210 [ 843.465539][ T6959] ? memcpy+0x56/0x70 [ 843.469354][ T6959] ? avc_has_extended_perms+0xb9c/0x1210 [ 843.474824][ T6959] ? kasan_set_track+0x4c/0x70 [ 843.479425][ T6959] ? kasan_set_free_info+0x23/0x40 [ 843.484369][ T6959] ? ____kasan_slab_free+0x126/0x160 [ 843.487566][ T6958] FAULT_INJECTION: forcing a failure. [ 843.487566][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 843.489575][ T6959] ? __kasan_slab_free+0x11/0x20 [ 843.506767][ T6959] ? slab_free_freelist_hook+0xc9/0x1a0 [ 843.512144][ T6959] ? kmem_cache_free+0x11a/0x2e0 [ 843.516919][ T6959] ? putname+0x10b/0x160 [ 843.521000][ T6959] ? avc_flush+0x2b0/0x2b0 [ 843.525251][ T6959] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 843.529894][ T6959] ? blkdev_common_ioctl+0x570/0x1ec0 [ 843.535063][ T6959] ? kasan_quarantine_put+0x34/0x1b0 [ 843.540183][ T6959] ? blkdev_bszset+0x240/0x240 [ 843.544786][ T6959] ? ioctl_has_perm+0x3df/0x560 [ 843.549469][ T6959] ? has_cap_mac_admin+0xb0/0xb0 [ 843.554249][ T6959] ? kmem_cache_free+0x11a/0x2e0 [ 843.559016][ T6959] ? putname+0x10b/0x160 [ 843.563095][ T6959] ? selinux_file_ioctl+0x3c9/0x530 [ 843.568125][ T6959] ? lo_release+0x200/0x200 [ 843.572470][ T6959] blkdev_ioctl+0x2e9/0x620 [ 843.576813][ T6959] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 843.582104][ T6959] ? __fget_files+0x310/0x370 [ 843.586624][ T6959] block_ioctl+0xb0/0xf0 [ 843.590694][ T6959] ? blkdev_iopoll+0x100/0x100 [ 843.595296][ T6959] __se_sys_ioctl+0x115/0x190 [ 843.599839][ T6959] __x64_sys_ioctl+0x7b/0x90 [ 843.604229][ T6959] do_syscall_64+0x44/0xd0 [ 843.608485][ T6959] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 843.614213][ T6959] RIP: 0033:0x7fe9fd6cee97 [ 843.618472][ T6959] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 843.637909][ T6959] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.646155][ T6959] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 843.653965][ T6959] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 843.661868][ T6959] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 843.669673][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.677485][ T6959] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 843.685301][ T6959] [ 843.688167][ T6958] CPU: 1 PID: 6958 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 843.690757][ T3394] usb 4-1: USB disconnect, device number 84 [ 843.698143][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 843.698158][ T6958] Call Trace: [ 843.698165][ T6958] [ 843.698172][ T6958] dump_stack_lvl+0x151/0x1b7 [ 843.698197][ T6958] ? bfq_pos_tree_add_move+0x43e/0x43e [ 843.698214][ T6958] dump_stack+0x15/0x17 [ 843.698228][ T6958] should_fail+0x3c0/0x510 [ 843.705257][ T6959] loop5: detected capacity change from 0 to 16 [ 843.713769][ T6958] ? apply_wqattrs_prepare+0x99/0x1290 [ 843.713797][ T6958] __should_failslab+0x9f/0xe0 [ 843.713813][ T6958] should_failslab+0x9/0x20 [ 843.713828][ T6958] kmem_cache_alloc_trace+0x4a/0x310 [ 843.713846][ T6958] ? apply_wqattrs_prepare+0x62/0x1290 [ 843.768383][ T6958] apply_wqattrs_prepare+0x99/0x1290 [ 843.773478][ T6958] ? __kasan_check_write+0x14/0x20 [ 843.778429][ T6958] ? mutex_lock+0xb6/0x130 [ 843.782680][ T6958] ? wait_for_completion_killable_timeout+0x10/0x10 [ 843.789106][ T6958] ? vsnprintf+0x1c02/0x1ce0 [ 843.793532][ T6958] apply_workqueue_attrs+0x149/0x720 [ 843.798654][ T6958] ? alloc_workqueue_attrs+0xc0/0xc0 [ 843.803776][ T6958] ? ptr_to_hashval+0x60/0x60 [ 843.807305][ T6959] erofs: (device loop5): mounted with root inode @ nid 36. [ 843.808282][ T6958] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 843.808309][ T6958] ? preempt_count_add+0x90/0x1a0 [ 843.825560][ T6958] alloc_workqueue+0xcc1/0x11d0 [ 843.830246][ T6958] ? stack_trace_save+0x1f0/0x1f0 [ 843.835105][ T6958] ? loop_configure+0x7f6/0x1640 [ 843.839879][ T6958] ? apply_workqueue_attrs+0x720/0x720 [ 843.845170][ T6958] ? loop_set_status_from_info+0x5fd/0x7a0 [ 843.850814][ T6958] loop_configure+0x8c7/0x1640 [ 843.855420][ T6958] lo_ioctl+0x8cd/0x25e0 [ 843.859495][ T6958] ? is_bpf_text_address+0x1a2/0x1c0 [ 843.864813][ T6958] ? lo_release+0x200/0x200 [ 843.867076][ T3408] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 843.869144][ T6958] ? stack_trace_save+0x1f0/0x1f0 [ 843.869167][ T6958] ? __kernel_text_address+0x9a/0x110 [ 843.886993][ T3408] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.889278][ T6958] ? unwind_get_return_address+0x4c/0x90 [ 843.889304][ T6958] ? arch_stack_walk+0xf8/0x140 [ 843.889322][ T6958] ? avc_has_perm_noaudit+0x358/0x450 [ 843.913497][ T6958] ? memcpy+0x56/0x70 [ 843.917319][ T6958] ? memset+0x35/0x40 [ 843.921220][ T6958] ? fsnotify+0x5ad/0x2240 [ 843.923542][ T3408] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 843.925469][ T6958] ? __kasan_check_write+0x14/0x20 [ 843.925493][ T6958] ? _raw_spin_lock+0xa3/0x1b0 [ 843.943876][ T6958] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 843.946380][ T3408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.949076][ T6958] ? _raw_spin_unlock+0x4d/0x70 [ 843.949096][ T6958] ? find_inode_fast+0x459/0x480 [ 843.949117][ T6958] ? __kasan_check_write+0x14/0x20 [ 843.965945][ T3408] usb 1-1: config 0 descriptor?? [ 843.966351][ T6958] ? mutex_unlock+0xa2/0x110 [ 843.977292][ T3394] usb 5-1: USB disconnect, device number 38 [ 843.980501][ T6958] ? __mutex_lock_slowpath+0x10/0x10 [ 843.980534][ T6958] ? is_bpf_text_address+0x1a2/0x1c0 [ 843.996484][ T6958] ? is_module_text_address+0xe1/0x140 [ 844.001766][ T6958] ? stack_trace_save+0x1f0/0x1f0 [ 844.006626][ T6958] ? __kernel_text_address+0x9a/0x110 [ 844.011834][ T6958] ? unwind_get_return_address+0x4c/0x90 [ 844.017302][ T6958] ? arch_stack_walk+0xf8/0x140 [ 844.021988][ T6958] ? stack_trace_save+0x12d/0x1f0 [ 844.026861][ T6958] ? stack_trace_snprint+0x100/0x100 [ 844.031972][ T6958] ? avc_has_extended_perms+0x718/0x1210 [ 844.037436][ T6958] ? memcpy+0x56/0x70 [ 844.041258][ T6958] ? avc_has_extended_perms+0xb9c/0x1210 [ 844.046724][ T6958] ? kasan_set_track+0x4c/0x70 [ 844.051322][ T6958] ? kasan_set_free_info+0x23/0x40 [ 844.056273][ T6958] ? ____kasan_slab_free+0x126/0x160 [ 844.061391][ T6958] ? __kasan_slab_free+0x11/0x20 [ 844.066169][ T6958] ? slab_free_freelist_hook+0xc9/0x1a0 [ 844.071547][ T6958] ? kmem_cache_free+0x11a/0x2e0 [ 844.076319][ T6958] ? putname+0x10b/0x160 [ 844.080404][ T6958] ? avc_flush+0x2b0/0x2b0 [ 844.084777][ T6958] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 844.089362][ T6958] ? blkdev_common_ioctl+0x570/0x1ec0 [ 844.094652][ T6958] ? kasan_quarantine_put+0x34/0x1b0 [ 844.099779][ T6958] ? blkdev_bszset+0x240/0x240 [ 844.104374][ T6958] ? ioctl_has_perm+0x3df/0x560 [ 844.109062][ T6958] ? has_cap_mac_admin+0xb0/0xb0 [ 844.113837][ T6958] ? kmem_cache_free+0x11a/0x2e0 [ 844.118618][ T6958] ? putname+0x10b/0x160 [ 844.122687][ T6958] ? selinux_file_ioctl+0x3c9/0x530 [ 844.127722][ T6958] ? lo_release+0x200/0x200 [ 844.132060][ T6958] blkdev_ioctl+0x2e9/0x620 [ 844.136407][ T6958] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 844.141699][ T6958] ? __fget_files+0x310/0x370 [ 844.146211][ T6958] block_ioctl+0xb0/0xf0 [ 844.150287][ T6958] ? blkdev_iopoll+0x100/0x100 [ 844.154891][ T6958] __se_sys_ioctl+0x115/0x190 [ 844.159404][ T6958] __x64_sys_ioctl+0x7b/0x90 [ 844.163832][ T6958] do_syscall_64+0x44/0xd0 [ 844.168083][ T6958] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 844.173807][ T6958] RIP: 0033:0x7fd49bff9e97 17:24:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0x3, 0x89, {0x89, 0x6, "96442b23fa10563c95e789669f1f98dfbbc0a4d4c19dd9877c540fb9f5f9f95795ea468646c29222844fde7e2c9347f179c8eb288eb3536174bbe08bd7a435a243969162d201cc46e59c8c6bf7e3d3cdf34a05b4e7d6c742de9b4c05342f5c93572d827a1fa0d769707823f717008cdfe9fd6d211d7599cb0bc1469d93e10b09e0459c68baba7a"}}, &(0x7f0000000140)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "1839721fbc6998982bb27fd6a877c9636d9a8623e46f044a495576625b513b1885292843fe652eb37a9de856cf0d8a963ce643b01ed324576d043ad37a3df4af71f4f78f6e0063e8e1143d318e162af02ca426e180b458e8949895696ca12bbd7509cb8f82c7ee546d8f4e3f1cca3665579e6b49b3334722b176e2b2123fd19e884bc58ba12f1201247d22ac054a3c0c2a1c0c688e9d5859b0861f425e798d8963d0395a9b89ab7a"}}, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x4, "42315bc5"}, @main=@item_4={0x3, 0x0, 0x8, "149e02c9"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0xce0}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0xf, 0x6a, "464fe08e170344fe2b126a4567ad844f7694bf012c948fb905c2c80f5f10b70abc4f1a394e25f9cecd04bf1e8cfd56696b32827b0ee5c695fe2e9108d96504212f08a40d53085b5434a82b36dc865571cabdbd0b04c98872a33166643f1e434ec805e003d2ab51e5dbe3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x1, 0xc1, "e2017c3b219894f9204d54b54dd07a1c03e8574394c94b91c118a9fa04094d03529021252cd33a9d20a750685ada43507ad13ceb23540ef8b811c3a88cc09cc7312357f566044c9febffd19f93703175dbf35e561cf1cf5b7ddab122b5df3658139e05a1e98cfb108718d90774c235e8b1b2bb4985c0ece489eb9daaf531a92739b25e30deb0499dbb303b8655f66797eb70dc7fb7244f89e671f0e905114511aff7b15e90571c69dfc4b5136b57fce45e1514933f139e137d9cb36ec6d1373d7c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x9}}) 17:24:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:09 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 44) [ 844.178061][ T6958] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.197508][ T6958] RSP: 002b:00007fd49ad4bf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.205750][ T6958] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 844.213561][ T6958] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 844.221373][ T6958] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 844.229185][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.236995][ T6958] R13: 00007fd49ad4bfdc R14: 00007fd49ad4bfe0 R15: 0000000020000242 [ 844.244896][ T6958] 17:24:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 29) [ 844.379883][ T6971] loop1: detected capacity change from 0 to 16 [ 844.387102][ T6972] loop5: detected capacity change from 0 to 16 [ 844.393107][ T6972] FAULT_INJECTION: forcing a failure. [ 844.393107][ T6972] name failslab, interval 1, probability 0, space 0, times 0 [ 844.408587][ T6971] erofs: (device loop1): mounted with root inode @ nid 36. [ 844.416049][ T6972] CPU: 1 PID: 6972 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 844.426028][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 844.435922][ T6972] Call Trace: [ 844.439042][ T6972] [ 844.441821][ T6972] dump_stack_lvl+0x151/0x1b7 [ 844.446339][ T6972] ? bfq_pos_tree_add_move+0x43e/0x43e [ 844.451629][ T6972] ? vprintk+0x86/0x90 [ 844.455544][ T6972] ? _printk+0xcf/0x10f [ 844.459527][ T6972] dump_stack+0x15/0x17 [ 844.463518][ T6972] should_fail+0x3c0/0x510 [ 844.467775][ T6972] ? kobject_uevent_env+0x26c/0x730 [ 844.472814][ T6972] __should_failslab+0x9f/0xe0 [ 844.477407][ T6972] should_failslab+0x9/0x20 [ 844.481755][ T6972] kmem_cache_alloc_trace+0x4a/0x310 [ 844.486872][ T6972] ? set_capacity_and_notify+0x325/0x350 [ 844.492338][ T6972] ? dev_uevent_filter+0xb0/0xb0 [ 844.497007][ T3394] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 844.497106][ T6972] kobject_uevent_env+0x26c/0x730 [ 844.509353][ T6972] ? sysfs_create_group+0x30/0x30 [ 844.514208][ T6972] kobject_uevent+0x1f/0x30 [ 844.518549][ T6972] loop_set_size+0x95/0xa0 [ 844.522800][ T6972] loop_configure+0x11c7/0x1640 [ 844.527490][ T6972] lo_ioctl+0x8cd/0x25e0 [ 844.531568][ T6972] ? is_bpf_text_address+0x1a2/0x1c0 [ 844.536687][ T6972] ? lo_release+0x200/0x200 [ 844.541024][ T6972] ? stack_trace_save+0x1f0/0x1f0 [ 844.545890][ T6972] ? __kernel_text_address+0x9a/0x110 [ 844.551099][ T6972] ? unwind_get_return_address+0x4c/0x90 [ 844.556573][ T6972] ? arch_stack_walk+0xf8/0x140 [ 844.561251][ T6972] ? avc_has_perm_noaudit+0x358/0x450 [ 844.566459][ T6972] ? memcpy+0x56/0x70 [ 844.570276][ T6972] ? memset+0x35/0x40 [ 844.574098][ T6972] ? fsnotify+0x5ad/0x2240 [ 844.578350][ T6972] ? __kasan_check_write+0x14/0x20 [ 844.583302][ T6972] ? _raw_spin_lock+0xa3/0x1b0 [ 844.587896][ T6972] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 844.593302][ T6972] ? _raw_spin_unlock+0x4d/0x70 [ 844.597985][ T6972] ? find_inode_fast+0x459/0x480 [ 844.602761][ T6972] ? __kasan_check_write+0x14/0x20 [ 844.607708][ T6972] ? mutex_unlock+0xa2/0x110 [ 844.612132][ T6972] ? __mutex_lock_slowpath+0x10/0x10 [ 844.617262][ T6972] ? is_bpf_text_address+0x1a2/0x1c0 [ 844.622375][ T6972] ? is_module_text_address+0xe1/0x140 [ 844.627675][ T6972] ? stack_trace_save+0x1f0/0x1f0 [ 844.632534][ T6972] ? __kernel_text_address+0x9a/0x110 [ 844.637742][ T6972] ? unwind_get_return_address+0x4c/0x90 [ 844.643210][ T6972] ? arch_stack_walk+0xf8/0x140 [ 844.647897][ T6972] ? stack_trace_save+0x12d/0x1f0 [ 844.652750][ T6972] ? stack_trace_snprint+0x100/0x100 [ 844.657872][ T6972] ? avc_has_extended_perms+0x718/0x1210 [ 844.663340][ T6972] ? memcpy+0x56/0x70 [ 844.667169][ T6972] ? avc_has_extended_perms+0xb9c/0x1210 [ 844.672650][ T6972] ? kasan_set_track+0x4c/0x70 [ 844.677229][ T6972] ? kasan_set_free_info+0x23/0x40 [ 844.682176][ T6972] ? ____kasan_slab_free+0x126/0x160 [ 844.687294][ T6972] ? __kasan_slab_free+0x11/0x20 [ 844.692068][ T6972] ? slab_free_freelist_hook+0xc9/0x1a0 [ 844.697473][ T6972] ? kmem_cache_free+0x11a/0x2e0 [ 844.702229][ T6972] ? putname+0x10b/0x160 [ 844.706304][ T6972] ? avc_flush+0x2b0/0x2b0 [ 844.710556][ T6972] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 844.715159][ T6972] ? blkdev_common_ioctl+0x570/0x1ec0 [ 844.720363][ T6972] ? kasan_quarantine_put+0x34/0x1b0 [ 844.725573][ T6972] ? blkdev_bszset+0x240/0x240 [ 844.730171][ T6972] ? ioctl_has_perm+0x3df/0x560 [ 844.734859][ T6972] ? has_cap_mac_admin+0xb0/0xb0 [ 844.739637][ T6972] ? kmem_cache_free+0x11a/0x2e0 [ 844.744406][ T6972] ? putname+0x10b/0x160 [ 844.748485][ T6972] ? selinux_file_ioctl+0x3c9/0x530 [ 844.753521][ T6972] ? lo_release+0x200/0x200 [ 844.757862][ T6972] blkdev_ioctl+0x2e9/0x620 [ 844.762204][ T6972] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 844.767491][ T6972] ? __fget_files+0x310/0x370 [ 844.772010][ T6972] block_ioctl+0xb0/0xf0 [ 844.776084][ T6972] ? blkdev_iopoll+0x100/0x100 [ 844.780701][ T6972] __se_sys_ioctl+0x115/0x190 [ 844.785202][ T6972] __x64_sys_ioctl+0x7b/0x90 [ 844.789628][ T6972] do_syscall_64+0x44/0xd0 [ 844.793878][ T6972] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 844.799603][ T6972] RIP: 0033:0x7fe9fd6cee97 [ 844.803861][ T6972] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.823304][ T6972] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.831547][ T6972] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 844.839362][ T6972] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 844.847173][ T6972] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 844.854988][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.857076][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.863051][ T6972] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 844.863074][ T6972] [ 844.885589][ T6972] erofs: (device loop5): mounted with root inode @ nid 36. [ 844.914644][ T6975] FAULT_INJECTION: forcing a failure. [ 844.914644][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 844.937394][ T1762] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 844.954854][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.963228][ T6975] CPU: 1 PID: 6975 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 844.974393][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 844.984276][ T6975] Call Trace: [ 844.987398][ T6975] [ 844.990175][ T6975] dump_stack_lvl+0x151/0x1b7 [ 844.994691][ T6975] ? bfq_pos_tree_add_move+0x43e/0x43e [ 844.999986][ T6975] dump_stack+0x15/0x17 [ 845.003983][ T6975] should_fail+0x3c0/0x510 [ 845.008227][ T6975] ? apply_wqattrs_prepare+0x127/0x1290 [ 845.013609][ T6975] __should_failslab+0x9f/0xe0 [ 845.018209][ T6975] should_failslab+0x9/0x20 [ 845.022550][ T6975] kmem_cache_alloc_trace+0x4a/0x310 [ 845.027671][ T6975] ? apply_wqattrs_prepare+0x99/0x1290 [ 845.032968][ T6975] apply_wqattrs_prepare+0x127/0x1290 [ 845.038172][ T6975] ? __kasan_check_write+0x14/0x20 [ 845.043120][ T6975] ? mutex_lock+0xb6/0x130 [ 845.047372][ T6975] ? wait_for_completion_killable_timeout+0x10/0x10 [ 845.053794][ T6975] ? vsnprintf+0x1c02/0x1ce0 [ 845.058224][ T6975] apply_workqueue_attrs+0x149/0x720 [ 845.063348][ T6975] ? alloc_workqueue_attrs+0xc0/0xc0 [ 845.069332][ T6975] ? ptr_to_hashval+0x60/0x60 [ 845.073842][ T6975] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 845.079233][ T6975] ? preempt_count_add+0x90/0x1a0 [ 845.084088][ T6975] alloc_workqueue+0xcc1/0x11d0 [ 845.088772][ T6975] ? stack_trace_save+0x1f0/0x1f0 [ 845.093637][ T6975] ? loop_configure+0x7f6/0x1640 [ 845.098407][ T6975] ? apply_workqueue_attrs+0x720/0x720 [ 845.103703][ T6975] ? loop_set_status_from_info+0x5fd/0x7a0 [ 845.109430][ T6975] loop_configure+0x8c7/0x1640 [ 845.114032][ T6975] lo_ioctl+0x8cd/0x25e0 [ 845.118111][ T6975] ? is_bpf_text_address+0x1a2/0x1c0 [ 845.123231][ T6975] ? lo_release+0x200/0x200 [ 845.127570][ T6975] ? stack_trace_save+0x1f0/0x1f0 [ 845.132429][ T6975] ? __kernel_text_address+0x9a/0x110 [ 845.137638][ T6975] ? unwind_get_return_address+0x4c/0x90 [ 845.143105][ T6975] ? arch_stack_walk+0xf8/0x140 [ 845.147793][ T6975] ? avc_has_perm_noaudit+0x358/0x450 [ 845.153000][ T6975] ? memcpy+0x56/0x70 [ 845.156818][ T6975] ? memset+0x35/0x40 [ 845.160637][ T6975] ? fsnotify+0x5ad/0x2240 [ 845.164892][ T6975] ? __kasan_check_write+0x14/0x20 [ 845.169838][ T6975] ? _raw_spin_lock+0xa3/0x1b0 [ 845.174438][ T6975] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 845.179647][ T6975] ? _raw_spin_unlock+0x4d/0x70 [ 845.184331][ T6975] ? find_inode_fast+0x459/0x480 [ 845.189106][ T6975] ? __kasan_check_write+0x14/0x20 [ 845.194053][ T6975] ? mutex_unlock+0xa2/0x110 [ 845.198478][ T6975] ? __mutex_lock_slowpath+0x10/0x10 [ 845.203605][ T6975] ? is_bpf_text_address+0x1a2/0x1c0 [ 845.208724][ T6975] ? is_module_text_address+0xe1/0x140 [ 845.214014][ T6975] ? stack_trace_save+0x1f0/0x1f0 [ 845.218965][ T6975] ? __kernel_text_address+0x9a/0x110 [ 845.224171][ T6975] ? unwind_get_return_address+0x4c/0x90 [ 845.229667][ T6975] ? arch_stack_walk+0xf8/0x140 [ 845.234330][ T6975] ? stack_trace_save+0x12d/0x1f0 [ 845.239187][ T6975] ? stack_trace_snprint+0x100/0x100 [ 845.244307][ T6975] ? avc_has_extended_perms+0x718/0x1210 [ 845.249860][ T6975] ? memcpy+0x56/0x70 [ 845.253679][ T6975] ? avc_has_extended_perms+0xb9c/0x1210 [ 845.259148][ T6975] ? kasan_set_track+0x4c/0x70 [ 845.263748][ T6975] ? kasan_set_free_info+0x23/0x40 [ 845.268696][ T6975] ? ____kasan_slab_free+0x126/0x160 [ 845.273815][ T6975] ? __kasan_slab_free+0x11/0x20 [ 845.278595][ T6975] ? slab_free_freelist_hook+0xc9/0x1a0 [ 845.283973][ T6975] ? kmem_cache_free+0x11a/0x2e0 [ 845.288746][ T6975] ? putname+0x10b/0x160 [ 845.292824][ T6975] ? avc_flush+0x2b0/0x2b0 [ 845.297077][ T6975] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 845.301682][ T6975] ? blkdev_common_ioctl+0x570/0x1ec0 [ 845.306886][ T6975] ? kasan_quarantine_put+0x34/0x1b0 [ 845.312005][ T6975] ? blkdev_bszset+0x240/0x240 [ 845.316605][ T6975] ? ioctl_has_perm+0x3df/0x560 [ 845.321292][ T6975] ? has_cap_mac_admin+0xb0/0xb0 [ 845.326067][ T6975] ? kmem_cache_free+0x11a/0x2e0 [ 845.330840][ T6975] ? putname+0x10b/0x160 [ 845.334923][ T6975] ? selinux_file_ioctl+0x3c9/0x530 [ 845.339964][ T6975] ? lo_release+0x200/0x200 [ 845.344295][ T6975] blkdev_ioctl+0x2e9/0x620 [ 845.348636][ T6975] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 845.353972][ T6975] ? __fget_files+0x310/0x370 [ 845.358442][ T6975] block_ioctl+0xb0/0xf0 [ 845.362519][ T6975] ? blkdev_iopoll+0x100/0x100 [ 845.367121][ T6975] __se_sys_ioctl+0x115/0x190 [ 845.371634][ T6975] __x64_sys_ioctl+0x7b/0x90 [ 845.376058][ T6975] do_syscall_64+0x44/0xd0 [ 845.380313][ T6975] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 845.386042][ T6975] RIP: 0033:0x7fd49bff9e97 [ 845.390305][ T6975] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.409737][ T6975] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.417979][ T6975] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 845.425791][ T6975] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 17:24:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:10 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 45) [ 845.433604][ T6975] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 845.441414][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.449224][ T6975] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 845.457041][ T6975] [ 845.461510][ T3394] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 845.512246][ T3394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.538358][ T3394] usb 5-1: config 0 descriptor?? [ 845.578902][ T3394] usbhid 5-1:0.0: can't add hid device: -22 [ 845.590977][ T6981] loop5: detected capacity change from 0 to 16 [ 845.599060][ T6982] loop1: detected capacity change from 0 to 16 [ 845.599474][ T3394] usbhid: probe of 5-1:0.0 failed with error -22 [ 845.611779][ T6982] erofs: (device loop1): mounted with root inode @ nid 36. [ 845.621041][ T6981] FAULT_INJECTION: forcing a failure. [ 845.621041][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 845.649347][ T6981] CPU: 1 PID: 6981 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 845.650798][ T3394] usb 1-1: USB disconnect, device number 102 [ 845.659335][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 845.659355][ T6981] Call Trace: [ 845.659363][ T6981] [ 845.659371][ T6981] dump_stack_lvl+0x151/0x1b7 [ 845.659400][ T6981] ? bfq_pos_tree_add_move+0x43e/0x43e [ 845.659418][ T6981] ? vprintk+0x86/0x90 [ 845.694664][ T6981] ? _printk+0xcf/0x10f [ 845.698657][ T6981] dump_stack+0x15/0x17 [ 845.702641][ T6981] should_fail+0x3c0/0x510 [ 845.706896][ T6981] ? kobject_uevent_env+0x26c/0x730 [ 845.712714][ T6981] __should_failslab+0x9f/0xe0 [ 845.717310][ T6981] should_failslab+0x9/0x20 [ 845.721652][ T6981] kmem_cache_alloc_trace+0x4a/0x310 [ 845.726772][ T6981] ? set_capacity_and_notify+0x325/0x350 [ 845.732239][ T6981] ? dev_uevent_filter+0xb0/0xb0 [ 845.737014][ T6981] kobject_uevent_env+0x26c/0x730 [ 845.741875][ T6981] ? sysfs_create_group+0x30/0x30 17:24:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x2c, 0xf, {0xf, 0x1, "6fb0a2f98caf03f98bccb9f82c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "37cf55f598f94f2d00f05d22f25ced3bcf439e48"}}, &(0x7f0000000100)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xc, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x2, 0x7}, @generic={0x34, 0x10, 0x4, "0c4dd13cc5c9e3e491781a32a1653e069633dfdc97e2632424e8b7436fdabcdb778ae32446999219eacc8e79a75ffbc76e"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xa05, 0xf00, 0x39, [0xc0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x40, 0x5, "b9e65be2", "b54ab8c4"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x4, 0x1, 0x1f, 0x1, 0x8001}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x6, 0x34, "8970d2a420f2495e76a53f819ef534d43871acb5904a14994216fd2b8093caf32c2b9fd745a0592d6283956956e6999b1c3cf503"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1001, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "4fc9"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x19, 0x2, '\f0'}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0xff}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xc1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x41}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) [ 845.746761][ T6981] kobject_uevent+0x1f/0x30 [ 845.751079][ T6981] loop_set_size+0x95/0xa0 [ 845.755359][ T6981] loop_configure+0x11c7/0x1640 [ 845.760024][ T6981] lo_ioctl+0x8cd/0x25e0 [ 845.764093][ T6981] ? is_bpf_text_address+0x1a2/0x1c0 [ 845.769213][ T6981] ? lo_release+0x200/0x200 [ 845.773650][ T6981] ? stack_trace_save+0x1f0/0x1f0 [ 845.778597][ T6981] ? __kernel_text_address+0x9a/0x110 [ 845.783807][ T6981] ? unwind_get_return_address+0x4c/0x90 [ 845.789274][ T6981] ? arch_stack_walk+0xf8/0x140 [ 845.794309][ T6981] ? avc_has_perm_noaudit+0x358/0x450 [ 845.799516][ T6981] ? memcpy+0x56/0x70 [ 845.803334][ T6981] ? memset+0x35/0x40 [ 845.807170][ T6981] ? fsnotify+0x5ad/0x2240 [ 845.811406][ T6981] ? __kasan_check_write+0x14/0x20 [ 845.816352][ T6981] ? _raw_spin_lock+0xa3/0x1b0 [ 845.820956][ T6981] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 845.826161][ T6981] ? _raw_spin_unlock+0x4d/0x70 [ 845.830851][ T6981] ? find_inode_fast+0x459/0x480 [ 845.835624][ T6981] ? __kasan_check_write+0x14/0x20 [ 845.840571][ T6981] ? mutex_unlock+0xa2/0x110 [ 845.844996][ T6981] ? __mutex_lock_slowpath+0x10/0x10 [ 845.850128][ T6981] ? is_bpf_text_address+0x1a2/0x1c0 [ 845.855237][ T6981] ? is_module_text_address+0xe1/0x140 [ 845.860533][ T6981] ? stack_trace_save+0x1f0/0x1f0 [ 845.865393][ T6981] ? __kernel_text_address+0x9a/0x110 [ 845.870600][ T6981] ? unwind_get_return_address+0x4c/0x90 [ 845.876071][ T6981] ? arch_stack_walk+0xf8/0x140 [ 845.880756][ T6981] ? stack_trace_save+0x12d/0x1f0 [ 845.885618][ T6981] ? stack_trace_snprint+0x100/0x100 [ 845.890735][ T6981] ? avc_has_extended_perms+0x718/0x1210 [ 845.896204][ T6981] ? memcpy+0x56/0x70 [ 845.900022][ T6981] ? avc_has_extended_perms+0xb9c/0x1210 [ 845.905500][ T6981] ? kasan_set_track+0x4c/0x70 [ 845.910093][ T6981] ? kasan_set_free_info+0x23/0x40 [ 845.915044][ T6981] ? ____kasan_slab_free+0x126/0x160 [ 845.920166][ T6981] ? __kasan_slab_free+0x11/0x20 [ 845.924932][ T6981] ? slab_free_freelist_hook+0xc9/0x1a0 [ 845.930322][ T6981] ? kmem_cache_free+0x11a/0x2e0 [ 845.935089][ T6981] ? putname+0x10b/0x160 [ 845.939180][ T6981] ? avc_flush+0x2b0/0x2b0 [ 845.943420][ T6981] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 845.948027][ T6981] ? blkdev_common_ioctl+0x570/0x1ec0 [ 845.953247][ T6981] ? kasan_quarantine_put+0x34/0x1b0 [ 845.958348][ T6981] ? blkdev_bszset+0x240/0x240 [ 845.962950][ T6981] ? ioctl_has_perm+0x3df/0x560 [ 845.967637][ T6981] ? has_cap_mac_admin+0xb0/0xb0 [ 845.972407][ T6981] ? kmem_cache_free+0x11a/0x2e0 [ 845.977182][ T6981] ? putname+0x10b/0x160 [ 845.981261][ T6981] ? selinux_file_ioctl+0x3c9/0x530 [ 845.986297][ T6981] ? lo_release+0x200/0x200 [ 845.990633][ T6981] blkdev_ioctl+0x2e9/0x620 [ 846.000010][ T6981] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 846.005300][ T6981] ? __fget_files+0x310/0x370 [ 846.009815][ T6981] block_ioctl+0xb0/0xf0 [ 846.013891][ T6981] ? blkdev_iopoll+0x100/0x100 [ 846.018491][ T6981] __se_sys_ioctl+0x115/0x190 [ 846.023008][ T6981] __x64_sys_ioctl+0x7b/0x90 [ 846.027432][ T6981] do_syscall_64+0x44/0xd0 [ 846.031684][ T6981] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 846.037412][ T6981] RIP: 0033:0x7fe9fd6cee97 [ 846.041670][ T6981] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.061112][ T6981] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.069440][ T6981] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 846.077249][ T6981] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 846.085061][ T6981] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 846.092872][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.100683][ T6981] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 846.108500][ T6981] [ 846.119210][ T6981] erofs: (device loop5): mounted with root inode @ nid 36. 17:24:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 30) [ 846.237113][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.248037][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.259608][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 846.277076][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.290667][ T1762] usb 4-1: config 0 descriptor?? [ 846.311438][ T6988] FAULT_INJECTION: forcing a failure. [ 846.311438][ T6988] name failslab, interval 1, probability 0, space 0, times 0 17:24:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:11 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 46) [ 846.385836][ T6988] CPU: 0 PID: 6988 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 846.395823][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 846.405717][ T6988] Call Trace: [ 846.408837][ T6988] [ 846.411616][ T6988] dump_stack_lvl+0x151/0x1b7 [ 846.416130][ T6988] ? bfq_pos_tree_add_move+0x43e/0x43e [ 846.421424][ T6988] dump_stack+0x15/0x17 [ 846.425416][ T6988] should_fail+0x3c0/0x510 [ 846.429670][ T6988] __should_failslab+0x9f/0xe0 [ 846.434270][ T6988] should_failslab+0x9/0x20 [ 846.438608][ T6988] kmem_cache_alloc+0x4f/0x2f0 [ 846.443211][ T6988] ? apply_wqattrs_prepare+0x7fb/0x1290 [ 846.448589][ T6988] apply_wqattrs_prepare+0x7fb/0x1290 [ 846.453799][ T6988] ? mutex_lock+0xb6/0x130 [ 846.458049][ T6988] apply_workqueue_attrs+0x149/0x720 [ 846.463174][ T6988] ? alloc_workqueue_attrs+0xc0/0xc0 [ 846.468292][ T6988] ? ptr_to_hashval+0x60/0x60 [ 846.472803][ T6988] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 846.478186][ T6988] ? preempt_count_add+0x90/0x1a0 [ 846.483046][ T6988] alloc_workqueue+0xcc1/0x11d0 [ 846.487732][ T6988] ? __cond_resched+0x20/0x20 [ 846.492247][ T6988] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 846.497714][ T6988] ? loop_configure+0x7f6/0x1640 [ 846.502486][ T6988] ? apply_workqueue_attrs+0x720/0x720 [ 846.507782][ T6988] ? loop_set_status_from_info+0x33b/0x7a0 [ 846.513425][ T6988] ? loop_set_status_from_info+0x5fd/0x7a0 [ 846.519065][ T6988] loop_configure+0x8c7/0x1640 [ 846.523666][ T6988] ? __kasan_check_read+0x11/0x20 [ 846.528529][ T6988] lo_ioctl+0x8cd/0x25e0 [ 846.532606][ T6988] ? __schedule+0xaae/0x1010 [ 846.537033][ T6988] ? lo_release+0x200/0x200 [ 846.541372][ T6988] ? __kasan_check_write+0x14/0x20 [ 846.546320][ T6988] ? __switch_to+0x617/0x1170 [ 846.550833][ T6988] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 846.556300][ T6988] ? compat_start_thread+0x20/0x20 [ 846.561246][ T6988] ? __kasan_check_read+0x11/0x20 [ 846.566107][ T6988] ? switch_mm_irqs_off+0x22f/0x860 [ 846.571153][ T6988] ? _raw_spin_unlock+0x4d/0x70 [ 846.575844][ T6988] ? finish_task_switch+0x173/0x710 [ 846.580864][ T6988] ? __schedule+0xaae/0x1010 [ 846.585290][ T6988] ? release_firmware_map_entry+0x193/0x193 [ 846.591018][ T6988] ? __kasan_check_write+0x14/0x20 [ 846.595964][ T6988] ? mutex_unlock+0xa2/0x110 [ 846.600390][ T6988] ? __mutex_lock_slowpath+0x10/0x10 [ 846.605511][ T6988] ? __kasan_check_read+0x11/0x20 [ 846.610373][ T6988] ? preempt_schedule_irq+0xef/0x140 [ 846.615493][ T6988] ? __cond_resched+0x20/0x20 [ 846.620007][ T6988] ? is_bpf_text_address+0x1a2/0x1c0 [ 846.625126][ T6988] ? is_module_text_address+0xe1/0x140 [ 846.630423][ T6988] ? stack_trace_save+0x1f0/0x1f0 [ 846.635284][ T6988] ? __kernel_text_address+0x9a/0x110 [ 846.640490][ T6988] ? unwind_get_return_address+0x4c/0x90 [ 846.645960][ T6988] ? arch_stack_walk+0xf8/0x140 [ 846.650820][ T6988] ? __kasan_check_write+0x14/0x20 [ 846.655768][ T6988] ? __switch_to+0x617/0x1170 [ 846.660279][ T6988] ? avc_has_extended_perms+0x718/0x1210 [ 846.665751][ T6988] ? __kasan_check_write+0x14/0x20 [ 846.670976][ T6988] ? __switch_to+0x617/0x1170 [ 846.675475][ T6988] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 846.680947][ T6988] ? compat_start_thread+0x20/0x20 [ 846.685902][ T6988] ? __kasan_check_read+0x11/0x20 [ 846.690756][ T6988] ? switch_mm_irqs_off+0x22f/0x860 [ 846.695790][ T6988] ? blkdev_common_ioctl+0x570/0x1ec0 [ 846.701002][ T6988] ? __kasan_check_read+0x11/0x20 [ 846.705853][ T6988] ? preempt_schedule_irq+0xef/0x140 [ 846.710973][ T6988] ? __cond_resched+0x20/0x20 [ 846.715487][ T6988] ? __schedule+0xaae/0x1010 [ 846.719919][ T6988] ? irqentry_exit_cond_resched+0x2b/0x30 [ 846.725469][ T6988] ? irqentry_exit+0x30/0x40 [ 846.729896][ T6988] ? sysvec_reschedule_ipi+0x7e/0x150 [ 846.735109][ T6988] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 846.740577][ T6988] ? lo_release+0x200/0x200 [ 846.744910][ T6988] ? blkdev_common_ioctl+0xc7/0x1ec0 [ 846.750032][ T6988] ? blkdev_ioctl+0x245/0x620 [ 846.754571][ T6988] ? blkdev_ioctl+0x2d9/0x620 [ 846.759084][ T6988] ? lo_release+0x200/0x200 [ 846.763399][ T6988] blkdev_ioctl+0x2e9/0x620 [ 846.767744][ T6988] ? irqentry_exit_cond_resched+0x2b/0x30 [ 846.773298][ T6988] ? irqentry_exit+0x30/0x40 [ 846.777719][ T6988] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 846.783018][ T6988] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 846.788480][ T6988] block_ioctl+0xb0/0xf0 [ 846.792560][ T6988] ? blkdev_iopoll+0x100/0x100 [ 846.797164][ T6988] __se_sys_ioctl+0x115/0x190 [ 846.801677][ T6988] __x64_sys_ioctl+0x7b/0x90 [ 846.806112][ T6988] do_syscall_64+0x44/0xd0 [ 846.812970][ T6988] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 846.818692][ T6988] RIP: 0033:0x7fd49bff9e97 [ 846.822941][ T6988] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.842390][ T6988] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.850624][ T6988] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 846.858436][ T6988] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 846.866248][ T6988] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 846.874057][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.881872][ T6988] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 846.889691][ T6988] [ 846.897261][ T1723] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 846.949359][ T1762] lg-g15 0003:046D:C225.0085: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 846.970156][ T6997] loop5: detected capacity change from 0 to 16 [ 846.976174][ T6997] FAULT_INJECTION: forcing a failure. [ 846.976174][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 846.997051][ T6997] CPU: 1 PID: 6997 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 847.007038][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 847.017106][ T6997] Call Trace: [ 847.020226][ T6997] [ 847.023014][ T6997] dump_stack_lvl+0x151/0x1b7 [ 847.027534][ T6997] ? bfq_pos_tree_add_move+0x43e/0x43e [ 847.032834][ T6997] dump_stack+0x15/0x17 [ 847.036812][ T6997] should_fail+0x3c0/0x510 [ 847.041062][ T6997] ? alloc_uevent_skb+0x7f/0x230 [ 847.045834][ T6997] __should_failslab+0x9f/0xe0 [ 847.050432][ T6997] should_failslab+0x9/0x20 [ 847.054777][ T6997] __kmalloc_track_caller+0x6c/0x350 [ 847.059900][ T6997] ? kmem_cache_alloc+0x1c1/0x2f0 [ 847.064754][ T6997] ? __alloc_skb+0xbc/0x550 [ 847.069094][ T6997] ? alloc_uevent_skb+0x7f/0x230 [ 847.073866][ T6997] __alloc_skb+0x10e/0x550 [ 847.078121][ T6997] alloc_uevent_skb+0x7f/0x230 [ 847.082728][ T6997] kobject_uevent_net_broadcast+0x321/0x5a0 [ 847.088450][ T6997] kobject_uevent_env+0x540/0x730 [ 847.093312][ T6997] kobject_uevent+0x1f/0x30 [ 847.097651][ T6997] loop_set_size+0x95/0xa0 [ 847.101916][ T6997] loop_configure+0x11c7/0x1640 [ 847.106682][ T6997] lo_ioctl+0x8cd/0x25e0 [ 847.110755][ T6997] ? is_bpf_text_address+0x1a2/0x1c0 [ 847.115875][ T6997] ? lo_release+0x200/0x200 [ 847.120214][ T6997] ? stack_trace_save+0x1f0/0x1f0 [ 847.125076][ T6997] ? __kernel_text_address+0x9a/0x110 [ 847.130285][ T6997] ? unwind_get_return_address+0x4c/0x90 [ 847.135755][ T6997] ? arch_stack_walk+0xf8/0x140 [ 847.140441][ T6997] ? avc_has_perm_noaudit+0x358/0x450 [ 847.145647][ T6997] ? memcpy+0x56/0x70 [ 847.149465][ T6997] ? memset+0x35/0x40 [ 847.153286][ T6997] ? fsnotify+0x5ad/0x2240 [ 847.157537][ T6997] ? __kasan_check_write+0x14/0x20 [ 847.162487][ T6997] ? _raw_spin_lock+0xa3/0x1b0 [ 847.167116][ T6997] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 847.172292][ T6997] ? _raw_spin_unlock+0x4d/0x70 [ 847.176981][ T6997] ? find_inode_fast+0x459/0x480 [ 847.181752][ T6997] ? __kasan_check_write+0x14/0x20 [ 847.186701][ T6997] ? mutex_unlock+0xa2/0x110 [ 847.191130][ T6997] ? __mutex_lock_slowpath+0x10/0x10 [ 847.196249][ T6997] ? is_bpf_text_address+0x1a2/0x1c0 [ 847.201365][ T6997] ? is_module_text_address+0xe1/0x140 [ 847.206671][ T6997] ? stack_trace_save+0x1f0/0x1f0 [ 847.211524][ T6997] ? __kernel_text_address+0x9a/0x110 [ 847.216756][ T6997] ? unwind_get_return_address+0x4c/0x90 [ 847.222206][ T6997] ? arch_stack_walk+0xf8/0x140 [ 847.226886][ T6997] ? stack_trace_save+0x12d/0x1f0 [ 847.231748][ T6997] ? stack_trace_snprint+0x100/0x100 [ 847.236866][ T6997] ? avc_has_extended_perms+0x718/0x1210 [ 847.242335][ T6997] ? memcpy+0x56/0x70 [ 847.246160][ T6997] ? avc_has_extended_perms+0xb9c/0x1210 [ 847.251622][ T6997] ? kasan_set_track+0x4c/0x70 [ 847.256225][ T6997] ? kasan_set_free_info+0x23/0x40 [ 847.261174][ T6997] ? ____kasan_slab_free+0x126/0x160 [ 847.266293][ T6997] ? __kasan_slab_free+0x11/0x20 [ 847.271150][ T6997] ? slab_free_freelist_hook+0xc9/0x1a0 [ 847.276533][ T6997] ? kmem_cache_free+0x11a/0x2e0 [ 847.281393][ T6997] ? putname+0x10b/0x160 [ 847.285474][ T6997] ? avc_flush+0x2b0/0x2b0 [ 847.289725][ T6997] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 847.294329][ T6997] ? blkdev_common_ioctl+0x570/0x1ec0 [ 847.299532][ T6997] ? kasan_quarantine_put+0x34/0x1b0 [ 847.304652][ T6997] ? blkdev_bszset+0x240/0x240 [ 847.309254][ T6997] ? ioctl_has_perm+0x3df/0x560 [ 847.313940][ T6997] ? has_cap_mac_admin+0xb0/0xb0 [ 847.318714][ T6997] ? kmem_cache_free+0x11a/0x2e0 [ 847.323487][ T6997] ? putname+0x10b/0x160 [ 847.327565][ T6997] ? selinux_file_ioctl+0x3c9/0x530 [ 847.332603][ T6997] ? lo_release+0x200/0x200 [ 847.336943][ T6997] blkdev_ioctl+0x2e9/0x620 [ 847.341452][ T6997] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 847.346747][ T6997] ? __fget_files+0x310/0x370 [ 847.351262][ T6997] block_ioctl+0xb0/0xf0 [ 847.355343][ T6997] ? blkdev_iopoll+0x100/0x100 [ 847.359938][ T6997] __se_sys_ioctl+0x115/0x190 [ 847.364455][ T6997] __x64_sys_ioctl+0x7b/0x90 [ 847.368882][ T6997] do_syscall_64+0x44/0xd0 [ 847.373136][ T6997] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 847.378867][ T6997] RIP: 0033:0x7fe9fd6cee97 [ 847.383123][ T6997] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.402553][ T6997] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.410798][ T6997] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 847.418609][ T6997] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 847.426418][ T6997] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 847.434230][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.442040][ T6997] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 17:24:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 31) [ 847.449856][ T6997] [ 847.460126][ T6996] loop1: detected capacity change from 0 to 16 [ 847.460742][ T6997] erofs: (device loop5): mounted with root inode @ nid 36. [ 847.467546][ T1762] usb 4-1: USB disconnect, device number 85 [ 847.480425][ T3441] usb 5-1: USB disconnect, device number 39 [ 847.481957][ T6996] erofs: (device loop1): mounted with root inode @ nid 36. [ 847.590655][ T7001] FAULT_INJECTION: forcing a failure. [ 847.590655][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 847.627221][ T7001] CPU: 0 PID: 7001 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 847.637228][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 847.647114][ T7001] Call Trace: [ 847.650352][ T7001] [ 847.653125][ T7001] dump_stack_lvl+0x151/0x1b7 [ 847.657641][ T7001] ? bfq_pos_tree_add_move+0x43e/0x43e [ 847.663410][ T7001] dump_stack+0x15/0x17 [ 847.667358][ T7001] should_fail+0x3c0/0x510 [ 847.671615][ T7001] __should_failslab+0x9f/0xe0 [ 847.676213][ T7001] should_failslab+0x9/0x20 [ 847.680553][ T7001] kmem_cache_alloc+0x4f/0x2f0 [ 847.685151][ T7001] ? apply_wqattrs_prepare+0x7fb/0x1290 [ 847.690536][ T7001] apply_wqattrs_prepare+0x7fb/0x1290 [ 847.695741][ T7001] ? mutex_lock+0xb6/0x130 [ 847.700001][ T7001] apply_workqueue_attrs+0x149/0x720 [ 847.705117][ T7001] ? alloc_workqueue_attrs+0xc0/0xc0 [ 847.710237][ T7001] ? ptr_to_hashval+0x60/0x60 [ 847.714754][ T7001] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 847.721004][ T7001] ? preempt_count_add+0x90/0x1a0 [ 847.725857][ T7001] alloc_workqueue+0xcc1/0x11d0 [ 847.730549][ T7001] ? stack_trace_save+0x1f0/0x1f0 [ 847.735413][ T7001] ? loop_configure+0x7f6/0x1640 [ 847.740181][ T7001] ? apply_workqueue_attrs+0x720/0x720 [ 847.745566][ T7001] ? loop_set_status_from_info+0x5fd/0x7a0 [ 847.751203][ T7001] loop_configure+0x8c7/0x1640 [ 847.755808][ T7001] lo_ioctl+0x8cd/0x25e0 [ 847.759886][ T7001] ? is_bpf_text_address+0x1a2/0x1c0 [ 847.765004][ T7001] ? lo_release+0x200/0x200 [ 847.769433][ T7001] ? stack_trace_save+0x1f0/0x1f0 [ 847.774292][ T7001] ? __kernel_text_address+0x9a/0x110 [ 847.779501][ T7001] ? unwind_get_return_address+0x4c/0x90 [ 847.784981][ T7001] ? arch_stack_walk+0xf8/0x140 [ 847.789653][ T7001] ? avc_has_perm_noaudit+0x358/0x450 [ 847.794864][ T7001] ? memcpy+0x56/0x70 [ 847.798682][ T7001] ? memset+0x35/0x40 [ 847.802500][ T7001] ? fsnotify+0x5ad/0x2240 [ 847.806753][ T7001] ? __kasan_check_write+0x14/0x20 [ 847.811786][ T7001] ? _raw_spin_lock+0xa3/0x1b0 [ 847.816387][ T7001] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 847.821600][ T7001] ? _raw_spin_unlock+0x4d/0x70 [ 847.826279][ T7001] ? find_inode_fast+0x459/0x480 [ 847.831057][ T7001] ? __kasan_check_write+0x14/0x20 [ 847.836001][ T7001] ? mutex_unlock+0xa2/0x110 [ 847.840426][ T7001] ? __mutex_lock_slowpath+0x10/0x10 [ 847.845550][ T7001] ? is_bpf_text_address+0x1a2/0x1c0 [ 847.850668][ T7001] ? is_module_text_address+0xe1/0x140 [ 847.855971][ T7001] ? stack_trace_save+0x1f0/0x1f0 [ 847.860826][ T7001] ? __kernel_text_address+0x9a/0x110 [ 847.866033][ T7001] ? unwind_get_return_address+0x4c/0x90 [ 847.871499][ T7001] ? arch_stack_walk+0xf8/0x140 [ 847.876190][ T7001] ? stack_trace_save+0x12d/0x1f0 [ 847.881046][ T7001] ? stack_trace_snprint+0x100/0x100 [ 847.886164][ T7001] ? avc_has_extended_perms+0x718/0x1210 [ 847.891656][ T7001] ? memcpy+0x56/0x70 [ 847.895456][ T7001] ? avc_has_extended_perms+0xb9c/0x1210 [ 847.900923][ T7001] ? kasan_set_track+0x4c/0x70 [ 847.905519][ T7001] ? kasan_set_free_info+0x23/0x40 [ 847.910472][ T7001] ? ____kasan_slab_free+0x126/0x160 [ 847.915592][ T7001] ? __kasan_slab_free+0x11/0x20 [ 847.920362][ T7001] ? slab_free_freelist_hook+0xc9/0x1a0 [ 847.925830][ T7001] ? kmem_cache_free+0x11a/0x2e0 [ 847.930603][ T7001] ? putname+0x10b/0x160 [ 847.934684][ T7001] ? avc_flush+0x2b0/0x2b0 17:24:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:13 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x6, 0x49c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x67, 0x25, 0xc4, 0xff, 0x15a9, 0x2, 0xcf93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x2, 0x3, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x7f, 0x5, 0xf, 0x19, 0xec, 0x1e, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'c'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x1f}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x80, 0x20, 0x6, 0x1, 0x6}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x3f, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x86, 0x8, 0x4, [@generic={0x6e, 0x24, "b50f99b9d6bd8de0f92fbab421a7764fc9acfe15ef7196b428a77f16a9cf0c78c4f59e9009331cbd7a63cdce19b5e898bd2c9b40ad90675e31702c1eac7a886e6ba006aacdda0d2352b42354820299881375973db22fcae6e9913adf305c43b5f0594a644823e1a26f9cd93f"}]}}, {{0x9, 0x5, 0x8, 0x7d6628399521b65a, 0x400, 0x8, 0x40, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}, @generic={0x44, 0xa, "d998e7f3dab78516d6fa233e9d783dd3ff94f2f1be155ea7604caf99e49c1ae10f5f24adc9dd311c38718088d7bc705bd4b1a31e99d76a4dbd465615d4ab0794edf9"}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x5, 0x1c, [@generic={0x30, 0xd, "59448024682a6a885930a82233c1bf40821d46a56ff19f8a322d1d9e86a1c890c587925c85a5d5f5354ee2c21bc8"}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x8, 0x7f, 0x1, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x1, 0x7f, [@generic={0x1b, 0x4, "f00bad6afc341db9b92be7ee77926241642bc53eb269171c6d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0xff, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x465}]}}, {{0x9, 0x5, 0x0, 0x3, 0x450, 0xf9, 0x5b, 0x9, [@generic={0xa2, 0x312c46322a93531d, "0c0b70a315f82dab9c7ad37c02e88913e56dfec05ae59d34a8d2f86f37af8e2036d3e49d0a502d99a83fe07e19e765e2e3f1aa331f8a9d5fc47555299310aeca8f9c98dcb231ef78c83b5266bc50ba4fa33a7750e6c55898e9872ba367ebaca5ad4fa6e02206f15bbd0132916fcd4602ea4f80349e1bed52065cc2659accb92d11b59bfd2195d48fa9c4515f0cd7c35a936cf5f9bb14cb8d6188f3790f55ac57"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xff, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x484a}]}}, {{0x9, 0x5, 0xa, 0xf, 0x20, 0x4, 0x5, 0x8, [@generic={0x8c, 0x4, "5b1103a745c03d9aa6de33e720c185320cb98e7ab8ca1418c846db0c49886e2b811ec8ce08fd68291774cdf6754fff86db51bad81ca9ea936eafc6f4bdcfc7685d6b6edefcd212a20b67f8a7e124c474fe40a44a916068a61dfbc331d7266805fbfbed19fda8cff7e3433c18ed64305d70f7c13b187bc7c2707fee39aa5b2f3bfe11f4ac7c1f80c1e005"}]}}]}}, {{0x9, 0x4, 0x94, 0x81, 0x6, 0x81, 0x1b, 0x27, 0xfa, [@hid_hid={0x9, 0x21, 0x3f, 0x7, 0x1, {0x22, 0x38d}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0xa2, "a7c86ad745cc"}]}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x81, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xb2, 0x11, "98eff45c24433df85c75eb1843bb841d1751a7c749b8bfa3479cee2b7b3c6d6b097f4e4eef6f0db67ea0f2677287f76827c3890c995f0b83f6f0613736a46d592d7d07b1bef8baff04a3895e41b76eb6002d5e8a3bf18b6df5288574dcbf568085f2a18b0baed19ea1e0de40b31d4f2b7241d15b1b6f97d9697f09ba563aef4b6cf00d81c5efa0f7621f8f1e6e1f17bad8feab73bdd97538674121a3f7d47faade4134961da72ab93fc9b452fa7602ab"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x7, 0x40, 0xe1, [@generic={0x21, 0x1, "ad8eab1b18cbff20afa75543fd0fa65460dc9b1e2d76a4c35f78d414d9eeec"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x7f, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xc0, 0x5, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x19, 0x8, 0x3f}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x20, 0xff}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x20, 0x8, 0x2, 0x8, 0x6}, 0x124, &(0x7f00000009c0)={0x5, 0xf, 0x124, 0x5, [@generic={0x74, 0x10, 0x4, "d5a47784ab00829fefc29132a12db86ad18a4744d9a7acd4733bd1a1ce94291cfdc7e773b997dc6fdd9392ad89e90b3066dc1abbb84332402d6c67bacb4f69228b2012990d7c16ea28e3406b4e5a8dcc1c30a64248c66ea1c53d87de33c1fbbcd3e780bc3eb4d32e6d8e2158d9ddc04e65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x1}, @generic={0x8e, 0x10, 0xa, "ea3c50aca219519ded497828dc8edf90ba4671e48fd044001097decc3c0b280c8f23e8e008d94289d51d2f5e696e9f16655a460a691e0b931e466a26305112a3bc9a25a586d545cdc96ad579cbe1bbf9ee0175e44323dcf565736ef43944c7acf860f8fcb0da4399e7245df830c0e61c856a01a8aa18cb22ed99a978535037e5d10acc6492aaf0b8886c27"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc2, 0x39, 0x1, 0xbdc7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x96, 0x98, 0x8, 0xffe0}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x414}}, {0x74, &(0x7f0000000b80)=@string={0x74, 0x3, "9843a409ce5d192a1f4b845a2453029dc6769136242a0d148a8ebef29e279c6e67666416eecc258728639b7a758cae25c7b257584537b281d4c043f27e7d23fb3c9fa478f54a7f1aa09cf8b9cee465caecd6c86a54e3608aad381d6cf3e6015fb642473905bb8132383ba14a712f9be90fd0"}}, {0x5b, &(0x7f0000000c00)=@string={0x5b, 0x3, "3c913d0dcd66ed3260f2f2bd5a61a3adcd91df06cc354fcd64af206e54a88775857dd65481fd8ff2231aca218fd89c32ef9f1589d9f4f02c5e0e7c32ee5e037ce17ba00f11c9cc61f3a839676e921fd151ecf8214688f0ee14"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100a}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x41, {0x41, 0xc, "fc6214f72f84b74c85011ea4ea806c0da0b872e78aa7ab98b0b7585c9a7b0238d4b403c9583b63712cd3edc5f41b955a06d3f730ed3c5fe632ef139ef4ce0b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "c8f0573c"}, @global=@item_4={0x3, 0x1, 0x2, "dfcfa49a"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0x1ce}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x5e, "b8736b115af86ea4930afa2a6f0e6c5c263346e23c0701b2ad7d63f135ddb8260d570f72280530016dfd8076b0c7451ff0b874298150a6c507abc4dfaf3e4152e1893d7e8adffb1337c7aecee8df9d3310d3aa1f951cf6dc1f9041fb814f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000340)={0x20, 0x1, 0xc3, "9a7bd395b1be1577edda06162ca1b420855bf44083bafc8b624c34cbd1d945a47f32115e80f6fbd508cd2bab5659a90fa2806b5c2c2079b636c38900e20ee995d46eeaa93740e0e180dbd46278bdb1b51d2df10e4a80ce6b52cfed29471f808074a95deb344bc99da398dd6ffa93c144fbe6b0188419191194418b73d9b62ac126541fd78e62b063855b05ea0c157197489ffe420950f2a3555ee9de8cdc677aabf24c02e95cda1f71acc45c2ef0c9b2c46a7a991df2c464921719ffa402c61f4f788b"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb0}}) [ 847.938945][ T7001] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 847.943545][ T7001] ? blkdev_common_ioctl+0x570/0x1ec0 [ 847.948745][ T7001] ? kasan_quarantine_put+0x34/0x1b0 [ 847.953866][ T7001] ? blkdev_bszset+0x240/0x240 [ 847.958488][ T7001] ? ioctl_has_perm+0x3df/0x560 [ 847.963162][ T7001] ? has_cap_mac_admin+0xb0/0xb0 [ 847.967967][ T7001] ? kmem_cache_free+0x11a/0x2e0 [ 847.972700][ T7001] ? putname+0x10b/0x160 [ 847.976784][ T7001] ? selinux_file_ioctl+0x3c9/0x530 [ 847.981811][ T7001] ? lo_release+0x200/0x200 [ 847.986153][ T7001] blkdev_ioctl+0x2e9/0x620 [ 847.990495][ T7001] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 847.995789][ T7001] ? __fget_files+0x310/0x370 [ 848.000304][ T7001] block_ioctl+0xb0/0xf0 [ 848.004388][ T7001] ? blkdev_iopoll+0x100/0x100 [ 848.008980][ T7001] __se_sys_ioctl+0x115/0x190 [ 848.013494][ T7001] __x64_sys_ioctl+0x7b/0x90 [ 848.017920][ T7001] do_syscall_64+0x44/0xd0 [ 848.022172][ T7001] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 848.027902][ T7001] RIP: 0033:0x7fd49bff9e97 [ 848.032156][ T7001] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 848.051598][ T7001] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.059843][ T7001] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 848.067656][ T7001] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 848.075462][ T7001] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 848.083275][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 17:24:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:13 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 47) [ 848.091085][ T7001] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 848.098901][ T7001] [ 848.173077][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.207050][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.224218][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 848.239839][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.254522][ T1723] usb 1-1: config 0 descriptor?? [ 848.254834][ T7011] loop5: detected capacity change from 0 to 16 [ 848.272427][ T7011] FAULT_INJECTION: forcing a failure. [ 848.272427][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 848.316999][ T7011] CPU: 1 PID: 7011 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 848.326991][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 848.336889][ T7011] Call Trace: [ 848.340009][ T7011] [ 848.342787][ T7011] dump_stack_lvl+0x151/0x1b7 [ 848.347307][ T7011] ? bfq_pos_tree_add_move+0x43e/0x43e [ 848.352594][ T7011] dump_stack+0x15/0x17 [ 848.356590][ T7011] should_fail+0x3c0/0x510 [ 848.360842][ T7011] __should_failslab+0x9f/0xe0 [ 848.365443][ T7011] should_failslab+0x9/0x20 [ 848.369782][ T7011] kmem_cache_alloc+0x4f/0x2f0 [ 848.374400][ T7011] ? _raw_read_lock_irqsave+0xb5/0x110 [ 848.379674][ T7011] ? skb_clone+0x1df/0x3d0 [ 848.383927][ T7011] ? _raw_read_lock+0x40/0x40 [ 848.388441][ T7011] skb_clone+0x1df/0x3d0 [ 848.392520][ T7011] netlink_broadcast_filtered+0x638/0x11b0 [ 848.398164][ T7011] ? skb_put+0x10f/0x210 [ 848.402329][ T7011] netlink_broadcast+0x3a/0x50 [ 848.406938][ T7011] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 848.412659][ T7011] kobject_uevent_env+0x540/0x730 [ 848.417517][ T7011] kobject_uevent+0x1f/0x30 [ 848.421861][ T7011] loop_set_size+0x95/0xa0 [ 848.426109][ T7011] loop_configure+0x11c7/0x1640 [ 848.430804][ T7011] lo_ioctl+0x8cd/0x25e0 [ 848.434880][ T7011] ? is_bpf_text_address+0x1a2/0x1c0 [ 848.439998][ T7011] ? lo_release+0x200/0x200 [ 848.444342][ T7011] ? stack_trace_save+0x1f0/0x1f0 [ 848.449199][ T7011] ? __kernel_text_address+0x9a/0x110 [ 848.454405][ T7011] ? unwind_get_return_address+0x4c/0x90 [ 848.459884][ T7011] ? arch_stack_walk+0xf8/0x140 [ 848.464569][ T7011] ? avc_has_perm_noaudit+0x358/0x450 [ 848.469765][ T7011] ? memcpy+0x56/0x70 [ 848.473589][ T7011] ? memset+0x35/0x40 [ 848.477413][ T7011] ? fsnotify+0x5ad/0x2240 [ 848.481665][ T7011] ? __kasan_check_write+0x14/0x20 [ 848.486607][ T7011] ? _raw_spin_lock+0xa3/0x1b0 [ 848.491202][ T7011] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 848.496501][ T7011] ? _raw_spin_unlock+0x4d/0x70 [ 848.501187][ T7011] ? find_inode_fast+0x459/0x480 [ 848.505962][ T7011] ? __kasan_check_write+0x14/0x20 17:24:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 32) [ 848.506992][ T3441] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 848.510903][ T7011] ? mutex_unlock+0xa2/0x110 [ 848.522711][ T7011] ? __mutex_lock_slowpath+0x10/0x10 [ 848.527834][ T7011] ? is_bpf_text_address+0x1a2/0x1c0 [ 848.532954][ T7011] ? is_module_text_address+0xe1/0x140 [ 848.538247][ T7011] ? stack_trace_save+0x1f0/0x1f0 [ 848.543106][ T7011] ? __kernel_text_address+0x9a/0x110 [ 848.548313][ T7011] ? unwind_get_return_address+0x4c/0x90 [ 848.553787][ T7011] ? arch_stack_walk+0xf8/0x140 [ 848.558558][ T7011] ? stack_trace_save+0x12d/0x1f0 [ 848.563416][ T7011] ? stack_trace_snprint+0x100/0x100 [ 848.568537][ T7011] ? avc_has_extended_perms+0x718/0x1210 [ 848.574004][ T7011] ? memcpy+0x56/0x70 [ 848.577823][ T7011] ? avc_has_extended_perms+0xb9c/0x1210 [ 848.583288][ T7011] ? kasan_set_track+0x4c/0x70 [ 848.587888][ T7011] ? kasan_set_free_info+0x23/0x40 [ 848.592834][ T7011] ? ____kasan_slab_free+0x126/0x160 [ 848.597968][ T7011] ? __kasan_slab_free+0x11/0x20 [ 848.602730][ T7011] ? slab_free_freelist_hook+0xc9/0x1a0 [ 848.608115][ T7011] ? kmem_cache_free+0x11a/0x2e0 [ 848.612898][ T7011] ? putname+0x10b/0x160 [ 848.616973][ T7011] ? avc_flush+0x2b0/0x2b0 [ 848.621222][ T7011] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 848.625823][ T7011] ? blkdev_common_ioctl+0x570/0x1ec0 [ 848.631029][ T7011] ? kasan_quarantine_put+0x34/0x1b0 [ 848.636148][ T7011] ? blkdev_bszset+0x240/0x240 [ 848.640749][ T7011] ? ioctl_has_perm+0x3df/0x560 [ 848.645435][ T7011] ? has_cap_mac_admin+0xb0/0xb0 [ 848.650210][ T7011] ? kmem_cache_free+0x11a/0x2e0 [ 848.654982][ T7011] ? putname+0x10b/0x160 [ 848.659063][ T7011] ? selinux_file_ioctl+0x3c9/0x530 [ 848.664099][ T7011] ? lo_release+0x200/0x200 [ 848.668441][ T7011] blkdev_ioctl+0x2e9/0x620 [ 848.672784][ T7011] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 848.678765][ T7011] ? __fget_files+0x310/0x370 [ 848.683284][ T7011] block_ioctl+0xb0/0xf0 [ 848.687354][ T7011] ? blkdev_iopoll+0x100/0x100 [ 848.691956][ T7011] __se_sys_ioctl+0x115/0x190 [ 848.696478][ T7011] __x64_sys_ioctl+0x7b/0x90 [ 848.700895][ T7011] do_syscall_64+0x44/0xd0 [ 848.705240][ T7011] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 848.710966][ T7011] RIP: 0033:0x7fe9fd6cee97 [ 848.715220][ T7011] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 848.734661][ T7011] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.742906][ T7011] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 848.750805][ T7011] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 848.755940][ T7016] FAULT_INJECTION: forcing a failure. [ 848.755940][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 848.758611][ T7011] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 848.758627][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.758637][ T7011] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 848.758652][ T7011] [ 848.798559][ T7012] loop1: detected capacity change from 0 to 16 [ 848.799220][ T7016] CPU: 0 PID: 7016 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 848.814518][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 848.824407][ T7016] Call Trace: [ 848.827528][ T7016] [ 848.830308][ T7016] dump_stack_lvl+0x151/0x1b7 [ 848.834820][ T7016] ? bfq_pos_tree_add_move+0x43e/0x43e [ 848.840116][ T7016] dump_stack+0x15/0x17 [ 848.844113][ T7016] should_fail+0x3c0/0x510 [ 848.848447][ T7016] ? kobject_get_path+0xb8/0x1a0 [ 848.853228][ T7016] __should_failslab+0x9f/0xe0 [ 848.857826][ T7016] should_failslab+0x9/0x20 [ 848.862160][ T7016] __kmalloc+0x6d/0x350 [ 848.866156][ T7016] kobject_get_path+0xb8/0x1a0 [ 848.870757][ T7016] kobject_uevent_env+0x282/0x730 [ 848.875615][ T7016] disk_force_media_change+0x199/0x290 [ 848.881002][ T7016] ? bdev_check_media_change+0x4c0/0x4c0 [ 848.886465][ T7016] ? loop_set_status_from_info+0x5fd/0x7a0 [ 848.892109][ T7016] loop_configure+0x92f/0x1640 [ 848.896705][ T7016] lo_ioctl+0x8cd/0x25e0 [ 848.900871][ T7016] ? is_bpf_text_address+0x1a2/0x1c0 [ 848.905991][ T7016] ? lo_release+0x200/0x200 [ 848.910338][ T7016] ? stack_trace_save+0x1f0/0x1f0 [ 848.915190][ T7016] ? __kernel_text_address+0x9a/0x110 [ 848.920399][ T7016] ? unwind_get_return_address+0x4c/0x90 [ 848.925866][ T7016] ? arch_stack_walk+0xf8/0x140 [ 848.930557][ T7016] ? avc_has_perm_noaudit+0x358/0x450 [ 848.935760][ T7016] ? memcpy+0x56/0x70 [ 848.939580][ T7016] ? memset+0x35/0x40 [ 848.943399][ T7016] ? fsnotify+0x5ad/0x2240 [ 848.947653][ T7016] ? __kasan_check_write+0x14/0x20 [ 848.952598][ T7016] ? _raw_spin_lock+0xa3/0x1b0 [ 848.957199][ T7016] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 848.962408][ T7016] ? _raw_spin_unlock+0x4d/0x70 [ 848.967093][ T7016] ? find_inode_fast+0x459/0x480 [ 848.971867][ T7016] ? __kasan_check_write+0x14/0x20 [ 848.976815][ T7016] ? mutex_unlock+0xa2/0x110 [ 848.981240][ T7016] ? __mutex_lock_slowpath+0x10/0x10 [ 848.986363][ T7016] ? is_bpf_text_address+0x1a2/0x1c0 [ 848.991501][ T7016] ? is_module_text_address+0xe1/0x140 [ 848.996775][ T7016] ? stack_trace_save+0x1f0/0x1f0 [ 849.001638][ T7016] ? __kernel_text_address+0x9a/0x110 [ 849.006847][ T7016] ? unwind_get_return_address+0x4c/0x90 [ 849.012315][ T7016] ? arch_stack_walk+0xf8/0x140 [ 849.017001][ T7016] ? stack_trace_save+0x12d/0x1f0 [ 849.021952][ T7016] ? stack_trace_snprint+0x100/0x100 [ 849.027065][ T7016] ? avc_has_extended_perms+0x718/0x1210 [ 849.032538][ T7016] ? memcpy+0x56/0x70 [ 849.036441][ T7016] ? avc_has_extended_perms+0xb9c/0x1210 [ 849.041908][ T7016] ? kasan_set_track+0x4c/0x70 [ 849.046507][ T7016] ? kasan_set_free_info+0x23/0x40 [ 849.051456][ T7016] ? ____kasan_slab_free+0x126/0x160 [ 849.056579][ T7016] ? __kasan_slab_free+0x11/0x20 [ 849.061351][ T7016] ? slab_free_freelist_hook+0xc9/0x1a0 [ 849.066732][ T7016] ? kmem_cache_free+0x11a/0x2e0 [ 849.071506][ T7016] ? putname+0x10b/0x160 [ 849.075587][ T7016] ? avc_flush+0x2b0/0x2b0 [ 849.079837][ T7016] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 849.084444][ T7016] ? blkdev_common_ioctl+0x570/0x1ec0 [ 849.089647][ T7016] ? kasan_quarantine_put+0x34/0x1b0 [ 849.094776][ T7016] ? blkdev_bszset+0x240/0x240 [ 849.099366][ T7016] ? ioctl_has_perm+0x3df/0x560 [ 849.104060][ T7016] ? has_cap_mac_admin+0xb0/0xb0 [ 849.108826][ T7016] ? kmem_cache_free+0x11a/0x2e0 [ 849.113688][ T7016] ? putname+0x10b/0x160 [ 849.117768][ T7016] ? selinux_file_ioctl+0x3c9/0x530 [ 849.122802][ T7016] ? lo_release+0x200/0x200 [ 849.127142][ T7016] blkdev_ioctl+0x2e9/0x620 [ 849.131489][ T7016] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 849.136774][ T7016] ? __fget_files+0x310/0x370 [ 849.141291][ T7016] block_ioctl+0xb0/0xf0 [ 849.145368][ T7016] ? blkdev_iopoll+0x100/0x100 [ 849.149966][ T7016] __se_sys_ioctl+0x115/0x190 [ 849.155090][ T7016] __x64_sys_ioctl+0x7b/0x90 [ 849.159515][ T7016] do_syscall_64+0x44/0xd0 [ 849.163768][ T7016] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 849.169495][ T7016] RIP: 0033:0x7fd49bff9e97 [ 849.173749][ T7016] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.193190][ T7016] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.201438][ T7016] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 849.209342][ T7016] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 849.217146][ T7016] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 849.224955][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.232767][ T7016] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 849.240582][ T7016] [ 849.243917][ T7016] loop2: detected capacity change from 0 to 16 [ 849.247236][ T7011] erofs: (device loop5): mounted with root inode @ nid 36. [ 849.250237][ T1762] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 849.267570][ T7016] erofs: (device loop2): mounted with root inode @ nid 36. [ 849.270230][ T7012] erofs: (device loop1): mounted with root inode @ nid 36. [ 849.308203][ T1723] lg-g15 0003:046D:C225.0086: item fetching failed at offset 0/1 [ 849.315913][ T1723] lg-g15: probe of 0003:046D:C225.0086 failed with error -22 [ 849.357117][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.382990][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:24:14 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 48) 17:24:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 849.403554][ T3441] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 849.436981][ T3441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.448938][ T3441] usb 5-1: config 0 descriptor?? [ 849.487663][ T3441] usbhid 5-1:0.0: can't add hid device: -22 [ 849.493613][ T3441] usbhid: probe of 5-1:0.0 failed with error -22 [ 849.514519][ T7023] loop1: detected capacity change from 0 to 16 [ 849.521703][ T7023] erofs: (device loop1): mounted with root inode @ nid 36. [ 849.521733][ T7024] loop5: detected capacity change from 0 to 16 [ 849.534977][ T7024] FAULT_INJECTION: forcing a failure. [ 849.534977][ T7024] name failslab, interval 1, probability 0, space 0, times 0 [ 849.547540][ T7024] CPU: 0 PID: 7024 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 849.557518][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 849.567411][ T7024] Call Trace: [ 849.570532][ T7024] [ 849.573313][ T7024] dump_stack_lvl+0x151/0x1b7 [ 849.577826][ T7024] ? bfq_pos_tree_add_move+0x43e/0x43e [ 849.583126][ T7024] dump_stack+0x15/0x17 [ 849.587108][ T7024] should_fail+0x3c0/0x510 [ 849.591363][ T7024] __should_failslab+0x9f/0xe0 [ 849.595969][ T7024] should_failslab+0x9/0x20 [ 849.600306][ T7024] kmem_cache_alloc+0x4f/0x2f0 [ 849.604908][ T7024] ? _raw_read_lock_irqsave+0xb5/0x110 [ 849.610205][ T7024] ? skb_clone+0x1df/0x3d0 [ 849.614451][ T7024] ? _raw_read_lock+0x40/0x40 [ 849.618963][ T7024] skb_clone+0x1df/0x3d0 [ 849.623042][ T7024] netlink_broadcast_filtered+0x638/0x11b0 [ 849.628686][ T7024] ? skb_put+0x10f/0x210 [ 849.632786][ T7024] netlink_broadcast+0x3a/0x50 [ 849.637366][ T7024] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 849.643092][ T7024] kobject_uevent_env+0x540/0x730 [ 849.647956][ T7024] kobject_uevent+0x1f/0x30 [ 849.652291][ T7024] loop_set_size+0x95/0xa0 [ 849.656546][ T7024] loop_configure+0x11c7/0x1640 [ 849.661236][ T7024] lo_ioctl+0x8cd/0x25e0 [ 849.665315][ T7024] ? is_bpf_text_address+0x1a2/0x1c0 [ 849.670431][ T7024] ? lo_release+0x200/0x200 [ 849.674774][ T7024] ? stack_trace_save+0x1f0/0x1f0 [ 849.679629][ T7024] ? __kernel_text_address+0x9a/0x110 [ 849.684842][ T7024] ? unwind_get_return_address+0x4c/0x90 [ 849.691106][ T7024] ? arch_stack_walk+0xf8/0x140 [ 849.695786][ T7024] ? avc_has_perm_noaudit+0x358/0x450 [ 849.700997][ T7024] ? memcpy+0x56/0x70 [ 849.704820][ T7024] ? memset+0x35/0x40 [ 849.708632][ T7024] ? fsnotify+0x5ad/0x2240 [ 849.712886][ T7024] ? __kasan_check_write+0x14/0x20 [ 849.717839][ T7024] ? _raw_spin_lock+0xa3/0x1b0 [ 849.722434][ T7024] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 849.727642][ T7024] ? _raw_spin_unlock+0x4d/0x70 [ 849.732329][ T7024] ? find_inode_fast+0x459/0x480 [ 849.737194][ T7024] ? __kasan_check_write+0x14/0x20 [ 849.742135][ T7024] ? mutex_unlock+0xa2/0x110 [ 849.746562][ T7024] ? __mutex_lock_slowpath+0x10/0x10 [ 849.751692][ T7024] ? is_bpf_text_address+0x1a2/0x1c0 [ 849.756804][ T7024] ? is_module_text_address+0xe1/0x140 [ 849.762098][ T7024] ? stack_trace_save+0x1f0/0x1f0 [ 849.766958][ T7024] ? __kernel_text_address+0x9a/0x110 [ 849.772165][ T7024] ? unwind_get_return_address+0x4c/0x90 [ 849.777636][ T7024] ? arch_stack_walk+0xf8/0x140 [ 849.782324][ T7024] ? stack_trace_save+0x12d/0x1f0 [ 849.787182][ T7024] ? stack_trace_snprint+0x100/0x100 [ 849.792303][ T7024] ? avc_has_extended_perms+0x718/0x1210 [ 849.797768][ T7024] ? memcpy+0x56/0x70 [ 849.801596][ T7024] ? avc_has_extended_perms+0xb9c/0x1210 [ 849.807058][ T7024] ? kasan_set_track+0x4c/0x70 [ 849.811659][ T7024] ? kasan_set_free_info+0x23/0x40 [ 849.816602][ T7024] ? ____kasan_slab_free+0x126/0x160 [ 849.821723][ T7024] ? __kasan_slab_free+0x11/0x20 [ 849.826498][ T7024] ? slab_free_freelist_hook+0xc9/0x1a0 [ 849.831878][ T7024] ? kmem_cache_free+0x11a/0x2e0 [ 849.836655][ T7024] ? putname+0x10b/0x160 [ 849.840736][ T7024] ? avc_flush+0x2b0/0x2b0 [ 849.844984][ T7024] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 849.849592][ T7024] ? blkdev_common_ioctl+0x570/0x1ec0 [ 849.854801][ T7024] ? kasan_quarantine_put+0x34/0x1b0 [ 849.859913][ T7024] ? blkdev_bszset+0x240/0x240 [ 849.864517][ T7024] ? ioctl_has_perm+0x3df/0x560 [ 849.869200][ T7024] ? has_cap_mac_admin+0xb0/0xb0 [ 849.873973][ T7024] ? kmem_cache_free+0x11a/0x2e0 [ 849.878751][ T7024] ? putname+0x10b/0x160 [ 849.882833][ T7024] ? selinux_file_ioctl+0x3c9/0x530 [ 849.887865][ T7024] ? lo_release+0x200/0x200 [ 849.892200][ T7024] blkdev_ioctl+0x2e9/0x620 [ 849.896541][ T7024] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 849.901835][ T7024] ? __fget_files+0x310/0x370 [ 849.906348][ T7024] block_ioctl+0xb0/0xf0 [ 849.910433][ T7024] ? blkdev_iopoll+0x100/0x100 [ 849.915029][ T7024] __se_sys_ioctl+0x115/0x190 [ 849.919629][ T7024] __x64_sys_ioctl+0x7b/0x90 [ 849.924057][ T7024] do_syscall_64+0x44/0xd0 [ 849.928311][ T7024] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 849.934036][ T7024] RIP: 0033:0x7fe9fd6cee97 [ 849.938298][ T7024] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.957730][ T7024] RSP: 002b:00007fe9fc420f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.965975][ T7024] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fe9fd6cee97 [ 849.973789][ T7024] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 849.981637][ T7024] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 849.989415][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.997222][ T7024] R13: 00007fe9fc420fdc R14: 00007fe9fc420fe0 R15: 0000000020000242 [ 850.005039][ T7024] [ 850.009343][ T7024] erofs: (device loop5): mounted with root inode @ nid 36. [ 850.107073][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.121861][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.131694][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 850.140774][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.150884][ T1762] usb 4-1: config 0 descriptor?? 17:24:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x2c, 0xf, {0xf, 0x1, "6fb0a2f98caf03f98bccb9f82c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "37cf55f598f94f2d00f05d22f25ced3bcf439e48"}}, &(0x7f0000000100)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xc, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x2, 0x7}, @generic={0x34, 0x10, 0x4, "0c4dd13cc5c9e3e491781a32a1653e069633dfdc97e2632424e8b7436fdabcdb778ae32446999219eacc8e79a75ffbc76e"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xa05, 0xf00, 0x39, [0xc0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x40, 0x5, "b9e65be2", "b54ab8c4"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x4, 0x1, 0x1f, 0x1, 0x8001}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x6, 0x34, "8970d2a420f2495e76a53f819ef534d43871acb5904a14994216fd2b8093caf32c2b9fd745a0592d6283956956e6999b1c3cf503"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1001, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "4fc9"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x19, 0x2, '\f0'}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0xff}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xc1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x41}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 33) 17:24:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:16 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 49) [ 850.514699][ T1723] usb 1-1: USB disconnect, device number 103 [ 850.582024][ T7036] loop5: detected capacity change from 0 to 16 [ 850.588818][ T7037] loop1: detected capacity change from 0 to 16 [ 850.597296][ T7037] erofs: (device loop1): mounted with root inode @ nid 36. [ 850.607261][ T7036] FAULT_INJECTION: forcing a failure. [ 850.607261][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.628691][ T1762] lg-g15 0003:046D:C225.0087: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 850.648125][ T7039] FAULT_INJECTION: forcing a failure. [ 850.648125][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 850.657865][ T7036] CPU: 1 PID: 7036 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 850.670625][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 850.680525][ T7036] Call Trace: [ 850.683645][ T7036] [ 850.686426][ T7036] dump_stack_lvl+0x151/0x1b7 [ 850.690933][ T7036] ? bfq_pos_tree_add_move+0x43e/0x43e [ 850.696228][ T7036] dump_stack+0x15/0x17 [ 850.700226][ T7036] should_fail+0x3c0/0x510 [ 850.704472][ T7036] should_fail_usercopy+0x1a/0x20 [ 850.709422][ T7036] strncpy_from_user+0x24/0x2b0 [ 850.714109][ T7036] getname_flags+0xf2/0x510 [ 850.718450][ T7036] __x64_sys_mkdirat+0x7c/0xa0 [ 850.723046][ T7036] do_syscall_64+0x44/0xd0 [ 850.727298][ T7036] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 850.733027][ T7036] RIP: 0033:0x7fe9fd6ce0c7 [ 850.737282][ T7036] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 850.756996][ T7036] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 850.765239][ T7036] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 850.773052][ T7036] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 850.780863][ T7036] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 850.788672][ T7036] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 850.796482][ T7036] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 850.804299][ T7036] [ 850.807613][ T7039] CPU: 0 PID: 7039 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 850.817585][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 850.827481][ T7039] Call Trace: [ 850.830606][ T7039] [ 850.833390][ T7039] dump_stack_lvl+0x151/0x1b7 [ 850.837897][ T7039] ? bfq_pos_tree_add_move+0x43e/0x43e [ 850.843283][ T7039] ? vsnprintf+0x1c02/0x1ce0 [ 850.847701][ T7039] dump_stack+0x15/0x17 [ 850.851694][ T7039] should_fail+0x3c0/0x510 [ 850.855947][ T7039] __should_failslab+0x9f/0xe0 [ 850.860549][ T7039] should_failslab+0x9/0x20 [ 850.864888][ T7039] kmem_cache_alloc+0x4f/0x2f0 [ 850.869486][ T7039] ? __alloc_skb+0xbc/0x550 [ 850.873836][ T7039] __alloc_skb+0xbc/0x550 [ 850.877993][ T7039] alloc_uevent_skb+0x7f/0x230 [ 850.882593][ T7039] kobject_uevent_net_broadcast+0x321/0x5a0 [ 850.888323][ T7039] kobject_uevent_env+0x540/0x730 [ 850.893183][ T7039] disk_force_media_change+0x199/0x290 [ 850.898476][ T7039] ? bdev_check_media_change+0x4c0/0x4c0 [ 850.903943][ T7039] ? loop_set_status_from_info+0x5fd/0x7a0 [ 850.909589][ T7039] loop_configure+0x92f/0x1640 [ 850.914190][ T7039] lo_ioctl+0x8cd/0x25e0 [ 850.918267][ T7039] ? is_bpf_text_address+0x1a2/0x1c0 [ 850.923386][ T7039] ? lo_release+0x200/0x200 [ 850.927730][ T7039] ? stack_trace_save+0x1f0/0x1f0 [ 850.932584][ T7039] ? __kernel_text_address+0x9a/0x110 [ 850.937795][ T7039] ? unwind_get_return_address+0x4c/0x90 [ 850.943263][ T7039] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 850.948729][ T7039] ? update_load_avg+0x415/0x8e0 [ 850.953503][ T7039] ? __kasan_check_write+0x14/0x20 [ 850.958448][ T7039] ? __switch_to+0x617/0x1170 [ 850.962966][ T7039] ? native_set_ldt+0x360/0x360 [ 850.967650][ T7039] ? compat_start_thread+0x20/0x20 [ 850.972599][ T7039] ? switch_mm_irqs_off+0x57f/0x860 [ 850.977639][ T7039] ? is_bpf_text_address+0x1a2/0x1c0 [ 850.982753][ T7039] ? is_module_text_address+0xe1/0x140 [ 850.988047][ T7039] ? stack_trace_save+0x1f0/0x1f0 [ 850.992997][ T7039] ? __kernel_text_address+0x9a/0x110 [ 850.998202][ T7039] ? unwind_get_return_address+0x4c/0x90 [ 851.003756][ T7039] ? arch_stack_walk+0xf8/0x140 [ 851.008446][ T7039] ? stack_trace_save+0x12d/0x1f0 [ 851.013306][ T7039] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 851.019296][ T7039] ? stack_trace_snprint+0x100/0x100 [ 851.024414][ T7039] ? avc_has_extended_perms+0x718/0x1210 [ 851.029882][ T7039] ? memcpy+0x56/0x70 [ 851.033700][ T7039] ? avc_has_extended_perms+0xb9c/0x1210 [ 851.039171][ T7039] ? kasan_set_track+0x4c/0x70 [ 851.043769][ T7039] ? kasan_set_free_info+0x23/0x40 [ 851.048716][ T7039] ? ____kasan_slab_free+0x126/0x160 [ 851.053835][ T7039] ? __kasan_slab_free+0x11/0x20 [ 851.058607][ T7039] ? slab_free_freelist_hook+0xc9/0x1a0 [ 851.063997][ T7039] ? kmem_cache_free+0x11a/0x2e0 [ 851.068763][ T7039] ? putname+0x10b/0x160 [ 851.072843][ T7039] ? avc_flush+0x2b0/0x2b0 [ 851.077100][ T7039] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 851.081701][ T7039] ? blkdev_common_ioctl+0x570/0x1ec0 [ 851.086905][ T7039] ? kasan_quarantine_put+0x34/0x1b0 [ 851.092037][ T7039] ? blkdev_bszset+0x240/0x240 [ 851.096627][ T7039] ? ioctl_has_perm+0x3df/0x560 [ 851.101318][ T7039] ? has_cap_mac_admin+0xb0/0xb0 [ 851.106086][ T7039] ? kmem_cache_free+0x11a/0x2e0 [ 851.110863][ T7039] ? putname+0x10b/0x160 [ 851.114939][ T7039] ? selinux_file_ioctl+0x3c9/0x530 [ 851.119972][ T7039] ? lo_release+0x200/0x200 [ 851.124314][ T7039] blkdev_ioctl+0x2e9/0x620 [ 851.128656][ T7039] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 851.133953][ T7039] ? __fget_files+0x310/0x370 [ 851.138460][ T7039] block_ioctl+0xb0/0xf0 [ 851.142539][ T7039] ? blkdev_iopoll+0x100/0x100 [ 851.147144][ T7039] __se_sys_ioctl+0x115/0x190 [ 851.151654][ T7039] __x64_sys_ioctl+0x7b/0x90 [ 851.156087][ T7039] do_syscall_64+0x44/0xd0 [ 851.160333][ T7039] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 851.166061][ T7039] RIP: 0033:0x7fd49bff9e97 [ 851.170340][ T7039] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 851.189757][ T7039] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.198004][ T7039] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 851.205815][ T7039] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 851.213625][ T7039] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 851.221437][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.229245][ T7039] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 851.237066][ T7039] [ 851.244247][ T7003] udc-core: couldn't find an available UDC or it's busy [ 851.269766][ T7003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:24:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 851.417145][ T7039] loop2: detected capacity change from 0 to 16 [ 851.417754][ T3441] usb 4-1: USB disconnect, device number 86 [ 851.433782][ T3394] usb 5-1: USB disconnect, device number 40 [ 851.436565][ T7039] erofs: (device loop2): mounted with root inode @ nid 36. [ 851.457096][ T1723] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 851.503803][ T7046] loop1: detected capacity change from 0 to 16 [ 851.519674][ T7046] erofs: (device loop1): mounted with root inode @ nid 36. [ 851.837082][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.850520][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.860505][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 851.867005][ T3394] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 851.871293][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:24:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x6, 0x49c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x67, 0x25, 0xc4, 0xff, 0x15a9, 0x2, 0xcf93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x2, 0x3, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x7f, 0x5, 0xf, 0x19, 0xec, 0x1e, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'c'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x1f}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x80, 0x20, 0x6, 0x1, 0x6}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x3f, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x86, 0x8, 0x4, [@generic={0x6e, 0x24, "b50f99b9d6bd8de0f92fbab421a7764fc9acfe15ef7196b428a77f16a9cf0c78c4f59e9009331cbd7a63cdce19b5e898bd2c9b40ad90675e31702c1eac7a886e6ba006aacdda0d2352b42354820299881375973db22fcae6e9913adf305c43b5f0594a644823e1a26f9cd93f"}]}}, {{0x9, 0x5, 0x8, 0x7d6628399521b65a, 0x400, 0x8, 0x40, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}, @generic={0x44, 0xa, "d998e7f3dab78516d6fa233e9d783dd3ff94f2f1be155ea7604caf99e49c1ae10f5f24adc9dd311c38718088d7bc705bd4b1a31e99d76a4dbd465615d4ab0794edf9"}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x5, 0x1c, [@generic={0x30, 0xd, "59448024682a6a885930a82233c1bf40821d46a56ff19f8a322d1d9e86a1c890c587925c85a5d5f5354ee2c21bc8"}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x8, 0x7f, 0x1, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x1, 0x7f, [@generic={0x1b, 0x4, "f00bad6afc341db9b92be7ee77926241642bc53eb269171c6d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0xff, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x465}]}}, {{0x9, 0x5, 0x0, 0x3, 0x450, 0xf9, 0x5b, 0x9, [@generic={0xa2, 0x312c46322a93531d, "0c0b70a315f82dab9c7ad37c02e88913e56dfec05ae59d34a8d2f86f37af8e2036d3e49d0a502d99a83fe07e19e765e2e3f1aa331f8a9d5fc47555299310aeca8f9c98dcb231ef78c83b5266bc50ba4fa33a7750e6c55898e9872ba367ebaca5ad4fa6e02206f15bbd0132916fcd4602ea4f80349e1bed52065cc2659accb92d11b59bfd2195d48fa9c4515f0cd7c35a936cf5f9bb14cb8d6188f3790f55ac57"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xff, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x484a}]}}, {{0x9, 0x5, 0xa, 0xf, 0x20, 0x4, 0x5, 0x8, [@generic={0x8c, 0x4, "5b1103a745c03d9aa6de33e720c185320cb98e7ab8ca1418c846db0c49886e2b811ec8ce08fd68291774cdf6754fff86db51bad81ca9ea936eafc6f4bdcfc7685d6b6edefcd212a20b67f8a7e124c474fe40a44a916068a61dfbc331d7266805fbfbed19fda8cff7e3433c18ed64305d70f7c13b187bc7c2707fee39aa5b2f3bfe11f4ac7c1f80c1e005"}]}}]}}, {{0x9, 0x4, 0x94, 0x81, 0x6, 0x81, 0x1b, 0x27, 0xfa, [@hid_hid={0x9, 0x21, 0x3f, 0x7, 0x1, {0x22, 0x38d}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0xa2, "a7c86ad745cc"}]}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x81, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xb2, 0x11, "98eff45c24433df85c75eb1843bb841d1751a7c749b8bfa3479cee2b7b3c6d6b097f4e4eef6f0db67ea0f2677287f76827c3890c995f0b83f6f0613736a46d592d7d07b1bef8baff04a3895e41b76eb6002d5e8a3bf18b6df5288574dcbf568085f2a18b0baed19ea1e0de40b31d4f2b7241d15b1b6f97d9697f09ba563aef4b6cf00d81c5efa0f7621f8f1e6e1f17bad8feab73bdd97538674121a3f7d47faade4134961da72ab93fc9b452fa7602ab"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x7, 0x40, 0xe1, [@generic={0x21, 0x1, "ad8eab1b18cbff20afa75543fd0fa65460dc9b1e2d76a4c35f78d414d9eeec"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x7f, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xc0, 0x5, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x19, 0x8, 0x3f}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x20, 0xff}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x20, 0x8, 0x2, 0x8, 0x6}, 0x124, &(0x7f00000009c0)={0x5, 0xf, 0x124, 0x5, [@generic={0x74, 0x10, 0x4, "d5a47784ab00829fefc29132a12db86ad18a4744d9a7acd4733bd1a1ce94291cfdc7e773b997dc6fdd9392ad89e90b3066dc1abbb84332402d6c67bacb4f69228b2012990d7c16ea28e3406b4e5a8dcc1c30a64248c66ea1c53d87de33c1fbbcd3e780bc3eb4d32e6d8e2158d9ddc04e65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x1}, @generic={0x8e, 0x10, 0xa, "ea3c50aca219519ded497828dc8edf90ba4671e48fd044001097decc3c0b280c8f23e8e008d94289d51d2f5e696e9f16655a460a691e0b931e466a26305112a3bc9a25a586d545cdc96ad579cbe1bbf9ee0175e44323dcf565736ef43944c7acf860f8fcb0da4399e7245df830c0e61c856a01a8aa18cb22ed99a978535037e5d10acc6492aaf0b8886c27"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc2, 0x39, 0x1, 0xbdc7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x96, 0x98, 0x8, 0xffe0}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x414}}, {0x74, &(0x7f0000000b80)=@string={0x74, 0x3, "9843a409ce5d192a1f4b845a2453029dc6769136242a0d148a8ebef29e279c6e67666416eecc258728639b7a758cae25c7b257584537b281d4c043f27e7d23fb3c9fa478f54a7f1aa09cf8b9cee465caecd6c86a54e3608aad381d6cf3e6015fb642473905bb8132383ba14a712f9be90fd0"}}, {0x5b, &(0x7f0000000c00)=@string={0x5b, 0x3, "3c913d0dcd66ed3260f2f2bd5a61a3adcd91df06cc354fcd64af206e54a88775857dd65481fd8ff2231aca218fd89c32ef9f1589d9f4f02c5e0e7c32ee5e037ce17ba00f11c9cc61f3a839676e921fd151ecf8214688f0ee14"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100a}}]}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x41, {0x41, 0xc, "fc6214f72f84b74c85011ea4ea806c0da0b872e78aa7ab98b0b7585c9a7b0238d4b403c9583b63712cd3edc5f41b955a06d3f730ed3c5fe632ef139ef4ce0b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "c8f0573c"}, @global=@item_4={0x3, 0x1, 0x2, "dfcfa49a"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0x1ce}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x5e, "b8736b115af86ea4930afa2a6f0e6c5c263346e23c0701b2ad7d63f135ddb8260d570f72280530016dfd8076b0c7451ff0b874298150a6c507abc4dfaf3e4152e1893d7e8adffb1337c7aecee8df9d3310d3aa1f951cf6dc1f9041fb814f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000340)={0x20, 0x1, 0xc3, "9a7bd395b1be1577edda06162ca1b420855bf44083bafc8b624c34cbd1d945a47f32115e80f6fbd508cd2bab5659a90fa2806b5c2c2079b636c38900e20ee995d46eeaa93740e0e180dbd46278bdb1b51d2df10e4a80ce6b52cfed29471f808074a95deb344bc99da398dd6ffa93c144fbe6b0188419191194418b73d9b62ac126541fd78e62b063855b05ea0c157197489ffe420950f2a3555ee9de8cdc677aabf24c02e95cda1f71acc45c2ef0c9b2c46a7a991df2c464921719ffa402c61f4f788b"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb0}}) (rerun: 32) 17:24:17 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 50) 17:24:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 34) [ 851.885438][ T1723] usb 1-1: config 0 descriptor?? [ 851.981980][ T7053] loop5: detected capacity change from 0 to 16 [ 851.998811][ T7053] FAULT_INJECTION: forcing a failure. [ 851.998811][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 852.030947][ T7053] CPU: 0 PID: 7053 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 852.033707][ T7055] FAULT_INJECTION: forcing a failure. [ 852.033707][ T7055] name failslab, interval 1, probability 0, space 0, times 0 [ 852.040940][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 852.040959][ T7053] Call Trace: [ 852.040965][ T7053] [ 852.040973][ T7053] dump_stack_lvl+0x151/0x1b7 [ 852.040998][ T7053] ? bfq_pos_tree_add_move+0x43e/0x43e [ 852.041014][ T7053] ? filename_parentat+0x324/0x6b0 [ 852.083914][ T7053] dump_stack+0x15/0x17 [ 852.087893][ T7053] should_fail+0x3c0/0x510 [ 852.092148][ T7053] __should_failslab+0x9f/0xe0 [ 852.096745][ T7053] should_failslab+0x9/0x20 [ 852.101097][ T7053] kmem_cache_alloc+0x4f/0x2f0 [ 852.105692][ T7053] ? __d_alloc+0x2d/0x6b0 [ 852.109853][ T7053] __d_alloc+0x2d/0x6b0 [ 852.113845][ T7053] d_alloc+0x4b/0x1d0 [ 852.117669][ T7053] __lookup_hash+0xe5/0x290 [ 852.122007][ T7053] filename_create+0x276/0x4f0 [ 852.126604][ T7053] ? kern_path_create+0x1b0/0x1b0 [ 852.131568][ T7053] do_mkdirat+0xc2/0x420 [ 852.135631][ T7053] ? vfs_mkdir+0x580/0x580 [ 852.139882][ T7053] ? getname_flags+0x1fb/0x510 [ 852.144483][ T7053] __x64_sys_mkdirat+0x89/0xa0 [ 852.149084][ T7053] do_syscall_64+0x44/0xd0 [ 852.153336][ T7053] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 852.159063][ T7053] RIP: 0033:0x7fe9fd6ce0c7 [ 852.163321][ T7053] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 852.182761][ T7053] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 852.191006][ T7053] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 852.198816][ T7053] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 852.206630][ T7053] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 852.214437][ T7053] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 852.222253][ T7053] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 852.230065][ T7053] [ 852.232924][ T7055] CPU: 1 PID: 7055 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 852.242994][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 852.252892][ T7055] Call Trace: [ 852.256012][ T7055] [ 852.258787][ T7055] dump_stack_lvl+0x151/0x1b7 [ 852.263474][ T7055] ? bfq_pos_tree_add_move+0x43e/0x43e [ 852.268769][ T7055] dump_stack+0x15/0x17 [ 852.272759][ T7055] should_fail+0x3c0/0x510 [ 852.277012][ T7055] ? alloc_uevent_skb+0x7f/0x230 [ 852.281786][ T7055] __should_failslab+0x9f/0xe0 [ 852.286386][ T7055] should_failslab+0x9/0x20 [ 852.290728][ T7055] __kmalloc_track_caller+0x6c/0x350 [ 852.295849][ T7055] ? kmem_cache_alloc+0x1c1/0x2f0 [ 852.300708][ T7055] ? __alloc_skb+0xbc/0x550 [ 852.305046][ T7055] ? alloc_uevent_skb+0x7f/0x230 [ 852.309821][ T7055] __alloc_skb+0x10e/0x550 [ 852.314074][ T7055] alloc_uevent_skb+0x7f/0x230 [ 852.318676][ T7055] kobject_uevent_net_broadcast+0x321/0x5a0 [ 852.324416][ T7055] kobject_uevent_env+0x540/0x730 [ 852.329265][ T7055] disk_force_media_change+0x199/0x290 [ 852.334556][ T7055] ? bdev_check_media_change+0x4c0/0x4c0 [ 852.340031][ T7055] ? loop_set_status_from_info+0x5fd/0x7a0 [ 852.345681][ T7055] loop_configure+0x92f/0x1640 [ 852.350359][ T7055] lo_ioctl+0x8cd/0x25e0 [ 852.354435][ T7055] ? is_bpf_text_address+0x1a2/0x1c0 [ 852.359552][ T7055] ? lo_release+0x200/0x200 [ 852.363893][ T7055] ? stack_trace_save+0x1f0/0x1f0 [ 852.368758][ T7055] ? __kernel_text_address+0x9a/0x110 [ 852.374047][ T7055] ? unwind_get_return_address+0x4c/0x90 [ 852.379517][ T7055] ? arch_stack_walk+0xf8/0x140 [ 852.384208][ T7055] ? avc_has_perm_noaudit+0x358/0x450 [ 852.389411][ T7055] ? memcpy+0x56/0x70 [ 852.393233][ T7055] ? memset+0x35/0x40 [ 852.397049][ T7055] ? fsnotify+0x5ad/0x2240 [ 852.401309][ T7055] ? __kasan_check_write+0x14/0x20 [ 852.406248][ T7055] ? _raw_spin_lock+0xa3/0x1b0 [ 852.410848][ T7055] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 852.416082][ T7055] ? _raw_spin_unlock+0x4d/0x70 [ 852.420760][ T7055] ? find_inode_fast+0x459/0x480 [ 852.425522][ T7055] ? __kasan_check_write+0x14/0x20 [ 852.430462][ T7055] ? mutex_unlock+0xa2/0x110 [ 852.434888][ T7055] ? __mutex_lock_slowpath+0x10/0x10 [ 852.440012][ T7055] ? is_bpf_text_address+0x1a2/0x1c0 [ 852.445132][ T7055] ? is_module_text_address+0xe1/0x140 [ 852.450426][ T7055] ? stack_trace_save+0x1f0/0x1f0 [ 852.455288][ T7055] ? __kernel_text_address+0x9a/0x110 [ 852.460494][ T7055] ? unwind_get_return_address+0x4c/0x90 [ 852.465963][ T7055] ? arch_stack_walk+0xf8/0x140 [ 852.470661][ T7055] ? stack_trace_save+0x12d/0x1f0 [ 852.475513][ T7055] ? stack_trace_snprint+0x100/0x100 [ 852.480629][ T7055] ? avc_has_extended_perms+0x718/0x1210 [ 852.486099][ T7055] ? memcpy+0x56/0x70 [ 852.489918][ T7055] ? avc_has_extended_perms+0xb9c/0x1210 [ 852.495410][ T7055] ? kasan_set_track+0x4c/0x70 [ 852.499997][ T7055] ? kasan_set_free_info+0x23/0x40 [ 852.504933][ T7055] ? ____kasan_slab_free+0x126/0x160 [ 852.510055][ T7055] ? __kasan_slab_free+0x11/0x20 [ 852.514834][ T7055] ? slab_free_freelist_hook+0xc9/0x1a0 [ 852.520210][ T7055] ? kmem_cache_free+0x11a/0x2e0 [ 852.524983][ T7055] ? putname+0x10b/0x160 [ 852.529062][ T7055] ? avc_flush+0x2b0/0x2b0 [ 852.533315][ T7055] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 852.538004][ T7055] ? blkdev_common_ioctl+0x570/0x1ec0 [ 852.543208][ T7055] ? kasan_quarantine_put+0x34/0x1b0 [ 852.548331][ T7055] ? blkdev_bszset+0x240/0x240 [ 852.552933][ T7055] ? ioctl_has_perm+0x3df/0x560 [ 852.557615][ T7055] ? has_cap_mac_admin+0xb0/0xb0 [ 852.562398][ T7055] ? kmem_cache_free+0x11a/0x2e0 [ 852.567169][ T7055] ? putname+0x10b/0x160 [ 852.571244][ T7055] ? selinux_file_ioctl+0x3c9/0x530 [ 852.576279][ T7055] ? lo_release+0x200/0x200 [ 852.580617][ T7055] blkdev_ioctl+0x2e9/0x620 [ 852.584984][ T7055] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 852.590251][ T7055] ? __fget_files+0x310/0x370 [ 852.594765][ T7055] block_ioctl+0xb0/0xf0 [ 852.598844][ T7055] ? blkdev_iopoll+0x100/0x100 [ 852.603445][ T7055] __se_sys_ioctl+0x115/0x190 [ 852.607958][ T7055] __x64_sys_ioctl+0x7b/0x90 [ 852.612384][ T7055] do_syscall_64+0x44/0xd0 [ 852.616635][ T7055] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 852.622366][ T7055] RIP: 0033:0x7fd49bff9e97 [ 852.626618][ T7055] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 852.646147][ T7055] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.654392][ T7055] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 852.662203][ T7055] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 852.670019][ T7055] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 17:24:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 852.677826][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.685638][ T7055] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 852.693454][ T7055] [ 852.702907][ T7055] loop2: detected capacity change from 0 to 16 [ 852.724635][ T7055] erofs: (device loop2): mounted with root inode @ nid 36. [ 852.738010][ T1723] lg-g15 0003:046D:C225.0088: item fetching failed at offset 0/1 [ 852.748591][ T1723] lg-g15: probe of 0003:046D:C225.0088 failed with error -22 [ 852.767154][ T3409] usb 4-1: new high-speed USB device number 87 using dummy_hcd 17:24:18 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 51) [ 852.818856][ T7061] loop1: detected capacity change from 0 to 16 [ 852.830865][ T7061] erofs: (device loop1): mounted with root inode @ nid 36. [ 852.867060][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.883791][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.903113][ T7064] loop5: detected capacity change from 0 to 16 [ 852.905126][ T3394] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 852.915846][ T7064] FAULT_INJECTION: forcing a failure. [ 852.915846][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 852.932469][ T3394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.949837][ T3394] usb 5-1: config 0 descriptor?? [ 852.950920][ T7064] CPU: 1 PID: 7064 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 852.964582][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 852.974479][ T7064] Call Trace: [ 852.977607][ T7064] [ 852.980388][ T7064] dump_stack_lvl+0x151/0x1b7 [ 852.984892][ T7064] ? bfq_pos_tree_add_move+0x43e/0x43e [ 852.990362][ T7064] ? security_compute_sid+0x1ec7/0x2020 [ 852.995829][ T7064] dump_stack+0x15/0x17 [ 852.999820][ T7064] should_fail+0x3c0/0x510 [ 853.004080][ T7064] __should_failslab+0x9f/0xe0 [ 853.008673][ T7064] should_failslab+0x9/0x20 [ 853.013011][ T7064] kmem_cache_alloc+0x4f/0x2f0 [ 853.017611][ T7064] ? memcpy+0x56/0x70 [ 853.021453][ T7064] ? ext4_alloc_inode+0x21/0x620 [ 853.026203][ T7064] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 853.032278][ T7064] ext4_alloc_inode+0x21/0x620 [ 853.036879][ T7064] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 853.042956][ T7064] new_inode_pseudo+0x64/0x220 [ 853.047554][ T7064] new_inode+0x28/0x1c0 [ 853.051549][ T7064] __ext4_new_inode+0x29d/0x4780 [ 853.056322][ T7064] ? memset+0x35/0x40 [ 853.060225][ T7064] ? __dquot_initialize+0x241/0xe10 [ 853.065263][ T7064] ? ext4_mark_inode_used+0xc00/0xc00 [ 853.070468][ T7064] ? dquot_initialize+0x20/0x20 [ 853.075242][ T7064] ? may_create+0x647/0x8c0 [ 853.079583][ T7064] ext4_mkdir+0x41a/0xcf0 [ 853.083748][ T7064] ? ext4_symlink+0xfe0/0xfe0 [ 853.088260][ T7064] ? selinux_inode_mkdir+0x22/0x30 [ 853.093209][ T7064] ? security_inode_mkdir+0xf1/0x130 [ 853.098331][ T7064] vfs_mkdir+0x360/0x580 [ 853.102410][ T7064] do_mkdirat+0x1e8/0x420 [ 853.106575][ T7064] ? vfs_mkdir+0x580/0x580 [ 853.110827][ T7064] ? getname_flags+0x1fb/0x510 [ 853.115431][ T7064] __x64_sys_mkdirat+0x89/0xa0 [ 853.120027][ T7064] do_syscall_64+0x44/0xd0 [ 853.124281][ T7064] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 853.130010][ T7064] RIP: 0033:0x7fe9fd6ce0c7 [ 853.134261][ T7064] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 853.153706][ T7064] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 853.161949][ T7064] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 853.169761][ T7064] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 853.177569][ T7064] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 853.185385][ T7064] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 853.193197][ T7064] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 853.201013][ T7064] 17:24:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 35) [ 853.387092][ T3409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.406520][ T3409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.416298][ T3409] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 853.425459][ T3409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.434920][ T3409] usb 4-1: config 0 descriptor?? [ 853.539805][ T7068] FAULT_INJECTION: forcing a failure. [ 853.539805][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 853.566611][ T7068] CPU: 1 PID: 7068 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 853.576600][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 853.586497][ T7068] Call Trace: [ 853.589619][ T7068] [ 853.592399][ T7068] dump_stack_lvl+0x151/0x1b7 [ 853.596911][ T7068] ? bfq_pos_tree_add_move+0x43e/0x43e [ 853.602208][ T7068] dump_stack+0x15/0x17 [ 853.606198][ T7068] should_fail+0x3c0/0x510 [ 853.610452][ T7068] __should_failslab+0x9f/0xe0 [ 853.615051][ T7068] should_failslab+0x9/0x20 [ 853.619391][ T7068] kmem_cache_alloc+0x4f/0x2f0 [ 853.623993][ T7068] ? skb_clone+0x1df/0x3d0 [ 853.628239][ T7068] skb_clone+0x1df/0x3d0 [ 853.632324][ T7068] netlink_broadcast_filtered+0x638/0x11b0 [ 853.638515][ T7068] netlink_broadcast+0x3a/0x50 [ 853.643094][ T7068] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 853.648817][ T7068] kobject_uevent_env+0x540/0x730 [ 853.653671][ T7068] disk_force_media_change+0x199/0x290 [ 853.658967][ T7068] ? bdev_check_media_change+0x4c0/0x4c0 [ 853.664435][ T7068] ? loop_set_status_from_info+0x5fd/0x7a0 [ 853.670080][ T7068] loop_configure+0x92f/0x1640 [ 853.674679][ T7068] lo_ioctl+0x8cd/0x25e0 [ 853.678758][ T7068] ? is_bpf_text_address+0x1a2/0x1c0 [ 853.683875][ T7068] ? lo_release+0x200/0x200 [ 853.688217][ T7068] ? stack_trace_save+0x1f0/0x1f0 [ 853.693077][ T7068] ? __kernel_text_address+0x9a/0x110 [ 853.698284][ T7068] ? unwind_get_return_address+0x4c/0x90 [ 853.703758][ T7068] ? arch_stack_walk+0xf8/0x140 [ 853.708438][ T7068] ? avc_has_perm_noaudit+0x358/0x450 [ 853.713649][ T7068] ? memcpy+0x56/0x70 [ 853.717474][ T7068] ? memset+0x35/0x40 [ 853.721286][ T7068] ? fsnotify+0x5ad/0x2240 [ 853.725546][ T7068] ? __kasan_check_write+0x14/0x20 [ 853.730485][ T7068] ? _raw_spin_lock+0xa3/0x1b0 [ 853.735086][ T7068] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 853.740293][ T7068] ? _raw_spin_unlock+0x4d/0x70 [ 853.744982][ T7068] ? find_inode_fast+0x459/0x480 [ 853.749777][ T7068] ? __kasan_check_write+0x14/0x20 [ 853.754701][ T7068] ? mutex_unlock+0xa2/0x110 [ 853.759128][ T7068] ? __mutex_lock_slowpath+0x10/0x10 [ 853.764252][ T7068] ? is_bpf_text_address+0x1a2/0x1c0 [ 853.769370][ T7068] ? is_module_text_address+0xe1/0x140 [ 853.774664][ T7068] ? stack_trace_save+0x1f0/0x1f0 [ 853.779526][ T7068] ? __kernel_text_address+0x9a/0x110 [ 853.784730][ T7068] ? unwind_get_return_address+0x4c/0x90 [ 853.790201][ T7068] ? arch_stack_walk+0xf8/0x140 [ 853.794885][ T7068] ? stack_trace_save+0x12d/0x1f0 [ 853.799752][ T7068] ? stack_trace_snprint+0x100/0x100 [ 853.804868][ T7068] ? avc_has_extended_perms+0x718/0x1210 [ 853.810334][ T7068] ? memcpy+0x56/0x70 [ 853.814154][ T7068] ? avc_has_extended_perms+0xb9c/0x1210 [ 853.819881][ T7068] ? kasan_set_track+0x4c/0x70 [ 853.824482][ T7068] ? kasan_set_free_info+0x23/0x40 [ 853.829431][ T7068] ? ____kasan_slab_free+0x126/0x160 [ 853.834558][ T7068] ? __kasan_slab_free+0x11/0x20 [ 853.839356][ T7068] ? slab_free_freelist_hook+0xc9/0x1a0 [ 853.844707][ T7068] ? kmem_cache_free+0x11a/0x2e0 [ 853.849480][ T7068] ? putname+0x10b/0x160 [ 853.853559][ T7068] ? avc_flush+0x2b0/0x2b0 [ 853.857811][ T7068] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 853.862425][ T7068] ? blkdev_common_ioctl+0x570/0x1ec0 [ 853.867620][ T7068] ? kasan_quarantine_put+0x34/0x1b0 [ 853.872746][ T7068] ? blkdev_bszset+0x240/0x240 [ 853.877345][ T7068] ? ioctl_has_perm+0x3df/0x560 [ 853.882033][ T7068] ? has_cap_mac_admin+0xb0/0xb0 [ 853.886806][ T7068] ? kmem_cache_free+0x11a/0x2e0 [ 853.891579][ T7068] ? putname+0x10b/0x160 [ 853.895652][ T7068] ? selinux_file_ioctl+0x3c9/0x530 [ 853.900690][ T7068] ? lo_release+0x200/0x200 [ 853.905029][ T7068] blkdev_ioctl+0x2e9/0x620 [ 853.909375][ T7068] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 853.914660][ T7068] ? __fget_files+0x310/0x370 [ 853.919445][ T7068] block_ioctl+0xb0/0xf0 [ 853.923525][ T7068] ? blkdev_iopoll+0x100/0x100 [ 853.928117][ T7068] __se_sys_ioctl+0x115/0x190 [ 853.932631][ T7068] __x64_sys_ioctl+0x7b/0x90 [ 853.937058][ T7068] do_syscall_64+0x44/0xd0 [ 853.941306][ T7068] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 853.947035][ T7068] RIP: 0033:0x7fd49bff9e97 [ 853.951288][ T7068] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 853.970732][ T7068] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.978977][ T7068] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 853.986789][ T7068] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 853.994692][ T7068] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 854.002515][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.010310][ T7068] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 854.018128][ T7068] 17:24:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x2c, 0xf, {0xf, 0x1, "6fb0a2f98caf03f98bccb9f82c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "37cf55f598f94f2d00f05d22f25ced3bcf439e48"}}, &(0x7f0000000100)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xc, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x2, 0x7}, @generic={0x34, 0x10, 0x4, "0c4dd13cc5c9e3e491781a32a1653e069633dfdc97e2632424e8b7436fdabcdb778ae32446999219eacc8e79a75ffbc76e"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xa05, 0xf00, 0x39, [0xc0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x40, 0x5, "b9e65be2", "b54ab8c4"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x4, 0x1, 0x1f, 0x1, 0x8001}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x6, 0x34, "8970d2a420f2495e76a53f819ef534d43871acb5904a14994216fd2b8093caf32c2b9fd745a0592d6283956956e6999b1c3cf503"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1001, 0x40}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "4fc9"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfff}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x19, 0x2, '\f0'}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0xff}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xc1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x41}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:19 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 52) 17:24:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 854.043515][ T7068] loop2: detected capacity change from 0 to 16 [ 854.051004][ T3441] usb 1-1: USB disconnect, device number 104 [ 854.101218][ T3409] lg-g15 0003:046D:C225.0089: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 854.119611][ T7068] erofs: (device loop2): mounted with root inode @ nid 36. [ 854.122654][ T3394] usbhid 5-1:0.0: can't add hid device: -71 [ 854.130019][ T7078] loop5: detected capacity change from 0 to 16 [ 854.149502][ T7078] FAULT_INJECTION: forcing a failure. [ 854.149502][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 854.160113][ T3394] usbhid: probe of 5-1:0.0 failed with error -71 [ 854.163038][ T7079] loop1: detected capacity change from 0 to 16 [ 854.175949][ T3394] usb 5-1: USB disconnect, device number 41 [ 854.182219][ T7079] erofs: (device loop1): mounted with root inode @ nid 36. [ 854.204588][ T7078] CPU: 1 PID: 7078 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 854.214604][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.224504][ T7078] Call Trace: [ 854.227602][ T7078] [ 854.230371][ T7078] dump_stack_lvl+0x151/0x1b7 [ 854.234890][ T7078] ? bfq_pos_tree_add_move+0x43e/0x43e [ 854.240184][ T7078] ? security_compute_sid+0x1ec7/0x2020 [ 854.245566][ T7078] dump_stack+0x15/0x17 [ 854.249555][ T7078] should_fail+0x3c0/0x510 [ 854.253821][ T7078] __should_failslab+0x9f/0xe0 [ 854.258410][ T7078] should_failslab+0x9/0x20 [ 854.262749][ T7078] kmem_cache_alloc+0x4f/0x2f0 [ 854.267348][ T7078] ? memcpy+0x56/0x70 [ 854.270506][ T7071] udc-core: couldn't find an available UDC or it's busy [ 854.271164][ T7078] ? ext4_alloc_inode+0x21/0x620 [ 854.282713][ T7078] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 854.286996][ T7071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 854.288786][ T7078] ext4_alloc_inode+0x21/0x620 [ 854.300683][ T7078] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 854.306754][ T7078] new_inode_pseudo+0x64/0x220 [ 854.307414][ T3409] usb 4-1: USB disconnect, device number 87 [ 854.311353][ T7078] new_inode+0x28/0x1c0 [ 854.321076][ T7078] __ext4_new_inode+0x29d/0x4780 [ 854.325851][ T7078] ? memset+0x35/0x40 [ 854.329666][ T7078] ? __dquot_initialize+0x241/0xe10 [ 854.334702][ T7078] ? ext4_mark_inode_used+0xc00/0xc00 [ 854.339909][ T7078] ? dquot_initialize+0x20/0x20 [ 854.344597][ T7078] ? may_create+0x647/0x8c0 [ 854.348937][ T7078] ext4_mkdir+0x41a/0xcf0 [ 854.353104][ T7078] ? ext4_symlink+0xfe0/0xfe0 [ 854.357611][ T7078] ? selinux_inode_mkdir+0x22/0x30 [ 854.362559][ T7078] ? security_inode_mkdir+0xf1/0x130 [ 854.367683][ T7078] vfs_mkdir+0x360/0x580 [ 854.371760][ T7078] do_mkdirat+0x1e8/0x420 [ 854.375928][ T7078] ? vfs_mkdir+0x580/0x580 [ 854.380273][ T7078] ? getname_flags+0x1fb/0x510 [ 854.384868][ T7078] __x64_sys_mkdirat+0x89/0xa0 [ 854.389469][ T7078] do_syscall_64+0x44/0xd0 [ 854.393718][ T7078] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 854.399621][ T7078] RIP: 0033:0x7fe9fd6ce0c7 [ 854.403877][ T7078] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.423319][ T7078] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 854.431560][ T7078] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 854.439375][ T7078] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 854.447186][ T7078] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 854.454993][ T7078] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 854.462805][ T7078] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 854.470795][ T7078] 17:24:20 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 53) 17:24:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 36) [ 854.612976][ T7086] loop5: detected capacity change from 0 to 16 [ 854.619173][ T7086] FAULT_INJECTION: forcing a failure. [ 854.619173][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 854.631636][ T7086] CPU: 0 PID: 7086 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 854.641648][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.651539][ T7086] Call Trace: [ 854.654662][ T7086] [ 854.657439][ T7086] dump_stack_lvl+0x151/0x1b7 [ 854.662218][ T7086] ? bfq_pos_tree_add_move+0x43e/0x43e [ 854.667507][ T7086] ? write_boundary_block+0x150/0x150 [ 854.672717][ T7086] dump_stack+0x15/0x17 [ 854.676710][ T7086] should_fail+0x3c0/0x510 [ 854.680968][ T7086] __should_failslab+0x9f/0xe0 [ 854.685560][ T7086] should_failslab+0x9/0x20 [ 854.690038][ T7086] kmem_cache_alloc+0x4f/0x2f0 [ 854.694628][ T7086] ? jbd2__journal_start+0x14f/0x6f0 [ 854.699836][ T7086] jbd2__journal_start+0x14f/0x6f0 [ 854.704782][ T7086] ? __kasan_check_read+0x11/0x20 [ 854.709643][ T7086] __ext4_journal_start_sb+0xf2/0x2a0 [ 854.714852][ T7086] __ext4_new_inode+0x1443/0x4780 [ 854.719713][ T7086] ? ext4_mark_inode_used+0xc00/0xc00 [ 854.724916][ T7086] ? dquot_initialize+0x20/0x20 [ 854.729604][ T7086] ? may_create+0x647/0x8c0 [ 854.733943][ T7086] ext4_mkdir+0x41a/0xcf0 [ 854.738112][ T7086] ? ext4_symlink+0xfe0/0xfe0 [ 854.742622][ T7086] ? selinux_inode_mkdir+0x22/0x30 [ 854.747569][ T7086] ? security_inode_mkdir+0xf1/0x130 [ 854.752692][ T7086] vfs_mkdir+0x360/0x580 [ 854.756772][ T7086] do_mkdirat+0x1e8/0x420 [ 854.760944][ T7086] ? vfs_mkdir+0x580/0x580 [ 854.765189][ T7086] ? getname_flags+0x1fb/0x510 [ 854.769790][ T7086] __x64_sys_mkdirat+0x89/0xa0 [ 854.774388][ T7086] do_syscall_64+0x44/0xd0 [ 854.778647][ T7086] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 854.784376][ T7086] RIP: 0033:0x7fe9fd6ce0c7 [ 854.788625][ T7086] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.808070][ T7086] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 854.816311][ T7086] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 854.824124][ T7086] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 854.832458][ T7086] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 854.840266][ T7086] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 854.848084][ T7086] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 854.855891][ T7086] [ 854.870231][ T7086] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 854.918992][ T7088] FAULT_INJECTION: forcing a failure. [ 854.918992][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 854.931493][ T3441] usb 1-1: new high-speed USB device number 105 using dummy_hcd 17:24:20 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x6, 0x49c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x67, 0x25, 0xc4, 0xff, 0x15a9, 0x2, 0xcf93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x2, 0x3, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x7f, 0x5, 0xf, 0x19, 0xec, 0x1e, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'c'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x1f}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x80, 0x20, 0x6, 0x1, 0x6}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x3f, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x86, 0x8, 0x4, [@generic={0x6e, 0x24, "b50f99b9d6bd8de0f92fbab421a7764fc9acfe15ef7196b428a77f16a9cf0c78c4f59e9009331cbd7a63cdce19b5e898bd2c9b40ad90675e31702c1eac7a886e6ba006aacdda0d2352b42354820299881375973db22fcae6e9913adf305c43b5f0594a644823e1a26f9cd93f"}]}}, {{0x9, 0x5, 0x8, 0x7d6628399521b65a, 0x400, 0x8, 0x40, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}, @generic={0x44, 0xa, "d998e7f3dab78516d6fa233e9d783dd3ff94f2f1be155ea7604caf99e49c1ae10f5f24adc9dd311c38718088d7bc705bd4b1a31e99d76a4dbd465615d4ab0794edf9"}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x5, 0x1c, [@generic={0x30, 0xd, "59448024682a6a885930a82233c1bf40821d46a56ff19f8a322d1d9e86a1c890c587925c85a5d5f5354ee2c21bc8"}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x8, 0x7f, 0x1, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x1, 0x7f, [@generic={0x1b, 0x4, "f00bad6afc341db9b92be7ee77926241642bc53eb269171c6d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0xff, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x465}]}}, {{0x9, 0x5, 0x0, 0x3, 0x450, 0xf9, 0x5b, 0x9, [@generic={0xa2, 0x312c46322a93531d, "0c0b70a315f82dab9c7ad37c02e88913e56dfec05ae59d34a8d2f86f37af8e2036d3e49d0a502d99a83fe07e19e765e2e3f1aa331f8a9d5fc47555299310aeca8f9c98dcb231ef78c83b5266bc50ba4fa33a7750e6c55898e9872ba367ebaca5ad4fa6e02206f15bbd0132916fcd4602ea4f80349e1bed52065cc2659accb92d11b59bfd2195d48fa9c4515f0cd7c35a936cf5f9bb14cb8d6188f3790f55ac57"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xff, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x484a}]}}, {{0x9, 0x5, 0xa, 0xf, 0x20, 0x4, 0x5, 0x8, [@generic={0x8c, 0x4, "5b1103a745c03d9aa6de33e720c185320cb98e7ab8ca1418c846db0c49886e2b811ec8ce08fd68291774cdf6754fff86db51bad81ca9ea936eafc6f4bdcfc7685d6b6edefcd212a20b67f8a7e124c474fe40a44a916068a61dfbc331d7266805fbfbed19fda8cff7e3433c18ed64305d70f7c13b187bc7c2707fee39aa5b2f3bfe11f4ac7c1f80c1e005"}]}}]}}, {{0x9, 0x4, 0x94, 0x81, 0x6, 0x81, 0x1b, 0x27, 0xfa, [@hid_hid={0x9, 0x21, 0x3f, 0x7, 0x1, {0x22, 0x38d}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0xa2, "a7c86ad745cc"}]}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x81, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xb2, 0x11, "98eff45c24433df85c75eb1843bb841d1751a7c749b8bfa3479cee2b7b3c6d6b097f4e4eef6f0db67ea0f2677287f76827c3890c995f0b83f6f0613736a46d592d7d07b1bef8baff04a3895e41b76eb6002d5e8a3bf18b6df5288574dcbf568085f2a18b0baed19ea1e0de40b31d4f2b7241d15b1b6f97d9697f09ba563aef4b6cf00d81c5efa0f7621f8f1e6e1f17bad8feab73bdd97538674121a3f7d47faade4134961da72ab93fc9b452fa7602ab"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x7, 0x40, 0xe1, [@generic={0x21, 0x1, "ad8eab1b18cbff20afa75543fd0fa65460dc9b1e2d76a4c35f78d414d9eeec"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x7f, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xc0, 0x5, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x19, 0x8, 0x3f}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x20, 0xff}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x20, 0x8, 0x2, 0x8, 0x6}, 0x124, &(0x7f00000009c0)={0x5, 0xf, 0x124, 0x5, [@generic={0x74, 0x10, 0x4, "d5a47784ab00829fefc29132a12db86ad18a4744d9a7acd4733bd1a1ce94291cfdc7e773b997dc6fdd9392ad89e90b3066dc1abbb84332402d6c67bacb4f69228b2012990d7c16ea28e3406b4e5a8dcc1c30a64248c66ea1c53d87de33c1fbbcd3e780bc3eb4d32e6d8e2158d9ddc04e65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x1}, @generic={0x8e, 0x10, 0xa, "ea3c50aca219519ded497828dc8edf90ba4671e48fd044001097decc3c0b280c8f23e8e008d94289d51d2f5e696e9f16655a460a691e0b931e466a26305112a3bc9a25a586d545cdc96ad579cbe1bbf9ee0175e44323dcf565736ef43944c7acf860f8fcb0da4399e7245df830c0e61c856a01a8aa18cb22ed99a978535037e5d10acc6492aaf0b8886c27"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc2, 0x39, 0x1, 0xbdc7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x96, 0x98, 0x8, 0xffe0}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x414}}, {0x74, &(0x7f0000000b80)=@string={0x74, 0x3, "9843a409ce5d192a1f4b845a2453029dc6769136242a0d148a8ebef29e279c6e67666416eecc258728639b7a758cae25c7b257584537b281d4c043f27e7d23fb3c9fa478f54a7f1aa09cf8b9cee465caecd6c86a54e3608aad381d6cf3e6015fb642473905bb8132383ba14a712f9be90fd0"}}, {0x5b, &(0x7f0000000c00)=@string={0x5b, 0x3, "3c913d0dcd66ed3260f2f2bd5a61a3adcd91df06cc354fcd64af206e54a88775857dd65481fd8ff2231aca218fd89c32ef9f1589d9f4f02c5e0e7c32ee5e037ce17ba00f11c9cc61f3a839676e921fd151ecf8214688f0ee14"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100a}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x41, {0x41, 0xc, "fc6214f72f84b74c85011ea4ea806c0da0b872e78aa7ab98b0b7585c9a7b0238d4b403c9583b63712cd3edc5f41b955a06d3f730ed3c5fe632ef139ef4ce0b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "c8f0573c"}, @global=@item_4={0x3, 0x1, 0x2, "dfcfa49a"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0x1ce}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x5e, "b8736b115af86ea4930afa2a6f0e6c5c263346e23c0701b2ad7d63f135ddb8260d570f72280530016dfd8076b0c7451ff0b874298150a6c507abc4dfaf3e4152e1893d7e8adffb1337c7aecee8df9d3310d3aa1f951cf6dc1f9041fb814f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000340)={0x20, 0x1, 0xc3, "9a7bd395b1be1577edda06162ca1b420855bf44083bafc8b624c34cbd1d945a47f32115e80f6fbd508cd2bab5659a90fa2806b5c2c2079b636c38900e20ee995d46eeaa93740e0e180dbd46278bdb1b51d2df10e4a80ce6b52cfed29471f808074a95deb344bc99da398dd6ffa93c144fbe6b0188419191194418b73d9b62ac126541fd78e62b063855b05ea0c157197489ffe420950f2a3555ee9de8cdc677aabf24c02e95cda1f71acc45c2ef0c9b2c46a7a991df2c464921719ffa402c61f4f788b"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb0}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) syz_usb_connect(0x6, 0x49c, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x67, 0x25, 0xc4, 0xff, 0x15a9, 0x2, 0xcf93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x2, 0x3, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x7f, 0x5, 0xf, 0x19, 0xec, 0x1e, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'c'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xffff, 0x6}, {0x6, 0x24, 0x1a, 0x1f}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @acm={0x4, 0x24, 0x2, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x80, 0x20, 0x6, 0x1, 0x6}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x3f, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x86, 0x8, 0x4, [@generic={0x6e, 0x24, "b50f99b9d6bd8de0f92fbab421a7764fc9acfe15ef7196b428a77f16a9cf0c78c4f59e9009331cbd7a63cdce19b5e898bd2c9b40ad90675e31702c1eac7a886e6ba006aacdda0d2352b42354820299881375973db22fcae6e9913adf305c43b5f0594a644823e1a26f9cd93f"}]}}, {{0x9, 0x5, 0x8, 0x7d6628399521b65a, 0x400, 0x8, 0x40, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x7}, @generic={0x44, 0xa, "d998e7f3dab78516d6fa233e9d783dd3ff94f2f1be155ea7604caf99e49c1ae10f5f24adc9dd311c38718088d7bc705bd4b1a31e99d76a4dbd465615d4ab0794edf9"}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x5, 0x1c, [@generic={0x30, 0xd, "59448024682a6a885930a82233c1bf40821d46a56ff19f8a322d1d9e86a1c890c587925c85a5d5f5354ee2c21bc8"}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x8, 0x7f, 0x1, 0x7f}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x1, 0x7f, [@generic={0x1b, 0x4, "f00bad6afc341db9b92be7ee77926241642bc53eb269171c6d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0xff, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x465}]}}, {{0x9, 0x5, 0x0, 0x3, 0x450, 0xf9, 0x5b, 0x9, [@generic={0xa2, 0x312c46322a93531d, "0c0b70a315f82dab9c7ad37c02e88913e56dfec05ae59d34a8d2f86f37af8e2036d3e49d0a502d99a83fe07e19e765e2e3f1aa331f8a9d5fc47555299310aeca8f9c98dcb231ef78c83b5266bc50ba4fa33a7750e6c55898e9872ba367ebaca5ad4fa6e02206f15bbd0132916fcd4602ea4f80349e1bed52065cc2659accb92d11b59bfd2195d48fa9c4515f0cd7c35a936cf5f9bb14cb8d6188f3790f55ac57"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0xff, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x484a}]}}, {{0x9, 0x5, 0xa, 0xf, 0x20, 0x4, 0x5, 0x8, [@generic={0x8c, 0x4, "5b1103a745c03d9aa6de33e720c185320cb98e7ab8ca1418c846db0c49886e2b811ec8ce08fd68291774cdf6754fff86db51bad81ca9ea936eafc6f4bdcfc7685d6b6edefcd212a20b67f8a7e124c474fe40a44a916068a61dfbc331d7266805fbfbed19fda8cff7e3433c18ed64305d70f7c13b187bc7c2707fee39aa5b2f3bfe11f4ac7c1f80c1e005"}]}}]}}, {{0x9, 0x4, 0x94, 0x81, 0x6, 0x81, 0x1b, 0x27, 0xfa, [@hid_hid={0x9, 0x21, 0x3f, 0x7, 0x1, {0x22, 0x38d}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x6, 0xa2, "a7c86ad745cc"}]}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x81, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xb2, 0x11, "98eff45c24433df85c75eb1843bb841d1751a7c749b8bfa3479cee2b7b3c6d6b097f4e4eef6f0db67ea0f2677287f76827c3890c995f0b83f6f0613736a46d592d7d07b1bef8baff04a3895e41b76eb6002d5e8a3bf18b6df5288574dcbf568085f2a18b0baed19ea1e0de40b31d4f2b7241d15b1b6f97d9697f09ba563aef4b6cf00d81c5efa0f7621f8f1e6e1f17bad8feab73bdd97538674121a3f7d47faade4134961da72ab93fc9b452fa7602ab"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x7, 0x40, 0xe1, [@generic={0x21, 0x1, "ad8eab1b18cbff20afa75543fd0fa65460dc9b1e2d76a4c35f78d414d9eeec"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x7f, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xc0, 0x5, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x19, 0x8, 0x3f}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x20, 0xff}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x20, 0x8, 0x2, 0x8, 0x6}, 0x124, &(0x7f00000009c0)={0x5, 0xf, 0x124, 0x5, [@generic={0x74, 0x10, 0x4, "d5a47784ab00829fefc29132a12db86ad18a4744d9a7acd4733bd1a1ce94291cfdc7e773b997dc6fdd9392ad89e90b3066dc1abbb84332402d6c67bacb4f69228b2012990d7c16ea28e3406b4e5a8dcc1c30a64248c66ea1c53d87de33c1fbbcd3e780bc3eb4d32e6d8e2158d9ddc04e65"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x1}, @generic={0x8e, 0x10, 0xa, "ea3c50aca219519ded497828dc8edf90ba4671e48fd044001097decc3c0b280c8f23e8e008d94289d51d2f5e696e9f16655a460a691e0b931e466a26305112a3bc9a25a586d545cdc96ad579cbe1bbf9ee0175e44323dcf565736ef43944c7acf860f8fcb0da4399e7245df830c0e61c856a01a8aa18cb22ed99a978535037e5d10acc6492aaf0b8886c27"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc2, 0x39, 0x1, 0xbdc7, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x96, 0x98, 0x8, 0xffe0}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x414}}, {0x74, &(0x7f0000000b80)=@string={0x74, 0x3, "9843a409ce5d192a1f4b845a2453029dc6769136242a0d148a8ebef29e279c6e67666416eecc258728639b7a758cae25c7b257584537b281d4c043f27e7d23fb3c9fa478f54a7f1aa09cf8b9cee465caecd6c86a54e3608aad381d6cf3e6015fb642473905bb8132383ba14a712f9be90fd0"}}, {0x5b, &(0x7f0000000c00)=@string={0x5b, 0x3, "3c913d0dcd66ed3260f2f2bd5a61a3adcd91df06cc354fcd64af206e54a88775857dd65481fd8ff2231aca218fd89c32ef9f1589d9f4f02c5e0e7c32ee5e037ce17ba00f11c9cc61f3a839676e921fd151ecf8214688f0ee14"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100a}}]}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0x0, "041000", "2e26e93f"}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xa, 0x41, {0x41, 0xc, "fc6214f72f84b74c85011ea4ea806c0da0b872e78aa7ab98b0b7585c9a7b0238d4b403c9583b63712cd3edc5f41b955a06d3f730ed3c5fe632ef139ef4ce0b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "c8f0573c"}, @global=@item_4={0x3, 0x1, 0x2, "dfcfa49a"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0x1ce}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xf, 0x5e, "b8736b115af86ea4930afa2a6f0e6c5c263346e23c0701b2ad7d63f135ddb8260d570f72280530016dfd8076b0c7451ff0b874298150a6c507abc4dfaf3e4152e1893d7e8adffb1337c7aecee8df9d3310d3aa1f951cf6dc1f9041fb814f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x36}, &(0x7f0000000340)={0x20, 0x1, 0xc3, "9a7bd395b1be1577edda06162ca1b420855bf44083bafc8b624c34cbd1d945a47f32115e80f6fbd508cd2bab5659a90fa2806b5c2c2079b636c38900e20ee995d46eeaa93740e0e180dbd46278bdb1b51d2df10e4a80ce6b52cfed29471f808074a95deb344bc99da398dd6ffa93c144fbe6b0188419191194418b73d9b62ac126541fd78e62b063855b05ea0c157197489ffe420950f2a3555ee9de8cdc677aabf24c02e95cda1f71acc45c2ef0c9b2c46a7a991df2c464921719ffa402c61f4f788b"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0xb0}}) (async) 17:24:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 854.966740][ T7088] CPU: 0 PID: 7088 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 854.976815][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.986711][ T7088] Call Trace: [ 854.989834][ T7088] [ 854.992612][ T7088] dump_stack_lvl+0x151/0x1b7 [ 854.997125][ T7088] ? bfq_pos_tree_add_move+0x43e/0x43e [ 855.002423][ T7088] ? avc_denied+0x1b0/0x1b0 [ 855.006758][ T7088] ? __x64_sys_ioctl+0x7b/0x90 [ 855.011452][ T7088] dump_stack+0x15/0x17 [ 855.015438][ T7088] should_fail+0x3c0/0x510 [ 855.019692][ T7088] __should_failslab+0x9f/0xe0 [ 855.024289][ T7088] should_failslab+0x9/0x20 [ 855.028627][ T7088] kmem_cache_alloc+0x4f/0x2f0 [ 855.033229][ T7088] ? __kernfs_new_node+0xdb/0x6e0 [ 855.038097][ T7088] __kernfs_new_node+0xdb/0x6e0 [ 855.042784][ T7088] ? kernfs_new_node+0x170/0x170 [ 855.047555][ T7088] ? selinux_sb_statfs+0x1b4/0x250 [ 855.052493][ T7088] ? selinux_sb_show_options+0x600/0x600 [ 855.057962][ T7088] ? ____kasan_slab_free+0x131/0x160 [ 855.063084][ T7088] ? __kasan_slab_free+0x11/0x20 [ 855.067858][ T7088] ? shmem_statfs+0x221/0x2b0 [ 855.072371][ T7088] kernfs_create_dir_ns+0x9b/0x230 [ 855.077317][ T7088] internal_create_group+0x29d/0xf60 [ 855.082441][ T7088] ? get_super+0x1ee/0x210 [ 855.086692][ T7088] ? sysfs_create_group+0x30/0x30 [ 855.091555][ T7088] ? __kasan_check_write+0x14/0x20 [ 855.096500][ T7088] sysfs_create_group+0x1f/0x30 [ 855.101184][ T7088] loop_configure+0x1077/0x1640 [ 855.105877][ T7088] lo_ioctl+0x8cd/0x25e0 [ 855.109952][ T7088] ? is_bpf_text_address+0x1a2/0x1c0 [ 855.115071][ T7088] ? lo_release+0x200/0x200 [ 855.119432][ T7088] ? stack_trace_save+0x1f0/0x1f0 [ 855.124368][ T7088] ? __kernel_text_address+0x9a/0x110 [ 855.129568][ T7088] ? unwind_get_return_address+0x4c/0x90 [ 855.135035][ T7088] ? arch_stack_walk+0xf8/0x140 [ 855.139723][ T7088] ? avc_has_perm_noaudit+0x358/0x450 [ 855.144929][ T7088] ? memcpy+0x56/0x70 [ 855.148747][ T7088] ? memset+0x35/0x40 [ 855.152575][ T7088] ? fsnotify+0x5ad/0x2240 [ 855.156832][ T7088] ? __kasan_check_write+0x14/0x20 [ 855.161769][ T7088] ? _raw_spin_lock+0xa3/0x1b0 [ 855.166367][ T7088] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 855.171579][ T7088] ? _raw_spin_unlock+0x4d/0x70 [ 855.176264][ T7088] ? find_inode_fast+0x459/0x480 [ 855.181036][ T7088] ? __kasan_check_write+0x14/0x20 [ 855.185994][ T7088] ? mutex_unlock+0xa2/0x110 [ 855.190411][ T7088] ? __mutex_lock_slowpath+0x10/0x10 [ 855.195536][ T7088] ? is_bpf_text_address+0x1a2/0x1c0 [ 855.200652][ T7088] ? is_module_text_address+0xe1/0x140 [ 855.205947][ T7088] ? stack_trace_save+0x1f0/0x1f0 [ 855.210807][ T7088] ? __kernel_text_address+0x9a/0x110 [ 855.216015][ T7088] ? unwind_get_return_address+0x4c/0x90 [ 855.221483][ T7088] ? arch_stack_walk+0xf8/0x140 [ 855.226173][ T7088] ? stack_trace_save+0x12d/0x1f0 [ 855.231033][ T7088] ? stack_trace_snprint+0x100/0x100 [ 855.236147][ T7088] ? avc_has_extended_perms+0x718/0x1210 [ 855.241707][ T7088] ? memcpy+0x56/0x70 [ 855.245525][ T7088] ? avc_has_extended_perms+0xb9c/0x1210 [ 855.251020][ T7088] ? kasan_set_track+0x4c/0x70 [ 855.255594][ T7088] ? kasan_set_free_info+0x23/0x40 [ 855.260540][ T7088] ? ____kasan_slab_free+0x126/0x160 [ 855.265660][ T7088] ? __kasan_slab_free+0x11/0x20 [ 855.270433][ T7088] ? slab_free_freelist_hook+0xc9/0x1a0 [ 855.275813][ T7088] ? kmem_cache_free+0x11a/0x2e0 [ 855.280588][ T7088] ? putname+0x10b/0x160 [ 855.284668][ T7088] ? avc_flush+0x2b0/0x2b0 [ 855.288920][ T7088] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 855.293523][ T7088] ? blkdev_common_ioctl+0x570/0x1ec0 [ 855.298728][ T7088] ? kasan_quarantine_put+0x34/0x1b0 [ 855.303852][ T7088] ? blkdev_bszset+0x240/0x240 [ 855.308448][ T7088] ? ioctl_has_perm+0x3df/0x560 [ 855.313136][ T7088] ? has_cap_mac_admin+0xb0/0xb0 [ 855.317911][ T7088] ? kmem_cache_free+0x11a/0x2e0 [ 855.322685][ T7088] ? putname+0x10b/0x160 [ 855.326763][ T7088] ? selinux_file_ioctl+0x3c9/0x530 [ 855.331798][ T7088] ? lo_release+0x200/0x200 [ 855.336135][ T7088] blkdev_ioctl+0x2e9/0x620 [ 855.340477][ T7088] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 855.345769][ T7088] ? __fget_files+0x310/0x370 [ 855.350285][ T7088] block_ioctl+0xb0/0xf0 [ 855.354362][ T7088] ? blkdev_iopoll+0x100/0x100 [ 855.358964][ T7088] __se_sys_ioctl+0x115/0x190 [ 855.363476][ T7088] __x64_sys_ioctl+0x7b/0x90 [ 855.367905][ T7088] do_syscall_64+0x44/0xd0 [ 855.372155][ T7088] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 855.377885][ T7088] RIP: 0033:0x7fd49bff9e97 [ 855.382137][ T7088] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.401590][ T7088] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.409823][ T7088] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 17:24:20 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 54) [ 855.417633][ T7088] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 855.425448][ T7088] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 855.433261][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.441069][ T7088] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 855.448883][ T7088] [ 855.472198][ T7088] loop2: detected capacity change from 0 to 16 [ 855.479310][ T7088] erofs: (device loop2): mounted with root inode @ nid 36. [ 855.507316][ T7096] loop1: detected capacity change from 0 to 16 [ 855.515981][ T7096] erofs: (device loop1): mounted with root inode @ nid 36. [ 855.529981][ T7097] loop5: detected capacity change from 0 to 16 [ 855.539498][ T7097] FAULT_INJECTION: forcing a failure. [ 855.539498][ T7097] name failslab, interval 1, probability 0, space 0, times 0 [ 855.564065][ T7097] CPU: 1 PID: 7097 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 855.574055][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 855.583950][ T7097] Call Trace: [ 855.587071][ T7097] [ 855.589846][ T7097] dump_stack_lvl+0x151/0x1b7 [ 855.594362][ T7097] ? bfq_pos_tree_add_move+0x43e/0x43e [ 855.599655][ T7097] ? write_boundary_block+0x150/0x150 [ 855.604873][ T7097] dump_stack+0x15/0x17 [ 855.608857][ T7097] should_fail+0x3c0/0x510 [ 855.613111][ T7097] __should_failslab+0x9f/0xe0 [ 855.617711][ T7097] should_failslab+0x9/0x20 [ 855.622050][ T7097] kmem_cache_alloc+0x4f/0x2f0 [ 855.626648][ T7097] ? jbd2__journal_start+0x14f/0x6f0 [ 855.631788][ T7097] jbd2__journal_start+0x14f/0x6f0 [ 855.636723][ T7097] ? __kasan_check_read+0x11/0x20 [ 855.641581][ T7097] __ext4_journal_start_sb+0xf2/0x2a0 [ 855.646790][ T7097] __ext4_new_inode+0x1443/0x4780 [ 855.651652][ T7097] ? ext4_mark_inode_used+0xc00/0xc00 [ 855.656853][ T7097] ? dquot_initialize+0x20/0x20 [ 855.661546][ T7097] ? may_create+0x647/0x8c0 [ 855.665884][ T7097] ext4_mkdir+0x41a/0xcf0 [ 855.670055][ T7097] ? ext4_symlink+0xfe0/0xfe0 [ 855.674647][ T7097] ? selinux_inode_mkdir+0x22/0x30 [ 855.679595][ T7097] ? security_inode_mkdir+0xf1/0x130 [ 855.684718][ T7097] vfs_mkdir+0x360/0x580 [ 855.688794][ T7097] do_mkdirat+0x1e8/0x420 [ 855.692967][ T7097] ? vfs_mkdir+0x580/0x580 [ 855.697213][ T7097] ? getname_flags+0x1fb/0x510 [ 855.701817][ T7097] __x64_sys_mkdirat+0x89/0xa0 [ 855.706417][ T7097] do_syscall_64+0x44/0xd0 [ 855.710680][ T7097] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 855.716396][ T7097] RIP: 0033:0x7fe9fd6ce0c7 [ 855.720648][ T7097] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.740092][ T7097] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 855.748334][ T7097] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 855.756145][ T7097] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 855.763957][ T7097] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 855.771766][ T7097] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 855.779580][ T7097] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 855.787395][ T7097] [ 855.799659][ T3394] usb 5-1: new high-speed USB device number 42 using dummy_hcd 17:24:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 37) [ 855.957073][ T3408] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 855.972141][ T7097] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 856.007131][ T3441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.022412][ T3441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.032051][ T3441] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 856.040864][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.049272][ T3441] usb 1-1: config 0 descriptor?? [ 856.159623][ T7101] FAULT_INJECTION: forcing a failure. [ 856.159623][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 856.187016][ T7101] CPU: 1 PID: 7101 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 856.197011][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 856.206914][ T7101] Call Trace: [ 856.210029][ T7101] [ 856.212805][ T7101] dump_stack_lvl+0x151/0x1b7 [ 856.217316][ T7101] ? bfq_pos_tree_add_move+0x43e/0x43e [ 856.222616][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.227558][ T7101] dump_stack+0x15/0x17 [ 856.231550][ T7101] should_fail+0x3c0/0x510 [ 856.235806][ T7101] __should_failslab+0x9f/0xe0 [ 856.240403][ T7101] should_failslab+0x9/0x20 [ 856.244746][ T7101] kmem_cache_alloc+0x4f/0x2f0 [ 856.249341][ T7101] ? __kernfs_new_node+0xdb/0x6e0 [ 856.254206][ T7101] __kernfs_new_node+0xdb/0x6e0 [ 856.258980][ T7101] ? kernfs_new_node+0x170/0x170 [ 856.263749][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.268702][ T7101] ? down_write+0xdd/0x140 [ 856.272950][ T7101] ? down_read_killable+0x250/0x250 [ 856.277989][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.283019][ T7101] ? up_write+0x56/0x120 [ 856.287105][ T7101] kernfs_new_node+0x97/0x170 [ 856.291615][ T7101] __kernfs_create_file+0x4a/0x270 [ 856.296558][ T7101] sysfs_add_file_mode_ns+0x273/0x320 [ 856.301769][ T7101] internal_create_group+0x55e/0xf60 [ 856.306888][ T7101] ? get_super+0x1ee/0x210 [ 856.311140][ T7101] ? sysfs_create_group+0x30/0x30 [ 856.316001][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.320947][ T7101] sysfs_create_group+0x1f/0x30 [ 856.325638][ T7101] loop_configure+0x1077/0x1640 [ 856.330323][ T7101] lo_ioctl+0x8cd/0x25e0 [ 856.334403][ T7101] ? is_bpf_text_address+0x1a2/0x1c0 [ 856.339528][ T7101] ? lo_release+0x200/0x200 [ 856.343864][ T7101] ? stack_trace_save+0x1f0/0x1f0 [ 856.348722][ T7101] ? __kernel_text_address+0x9a/0x110 [ 856.353929][ T7101] ? unwind_get_return_address+0x4c/0x90 [ 856.359399][ T7101] ? arch_stack_walk+0xf8/0x140 [ 856.364087][ T7101] ? avc_has_perm_noaudit+0x358/0x450 [ 856.369297][ T7101] ? memcpy+0x56/0x70 [ 856.373111][ T7101] ? memset+0x35/0x40 [ 856.376930][ T7101] ? fsnotify+0x5ad/0x2240 [ 856.381187][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.386128][ T7101] ? _raw_spin_lock+0xa3/0x1b0 [ 856.390728][ T7101] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 856.395938][ T7101] ? _raw_spin_unlock+0x4d/0x70 [ 856.400654][ T7101] ? find_inode_fast+0x459/0x480 [ 856.405402][ T7101] ? __kasan_check_write+0x14/0x20 [ 856.410344][ T7101] ? mutex_unlock+0xa2/0x110 [ 856.414775][ T7101] ? __mutex_lock_slowpath+0x10/0x10 [ 856.419897][ T7101] ? is_bpf_text_address+0x1a2/0x1c0 [ 856.425014][ T7101] ? is_module_text_address+0xe1/0x140 [ 856.430308][ T7101] ? stack_trace_save+0x1f0/0x1f0 [ 856.435169][ T7101] ? __kernel_text_address+0x9a/0x110 [ 856.440378][ T7101] ? unwind_get_return_address+0x4c/0x90 [ 856.445843][ T7101] ? arch_stack_walk+0xf8/0x140 [ 856.450531][ T7101] ? stack_trace_save+0x12d/0x1f0 [ 856.455392][ T7101] ? stack_trace_snprint+0x100/0x100 [ 856.460511][ T7101] ? avc_has_extended_perms+0x718/0x1210 [ 856.465991][ T7101] ? memcpy+0x56/0x70 [ 856.469805][ T7101] ? avc_has_extended_perms+0xb9c/0x1210 [ 856.475269][ T7101] ? kasan_set_track+0x4c/0x70 [ 856.480043][ T7101] ? kasan_set_free_info+0x23/0x40 [ 856.484988][ T7101] ? ____kasan_slab_free+0x126/0x160 [ 856.490111][ T7101] ? __kasan_slab_free+0x11/0x20 [ 856.494881][ T7101] ? slab_free_freelist_hook+0xc9/0x1a0 [ 856.500266][ T7101] ? kmem_cache_free+0x11a/0x2e0 [ 856.505035][ T7101] ? putname+0x10b/0x160 [ 856.509115][ T7101] ? avc_flush+0x2b0/0x2b0 [ 856.513371][ T7101] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 856.517975][ T7101] ? blkdev_common_ioctl+0x570/0x1ec0 [ 856.523176][ T7101] ? kasan_quarantine_put+0x34/0x1b0 [ 856.528301][ T7101] ? blkdev_bszset+0x240/0x240 [ 856.532899][ T7101] ? ioctl_has_perm+0x3df/0x560 [ 856.537681][ T7101] ? has_cap_mac_admin+0xb0/0xb0 [ 856.542454][ T7101] ? kmem_cache_free+0x11a/0x2e0 [ 856.547229][ T7101] ? putname+0x10b/0x160 [ 856.551309][ T7101] ? selinux_file_ioctl+0x3c9/0x530 [ 856.556343][ T7101] ? lo_release+0x200/0x200 [ 856.560680][ T7101] blkdev_ioctl+0x2e9/0x620 [ 856.565022][ T7101] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 856.570402][ T7101] ? __fget_files+0x310/0x370 [ 856.574919][ T7101] block_ioctl+0xb0/0xf0 [ 856.579086][ T7101] ? blkdev_iopoll+0x100/0x100 [ 856.584728][ T7101] __se_sys_ioctl+0x115/0x190 [ 856.589237][ T7101] __x64_sys_ioctl+0x7b/0x90 [ 856.593671][ T7101] do_syscall_64+0x44/0xd0 [ 856.597921][ T7101] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 856.603647][ T7101] RIP: 0033:0x7fd49bff9e97 [ 856.607899][ T7101] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 856.627429][ T7101] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.635673][ T7101] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 856.643487][ T7101] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 856.651383][ T7101] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 17:24:22 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 55) [ 856.659195][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.667020][ T7101] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 856.674923][ T7101] [ 856.687310][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.687792][ T7101] loop2: detected capacity change from 0 to 16 17:24:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xcdb, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 856.706161][ T7101] erofs: (device loop2): mounted with root inode @ nid 36. [ 856.767386][ T3441] lg-g15 0003:046D:C225.008A: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 856.792082][ T3394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.801916][ T3394] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 856.810929][ T3394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.820049][ T3394] usb 5-1: config 0 descriptor?? [ 856.842884][ T7109] loop1: detected capacity change from 0 to 16 [ 856.858725][ T7109] erofs: (device loop1): mounted with root inode @ nid 36. [ 856.870973][ T7110] loop5: detected capacity change from 0 to 16 [ 856.877103][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.890352][ T7110] FAULT_INJECTION: forcing a failure. [ 856.890352][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 856.905399][ T3408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.922593][ T3408] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 856.933695][ T7110] CPU: 0 PID: 7110 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 856.943677][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 856.953571][ T7110] Call Trace: [ 856.956694][ T7110] [ 856.959470][ T7110] dump_stack_lvl+0x151/0x1b7 [ 856.963991][ T7110] ? bfq_pos_tree_add_move+0x43e/0x43e [ 856.969280][ T7110] dump_stack+0x15/0x17 [ 856.973270][ T7110] should_fail+0x3c0/0x510 [ 856.977528][ T7110] ? ext4_find_extent+0x249/0xd80 [ 856.982387][ T7110] __should_failslab+0x9f/0xe0 [ 856.986984][ T7110] should_failslab+0x9/0x20 [ 856.991323][ T7110] __kmalloc+0x6d/0x350 [ 856.995318][ T7110] ? __getblk_gfp+0x42/0x7d0 [ 856.999741][ T7110] ext4_find_extent+0x249/0xd80 [ 857.004431][ T7110] ext4_ext_map_blocks+0x22d/0x3cb0 [ 857.009463][ T7110] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 857.014846][ T7110] ? ext4_ext_release+0x10/0x10 [ 857.019531][ T7110] ? __ext4_handle_dirty_metadata+0x2cd/0x820 [ 857.025435][ T7110] ? __kasan_check_write+0x14/0x20 [ 857.030379][ T7110] ? down_read+0xf9/0x230 [ 857.034545][ T7110] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 857.039846][ T7110] ext4_map_blocks+0x42c/0x1e20 [ 857.044528][ T7110] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 857.050091][ T7110] ? ext4_issue_zeroout+0x260/0x260 [ 857.055118][ T7110] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 857.060500][ T7110] ext4_append+0x23e/0x5b0 [ 857.064753][ T7110] ? ext4_init_new_dir+0xa10/0xa10 [ 857.069700][ T7110] ext4_init_new_dir+0x337/0xa10 [ 857.074477][ T7110] ? may_create+0x647/0x8c0 [ 857.078813][ T7110] ? ext4_init_dot_dotdot+0x500/0x500 [ 857.084022][ T7110] ext4_mkdir+0x4fa/0xcf0 [ 857.088187][ T7110] ? ext4_symlink+0xfe0/0xfe0 [ 857.092700][ T7110] ? selinux_inode_mkdir+0x22/0x30 [ 857.097647][ T7110] ? security_inode_mkdir+0xf1/0x130 [ 857.102771][ T7110] vfs_mkdir+0x360/0x580 [ 857.106856][ T7110] do_mkdirat+0x1e8/0x420 [ 857.111012][ T7110] ? vfs_mkdir+0x580/0x580 [ 857.115268][ T7110] ? getname_flags+0x1fb/0x510 [ 857.119873][ T7110] __x64_sys_mkdirat+0x89/0xa0 [ 857.124469][ T7110] do_syscall_64+0x44/0xd0 [ 857.128720][ T7110] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 857.134451][ T7110] RIP: 0033:0x7fe9fd6ce0c7 [ 857.138698][ T7110] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 857.158145][ T7110] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 857.166387][ T7110] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 857.174199][ T7110] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 857.182008][ T7110] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 857.189818][ T7110] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 857.197627][ T7110] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 857.205442][ T7110] [ 857.209777][ T3408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.219479][ T3408] usb 4-1: config 0 descriptor?? [ 857.507049][ T3394] usbhid 5-1:0.0: can't add hid device: -71 [ 857.513062][ T3394] usbhid: probe of 5-1:0.0 failed with error -71 [ 857.520585][ T3394] usb 5-1: USB disconnect, device number 42 [ 857.709386][ T3408] lg-g15 0003:046D:C225.008B: hidraw1: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 857.907352][ T7091] udc-core: couldn't find an available UDC or it's busy [ 857.914111][ T7091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 857.932836][ T7091] udc-core: couldn't find an available UDC or it's busy [ 857.941851][ T7091] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 857.952368][ T3408] usb 4-1: USB disconnect, device number 88 17:24:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c783a39b123d0c0b3b6d2cd7260ee21f785336025c1de88a4d5ea09eb8483222f1cad28ed52dd4aa1f834e2cbe846d2ff3461f"}, {&(0x7f0000000400)="47ed42855e5005f1a5ae827d09ac4b601b82c2fb49aa175ee51b00731fdaf66f210442c1a63b9768f962632062a7eaac61049c11541ed9b62aaacf0553b3201ffdb5d27a10c493426b21d5b3c94fd7bbf1bf3c6f7337a9fd857b3e8ff78cbacf71f06b9c135698efd925e3835e14714fc0b7e8b01f92f0b0d01b5c631c1d7535e6c94bc8f895128a8f5c84d17a51a14dc561e849f9cbbbb23ed68f05c3731525ebe390c0239866e8841b85c9b22606acd02840b61a53c3ad49ccff921cfd75fe236230cb517fc46ed37498fc93f47cb6234477aa5c5c0192e284e709fd948cc2ef185e02d67bdc20a4e82a9d2253957fb12cc228dd53831009"}, {&(0x7f0000000300)="d837dedbfd2dae313a2366be9fc3d9b21168b49e7f49e9ad464da2dd34cd5d2ed48576c83d010e86243e0002d075ea7811ad3552f7557a8d58453532d0e54264b8fa8dc6cc8308d7144d56faaaf880a0e35f760cee729c1b3bb854ca081ff6a81d54d415833af4bb6d402009511a4777bbb97d5f24b5f4fb52a4c21193c94447d1e046056ab5facf5e1bb39adfbf0b323de2ce6ecfb000b09bcd8f26154adec91663c8441a98d2aee121be7b00194c08dc73efddfb13ea7e72dcb58018d9c06872ddac6763f64ecdff212c95f9e09f2b0c126f6d3449a66f6ee436d63b500b93a84679ee36cd7ce4decd76f63000"/247}]}}], 0x2cc, 0x20004011) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 38) 17:24:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:23 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 56) 17:24:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:23 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c24000000000010902240001000000000904000001c6166cef6509af570001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) [ 858.220108][ T3408] usb 1-1: USB disconnect, device number 105 [ 858.298950][ T7131] loop1: detected capacity change from 0 to 16 [ 858.314238][ T7132] loop5: detected capacity change from 0 to 16 [ 858.321903][ T7131] erofs: (device loop1): mounted with root inode @ nid 36. [ 858.330084][ T7132] FAULT_INJECTION: forcing a failure. [ 858.330084][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 858.339038][ T7133] FAULT_INJECTION: forcing a failure. [ 858.339038][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 858.342527][ T7132] CPU: 0 PID: 7132 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 858.364886][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 858.374773][ T7132] Call Trace: [ 858.377900][ T7132] [ 858.380677][ T7132] dump_stack_lvl+0x151/0x1b7 [ 858.385191][ T7132] ? bfq_pos_tree_add_move+0x43e/0x43e [ 858.390484][ T7132] dump_stack+0x15/0x17 [ 858.394473][ T7132] should_fail+0x3c0/0x510 [ 858.398777][ T7132] __should_failslab+0x9f/0xe0 [ 858.403329][ T7132] should_failslab+0x9/0x20 [ 858.407668][ T7132] kmem_cache_alloc+0x4f/0x2f0 [ 858.412268][ T7132] ? __es_insert_extent+0x800/0x1810 [ 858.417397][ T7132] __es_insert_extent+0x800/0x1810 [ 858.422335][ T7132] ? __kasan_check_write+0x14/0x20 [ 858.427280][ T7132] ? _raw_write_trylock+0x1e0/0x1e0 [ 858.432317][ T7132] ext4_es_insert_extent+0x320/0x2e40 [ 858.437525][ T7132] ? memset+0x35/0x40 [ 858.441342][ T7132] ? ext4_es_scan_clu+0x340/0x340 [ 858.446205][ T7132] ? _raw_read_unlock+0x25/0x40 [ 858.450888][ T7132] ? ext4_es_find_extent_range+0xd2/0x2d0 [ 858.456445][ T7132] ? trace_ext4_ext_convert_to_initialized_fastpath+0x130/0x130 [ 858.463907][ T7132] ext4_ext_map_blocks+0x1f32/0x3cb0 [ 858.469032][ T7132] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 858.474411][ T7132] ? ext4_ext_release+0x10/0x10 [ 858.479099][ T7132] ? __ext4_handle_dirty_metadata+0x2cd/0x820 [ 858.485001][ T7132] ? __kasan_check_write+0x14/0x20 [ 858.489944][ T7132] ? down_read+0xf9/0x230 [ 858.494115][ T7132] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 858.499410][ T7132] ext4_map_blocks+0x42c/0x1e20 [ 858.504100][ T7132] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 858.509651][ T7132] ? ext4_issue_zeroout+0x260/0x260 [ 858.514687][ T7132] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 858.520068][ T7132] ext4_append+0x23e/0x5b0 [ 858.524316][ T7132] ? ext4_init_new_dir+0xa10/0xa10 [ 858.529266][ T7132] ext4_init_new_dir+0x337/0xa10 [ 858.534039][ T7132] ? may_create+0x647/0x8c0 [ 858.538382][ T7132] ? ext4_init_dot_dotdot+0x500/0x500 [ 858.543586][ T7132] ext4_mkdir+0x4fa/0xcf0 [ 858.547755][ T7132] ? ext4_symlink+0xfe0/0xfe0 [ 858.552267][ T7132] ? security_inode_mkdir+0xd2/0x130 [ 858.557385][ T7132] ? security_inode_mkdir+0xf1/0x130 [ 858.562506][ T7132] vfs_mkdir+0x360/0x580 [ 858.566590][ T7132] do_mkdirat+0x1e8/0x420 [ 858.570752][ T7132] ? vfs_mkdir+0x580/0x580 [ 858.575004][ T7132] ? getname_flags+0x1fb/0x510 [ 858.579605][ T7132] __x64_sys_mkdirat+0x89/0xa0 [ 858.584204][ T7132] do_syscall_64+0x44/0xd0 [ 858.588457][ T7132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 858.594187][ T7132] RIP: 0033:0x7fe9fd6ce0c7 [ 858.598439][ T7132] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 858.617890][ T7132] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 858.626125][ T7132] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 858.633938][ T7132] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 858.641750][ T7132] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 858.649570][ T7132] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 858.657372][ T7132] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 858.665186][ T7132] [ 858.668052][ T7133] CPU: 1 PID: 7133 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 858.678120][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 858.688019][ T7133] Call Trace: [ 858.691135][ T7133] [ 858.693914][ T7133] dump_stack_lvl+0x151/0x1b7 [ 858.698428][ T7133] ? bfq_pos_tree_add_move+0x43e/0x43e [ 858.703732][ T7133] ? selinux_kernfs_init_security+0x1a8/0x760 [ 858.709633][ T7133] dump_stack+0x15/0x17 [ 858.713615][ T7133] should_fail+0x3c0/0x510 [ 858.718222][ T7133] __should_failslab+0x9f/0xe0 [ 858.722820][ T7133] should_failslab+0x9/0x20 [ 858.727156][ T7133] kmem_cache_alloc+0x4f/0x2f0 [ 858.731758][ T7133] ? __kernfs_new_node+0xdb/0x6e0 [ 858.736615][ T7133] __kernfs_new_node+0xdb/0x6e0 [ 858.741305][ T7133] ? down_read_killable+0x250/0x250 [ 858.746384][ T7133] ? kernfs_new_node+0x170/0x170 [ 858.751119][ T7133] ? __kasan_check_write+0x14/0x20 [ 858.756059][ T7133] ? up_write+0x56/0x120 [ 858.760137][ T7133] ? kernfs_activate+0x409/0x420 [ 858.764914][ T7133] kernfs_new_node+0x97/0x170 [ 858.769425][ T7133] __kernfs_create_file+0x4a/0x270 [ 858.774371][ T7133] sysfs_add_file_mode_ns+0x273/0x320 [ 858.779581][ T7133] internal_create_group+0x55e/0xf60 [ 858.784703][ T7133] ? get_super+0x1ee/0x210 [ 858.788953][ T7133] ? sysfs_create_group+0x30/0x30 [ 858.793899][ T7133] ? __kasan_check_write+0x14/0x20 [ 858.798846][ T7133] sysfs_create_group+0x1f/0x30 [ 858.803533][ T7133] loop_configure+0x1077/0x1640 [ 858.808266][ T7133] lo_ioctl+0x8cd/0x25e0 [ 858.812305][ T7133] ? is_bpf_text_address+0x1a2/0x1c0 [ 858.817422][ T7133] ? lo_release+0x200/0x200 [ 858.821760][ T7133] ? stack_trace_save+0x1f0/0x1f0 [ 858.826626][ T7133] ? __kernel_text_address+0x9a/0x110 [ 858.831828][ T7133] ? unwind_get_return_address+0x4c/0x90 [ 858.837387][ T7133] ? arch_stack_walk+0xf8/0x140 [ 858.842072][ T7133] ? avc_has_perm_noaudit+0x358/0x450 [ 858.847280][ T7133] ? memcpy+0x56/0x70 [ 858.851099][ T7133] ? memset+0x35/0x40 [ 858.854917][ T7133] ? fsnotify+0x5ad/0x2240 [ 858.859173][ T7133] ? __kasan_check_write+0x14/0x20 [ 858.864115][ T7133] ? _raw_spin_lock+0xa3/0x1b0 [ 858.868718][ T7133] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 858.873923][ T7133] ? _raw_spin_unlock+0x4d/0x70 [ 858.878614][ T7133] ? find_inode_fast+0x459/0x480 [ 858.883390][ T7133] ? __kasan_check_write+0x14/0x20 [ 858.888333][ T7133] ? mutex_unlock+0xa2/0x110 [ 858.892762][ T7133] ? __mutex_lock_slowpath+0x10/0x10 [ 858.897883][ T7133] ? is_bpf_text_address+0x1a2/0x1c0 [ 858.903009][ T7133] ? is_module_text_address+0xe1/0x140 [ 858.908298][ T7133] ? stack_trace_save+0x1f0/0x1f0 [ 858.913161][ T7133] ? __kernel_text_address+0x9a/0x110 [ 858.918364][ T7133] ? unwind_get_return_address+0x4c/0x90 [ 858.924091][ T7133] ? arch_stack_walk+0xf8/0x140 [ 858.928779][ T7133] ? stack_trace_save+0x12d/0x1f0 [ 858.933724][ T7133] ? stack_trace_snprint+0x100/0x100 [ 858.938844][ T7133] ? avc_has_extended_perms+0x718/0x1210 [ 858.944314][ T7133] ? memcpy+0x56/0x70 [ 858.948221][ T7133] ? avc_has_extended_perms+0xb9c/0x1210 [ 858.953702][ T7133] ? kasan_set_track+0x4c/0x70 [ 858.958461][ T7133] ? kasan_set_free_info+0x23/0x40 [ 858.963407][ T7133] ? ____kasan_slab_free+0x126/0x160 [ 858.967019][ T3408] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 858.968529][ T7133] ? __kasan_slab_free+0x11/0x20 [ 858.980775][ T7133] ? slab_free_freelist_hook+0xc9/0x1a0 [ 858.986149][ T7133] ? kmem_cache_free+0x11a/0x2e0 [ 858.990921][ T7133] ? putname+0x10b/0x160 [ 858.995010][ T7133] ? avc_flush+0x2b0/0x2b0 [ 858.999255][ T7133] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 859.003864][ T7133] ? blkdev_common_ioctl+0x570/0x1ec0 [ 859.009063][ T7133] ? kasan_quarantine_put+0x34/0x1b0 [ 859.014187][ T7133] ? blkdev_bszset+0x240/0x240 [ 859.018781][ T7133] ? ioctl_has_perm+0x3df/0x560 [ 859.023470][ T7133] ? has_cap_mac_admin+0xb0/0xb0 [ 859.028242][ T7133] ? kmem_cache_free+0x11a/0x2e0 [ 859.033023][ T7133] ? putname+0x10b/0x160 [ 859.037097][ T7133] ? selinux_file_ioctl+0x3c9/0x530 [ 859.042132][ T7133] ? lo_release+0x200/0x200 [ 859.046470][ T7133] blkdev_ioctl+0x2e9/0x620 [ 859.050809][ T7133] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 859.056103][ T7133] ? __fget_files+0x310/0x370 [ 859.060620][ T7133] block_ioctl+0xb0/0xf0 [ 859.064695][ T7133] ? blkdev_iopoll+0x100/0x100 [ 859.069299][ T7133] __se_sys_ioctl+0x115/0x190 [ 859.073810][ T7133] __x64_sys_ioctl+0x7b/0x90 [ 859.078237][ T7133] do_syscall_64+0x44/0xd0 [ 859.082492][ T7133] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 859.087234][ T7132] erofs: (device loop5): mounted with root inode @ nid 36. [ 859.088224][ T7133] RIP: 0033:0x7fd49bff9e97 [ 859.099505][ T7133] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 859.118946][ T7133] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.127188][ T7133] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 859.135087][ T7133] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 859.142899][ T7133] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 17:24:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 859.150708][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.158520][ T7133] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 859.166337][ T7133] [ 859.176184][ T7133] loop2: detected capacity change from 0 to 16 [ 859.184492][ T7133] erofs: (device loop2): mounted with root inode @ nid 36. 17:24:24 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 57) 17:24:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 39) [ 859.300753][ T7137] loop1: detected capacity change from 0 to 16 [ 859.314855][ T7137] erofs: (device loop1): mounted with root inode @ nid 36. [ 859.322098][ T1762] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 859.327080][ T3408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.329561][ T1723] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 859.350404][ T3408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.361106][ T3408] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 859.370273][ T3408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.378911][ T3408] usb 1-1: config 0 descriptor?? [ 859.399963][ T7142] loop5: detected capacity change from 0 to 16 [ 859.406339][ T7142] FAULT_INJECTION: forcing a failure. [ 859.406339][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 859.418842][ T7142] CPU: 0 PID: 7142 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 859.428727][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 859.438616][ T7142] Call Trace: [ 859.441739][ T7142] [ 859.444513][ T7142] dump_stack_lvl+0x151/0x1b7 [ 859.449027][ T7142] ? bfq_pos_tree_add_move+0x43e/0x43e [ 859.454324][ T7142] dump_stack+0x15/0x17 [ 859.458312][ T7142] should_fail+0x3c0/0x510 [ 859.462568][ T7142] __should_failslab+0x9f/0xe0 [ 859.467164][ T7142] should_failslab+0x9/0x20 [ 859.471505][ T7142] kmem_cache_alloc+0x4f/0x2f0 [ 859.476103][ T7142] ? __es_insert_extent+0x800/0x1810 [ 859.481232][ T7142] __es_insert_extent+0x800/0x1810 [ 859.486176][ T7142] ? __kasan_check_write+0x14/0x20 [ 859.491129][ T7142] ? _raw_write_trylock+0x1e0/0x1e0 [ 859.496155][ T7142] ext4_es_insert_extent+0x320/0x2e40 [ 859.501362][ T7142] ? memset+0x35/0x40 [ 859.505179][ T7142] ? ext4_es_scan_clu+0x340/0x340 [ 859.510041][ T7142] ? _raw_read_unlock+0x25/0x40 [ 859.514729][ T7142] ? ext4_es_find_extent_range+0xd2/0x2d0 [ 859.520285][ T7142] ? trace_ext4_ext_convert_to_initialized_fastpath+0x130/0x130 [ 859.527748][ T7142] ext4_ext_map_blocks+0x1f32/0x3cb0 [ 859.532870][ T7142] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 859.538250][ T7142] ? ext4_ext_release+0x10/0x10 [ 859.542937][ T7142] ? __ext4_handle_dirty_metadata+0x2cd/0x820 [ 859.548843][ T7142] ? __kasan_check_write+0x14/0x20 [ 859.553843][ T7142] ? down_read+0xf9/0x230 [ 859.557955][ T7142] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 859.563246][ T7142] ext4_map_blocks+0x42c/0x1e20 [ 859.567937][ T7142] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 859.573486][ T7142] ? ext4_issue_zeroout+0x260/0x260 [ 859.579131][ T7142] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 859.584511][ T7142] ext4_append+0x23e/0x5b0 [ 859.588764][ T7142] ? ext4_init_new_dir+0xa10/0xa10 [ 859.593715][ T7142] ext4_init_new_dir+0x337/0xa10 [ 859.598486][ T7142] ? may_create+0x647/0x8c0 [ 859.602825][ T7142] ? ext4_init_dot_dotdot+0x500/0x500 [ 859.608035][ T7142] ext4_mkdir+0x4fa/0xcf0 [ 859.612199][ T7142] ? ext4_symlink+0xfe0/0xfe0 [ 859.616710][ T7142] ? selinux_inode_mkdir+0x22/0x30 [ 859.621680][ T7142] ? security_inode_mkdir+0xf1/0x130 [ 859.626785][ T7142] vfs_mkdir+0x360/0x580 [ 859.630860][ T7142] do_mkdirat+0x1e8/0x420 [ 859.635025][ T7142] ? vfs_mkdir+0x580/0x580 [ 859.639275][ T7142] ? getname_flags+0x1fb/0x510 [ 859.643882][ T7142] __x64_sys_mkdirat+0x89/0xa0 [ 859.648479][ T7142] do_syscall_64+0x44/0xd0 [ 859.652728][ T7142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 859.658637][ T7142] RIP: 0033:0x7fe9fd6ce0c7 [ 859.662886][ T7142] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 859.682426][ T7142] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 859.690658][ T7142] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 859.698470][ T7142] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 859.706283][ T7142] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 859.714092][ T7142] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 859.721904][ T7142] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 859.729722][ T7142] [ 859.738380][ T7142] erofs: (device loop5): mounted with root inode @ nid 36. [ 859.795988][ T7144] FAULT_INJECTION: forcing a failure. [ 859.795988][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 859.821625][ T7144] CPU: 1 PID: 7144 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 859.831639][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 859.841512][ T7144] Call Trace: [ 859.844632][ T7144] [ 859.847412][ T7144] dump_stack_lvl+0x151/0x1b7 [ 859.851924][ T7144] ? bfq_pos_tree_add_move+0x43e/0x43e [ 859.857216][ T7144] ? selinux_kernfs_init_security+0x1a8/0x760 [ 859.863127][ T7144] dump_stack+0x15/0x17 [ 859.867109][ T7144] should_fail+0x3c0/0x510 [ 859.871367][ T7144] __should_failslab+0x9f/0xe0 [ 859.875967][ T7144] should_failslab+0x9/0x20 [ 859.880307][ T7144] kmem_cache_alloc+0x4f/0x2f0 [ 859.884906][ T7144] ? __kernfs_new_node+0xdb/0x6e0 [ 859.889764][ T7144] __kernfs_new_node+0xdb/0x6e0 [ 859.894451][ T7144] ? down_read_killable+0x250/0x250 [ 859.899488][ T7144] ? kernfs_new_node+0x170/0x170 [ 859.904258][ T7144] ? __kasan_check_write+0x14/0x20 [ 859.909206][ T7144] ? up_write+0x56/0x120 [ 859.913287][ T7144] ? kernfs_activate+0x409/0x420 [ 859.918068][ T7144] kernfs_new_node+0x97/0x170 [ 859.922575][ T7144] __kernfs_create_file+0x4a/0x270 [ 859.927610][ T7144] sysfs_add_file_mode_ns+0x273/0x320 [ 859.932814][ T7144] internal_create_group+0x55e/0xf60 [ 859.937933][ T7144] ? get_super+0x1ee/0x210 [ 859.942196][ T7144] ? sysfs_create_group+0x30/0x30 [ 859.947056][ T7144] ? __kasan_check_write+0x14/0x20 [ 859.952165][ T7144] sysfs_create_group+0x1f/0x30 [ 859.956852][ T7144] loop_configure+0x1077/0x1640 [ 859.961642][ T7144] lo_ioctl+0x8cd/0x25e0 [ 859.965706][ T7144] ? is_bpf_text_address+0x1a2/0x1c0 [ 859.970827][ T7144] ? lo_release+0x200/0x200 [ 859.975167][ T7144] ? stack_trace_save+0x1f0/0x1f0 [ 859.980025][ T7144] ? __kernel_text_address+0x9a/0x110 [ 859.985233][ T7144] ? unwind_get_return_address+0x4c/0x90 [ 859.990703][ T7144] ? arch_stack_walk+0xf8/0x140 [ 859.995388][ T7144] ? avc_has_perm_noaudit+0x358/0x450 [ 860.000597][ T7144] ? memcpy+0x56/0x70 [ 860.004414][ T7144] ? memset+0x35/0x40 [ 860.008233][ T7144] ? fsnotify+0x5ad/0x2240 [ 860.012486][ T7144] ? __kasan_check_write+0x14/0x20 [ 860.017519][ T7144] ? _raw_spin_lock+0xa3/0x1b0 [ 860.022127][ T7144] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 860.027330][ T7144] ? _raw_spin_unlock+0x4d/0x70 [ 860.032014][ T7144] ? find_inode_fast+0x459/0x480 [ 860.036793][ T7144] ? __kasan_check_write+0x14/0x20 [ 860.041906][ T7144] ? mutex_unlock+0xa2/0x110 [ 860.046263][ T7144] ? __mutex_lock_slowpath+0x10/0x10 [ 860.051379][ T7144] ? is_bpf_text_address+0x1a2/0x1c0 [ 860.056501][ T7144] ? is_module_text_address+0xe1/0x140 [ 860.061879][ T7144] ? stack_trace_save+0x1f0/0x1f0 [ 860.066741][ T7144] ? __kernel_text_address+0x9a/0x110 [ 860.071949][ T7144] ? unwind_get_return_address+0x4c/0x90 [ 860.077416][ T7144] ? arch_stack_walk+0xf8/0x140 [ 860.082104][ T7144] ? stack_trace_save+0x12d/0x1f0 [ 860.086962][ T7144] ? stack_trace_snprint+0x100/0x100 [ 860.092083][ T7144] ? avc_has_extended_perms+0x718/0x1210 [ 860.097553][ T7144] ? memcpy+0x56/0x70 [ 860.101371][ T7144] ? avc_has_extended_perms+0xb9c/0x1210 [ 860.106837][ T7144] ? kasan_set_track+0x4c/0x70 [ 860.111436][ T7144] ? kasan_set_free_info+0x23/0x40 [ 860.116386][ T7144] ? ____kasan_slab_free+0x126/0x160 [ 860.121507][ T7144] ? __kasan_slab_free+0x11/0x20 [ 860.126278][ T7144] ? slab_free_freelist_hook+0xc9/0x1a0 [ 860.131662][ T7144] ? kmem_cache_free+0x11a/0x2e0 [ 860.136435][ T7144] ? putname+0x10b/0x160 [ 860.140516][ T7144] ? avc_flush+0x2b0/0x2b0 [ 860.144773][ T7144] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 860.149372][ T7144] ? blkdev_common_ioctl+0x570/0x1ec0 [ 860.154575][ T7144] ? kasan_quarantine_put+0x34/0x1b0 [ 860.159696][ T7144] ? blkdev_bszset+0x240/0x240 [ 860.164295][ T7144] ? ioctl_has_perm+0x3df/0x560 [ 860.168983][ T7144] ? has_cap_mac_admin+0xb0/0xb0 [ 860.173759][ T7144] ? kmem_cache_free+0x11a/0x2e0 [ 860.178529][ T7144] ? putname+0x10b/0x160 [ 860.182609][ T7144] ? selinux_file_ioctl+0x3c9/0x530 [ 860.187732][ T7144] ? lo_release+0x200/0x200 [ 860.192070][ T7144] blkdev_ioctl+0x2e9/0x620 [ 860.196412][ T7144] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 860.201702][ T7144] ? __fget_files+0x310/0x370 [ 860.206218][ T7144] block_ioctl+0xb0/0xf0 [ 860.210298][ T7144] ? blkdev_iopoll+0x100/0x100 [ 860.214896][ T7144] __se_sys_ioctl+0x115/0x190 [ 860.219585][ T7144] __x64_sys_ioctl+0x7b/0x90 [ 860.224010][ T7144] do_syscall_64+0x44/0xd0 [ 860.228284][ T7144] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 860.233989][ T7144] RIP: 0033:0x7fd49bff9e97 [ 860.238244][ T7144] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 860.257686][ T7144] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.265929][ T7144] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 860.273741][ T7144] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 860.281554][ T7144] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 17:24:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:25 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 58) [ 860.289451][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.299087][ T7144] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 860.306909][ T7144] [ 860.310285][ T7144] loop2: detected capacity change from 0 to 16 [ 860.327616][ T7144] erofs: (device loop2): mounted with root inode @ nid 36. [ 860.422978][ T7150] loop5: detected capacity change from 0 to 16 [ 860.431961][ T7151] loop1: detected capacity change from 0 to 16 [ 860.452171][ T7151] erofs: (device loop1): mounted with root inode @ nid 36. [ 860.459396][ T1723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.470171][ T1762] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 860.481185][ T7150] FAULT_INJECTION: forcing a failure. [ 860.481185][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 860.499080][ T1762] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.511832][ T1723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.527010][ T7150] CPU: 0 PID: 7150 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 860.532202][ T1723] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 860.536992][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 860.537006][ T7150] Call Trace: [ 860.537011][ T7150] [ 860.537019][ T7150] dump_stack_lvl+0x151/0x1b7 [ 860.537045][ T7150] ? bfq_pos_tree_add_move+0x43e/0x43e [ 860.537065][ T7150] ? kasan_set_track+0x5e/0x70 [ 860.537084][ T7150] ? kasan_set_free_info+0x23/0x40 [ 860.548086][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 860.555743][ T7150] ? ____kasan_slab_free+0x126/0x160 [ 860.555772][ T7150] ? __kasan_slab_free+0x11/0x20 [ 860.562186][ T1723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.566244][ T7150] ? kfree+0xc8/0x210 [ 860.579175][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.581083][ T7150] ? ext4_ext_map_blocks+0x210d/0x3cb0 [ 860.624832][ T7150] ? ext4_map_blocks+0x42c/0x1e20 [ 860.629694][ T7150] ? ext4_append+0x23e/0x5b0 [ 860.634120][ T7150] dump_stack+0x15/0x17 [ 860.638111][ T7150] should_fail+0x3c0/0x510 [ 860.642367][ T7150] ? ext4_find_extent+0x249/0xd80 [ 860.647227][ T7150] __should_failslab+0x9f/0xe0 [ 860.651824][ T7150] should_failslab+0x9/0x20 [ 860.656164][ T7150] __kmalloc+0x6d/0x350 [ 860.660165][ T7150] ext4_find_extent+0x249/0xd80 [ 860.664850][ T7150] ext4_ext_map_blocks+0x22d/0x3cb0 [ 860.669876][ T7150] ? ____kasan_slab_free+0x131/0x160 [ 860.675002][ T7150] ? __kasan_slab_free+0x11/0x20 [ 860.679773][ T7150] ? ext4_ext_map_blocks+0x210d/0x3cb0 [ 860.685066][ T7150] ? ext4_ext_release+0x10/0x10 [ 860.689758][ T7150] ? ext4_ext_map_blocks+0x2151/0x3cb0 [ 860.695055][ T7150] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 860.700342][ T7150] ext4_map_blocks+0xacd/0x1e20 [ 860.705031][ T7150] ? ext4_issue_zeroout+0x260/0x260 [ 860.710061][ T7150] ? __kasan_check_write+0x14/0x20 [ 860.715009][ T7150] ? up_read+0x14/0x90 [ 860.718916][ T7150] ext4_getblk+0x19c/0x6f0 [ 860.723172][ T7150] ? ext4_get_block_unwritten+0x40/0x40 [ 860.728553][ T7150] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 860.733932][ T7150] ext4_bread+0x2f/0x180 [ 860.738011][ T7150] ext4_append+0x31b/0x5b0 [ 860.742280][ T7150] ? ext4_init_new_dir+0xa10/0xa10 [ 860.747215][ T7150] ext4_init_new_dir+0x337/0xa10 [ 860.751986][ T7150] ? may_create+0x647/0x8c0 [ 860.756326][ T7150] ? ext4_init_dot_dotdot+0x500/0x500 [ 860.761540][ T7150] ext4_mkdir+0x4fa/0xcf0 [ 860.765698][ T7150] ? ext4_symlink+0xfe0/0xfe0 [ 860.770212][ T7150] ? selinux_inode_mkdir+0x22/0x30 [ 860.775163][ T7150] ? security_inode_mkdir+0xf1/0x130 [ 860.780281][ T7150] vfs_mkdir+0x360/0x580 [ 860.784358][ T7150] do_mkdirat+0x1e8/0x420 [ 860.788557][ T7150] ? vfs_mkdir+0x580/0x580 [ 860.792778][ T7150] ? getname_flags+0x1fb/0x510 [ 860.797376][ T7150] __x64_sys_mkdirat+0x89/0xa0 [ 860.801976][ T7150] do_syscall_64+0x44/0xd0 [ 860.806229][ T7150] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 860.811960][ T7150] RIP: 0033:0x7fe9fd6ce0c7 [ 860.816213][ T7150] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 860.835743][ T7150] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 860.843983][ T7150] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 860.851797][ T7150] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 860.859610][ T7150] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 860.867420][ T7150] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 860.875230][ T7150] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 860.883131][ T7150] [ 860.886843][ T1762] usb 4-1: config 0 descriptor?? [ 860.891994][ T3408] lg-g15 0003:046D:C225.008C: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 860.892261][ T1723] usb 5-1: config 0 descriptor?? 17:24:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 40) [ 861.087511][ T3441] usb 1-1: USB disconnect, device number 106 [ 861.116760][ T7156] FAULT_INJECTION: forcing a failure. [ 861.116760][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 861.129396][ T7156] CPU: 1 PID: 7156 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 861.139365][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 861.149274][ T7156] Call Trace: [ 861.152383][ T7156] [ 861.155163][ T7156] dump_stack_lvl+0x151/0x1b7 [ 861.159675][ T7156] ? bfq_pos_tree_add_move+0x43e/0x43e [ 861.164967][ T7156] ? selinux_kernfs_init_security+0x1a8/0x760 [ 861.170871][ T7156] dump_stack+0x15/0x17 [ 861.174859][ T7156] should_fail+0x3c0/0x510 [ 861.179114][ T7156] __should_failslab+0x9f/0xe0 [ 861.183715][ T7156] should_failslab+0x9/0x20 [ 861.188055][ T7156] kmem_cache_alloc+0x4f/0x2f0 [ 861.192654][ T7156] ? __kernfs_new_node+0xdb/0x6e0 [ 861.197514][ T7156] __kernfs_new_node+0xdb/0x6e0 [ 861.202200][ T7156] ? down_read_killable+0x250/0x250 [ 861.207237][ T7156] ? kernfs_new_node+0x170/0x170 [ 861.212007][ T7156] ? __kasan_check_write+0x14/0x20 [ 861.216953][ T7156] ? up_write+0x56/0x120 [ 861.221044][ T7156] ? kernfs_activate+0x409/0x420 [ 861.225819][ T7156] kernfs_new_node+0x97/0x170 [ 861.230333][ T7156] __kernfs_create_file+0x4a/0x270 [ 861.235271][ T7156] sysfs_add_file_mode_ns+0x273/0x320 [ 861.240481][ T7156] internal_create_group+0x55e/0xf60 [ 861.245601][ T7156] ? get_super+0x1ee/0x210 [ 861.249853][ T7156] ? sysfs_create_group+0x30/0x30 [ 861.254710][ T7156] ? __kasan_check_write+0x14/0x20 [ 861.259663][ T7156] sysfs_create_group+0x1f/0x30 [ 861.264347][ T7156] loop_configure+0x1077/0x1640 [ 861.269038][ T7156] lo_ioctl+0x8cd/0x25e0 [ 861.273113][ T7156] ? is_bpf_text_address+0x1a2/0x1c0 [ 861.278232][ T7156] ? lo_release+0x200/0x200 [ 861.282664][ T7156] ? stack_trace_save+0x1f0/0x1f0 [ 861.287520][ T7156] ? __kernel_text_address+0x9a/0x110 [ 861.292738][ T7156] ? unwind_get_return_address+0x4c/0x90 [ 861.298201][ T7156] ? arch_stack_walk+0xf8/0x140 [ 861.302886][ T7156] ? avc_has_perm_noaudit+0x358/0x450 [ 861.308094][ T7156] ? memcpy+0x56/0x70 [ 861.311908][ T7156] ? memset+0x35/0x40 [ 861.315818][ T7156] ? fsnotify+0x5ad/0x2240 [ 861.320069][ T7156] ? __kasan_check_write+0x14/0x20 [ 861.325013][ T7156] ? _raw_spin_lock+0xa3/0x1b0 [ 861.329616][ T7156] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 861.334825][ T7156] ? _raw_spin_unlock+0x4d/0x70 [ 861.339518][ T7156] ? find_inode_fast+0x459/0x480 [ 861.344286][ T7156] ? __kasan_check_write+0x14/0x20 [ 861.349229][ T7156] ? mutex_unlock+0xa2/0x110 [ 861.353655][ T7156] ? __mutex_lock_slowpath+0x10/0x10 [ 861.358793][ T7156] ? is_bpf_text_address+0x1a2/0x1c0 [ 861.363898][ T7156] ? is_module_text_address+0xe1/0x140 [ 861.369191][ T7156] ? stack_trace_save+0x1f0/0x1f0 [ 861.374056][ T7156] ? __kernel_text_address+0x9a/0x110 [ 861.379262][ T7156] ? unwind_get_return_address+0x4c/0x90 [ 861.384732][ T7156] ? irqentry_exit+0x30/0x40 [ 861.389259][ T7156] ? sysvec_call_function_single+0x55/0xc0 [ 861.394886][ T7156] ? asm_sysvec_call_function_single+0x1b/0x20 [ 861.400873][ T7156] ? avc_has_extended_perms+0x718/0x1210 [ 861.406341][ T7156] ? memcpy+0x56/0x70 [ 861.410169][ T7156] ? avc_has_extended_perms+0xb9c/0x1210 [ 861.415627][ T7156] ? kasan_set_track+0x4c/0x70 [ 861.420220][ T7156] ? kasan_set_free_info+0x23/0x40 [ 861.425169][ T7156] ? ____kasan_slab_free+0x126/0x160 [ 861.430291][ T7156] ? __kasan_slab_free+0x11/0x20 [ 861.435063][ T7156] ? slab_free_freelist_hook+0xc9/0x1a0 [ 861.440443][ T7156] ? kmem_cache_free+0x11a/0x2e0 [ 861.445220][ T7156] ? putname+0x10b/0x160 [ 861.449297][ T7156] ? avc_flush+0x2b0/0x2b0 [ 861.453552][ T7156] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 861.458156][ T7156] ? blkdev_common_ioctl+0x570/0x1ec0 [ 861.463358][ T7156] ? kasan_quarantine_put+0x34/0x1b0 [ 861.468567][ T7156] ? blkdev_bszset+0x240/0x240 [ 861.473175][ T7156] ? ioctl_has_perm+0x3df/0x560 [ 861.477854][ T7156] ? has_cap_mac_admin+0xb0/0xb0 [ 861.482637][ T7156] ? kmem_cache_free+0x11a/0x2e0 [ 861.487401][ T7156] ? putname+0x10b/0x160 [ 861.491484][ T7156] ? selinux_file_ioctl+0x3c9/0x530 [ 861.496519][ T7156] ? lo_release+0x200/0x200 [ 861.500854][ T7156] blkdev_ioctl+0x2e9/0x620 [ 861.505195][ T7156] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 861.510487][ T7156] ? __fget_files+0x310/0x370 [ 861.515011][ T7156] block_ioctl+0xb0/0xf0 [ 861.519081][ T7156] ? blkdev_iopoll+0x100/0x100 [ 861.523680][ T7156] __se_sys_ioctl+0x115/0x190 [ 861.528195][ T7156] __x64_sys_ioctl+0x7b/0x90 [ 861.532621][ T7156] do_syscall_64+0x44/0xd0 [ 861.536871][ T7156] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 861.542602][ T7156] RIP: 0033:0x7fd49bff9e97 [ 861.546857][ T7156] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 861.566297][ T7156] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.574542][ T7156] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 861.582375][ T7156] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 861.590257][ T7156] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 861.598069][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.605879][ T7156] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 861.613704][ T7156] [ 861.637061][ T1762] usb 4-1: string descriptor 0 read error: -71 [ 861.646460][ T1762] usb 4-1: USB disconnect, device number 89 17:24:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c783a39b123d0c0b3b6d2cd7260ee21f785336025c1de88a4d5ea09eb8483222f1cad28ed52dd4aa1f834e2cbe846d2ff3461f"}, {&(0x7f0000000400)="47ed42855e5005f1a5ae827d09ac4b601b82c2fb49aa175ee51b00731fdaf66f210442c1a63b9768f962632062a7eaac61049c11541ed9b62aaacf0553b3201ffdb5d27a10c493426b21d5b3c94fd7bbf1bf3c6f7337a9fd857b3e8ff78cbacf71f06b9c135698efd925e3835e14714fc0b7e8b01f92f0b0d01b5c631c1d7535e6c94bc8f895128a8f5c84d17a51a14dc561e849f9cbbbb23ed68f05c3731525ebe390c0239866e8841b85c9b22606acd02840b61a53c3ad49ccff921cfd75fe236230cb517fc46ed37498fc93f47cb6234477aa5c5c0192e284e709fd948cc2ef185e02d67bdc20a4e82a9d2253957fb12cc228dd53831009"}, {&(0x7f0000000300)="d837dedbfd2dae313a2366be9fc3d9b21168b49e7f49e9ad464da2dd34cd5d2ed48576c83d010e86243e0002d075ea7811ad3552f7557a8d58453532d0e54264b8fa8dc6cc8308d7144d56faaaf880a0e35f760cee729c1b3bb854ca081ff6a81d54d415833af4bb6d402009511a4777bbb97d5f24b5f4fb52a4c21193c94447d1e046056ab5facf5e1bb39adfbf0b323de2ce6ecfb000b09bcd8f26154adec91663c8441a98d2aee121be7b00194c08dc73efddfb13ea7e72dcb58018d9c06872ddac6763f64ecdff212c95f9e09f2b0c126f6d3449a66f6ee436d63b500b93a84679ee36cd7ce4decd76f63000"/247}]}}], 0x2cc, 0x20004011) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c783a39b123d0c0b3b6d2cd7260ee21f785336025c1de88a4d5ea09eb8483222f1cad28ed52dd4aa1f834e2cbe846d2ff3461f"}, {&(0x7f0000000400)="47ed42855e5005f1a5ae827d09ac4b601b82c2fb49aa175ee51b00731fdaf66f210442c1a63b9768f962632062a7eaac61049c11541ed9b62aaacf0553b3201ffdb5d27a10c493426b21d5b3c94fd7bbf1bf3c6f7337a9fd857b3e8ff78cbacf71f06b9c135698efd925e3835e14714fc0b7e8b01f92f0b0d01b5c631c1d7535e6c94bc8f895128a8f5c84d17a51a14dc561e849f9cbbbb23ed68f05c3731525ebe390c0239866e8841b85c9b22606acd02840b61a53c3ad49ccff921cfd75fe236230cb517fc46ed37498fc93f47cb6234477aa5c5c0192e284e709fd948cc2ef185e02d67bdc20a4e82a9d2253957fb12cc228dd53831009"}, {&(0x7f0000000300)="d837dedbfd2dae313a2366be9fc3d9b21168b49e7f49e9ad464da2dd34cd5d2ed48576c83d010e86243e0002d075ea7811ad3552f7557a8d58453532d0e54264b8fa8dc6cc8308d7144d56faaaf880a0e35f760cee729c1b3bb854ca081ff6a81d54d415833af4bb6d402009511a4777bbb97d5f24b5f4fb52a4c21193c94447d1e046056ab5facf5e1bb39adfbf0b323de2ce6ecfb000b09bcd8f26154adec91663c8441a98d2aee121be7b00194c08dc73efddfb13ea7e72dcb58018d9c06872ddac6763f64ecdff212c95f9e09f2b0c126f6d3449a66f6ee436d63b500b93a84679ee36cd7ce4decd76f63000"/247}]}}], 0x2cc, 0x20004011) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) 17:24:27 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c24000000000010902240001000000000904000001c6166cef6509af570001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:27 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 59) [ 861.757127][ T7156] loop2: detected capacity change from 0 to 16 [ 861.764074][ T7156] erofs: (device loop2): mounted with root inode @ nid 36. [ 861.793861][ T7167] loop1: detected capacity change from 0 to 16 [ 861.803655][ T7168] loop5: detected capacity change from 0 to 16 [ 861.814369][ T7168] FAULT_INJECTION: forcing a failure. [ 861.814369][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 861.830191][ T7167] erofs: (device loop1): mounted with root inode @ nid 36. [ 861.854677][ T7168] CPU: 1 PID: 7168 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 861.864758][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 861.874744][ T7168] Call Trace: [ 861.877866][ T7168] [ 861.880641][ T7168] dump_stack_lvl+0x151/0x1b7 [ 861.885154][ T7168] ? bfq_pos_tree_add_move+0x43e/0x43e [ 861.890447][ T7168] ? __kasan_check_write+0x14/0x20 [ 861.895399][ T7168] ? _raw_spin_lock+0xa3/0x1b0 [ 861.899997][ T7168] dump_stack+0x15/0x17 [ 861.903990][ T7168] should_fail+0x3c0/0x510 [ 861.908240][ T7168] __should_failslab+0x9f/0xe0 [ 861.912838][ T7168] should_failslab+0x9/0x20 [ 861.917180][ T7168] kmem_cache_alloc+0x4f/0x2f0 [ 861.921796][ T7168] ? __mark_inode_dirty+0x5fa/0x9d0 [ 861.926813][ T7168] ? ext4_mb_new_blocks+0x4de/0x3c00 [ 861.931935][ T7168] ext4_mb_new_blocks+0x4de/0x3c00 [ 861.936883][ T7168] ? __kasan_kmalloc+0x9/0x10 [ 861.941393][ T7168] ? __kmalloc+0x203/0x350 [ 861.945649][ T7168] ? ext4_mb_pa_callback+0xd0/0xd0 [ 861.950595][ T7168] ? ext4_ext_search_right+0x4d3/0x890 [ 861.955891][ T7168] ? ext4_inode_to_goal_block+0x31e/0x460 [ 861.961461][ T7168] ? ext4_ext_find_goal+0x113/0x200 [ 861.966569][ T7168] ext4_ext_map_blocks+0x17db/0x3cb0 [ 861.971688][ T7168] ? ext4_ext_release+0x10/0x10 [ 861.976375][ T7168] ? ext4_ext_map_blocks+0x2151/0x3cb0 [ 861.981672][ T7168] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 861.986961][ T7168] ext4_map_blocks+0xacd/0x1e20 [ 861.991650][ T7168] ? ext4_issue_zeroout+0x260/0x260 [ 861.996686][ T7168] ? __kasan_check_write+0x14/0x20 [ 862.001631][ T7168] ? up_read+0x14/0x90 [ 862.005539][ T7168] ext4_getblk+0x19c/0x6f0 [ 862.009793][ T7168] ? ext4_get_block_unwritten+0x40/0x40 [ 862.015172][ T7168] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 862.020552][ T7168] ext4_bread+0x2f/0x180 [ 862.024640][ T7168] ext4_append+0x31b/0x5b0 [ 862.028884][ T7168] ? ext4_init_new_dir+0xa10/0xa10 [ 862.033834][ T7168] ext4_init_new_dir+0x337/0xa10 [ 862.038607][ T7168] ? may_create+0x647/0x8c0 [ 862.042948][ T7168] ? ext4_init_dot_dotdot+0x500/0x500 [ 862.048154][ T7168] ext4_mkdir+0x4fa/0xcf0 [ 862.052318][ T7168] ? ext4_symlink+0xfe0/0xfe0 [ 862.056833][ T7168] ? selinux_inode_mkdir+0x22/0x30 [ 862.061780][ T7168] ? security_inode_mkdir+0xf1/0x130 [ 862.066903][ T7168] vfs_mkdir+0x360/0x580 [ 862.070986][ T7168] do_mkdirat+0x1e8/0x420 [ 862.075147][ T7168] ? vfs_mkdir+0x580/0x580 [ 862.079412][ T7168] ? getname_flags+0x1fb/0x510 [ 862.083997][ T7168] __x64_sys_mkdirat+0x89/0xa0 [ 862.088602][ T7168] do_syscall_64+0x44/0xd0 [ 862.092852][ T7168] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 862.098580][ T7168] RIP: 0033:0x7fe9fd6ce0c7 [ 862.102835][ T7168] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 862.122277][ T7168] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 862.130521][ T7168] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 862.138330][ T7168] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 862.146141][ T7168] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 862.153954][ T7168] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 862.161771][ T7168] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 862.169582][ T7168] [ 862.207063][ T1723] usbhid 5-1:0.0: can't add hid device: -71 [ 862.212929][ T1723] usbhid: probe of 5-1:0.0 failed with error -71 [ 862.221000][ T1723] usb 5-1: USB disconnect, device number 43 17:24:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 41) 17:24:27 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 862.317034][ T1757] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 862.417007][ T1762] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 862.454282][ T7174] FAULT_INJECTION: forcing a failure. [ 862.454282][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 862.507008][ T7174] CPU: 1 PID: 7174 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 862.517190][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 862.527086][ T7174] Call Trace: [ 862.530207][ T7174] [ 862.532985][ T7174] dump_stack_lvl+0x151/0x1b7 [ 862.537502][ T7174] ? bfq_pos_tree_add_move+0x43e/0x43e [ 862.542811][ T7174] ? finish_task_switch+0x173/0x710 [ 862.547828][ T7174] dump_stack+0x15/0x17 [ 862.551820][ T7174] should_fail+0x3c0/0x510 [ 862.556077][ T7174] __should_failslab+0x9f/0xe0 [ 862.560676][ T7174] should_failslab+0x9/0x20 [ 862.565011][ T7174] kmem_cache_alloc+0x4f/0x2f0 [ 862.569612][ T7174] ? __kernfs_new_node+0xdb/0x6e0 [ 862.574472][ T7174] __kernfs_new_node+0xdb/0x6e0 [ 862.579164][ T7174] ? down_read_killable+0x250/0x250 [ 862.584192][ T7174] ? kernfs_new_node+0x170/0x170 [ 862.588970][ T7174] ? __kasan_check_write+0x14/0x20 [ 862.593913][ T7174] ? up_write+0x56/0x120 [ 862.597993][ T7174] ? kernfs_activate+0x409/0x420 [ 862.602764][ T7174] kernfs_new_node+0x97/0x170 [ 862.607279][ T7174] __kernfs_create_file+0x4a/0x270 [ 862.612236][ T7174] sysfs_add_file_mode_ns+0x273/0x320 [ 862.617438][ T7174] internal_create_group+0x55e/0xf60 [ 862.622556][ T7174] ? sysfs_create_group+0x30/0x30 [ 862.627436][ T7174] ? __kasan_check_write+0x14/0x20 [ 862.632374][ T7174] sysfs_create_group+0x1f/0x30 [ 862.637049][ T7174] loop_configure+0x1077/0x1640 [ 862.641736][ T7174] lo_ioctl+0x8cd/0x25e0 [ 862.645825][ T7174] ? __kasan_check_write+0x14/0x20 [ 862.650760][ T7174] ? __switch_to+0x617/0x1170 [ 862.655277][ T7174] ? lo_release+0x200/0x200 [ 862.659617][ T7174] ? __update_load_avg_cfs_rq+0xb0/0x2f0 [ 862.665083][ T7174] ? compat_start_thread+0x20/0x20 [ 862.670031][ T7174] ? __kasan_check_read+0x11/0x20 [ 862.674889][ T7174] ? switch_mm_irqs_off+0x22f/0x860 [ 862.679933][ T7174] ? avc_has_perm_noaudit+0x358/0x450 [ 862.685135][ T7174] ? memcpy+0x56/0x70 [ 862.688956][ T7174] ? memset+0x35/0x40 [ 862.693219][ T7174] ? fsnotify+0x5ad/0x2240 [ 862.697461][ T7174] ? __kasan_check_write+0x14/0x20 [ 862.702420][ T7174] ? _raw_spin_lock+0xa3/0x1b0 [ 862.707002][ T7174] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 862.712211][ T7174] ? _raw_spin_unlock+0x4d/0x70 [ 862.716900][ T7174] ? find_inode_fast+0x459/0x480 [ 862.721675][ T7174] ? __kasan_check_write+0x14/0x20 [ 862.726617][ T7174] ? mutex_unlock+0xa2/0x110 [ 862.731046][ T7174] ? __mutex_lock_slowpath+0x10/0x10 [ 862.736168][ T7174] ? is_bpf_text_address+0x1a2/0x1c0 [ 862.741295][ T7174] ? is_module_text_address+0xe1/0x140 [ 862.746584][ T7174] ? stack_trace_save+0x1f0/0x1f0 [ 862.751446][ T7174] ? __kernel_text_address+0x9a/0x110 [ 862.756660][ T7174] ? unwind_get_return_address+0x4c/0x90 [ 862.762129][ T7174] ? arch_stack_walk+0xf8/0x140 [ 862.766809][ T7174] ? stack_trace_save+0x12d/0x1f0 [ 862.771666][ T7174] ? stack_trace_snprint+0x100/0x100 [ 862.776796][ T7174] ? avc_has_extended_perms+0x718/0x1210 [ 862.782257][ T7174] ? memcpy+0x56/0x70 [ 862.786161][ T7174] ? avc_has_extended_perms+0xb9c/0x1210 [ 862.791638][ T7174] ? kasan_set_track+0x4c/0x70 [ 862.796239][ T7174] ? kasan_set_free_info+0x23/0x40 [ 862.801178][ T7174] ? ____kasan_slab_free+0x126/0x160 [ 862.806303][ T7174] ? __kasan_slab_free+0x11/0x20 [ 862.811070][ T7174] ? slab_free_freelist_hook+0xc9/0x1a0 [ 862.816458][ T7174] ? kmem_cache_free+0x11a/0x2e0 [ 862.821223][ T7174] ? putname+0x10b/0x160 [ 862.825306][ T7174] ? avc_flush+0x2b0/0x2b0 [ 862.829560][ T7174] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 862.834165][ T7174] ? blkdev_common_ioctl+0x570/0x1ec0 [ 862.839364][ T7174] ? kasan_quarantine_put+0x34/0x1b0 [ 862.844487][ T7174] ? blkdev_bszset+0x240/0x240 [ 862.849085][ T7174] ? ioctl_has_perm+0x3df/0x560 [ 862.853772][ T7174] ? has_cap_mac_admin+0xb0/0xb0 [ 862.858548][ T7174] ? kmem_cache_free+0x11a/0x2e0 [ 862.863319][ T7174] ? putname+0x10b/0x160 [ 862.867400][ T7174] ? selinux_file_ioctl+0x3c9/0x530 [ 862.872445][ T7174] ? lo_release+0x200/0x200 [ 862.876793][ T7174] blkdev_ioctl+0x2e9/0x620 [ 862.881112][ T7174] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 862.886405][ T7174] ? __fget_files+0x310/0x370 [ 862.890921][ T7174] block_ioctl+0xb0/0xf0 [ 862.895000][ T7174] ? blkdev_iopoll+0x100/0x100 [ 862.899598][ T7174] __se_sys_ioctl+0x115/0x190 [ 862.904111][ T7174] __x64_sys_ioctl+0x7b/0x90 [ 862.908539][ T7174] do_syscall_64+0x44/0xd0 [ 862.912791][ T7174] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 862.918518][ T7174] RIP: 0033:0x7fd49bff9e97 [ 862.922776][ T7174] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 862.942214][ T7174] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.950461][ T7174] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 17:24:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:28 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 60) [ 862.958269][ T7174] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 862.966094][ T7174] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 862.973895][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.981704][ T7174] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 862.989518][ T7174] [ 863.009232][ T7174] loop2: detected capacity change from 0 to 16 [ 863.024057][ T7174] erofs: (device loop2): mounted with root inode @ nid 36. [ 863.069539][ T7180] loop5: detected capacity change from 0 to 16 [ 863.082615][ T7180] FAULT_INJECTION: forcing a failure. [ 863.082615][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 863.095180][ T7180] CPU: 1 PID: 7180 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 863.105145][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 863.115126][ T7180] Call Trace: [ 863.118250][ T7180] [ 863.121027][ T7180] dump_stack_lvl+0x151/0x1b7 [ 863.125539][ T7180] ? bfq_pos_tree_add_move+0x43e/0x43e [ 863.130843][ T7180] dump_stack+0x15/0x17 [ 863.134834][ T7180] should_fail+0x3c0/0x510 [ 863.139084][ T7180] __should_failslab+0x9f/0xe0 [ 863.143684][ T7180] should_failslab+0x9/0x20 [ 863.148021][ T7180] kmem_cache_alloc+0x4f/0x2f0 [ 863.152618][ T7180] ? __es_insert_extent+0x800/0x1810 [ 863.157743][ T7180] __es_insert_extent+0x800/0x1810 [ 863.162690][ T7180] ? __kasan_check_write+0x14/0x20 [ 863.167636][ T7180] ext4_es_insert_extent+0x320/0x2e40 [ 863.172844][ T7180] ? ext4_es_scan_clu+0x340/0x340 [ 863.177703][ T7180] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 863.183002][ T7180] ext4_map_blocks+0xebc/0x1e20 [ 863.187688][ T7180] ? ext4_issue_zeroout+0x260/0x260 [ 863.192719][ T7180] ? __kasan_check_write+0x14/0x20 [ 863.197665][ T7180] ? up_read+0x14/0x90 [ 863.201570][ T7180] ext4_getblk+0x19c/0x6f0 [ 863.205839][ T7180] ? ext4_get_block_unwritten+0x40/0x40 [ 863.211206][ T7180] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 863.216586][ T7180] ext4_bread+0x2f/0x180 [ 863.220666][ T7180] ext4_append+0x31b/0x5b0 [ 863.224920][ T7180] ? ext4_init_new_dir+0xa10/0xa10 [ 863.229867][ T7180] ext4_init_new_dir+0x337/0xa10 [ 863.234639][ T7180] ? may_create+0x647/0x8c0 [ 863.238980][ T7180] ? ext4_init_dot_dotdot+0x500/0x500 [ 863.244275][ T7180] ext4_mkdir+0x4fa/0xcf0 [ 863.248444][ T7180] ? ext4_symlink+0xfe0/0xfe0 [ 863.252954][ T7180] ? selinux_inode_mkdir+0x22/0x30 [ 863.257901][ T7180] ? security_inode_mkdir+0xf1/0x130 [ 863.263024][ T7180] vfs_mkdir+0x360/0x580 [ 863.267104][ T7180] do_mkdirat+0x1e8/0x420 [ 863.271268][ T7180] ? vfs_mkdir+0x580/0x580 [ 863.275527][ T7180] ? getname_flags+0x1fb/0x510 [ 863.280119][ T7180] __x64_sys_mkdirat+0x89/0xa0 [ 863.284832][ T7180] do_syscall_64+0x44/0xd0 [ 863.289092][ T7180] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 863.294809][ T7180] RIP: 0033:0x7fe9fd6ce0c7 [ 863.299060][ T7180] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 863.317879][ T7181] loop1: detected capacity change from 0 to 16 [ 863.318500][ T7180] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 863.318523][ T7180] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 863.330373][ T7181] erofs: (device loop1): mounted with root inode @ nid 36. [ 863.332736][ T7180] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 863.332754][ T7180] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 863.332766][ T7180] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 863.371102][ T7180] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 863.378920][ T7180] [ 863.383231][ T7180] erofs: (device loop5): mounted with root inode @ nid 36. [ 863.447199][ T1723] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 863.457055][ T1757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.475421][ T1757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.494767][ T1757] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 863.512319][ T1757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.527065][ T1762] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 863.538882][ T1757] usb 1-1: config 0 descriptor?? 17:24:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 42) [ 863.543848][ T1762] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.558326][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 863.567521][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.576748][ T1762] usb 4-1: config 0 descriptor?? [ 863.692819][ T7185] FAULT_INJECTION: forcing a failure. [ 863.692819][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 863.732723][ T7185] CPU: 1 PID: 7185 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 863.742795][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 863.752689][ T7185] Call Trace: [ 863.755812][ T7185] [ 863.758597][ T7185] dump_stack_lvl+0x151/0x1b7 [ 863.763106][ T7185] ? bfq_pos_tree_add_move+0x43e/0x43e [ 863.768401][ T7185] ? selinux_kernfs_init_security+0x1a8/0x760 [ 863.774299][ T7185] dump_stack+0x15/0x17 [ 863.778297][ T7185] should_fail+0x3c0/0x510 [ 863.782546][ T7185] __should_failslab+0x9f/0xe0 [ 863.787145][ T7185] should_failslab+0x9/0x20 [ 863.791485][ T7185] kmem_cache_alloc+0x4f/0x2f0 [ 863.796085][ T7185] ? __kernfs_new_node+0xdb/0x6e0 [ 863.800944][ T7185] __kernfs_new_node+0xdb/0x6e0 [ 863.805632][ T7185] ? down_read_killable+0x250/0x250 [ 863.810666][ T7185] ? kernfs_new_node+0x170/0x170 [ 863.815439][ T7185] ? __kasan_check_write+0x14/0x20 [ 863.820387][ T7185] ? up_write+0x56/0x120 [ 863.824471][ T7185] ? kernfs_activate+0x409/0x420 [ 863.829252][ T7185] kernfs_new_node+0x97/0x170 [ 863.833760][ T7185] __kernfs_create_file+0x4a/0x270 [ 863.838703][ T7185] sysfs_add_file_mode_ns+0x273/0x320 [ 863.843908][ T7185] internal_create_group+0x55e/0xf60 [ 863.849032][ T7185] ? get_super+0x1ee/0x210 [ 863.853282][ T7185] ? sysfs_create_group+0x30/0x30 [ 863.858140][ T7185] ? __kasan_check_write+0x14/0x20 [ 863.863089][ T7185] sysfs_create_group+0x1f/0x30 [ 863.867776][ T7185] loop_configure+0x1077/0x1640 [ 863.872466][ T7185] lo_ioctl+0x8cd/0x25e0 [ 863.876545][ T7185] ? is_bpf_text_address+0x1a2/0x1c0 [ 863.881751][ T7185] ? lo_release+0x200/0x200 [ 863.886174][ T7185] ? stack_trace_save+0x1f0/0x1f0 [ 863.891040][ T7185] ? __kernel_text_address+0x9a/0x110 [ 863.896243][ T7185] ? unwind_get_return_address+0x4c/0x90 [ 863.901715][ T7185] ? arch_stack_walk+0xf8/0x140 [ 863.906399][ T7185] ? avc_has_perm_noaudit+0x358/0x450 [ 863.911607][ T7185] ? memcpy+0x56/0x70 [ 863.915426][ T7185] ? memset+0x35/0x40 [ 863.919242][ T7185] ? fsnotify+0x5ad/0x2240 [ 863.923498][ T7185] ? __kasan_check_write+0x14/0x20 [ 863.928443][ T7185] ? _raw_spin_lock+0xa3/0x1b0 [ 863.933043][ T7185] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 863.938253][ T7185] ? _raw_spin_unlock+0x4d/0x70 [ 863.942939][ T7185] ? find_inode_fast+0x459/0x480 [ 863.947715][ T7185] ? __kasan_check_write+0x14/0x20 [ 863.952745][ T7185] ? mutex_unlock+0xa2/0x110 [ 863.957346][ T7185] ? __mutex_lock_slowpath+0x10/0x10 [ 863.962472][ T7185] ? is_bpf_text_address+0x1a2/0x1c0 [ 863.967587][ T7185] ? is_module_text_address+0xe1/0x140 [ 863.972884][ T7185] ? stack_trace_save+0x1f0/0x1f0 [ 863.977744][ T7185] ? __kernel_text_address+0x9a/0x110 [ 863.982950][ T7185] ? unwind_get_return_address+0x4c/0x90 [ 863.988417][ T7185] ? arch_stack_walk+0xf8/0x140 [ 863.993106][ T7185] ? stack_trace_save+0x12d/0x1f0 [ 863.997968][ T7185] ? stack_trace_snprint+0x100/0x100 [ 864.003085][ T7185] ? avc_has_extended_perms+0x718/0x1210 [ 864.008556][ T7185] ? memcpy+0x56/0x70 [ 864.012375][ T7185] ? avc_has_extended_perms+0xb9c/0x1210 [ 864.017840][ T7185] ? kasan_set_track+0x4c/0x70 [ 864.022441][ T7185] ? kasan_set_free_info+0x23/0x40 [ 864.027387][ T7185] ? ____kasan_slab_free+0x126/0x160 [ 864.032508][ T7185] ? __kasan_slab_free+0x11/0x20 [ 864.037284][ T7185] ? slab_free_freelist_hook+0xc9/0x1a0 [ 864.042665][ T7185] ? kmem_cache_free+0x11a/0x2e0 [ 864.047438][ T7185] ? putname+0x10b/0x160 [ 864.051518][ T7185] ? avc_flush+0x2b0/0x2b0 [ 864.055770][ T7185] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 864.060377][ T7185] ? blkdev_common_ioctl+0x570/0x1ec0 [ 864.065581][ T7185] ? kasan_quarantine_put+0x34/0x1b0 [ 864.070700][ T7185] ? blkdev_bszset+0x240/0x240 [ 864.075298][ T7185] ? ioctl_has_perm+0x3df/0x560 [ 864.079985][ T7185] ? has_cap_mac_admin+0xb0/0xb0 [ 864.084759][ T7185] ? kmem_cache_free+0x11a/0x2e0 [ 864.089533][ T7185] ? putname+0x10b/0x160 [ 864.093625][ T7185] ? selinux_file_ioctl+0x3c9/0x530 [ 864.098647][ T7185] ? lo_release+0x200/0x200 [ 864.102984][ T7185] blkdev_ioctl+0x2e9/0x620 [ 864.107325][ T7185] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 864.112625][ T7185] ? __fget_files+0x310/0x370 [ 864.117135][ T7185] block_ioctl+0xb0/0xf0 [ 864.121213][ T7185] ? blkdev_iopoll+0x100/0x100 [ 864.125819][ T7185] __se_sys_ioctl+0x115/0x190 [ 864.130326][ T7185] __x64_sys_ioctl+0x7b/0x90 [ 864.134753][ T7185] do_syscall_64+0x44/0xd0 [ 864.139007][ T7185] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 864.144732][ T7185] RIP: 0033:0x7fd49bff9e97 [ 864.148989][ T7185] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 864.168428][ T7185] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.176672][ T7185] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 864.184482][ T7185] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 17:24:29 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 61) 17:24:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 864.192296][ T7185] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 864.200106][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.207922][ T7185] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 864.215734][ T7185] [ 864.297042][ T1762] usb 4-1: string descriptor 0 read error: -71 [ 864.304882][ T1762] usb 4-1: USB disconnect, device number 90 [ 864.310989][ T1723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.322910][ T7185] loop2: detected capacity change from 0 to 16 [ 864.329015][ T1723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.330705][ T7191] loop1: detected capacity change from 0 to 16 [ 864.339993][ T7192] loop5: detected capacity change from 0 to 16 [ 864.354759][ T7191] erofs: (device loop1): mounted with root inode @ nid 36. [ 864.359872][ T7185] erofs: (device loop2): mounted with root inode @ nid 36. [ 864.369490][ T7192] FAULT_INJECTION: forcing a failure. [ 864.369490][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 864.382077][ T7192] CPU: 1 PID: 7192 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 864.391962][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 864.401856][ T7192] Call Trace: [ 864.404977][ T7192] [ 864.407754][ T7192] dump_stack_lvl+0x151/0x1b7 [ 864.412282][ T7192] ? bfq_pos_tree_add_move+0x43e/0x43e [ 864.417564][ T7192] dump_stack+0x15/0x17 [ 864.421569][ T7192] should_fail+0x3c0/0x510 [ 864.425809][ T7192] __should_failslab+0x9f/0xe0 [ 864.430408][ T7192] should_failslab+0x9/0x20 [ 864.434747][ T7192] kmem_cache_alloc+0x4f/0x2f0 [ 864.439347][ T7192] ? __es_insert_extent+0x800/0x1810 [ 864.444472][ T7192] __es_insert_extent+0x800/0x1810 [ 864.449415][ T7192] ? __kasan_check_write+0x14/0x20 [ 864.454364][ T7192] ext4_es_insert_extent+0x320/0x2e40 [ 864.459576][ T7192] ? ext4_es_scan_clu+0x340/0x340 [ 864.464434][ T7192] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 864.469731][ T7192] ext4_map_blocks+0xebc/0x1e20 [ 864.474416][ T7192] ? ext4_issue_zeroout+0x260/0x260 [ 864.479445][ T7192] ? __kasan_check_write+0x14/0x20 [ 864.484396][ T7192] ? up_read+0x14/0x90 [ 864.488302][ T7192] ext4_getblk+0x19c/0x6f0 [ 864.492554][ T7192] ? ext4_get_block_unwritten+0x40/0x40 [ 864.497934][ T7192] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 864.503313][ T7192] ext4_bread+0x2f/0x180 [ 864.507393][ T7192] ext4_append+0x31b/0x5b0 [ 864.511645][ T7192] ? ext4_init_new_dir+0xa10/0xa10 [ 864.516596][ T7192] ext4_init_new_dir+0x337/0xa10 [ 864.521367][ T7192] ? may_create+0x647/0x8c0 [ 864.525709][ T7192] ? ext4_init_dot_dotdot+0x500/0x500 [ 864.530918][ T7192] ext4_mkdir+0x4fa/0xcf0 [ 864.535080][ T7192] ? ext4_symlink+0xfe0/0xfe0 [ 864.539594][ T7192] ? selinux_inode_mkdir+0x22/0x30 [ 864.544544][ T7192] ? security_inode_mkdir+0xf1/0x130 [ 864.549666][ T7192] vfs_mkdir+0x360/0x580 [ 864.553744][ T7192] do_mkdirat+0x1e8/0x420 [ 864.557919][ T7192] ? vfs_mkdir+0x580/0x580 [ 864.562173][ T7192] ? getname_flags+0x1fb/0x510 [ 864.566761][ T7192] __x64_sys_mkdirat+0x89/0xa0 [ 864.571365][ T7192] do_syscall_64+0x44/0xd0 [ 864.575614][ T7192] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 864.581343][ T7192] RIP: 0033:0x7fe9fd6ce0c7 [ 864.585593][ T7192] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 864.605037][ T7192] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 864.613280][ T7192] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 864.621093][ T7192] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 864.628906][ T7192] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 864.636715][ T7192] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 864.644526][ T7192] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 864.652342][ T7192] [ 864.659799][ T1757] lg-g15 0003:046D:C225.008D: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 864.670809][ T1723] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 864.680692][ T1723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.689815][ T1723] usb 5-1: config 0 descriptor?? [ 864.695258][ T7192] erofs: (device loop5): mounted with root inode @ nid 36. 17:24:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 43) [ 864.856243][ T7193] udc-core: couldn't find an available UDC or it's busy [ 864.865427][ T7193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 865.014780][ T7200] FAULT_INJECTION: forcing a failure. [ 865.014780][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 865.030911][ T7200] CPU: 1 PID: 7200 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 865.040904][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 865.050874][ T7200] Call Trace: [ 865.054001][ T7200] [ 865.056771][ T7200] dump_stack_lvl+0x151/0x1b7 [ 865.061286][ T7200] ? bfq_pos_tree_add_move+0x43e/0x43e [ 865.066581][ T7200] ? selinux_kernfs_init_security+0x1a8/0x760 [ 865.072489][ T7200] dump_stack+0x15/0x17 [ 865.076472][ T7200] should_fail+0x3c0/0x510 [ 865.080731][ T7200] __should_failslab+0x9f/0xe0 [ 865.085500][ T7200] should_failslab+0x9/0x20 [ 865.089841][ T7200] kmem_cache_alloc+0x4f/0x2f0 [ 865.094444][ T7200] ? __kernfs_new_node+0xdb/0x6e0 [ 865.099300][ T7200] __kernfs_new_node+0xdb/0x6e0 [ 865.103987][ T7200] ? down_read_killable+0x250/0x250 [ 865.109023][ T7200] ? kernfs_new_node+0x170/0x170 [ 865.113795][ T7200] ? __kasan_check_write+0x14/0x20 [ 865.118740][ T7200] ? up_write+0x56/0x120 [ 865.122821][ T7200] ? kernfs_activate+0x409/0x420 [ 865.127597][ T7200] kernfs_new_node+0x97/0x170 [ 865.132110][ T7200] __kernfs_create_file+0x4a/0x270 [ 865.137056][ T7200] sysfs_add_file_mode_ns+0x273/0x320 [ 865.142266][ T7200] internal_create_group+0x55e/0xf60 [ 865.147385][ T7200] ? get_super+0x1ee/0x210 [ 865.151637][ T7200] ? sysfs_create_group+0x30/0x30 [ 865.156495][ T7200] ? __kasan_check_write+0x14/0x20 [ 865.161447][ T7200] sysfs_create_group+0x1f/0x30 [ 865.166130][ T7200] loop_configure+0x1077/0x1640 [ 865.170909][ T7200] lo_ioctl+0x8cd/0x25e0 [ 865.174983][ T7200] ? is_bpf_text_address+0x1a2/0x1c0 [ 865.180104][ T7200] ? lo_release+0x200/0x200 [ 865.184444][ T7200] ? stack_trace_save+0x1f0/0x1f0 [ 865.189305][ T7200] ? __kernel_text_address+0x9a/0x110 [ 865.194511][ T7200] ? unwind_get_return_address+0x4c/0x90 [ 865.199980][ T7200] ? arch_stack_walk+0xf8/0x140 [ 865.204666][ T7200] ? avc_has_perm_noaudit+0x358/0x450 [ 865.209875][ T7200] ? memcpy+0x56/0x70 [ 865.213693][ T7200] ? memset+0x35/0x40 [ 865.217513][ T7200] ? fsnotify+0x5ad/0x2240 [ 865.221766][ T7200] ? __kasan_check_write+0x14/0x20 [ 865.226721][ T7200] ? _raw_spin_lock+0xa3/0x1b0 [ 865.231314][ T7200] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 865.236520][ T7200] ? _raw_spin_unlock+0x4d/0x70 [ 865.241233][ T7200] ? find_inode_fast+0x459/0x480 [ 865.245980][ T7200] ? __kasan_check_write+0x14/0x20 [ 865.250927][ T7200] ? mutex_unlock+0xa2/0x110 [ 865.255355][ T7200] ? __mutex_lock_slowpath+0x10/0x10 [ 865.260478][ T7200] ? is_bpf_text_address+0x1a2/0x1c0 [ 865.265597][ T7200] ? is_module_text_address+0xe1/0x140 [ 865.270890][ T7200] ? stack_trace_save+0x1f0/0x1f0 [ 865.275752][ T7200] ? __kernel_text_address+0x9a/0x110 [ 865.280959][ T7200] ? unwind_get_return_address+0x4c/0x90 [ 865.286427][ T7200] ? arch_stack_walk+0xf8/0x140 [ 865.291118][ T7200] ? stack_trace_save+0x12d/0x1f0 [ 865.295972][ T7200] ? stack_trace_snprint+0x100/0x100 [ 865.301105][ T7200] ? avc_has_extended_perms+0x718/0x1210 [ 865.306562][ T7200] ? memcpy+0x56/0x70 [ 865.310380][ T7200] ? avc_has_extended_perms+0xb9c/0x1210 [ 865.315849][ T7200] ? kasan_set_track+0x4c/0x70 [ 865.320449][ T7200] ? kasan_set_free_info+0x23/0x40 [ 865.325396][ T7200] ? ____kasan_slab_free+0x126/0x160 [ 865.330520][ T7200] ? __kasan_slab_free+0x11/0x20 [ 865.335298][ T7200] ? slab_free_freelist_hook+0xc9/0x1a0 [ 865.340672][ T7200] ? kmem_cache_free+0x11a/0x2e0 [ 865.345447][ T7200] ? putname+0x10b/0x160 [ 865.350056][ T7200] ? avc_flush+0x2b0/0x2b0 [ 865.354310][ T7200] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 865.358914][ T7200] ? blkdev_common_ioctl+0x570/0x1ec0 [ 865.364119][ T7200] ? kasan_quarantine_put+0x34/0x1b0 [ 865.369240][ T7200] ? blkdev_bszset+0x240/0x240 [ 865.373926][ T7200] ? ioctl_has_perm+0x3df/0x560 [ 865.378614][ T7200] ? has_cap_mac_admin+0xb0/0xb0 [ 865.383387][ T7200] ? kmem_cache_free+0x11a/0x2e0 [ 865.388176][ T7200] ? putname+0x10b/0x160 [ 865.392238][ T7200] ? selinux_file_ioctl+0x3c9/0x530 [ 865.397272][ T7200] ? lo_release+0x200/0x200 [ 865.401612][ T7200] blkdev_ioctl+0x2e9/0x620 [ 865.405952][ T7200] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 865.411253][ T7200] ? __fget_files+0x310/0x370 [ 865.415847][ T7200] block_ioctl+0xb0/0xf0 [ 865.419928][ T7200] ? blkdev_iopoll+0x100/0x100 [ 865.424524][ T7200] __se_sys_ioctl+0x115/0x190 [ 865.429038][ T7200] __x64_sys_ioctl+0x7b/0x90 [ 865.433465][ T7200] do_syscall_64+0x44/0xd0 [ 865.437719][ T7200] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 865.443447][ T7200] RIP: 0033:0x7fd49bff9e97 [ 865.447704][ T7200] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 865.467140][ T7200] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.475386][ T7200] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 865.483198][ T7200] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 865.491032][ T7200] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 865.498824][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.506633][ T7200] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 865.514447][ T7200] [ 865.517977][ T7200] loop2: detected capacity change from 0 to 16 [ 865.532338][ T7200] erofs: (device loop2): mounted with root inode @ nid 36. [ 865.597029][ T1723] usbhid 5-1:0.0: can't add hid device: -71 [ 865.602829][ T1723] usbhid: probe of 5-1:0.0 failed with error -71 [ 865.619534][ T1723] usb 5-1: USB disconnect, device number 44 17:24:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c783a39b123d0c0b3b6d2cd7260ee21f785336025c1de88a4d5ea09eb8483222f1cad28ed52dd4aa1f834e2cbe846d2ff3461f"}, {&(0x7f0000000400)="47ed42855e5005f1a5ae827d09ac4b601b82c2fb49aa175ee51b00731fdaf66f210442c1a63b9768f962632062a7eaac61049c11541ed9b62aaacf0553b3201ffdb5d27a10c493426b21d5b3c94fd7bbf1bf3c6f7337a9fd857b3e8ff78cbacf71f06b9c135698efd925e3835e14714fc0b7e8b01f92f0b0d01b5c631c1d7535e6c94bc8f895128a8f5c84d17a51a14dc561e849f9cbbbb23ed68f05c3731525ebe390c0239866e8841b85c9b22606acd02840b61a53c3ad49ccff921cfd75fe236230cb517fc46ed37498fc93f47cb6234477aa5c5c0192e284e709fd948cc2ef185e02d67bdc20a4e82a9d2253957fb12cc228dd53831009"}, {&(0x7f0000000300)="d837dedbfd2dae313a2366be9fc3d9b21168b49e7f49e9ad464da2dd34cd5d2ed48576c83d010e86243e0002d075ea7811ad3552f7557a8d58453532d0e54264b8fa8dc6cc8308d7144d56faaaf880a0e35f760cee729c1b3bb854ca081ff6a81d54d415833af4bb6d402009511a4777bbb97d5f24b5f4fb52a4c21193c94447d1e046056ab5facf5e1bb39adfbf0b323de2ce6ecfb000b09bcd8f26154adec91663c8441a98d2aee121be7b00194c08dc73efddfb13ea7e72dcb58018d9c06872ddac6763f64ecdff212c95f9e09f2b0c126f6d3449a66f6ee436d63b500b93a84679ee36cd7ce4decd76f63000"/247}]}}], 0x2cc, 0x20004011) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (rerun: 64) 17:24:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c24000000000010902240001000000000904000001c6166cef6509af570001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:31 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 62) 17:24:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 44) [ 865.884884][ T1723] usb 1-1: USB disconnect, device number 107 [ 865.945960][ T7216] loop5: detected capacity change from 0 to 16 [ 865.952862][ T7216] FAULT_INJECTION: forcing a failure. [ 865.952862][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 865.953090][ T7217] loop1: detected capacity change from 0 to 16 [ 865.965418][ T7216] CPU: 1 PID: 7216 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 865.981238][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 865.991134][ T7216] Call Trace: [ 865.992248][ T7217] erofs: (device loop1): mounted with root inode @ nid 36. [ 865.994252][ T7216] [ 865.994262][ T7216] dump_stack_lvl+0x151/0x1b7 [ 865.994288][ T7216] ? bfq_pos_tree_add_move+0x43e/0x43e [ 866.013886][ T7216] dump_stack+0x15/0x17 [ 866.017868][ T7216] should_fail+0x3c0/0x510 [ 866.022117][ T7216] __should_failslab+0x9f/0xe0 [ 866.026716][ T7216] should_failslab+0x9/0x20 [ 866.031057][ T7216] kmem_cache_alloc+0x4f/0x2f0 [ 866.035655][ T7216] ? __es_insert_extent+0x800/0x1810 [ 866.040777][ T7216] __es_insert_extent+0x800/0x1810 [ 866.045724][ T7216] ? __kasan_check_write+0x14/0x20 [ 866.050681][ T7216] ext4_es_insert_extent+0x320/0x2e40 [ 866.055875][ T7216] ? ext4_es_scan_clu+0x340/0x340 [ 866.060735][ T7216] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 866.066029][ T7216] ext4_map_blocks+0xebc/0x1e20 [ 866.070719][ T7216] ? ext4_issue_zeroout+0x260/0x260 [ 866.075750][ T7216] ? __kasan_check_write+0x14/0x20 [ 866.080699][ T7216] ? up_read+0x14/0x90 [ 866.084605][ T7216] ext4_getblk+0x19c/0x6f0 [ 866.088858][ T7216] ? ext4_get_block_unwritten+0x40/0x40 [ 866.094240][ T7216] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 866.099619][ T7216] ext4_bread+0x2f/0x180 [ 866.103700][ T7216] ext4_append+0x31b/0x5b0 [ 866.107951][ T7216] ? ext4_init_new_dir+0xa10/0xa10 [ 866.112899][ T7216] ext4_init_new_dir+0x337/0xa10 [ 866.117675][ T7216] ? may_create+0x647/0x8c0 [ 866.122012][ T7216] ? ext4_init_dot_dotdot+0x500/0x500 [ 866.127219][ T7216] ext4_mkdir+0x4fa/0xcf0 [ 866.131387][ T7216] ? ext4_symlink+0xfe0/0xfe0 [ 866.135897][ T7216] ? selinux_inode_mkdir+0x22/0x30 [ 866.140846][ T7216] ? security_inode_mkdir+0xf1/0x130 [ 866.145966][ T7216] vfs_mkdir+0x360/0x580 [ 866.150052][ T7216] do_mkdirat+0x1e8/0x420 [ 866.154223][ T7216] ? vfs_mkdir+0x580/0x580 [ 866.158466][ T7216] ? getname_flags+0x1fb/0x510 [ 866.163072][ T7216] __x64_sys_mkdirat+0x89/0xa0 [ 866.167669][ T7216] do_syscall_64+0x44/0xd0 [ 866.171918][ T7216] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 866.177652][ T7216] RIP: 0033:0x7fe9fd6ce0c7 [ 866.181903][ T7216] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 866.201348][ T7216] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 866.209590][ T7216] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6ce0c7 [ 866.217399][ T7216] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 866.225300][ T7216] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 866.233120][ T7216] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 17:24:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 866.240917][ T7216] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 866.248736][ T7216] [ 866.256648][ T7219] loop2: detected capacity change from 0 to 16 [ 866.267753][ T7219] FAULT_INJECTION: forcing a failure. [ 866.267753][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 866.280568][ T7219] CPU: 1 PID: 7219 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 866.290552][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 866.300447][ T7219] Call Trace: [ 866.303571][ T7219] [ 866.306350][ T7219] dump_stack_lvl+0x151/0x1b7 [ 866.310859][ T7219] ? bfq_pos_tree_add_move+0x43e/0x43e [ 866.316159][ T7219] dump_stack+0x15/0x17 [ 866.320155][ T7219] should_fail+0x3c0/0x510 [ 866.324402][ T7219] ? kobject_get_path+0xb8/0x1a0 [ 866.329177][ T7219] __should_failslab+0x9f/0xe0 [ 866.333774][ T7219] should_failslab+0x9/0x20 [ 866.338112][ T7219] __kmalloc+0x6d/0x350 [ 866.342105][ T7219] kobject_get_path+0xb8/0x1a0 [ 866.346706][ T7219] kobject_uevent_env+0x282/0x730 [ 866.351565][ T7219] ? sysfs_create_group+0x30/0x30 [ 866.356428][ T7219] kobject_uevent+0x1f/0x30 [ 866.360764][ T7219] loop_set_size+0x95/0xa0 [ 866.365018][ T7219] loop_configure+0x11c7/0x1640 [ 866.369719][ T7219] lo_ioctl+0x8cd/0x25e0 [ 866.373792][ T7219] ? is_bpf_text_address+0x1a2/0x1c0 [ 866.378907][ T7219] ? lo_release+0x200/0x200 [ 866.383245][ T7219] ? stack_trace_save+0x1f0/0x1f0 [ 866.388103][ T7219] ? __kernel_text_address+0x9a/0x110 [ 866.393316][ T7219] ? unwind_get_return_address+0x4c/0x90 [ 866.398782][ T7219] ? arch_stack_walk+0xf8/0x140 [ 866.403467][ T7219] ? avc_has_perm_noaudit+0x358/0x450 [ 866.407316][ T7216] erofs: (device loop5): mounted with root inode @ nid 36. [ 866.408673][ T7219] ? memcpy+0x56/0x70 [ 866.408698][ T7219] ? memset+0x35/0x40 [ 866.408714][ T7219] ? fsnotify+0x5ad/0x2240 [ 866.427692][ T7219] ? __kasan_check_write+0x14/0x20 [ 866.432630][ T7219] ? _raw_spin_lock+0xa3/0x1b0 [ 866.437232][ T7219] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 866.442440][ T7219] ? _raw_spin_unlock+0x4d/0x70 [ 866.447125][ T7219] ? find_inode_fast+0x459/0x480 [ 866.451904][ T7219] ? __kasan_check_write+0x14/0x20 [ 866.456847][ T7219] ? mutex_unlock+0xa2/0x110 [ 866.461273][ T7219] ? __mutex_lock_slowpath+0x10/0x10 [ 866.466395][ T7219] ? is_bpf_text_address+0x1a2/0x1c0 [ 866.471514][ T7219] ? is_module_text_address+0xe1/0x140 [ 866.476808][ T7219] ? stack_trace_save+0x1f0/0x1f0 [ 866.481668][ T7219] ? __kernel_text_address+0x9a/0x110 [ 866.486876][ T7219] ? unwind_get_return_address+0x4c/0x90 [ 866.492348][ T7219] ? arch_stack_walk+0xf8/0x140 [ 866.497034][ T7219] ? stack_trace_save+0x12d/0x1f0 [ 866.501896][ T7219] ? stack_trace_snprint+0x100/0x100 [ 866.507013][ T7219] ? avc_has_extended_perms+0x718/0x1210 [ 866.512483][ T7219] ? memcpy+0x56/0x70 [ 866.516300][ T7219] ? avc_has_extended_perms+0xb9c/0x1210 [ 866.521768][ T7219] ? kasan_set_track+0x4c/0x70 [ 866.526367][ T7219] ? kasan_set_free_info+0x23/0x40 [ 866.531313][ T7219] ? ____kasan_slab_free+0x126/0x160 [ 866.536436][ T7219] ? __kasan_slab_free+0x11/0x20 [ 866.541215][ T7219] ? slab_free_freelist_hook+0xc9/0x1a0 [ 866.546679][ T7219] ? kmem_cache_free+0x11a/0x2e0 [ 866.547063][ T3441] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 866.551448][ T7219] ? putname+0x10b/0x160 [ 866.551474][ T7219] ? avc_flush+0x2b0/0x2b0 [ 866.551493][ T7219] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 866.571764][ T7219] ? blkdev_common_ioctl+0x570/0x1ec0 [ 866.576971][ T7219] ? kasan_quarantine_put+0x34/0x1b0 [ 866.582089][ T7219] ? blkdev_bszset+0x240/0x240 [ 866.586690][ T7219] ? ioctl_has_perm+0x3df/0x560 [ 866.591380][ T7219] ? has_cap_mac_admin+0xb0/0xb0 [ 866.596322][ T7219] ? kmem_cache_free+0x11a/0x2e0 [ 866.601101][ T7219] ? putname+0x10b/0x160 [ 866.605176][ T7219] ? selinux_file_ioctl+0x3c9/0x530 [ 866.610209][ T7219] ? lo_release+0x200/0x200 [ 866.614557][ T7219] blkdev_ioctl+0x2e9/0x620 [ 866.618889][ T7219] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 866.624187][ T7219] ? __fget_files+0x310/0x370 [ 866.628700][ T7219] block_ioctl+0xb0/0xf0 [ 866.632781][ T7219] ? blkdev_iopoll+0x100/0x100 [ 866.637378][ T7219] __se_sys_ioctl+0x115/0x190 [ 866.641891][ T7219] __x64_sys_ioctl+0x7b/0x90 [ 866.646330][ T7219] do_syscall_64+0x44/0xd0 [ 866.650568][ T7219] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 866.656300][ T7219] RIP: 0033:0x7fd49bff9e97 [ 866.660552][ T7219] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 866.680081][ T7219] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.688335][ T7219] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 17:24:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:32 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 63) [ 866.696136][ T7219] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 866.703945][ T7219] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 866.711757][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.719827][ T7219] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 866.727640][ T7219] [ 866.736127][ T7219] erofs: (device loop2): mounted with root inode @ nid 36. [ 866.797003][ T1762] usb 4-1: new high-speed USB device number 91 using dummy_hcd 17:24:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 45) [ 866.855938][ T7227] loop1: detected capacity change from 0 to 16 [ 866.863275][ T7227] erofs: (device loop1): mounted with root inode @ nid 36. [ 866.878707][ T7228] loop5: detected capacity change from 0 to 16 [ 866.887219][ T7228] FAULT_INJECTION: forcing a failure. [ 866.887219][ T7228] name failslab, interval 1, probability 0, space 0, times 0 [ 866.899825][ T7228] CPU: 1 PID: 7228 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 866.909794][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 866.917084][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.919702][ T7228] Call Trace: [ 866.919712][ T7228] [ 866.919719][ T7228] dump_stack_lvl+0x151/0x1b7 [ 866.919745][ T7228] ? bfq_pos_tree_add_move+0x43e/0x43e [ 866.939246][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.940874][ T7228] ? vmacache_update+0xb7/0x120 [ 866.940902][ T7228] ? do_user_addr_fault+0xad2/0x1220 [ 866.947350][ T3441] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 866.955715][ T7228] dump_stack+0x15/0x17 [ 866.955741][ T7228] should_fail+0x3c0/0x510 [ 866.974653][ T3441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.978369][ T7228] ? __se_sys_mount+0x9b/0x3c0 [ 866.978392][ T7228] __should_failslab+0x9f/0xe0 [ 866.978410][ T7228] should_failslab+0x9/0x20 [ 867.003978][ T7228] __kmalloc_track_caller+0x6c/0x350 [ 867.009098][ T7228] ? strnlen_user+0x130/0x1c0 [ 867.013612][ T7228] strndup_user+0x76/0x150 [ 867.017864][ T7228] __se_sys_mount+0x9b/0x3c0 [ 867.022288][ T7228] ? __x64_sys_mount+0xd0/0xd0 [ 867.026893][ T7228] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 867.032789][ T7228] __x64_sys_mount+0xbf/0xd0 [ 867.037219][ T7228] do_syscall_64+0x44/0xd0 [ 867.041469][ T7228] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 867.047197][ T7228] RIP: 0033:0x7fe9fd6d05da [ 867.051454][ T7228] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 867.071066][ T7228] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 867.079323][ T7228] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 867.087122][ T7228] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 867.094937][ T7228] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 867.102746][ T7228] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 867.110556][ T7228] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 867.118380][ T7228] [ 867.121892][ T1723] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 867.122054][ T3441] usb 5-1: config 0 descriptor?? [ 867.247831][ T7232] loop2: detected capacity change from 0 to 16 [ 867.269013][ T7232] FAULT_INJECTION: forcing a failure. [ 867.269013][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 867.312108][ T7232] CPU: 1 PID: 7232 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 867.322090][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 867.331985][ T7232] Call Trace: [ 867.335109][ T7232] [ 867.337887][ T7232] dump_stack_lvl+0x151/0x1b7 [ 867.342398][ T7232] ? bfq_pos_tree_add_move+0x43e/0x43e [ 867.347700][ T7232] ? vsnprintf+0x1c02/0x1ce0 [ 867.352120][ T7232] dump_stack+0x15/0x17 [ 867.356114][ T7232] should_fail+0x3c0/0x510 [ 867.360369][ T7232] __should_failslab+0x9f/0xe0 [ 867.364966][ T7232] should_failslab+0x9/0x20 [ 867.369306][ T7232] kmem_cache_alloc+0x4f/0x2f0 [ 867.373905][ T7232] ? __alloc_skb+0xbc/0x550 [ 867.378245][ T7232] __alloc_skb+0xbc/0x550 [ 867.382413][ T7232] alloc_uevent_skb+0x7f/0x230 [ 867.387014][ T7232] kobject_uevent_net_broadcast+0x321/0x5a0 [ 867.392741][ T7232] kobject_uevent_env+0x540/0x730 [ 867.397605][ T7232] kobject_uevent+0x1f/0x30 [ 867.401938][ T7232] loop_set_size+0x95/0xa0 [ 867.406195][ T7232] loop_configure+0x11c7/0x1640 [ 867.410881][ T7232] lo_ioctl+0x8cd/0x25e0 [ 867.414962][ T7232] ? is_bpf_text_address+0x1a2/0x1c0 [ 867.420079][ T7232] ? lo_release+0x200/0x200 [ 867.424420][ T7232] ? stack_trace_save+0x1f0/0x1f0 [ 867.429289][ T7232] ? __kernel_text_address+0x9a/0x110 [ 867.434489][ T7232] ? unwind_get_return_address+0x4c/0x90 [ 867.439957][ T7232] ? arch_stack_walk+0xf8/0x140 [ 867.444643][ T7232] ? avc_has_perm_noaudit+0x358/0x450 [ 867.449850][ T7232] ? memcpy+0x56/0x70 [ 867.453668][ T7232] ? memset+0x35/0x40 [ 867.457487][ T7232] ? fsnotify+0x5ad/0x2240 [ 867.461748][ T7232] ? __kasan_check_write+0x14/0x20 [ 867.466687][ T7232] ? _raw_spin_lock+0xa3/0x1b0 [ 867.471289][ T7232] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 867.476497][ T7232] ? _raw_spin_unlock+0x4d/0x70 [ 867.481180][ T7232] ? find_inode_fast+0x459/0x480 [ 867.485962][ T7232] ? __kasan_check_write+0x14/0x20 [ 867.490908][ T7232] ? mutex_unlock+0xa2/0x110 [ 867.495329][ T7232] ? __mutex_lock_slowpath+0x10/0x10 [ 867.500540][ T7232] ? is_bpf_text_address+0x1a2/0x1c0 [ 867.505658][ T7232] ? is_module_text_address+0xe1/0x140 [ 867.510951][ T7232] ? stack_trace_save+0x1f0/0x1f0 [ 867.515813][ T7232] ? __kernel_text_address+0x9a/0x110 [ 867.521039][ T7232] ? unwind_get_return_address+0x4c/0x90 [ 867.526488][ T7232] ? arch_stack_walk+0xf8/0x140 [ 867.531177][ T7232] ? stack_trace_save+0x12d/0x1f0 [ 867.536208][ T7232] ? stack_trace_snprint+0x100/0x100 [ 867.541329][ T7232] ? avc_has_extended_perms+0x718/0x1210 [ 867.546798][ T7232] ? memcpy+0x56/0x70 [ 867.550617][ T7232] ? avc_has_extended_perms+0xb9c/0x1210 [ 867.556087][ T7232] ? kasan_set_track+0x4c/0x70 [ 867.560683][ T7232] ? kasan_set_free_info+0x23/0x40 [ 867.565682][ T7232] ? ____kasan_slab_free+0x126/0x160 [ 867.570751][ T7232] ? __kasan_slab_free+0x11/0x20 [ 867.575525][ T7232] ? slab_free_freelist_hook+0xc9/0x1a0 [ 867.580905][ T7232] ? kmem_cache_free+0x11a/0x2e0 [ 867.585688][ T7232] ? putname+0x10b/0x160 [ 867.589759][ T7232] ? avc_flush+0x2b0/0x2b0 [ 867.594015][ T7232] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 867.598616][ T7232] ? blkdev_common_ioctl+0x570/0x1ec0 [ 867.603823][ T7232] ? kasan_quarantine_put+0x34/0x1b0 [ 867.608943][ T7232] ? blkdev_bszset+0x240/0x240 [ 867.613543][ T7232] ? ioctl_has_perm+0x3df/0x560 [ 867.618230][ T7232] ? has_cap_mac_admin+0xb0/0xb0 [ 867.623003][ T7232] ? kmem_cache_free+0x11a/0x2e0 [ 867.627778][ T7232] ? putname+0x10b/0x160 [ 867.631857][ T7232] ? selinux_file_ioctl+0x3c9/0x530 [ 867.636891][ T7232] ? lo_release+0x200/0x200 [ 867.641232][ T7232] blkdev_ioctl+0x2e9/0x620 [ 867.645574][ T7232] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 867.650863][ T7232] ? __fget_files+0x310/0x370 [ 867.655377][ T7232] block_ioctl+0xb0/0xf0 [ 867.659465][ T7232] ? blkdev_iopoll+0x100/0x100 [ 867.664060][ T7232] __se_sys_ioctl+0x115/0x190 [ 867.668582][ T7232] __x64_sys_ioctl+0x7b/0x90 [ 867.673014][ T7232] do_syscall_64+0x44/0xd0 [ 867.677251][ T7232] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 867.683064][ T7232] RIP: 0033:0x7fd49bff9e97 [ 867.687322][ T7232] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:24:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 867.706765][ T7232] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.715004][ T7232] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 867.722818][ T7232] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 867.730627][ T7232] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 867.738437][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.746249][ T7232] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 867.754063][ T7232] 17:24:33 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 64) [ 867.768829][ T7232] erofs: (device loop2): mounted with root inode @ nid 36. [ 867.817092][ T1762] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 867.830701][ T1762] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.838541][ T7238] loop5: detected capacity change from 0 to 16 [ 867.854421][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 867.866871][ T7239] loop1: detected capacity change from 0 to 16 [ 867.867204][ T7238] FAULT_INJECTION: forcing a failure. [ 867.867204][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 867.876305][ T7239] erofs: (device loop1): mounted with root inode @ nid 36. [ 867.896786][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.914079][ T1762] usb 4-1: config 0 descriptor?? [ 867.917807][ T7238] CPU: 0 PID: 7238 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 867.928827][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 867.938723][ T7238] Call Trace: [ 867.941846][ T7238] [ 867.944709][ T7238] dump_stack_lvl+0x151/0x1b7 [ 867.949221][ T7238] ? bfq_pos_tree_add_move+0x43e/0x43e [ 867.954524][ T7238] dump_stack+0x15/0x17 [ 867.958510][ T7238] should_fail+0x3c0/0x510 [ 867.962772][ T7238] ? __se_sys_mount+0xde/0x3c0 [ 867.967414][ T7238] __should_failslab+0x9f/0xe0 [ 867.971959][ T7238] should_failslab+0x9/0x20 [ 867.976303][ T7238] __kmalloc_track_caller+0x6c/0x350 [ 867.981423][ T7238] ? strnlen_user+0x130/0x1c0 [ 867.985936][ T7238] strndup_user+0x76/0x150 [ 867.990186][ T7238] __se_sys_mount+0xde/0x3c0 [ 867.994616][ T7238] ? __x64_sys_mount+0xd0/0xd0 [ 867.999214][ T7238] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 868.005119][ T7238] __x64_sys_mount+0xbf/0xd0 [ 868.009546][ T7238] do_syscall_64+0x44/0xd0 [ 868.013800][ T7238] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 868.019526][ T7238] RIP: 0033:0x7fe9fd6d05da [ 868.023779][ T7238] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 868.043220][ T7238] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 868.051466][ T7238] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 868.059276][ T7238] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 17:24:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 46) [ 868.067091][ T7238] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 868.074903][ T7238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 868.082800][ T7238] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 868.090787][ T7238] [ 868.097142][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.120032][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.130152][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 868.139261][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.147898][ T1723] usb 1-1: config 0 descriptor?? [ 868.187032][ T3441] usbhid 5-1:0.0: can't add hid device: -71 [ 868.192898][ T3441] usbhid: probe of 5-1:0.0 failed with error -71 [ 868.200771][ T3441] usb 5-1: USB disconnect, device number 45 [ 868.275921][ T7243] loop2: detected capacity change from 0 to 16 [ 868.282134][ T7243] FAULT_INJECTION: forcing a failure. [ 868.282134][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 868.294750][ T7243] CPU: 0 PID: 7243 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 868.304710][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 868.314601][ T7243] Call Trace: [ 868.317725][ T7243] [ 868.320505][ T7243] dump_stack_lvl+0x151/0x1b7 [ 868.325104][ T7243] ? bfq_pos_tree_add_move+0x43e/0x43e [ 868.330405][ T7243] dump_stack+0x15/0x17 [ 868.334390][ T7243] should_fail+0x3c0/0x510 [ 868.338645][ T7243] ? alloc_uevent_skb+0x7f/0x230 [ 868.343416][ T7243] __should_failslab+0x9f/0xe0 [ 868.348027][ T7243] should_failslab+0x9/0x20 [ 868.352356][ T7243] __kmalloc_track_caller+0x6c/0x350 [ 868.357479][ T7243] ? kmem_cache_alloc+0x1c1/0x2f0 [ 868.362343][ T7243] ? __alloc_skb+0xbc/0x550 [ 868.366678][ T7243] ? alloc_uevent_skb+0x7f/0x230 [ 868.371458][ T7243] __alloc_skb+0x10e/0x550 [ 868.375703][ T7243] alloc_uevent_skb+0x7f/0x230 [ 868.380308][ T7243] kobject_uevent_net_broadcast+0x321/0x5a0 [ 868.386033][ T7243] kobject_uevent_env+0x540/0x730 [ 868.390894][ T7243] kobject_uevent+0x1f/0x30 [ 868.395232][ T7243] loop_set_size+0x95/0xa0 [ 868.399498][ T7243] loop_configure+0x11c7/0x1640 [ 868.404173][ T7243] lo_ioctl+0x8cd/0x25e0 [ 868.408254][ T7243] ? is_bpf_text_address+0x1a2/0x1c0 [ 868.413372][ T7243] ? lo_release+0x200/0x200 [ 868.417718][ T7243] ? stack_trace_save+0x1f0/0x1f0 [ 868.422573][ T7243] ? __kernel_text_address+0x9a/0x110 [ 868.427782][ T7243] ? unwind_get_return_address+0x4c/0x90 [ 868.433338][ T7243] ? arch_stack_walk+0xf8/0x140 [ 868.438021][ T7243] ? avc_has_perm_noaudit+0x358/0x450 [ 868.443232][ T7243] ? memcpy+0x56/0x70 [ 868.447054][ T7243] ? memset+0x35/0x40 [ 868.450867][ T7243] ? fsnotify+0x5ad/0x2240 [ 868.455123][ T7243] ? __kasan_check_write+0x14/0x20 [ 868.460070][ T7243] ? _raw_spin_lock+0xa3/0x1b0 [ 868.464675][ T7243] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 868.469876][ T7243] ? _raw_spin_unlock+0x4d/0x70 [ 868.474561][ T7243] ? find_inode_fast+0x459/0x480 [ 868.479336][ T7243] ? __kasan_check_write+0x14/0x20 [ 868.484292][ T7243] ? mutex_unlock+0xa2/0x110 [ 868.488716][ T7243] ? __mutex_lock_slowpath+0x10/0x10 [ 868.493839][ T7243] ? is_bpf_text_address+0x1a2/0x1c0 [ 868.498961][ T7243] ? is_module_text_address+0xe1/0x140 [ 868.504248][ T7243] ? stack_trace_save+0x1f0/0x1f0 [ 868.509106][ T7243] ? __kernel_text_address+0x9a/0x110 [ 868.514318][ T7243] ? unwind_get_return_address+0x4c/0x90 [ 868.519784][ T7243] ? arch_stack_walk+0xf8/0x140 [ 868.524469][ T7243] ? stack_trace_save+0x12d/0x1f0 [ 868.529328][ T7243] ? stack_trace_snprint+0x100/0x100 [ 868.534449][ T7243] ? avc_has_extended_perms+0x718/0x1210 [ 868.539916][ T7243] ? memcpy+0x56/0x70 [ 868.543736][ T7243] ? avc_has_extended_perms+0xb9c/0x1210 [ 868.549204][ T7243] ? kasan_set_track+0x4c/0x70 [ 868.553804][ T7243] ? kasan_set_free_info+0x23/0x40 [ 868.558750][ T7243] ? ____kasan_slab_free+0x126/0x160 [ 868.563872][ T7243] ? __kasan_slab_free+0x11/0x20 [ 868.568647][ T7243] ? slab_free_freelist_hook+0xc9/0x1a0 [ 868.574028][ T7243] ? kmem_cache_free+0x11a/0x2e0 [ 868.578799][ T7243] ? putname+0x10b/0x160 [ 868.582885][ T7243] ? avc_flush+0x2b0/0x2b0 [ 868.587135][ T7243] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 868.591739][ T7243] ? blkdev_common_ioctl+0x570/0x1ec0 [ 868.596941][ T7243] ? kasan_quarantine_put+0x34/0x1b0 [ 868.602063][ T7243] ? blkdev_bszset+0x240/0x240 [ 868.606663][ T7243] ? ioctl_has_perm+0x3df/0x560 [ 868.611352][ T7243] ? has_cap_mac_admin+0xb0/0xb0 [ 868.616125][ T7243] ? kmem_cache_free+0x11a/0x2e0 [ 868.620984][ T7243] ? putname+0x10b/0x160 [ 868.625064][ T7243] ? selinux_file_ioctl+0x3c9/0x530 [ 868.630097][ T7243] ? lo_release+0x200/0x200 [ 868.634438][ T7243] blkdev_ioctl+0x2e9/0x620 [ 868.638777][ T7243] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 868.644068][ T7243] ? __fget_files+0x310/0x370 [ 868.648583][ T7243] block_ioctl+0xb0/0xf0 [ 868.652663][ T7243] ? blkdev_iopoll+0x100/0x100 [ 868.657262][ T7243] __se_sys_ioctl+0x115/0x190 [ 868.661781][ T7243] __x64_sys_ioctl+0x7b/0x90 [ 868.666203][ T7243] do_syscall_64+0x44/0xd0 [ 868.670458][ T7243] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 868.676184][ T7243] RIP: 0033:0x7fd49bff9e97 [ 868.680439][ T7243] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 868.699884][ T7243] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.708125][ T7243] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 868.715935][ T7243] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 868.723745][ T7243] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 868.731557][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.739369][ T7243] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 868.747183][ T7243] [ 868.776429][ T7243] erofs: (device loop2): mounted with root inode @ nid 36. [ 868.820462][ T1723] lg-g15 0003:046D:C225.008E: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 868.837057][ T1762] usb 4-1: string descriptor 0 read error: -71 [ 868.844965][ T1762] usb 4-1: USB disconnect, device number 91 17:24:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x84, {0x84, 0x21, "7d5d3635932ad28f7cb35c1da164a7870fee0795129260fa93227abbfdf2684b3ba554e7195297cebd3a3a4b1ef1623f8286b027166a42c2984e2b6100de4096d026dc04e29339b573bdabaa81f61013770609c520ba868a04a201f2a36517dd437ca4cf2f231b5e8af52ab51aa16e7b8dad4bf783af8498238c8e469ed7f6e010d5"}}, &(0x7f0000000140)={0x0, 0x3, 0x56, @string={0x56, 0x3, "c027c12f904036470c5e3e4e53d3659c0e1a3a67aa2c7cf11c05aebc6352943f90d556e05efadb4a7b90ca34acdbc8591f1eede3799fb8dd2f2a0c699d24230b6a293e6f5e304ad98b972772d938e17065b84294"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "709c51ca16938c1a2aefbbb1464f76b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "45ee2e67a8f4256c186cd7f92415f20e"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0x1, 0x40, 0x7, "1b0442ef", "b08d470a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x8, 0x7b, 0xab, 0x3f, 0x80, 0x401}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x5e, "53700114cffb10bee2a8b0e19f9150a83065999a5177a9cc9941f33efc9dbb659f706d1414cd264ef3b3a6b3b1c9c803d7e0c280f0066369c15b6bc8094c6559e332fdbcb70c4da1d6280d04a059a1781f4fac19ac19210b968da8c101b4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff87}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "98db"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'y]'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:35 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 65) 17:24:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "bf6be78a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 47) 17:24:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x20, 0xc, 0xe1, {0xe1, 0x7, "2e2b7122e2f01d81ca1cc3b637920fc511625e3540242b7c4cffb34be55518e0ebae0e488b11db3e09a5ee17c360e4061008d579da44f0783ce7457bbdc58d2d2fce2ac6158e3c92c16d735ba97f2cb20040c9f59a30d6d80133b09d95d545ad8fdbc60a38f8cb1d563419eba0d75207a5b73a04081b63fb2c7932498ea3e0c9688b92b93538bf87c5371c79ae4dd9f4cdab3411888b16d4c7177baec944834ce2f58ba3fd5d6308b3359463af86320f44f598d677da9e1f88077bd032b286e01c9531f49e99f2f0dbb9e842d6ade01345a6826f9eb6f267e97b6f6046d25d"}}, &(0x7f0000000180)={0x0, 0x3, 0x92, @string={0x92, 0x3, "ea5f1d927d89a3cc723f6ab1626cdfced4b22185c07054fa7fbd0a69a8166052d6facd1e3a55f3e1450e669474afe88acb1b15f67f39137e9740157a5a297d048610f9842bc052129e8f0f8f3d4b5e1ee7469c2fbf23539941b74fccfb10a15b617f14220231c543506c208a31c38fc209b9980af0da9893a72ed9510502dd8f6b2b66fb020e483a2b54c8e4d42c4a2e"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "3c52c894"}, @main=@item_4={0x3, 0x0, 0xb, "fa0609d2"}, @local=@item_012={0x2, 0x2, 0x3, "b5d2"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x1, "29e7"}, @main=@item_4={0x3, 0x0, 0x3, "dfa8a754"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51ea, 0x92, 0x1, {0x22, 0xec1}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x4c, "5e01ec379b535a99c2d4ba0d0ceff52fb07843e2fc195ea18ecbee4a06a080893d52cf9b8fcfd4350909088c3e69603d0ba6dfd96655ee8462c33751ff3e4400e28623f52f8cca241dadff65"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x99, "d45bb6505e6da788b271ae56b54dc2c07ce6e0105e0d23fe64d04fb5a3e572b3273b6227b391cf26b7f3ebb464381db496a8b3fab65a2d904335b392e275d63f4cda185fd8937fa2334262d069cdb745a7d8b0907959b8cc9700c52d71529c5d956d722245a1fb3d415907e8a2281050bd29f79e67c538ff2c944152f9ee8d3ab062ee9dde2008a4f059765b78e4e7c30a4feb275eebd3b0ee"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) [ 869.753804][ T1723] usb 1-1: USB disconnect, device number 108 [ 869.820007][ T7259] loop5: detected capacity change from 0 to 16 [ 869.830352][ T7260] loop1: detected capacity change from 0 to 16 [ 869.837344][ T7260] erofs: (device loop1): mounted with root inode @ nid 36. [ 869.846062][ T7259] FAULT_INJECTION: forcing a failure. [ 869.846062][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 869.859036][ T7259] CPU: 0 PID: 7259 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 869.869010][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 869.878903][ T7259] Call Trace: [ 869.882025][ T7259] [ 869.884804][ T7259] dump_stack_lvl+0x151/0x1b7 [ 869.889326][ T7259] ? bfq_pos_tree_add_move+0x43e/0x43e [ 869.894612][ T7259] dump_stack+0x15/0x17 [ 869.898604][ T7259] should_fail+0x3c0/0x510 [ 869.902941][ T7259] ? __se_sys_mount+0xde/0x3c0 [ 869.907545][ T7259] __should_failslab+0x9f/0xe0 [ 869.912146][ T7259] should_failslab+0x9/0x20 [ 869.916483][ T7259] __kmalloc_track_caller+0x6c/0x350 [ 869.921605][ T7259] ? strnlen_user+0x130/0x1c0 [ 869.926122][ T7259] strndup_user+0x76/0x150 [ 869.930372][ T7259] __se_sys_mount+0xde/0x3c0 [ 869.934801][ T7259] ? __x64_sys_mount+0xd0/0xd0 [ 869.939397][ T7259] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 869.945315][ T7259] __x64_sys_mount+0xbf/0xd0 [ 869.949724][ T7259] do_syscall_64+0x44/0xd0 [ 869.953979][ T7259] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 869.959706][ T7259] RIP: 0033:0x7fe9fd6d05da [ 869.963966][ T7259] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 869.983407][ T7259] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 869.991650][ T7259] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 869.999465][ T7259] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 870.007269][ T7259] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 870.015078][ T7259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 870.022893][ T7259] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 870.030705][ T7259] [ 870.034720][ T7262] loop2: detected capacity change from 0 to 16 [ 870.040830][ T7262] FAULT_INJECTION: forcing a failure. [ 870.040830][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 870.053320][ T757] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 870.053315][ T7262] CPU: 0 PID: 7262 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 870.053342][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 870.060815][ T1762] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 870.070586][ T7262] Call Trace: [ 870.070600][ T7262] [ 870.070607][ T7262] dump_stack_lvl+0x151/0x1b7 [ 870.070634][ T7262] ? bfq_pos_tree_add_move+0x43e/0x43e [ 870.070651][ T7262] dump_stack+0x15/0x17 [ 870.070668][ T7262] should_fail+0x3c0/0x510 [ 870.070686][ T7262] __should_failslab+0x9f/0xe0 [ 870.070706][ T7262] should_failslab+0x9/0x20 [ 870.070723][ T7262] kmem_cache_alloc+0x4f/0x2f0 [ 870.070740][ T7262] ? _raw_read_lock_irqsave+0xb5/0x110 [ 870.070758][ T7262] ? skb_clone+0x1df/0x3d0 [ 870.135035][ T7262] ? _raw_read_lock+0x40/0x40 [ 870.139547][ T7262] skb_clone+0x1df/0x3d0 [ 870.143625][ T7262] netlink_broadcast_filtered+0x638/0x11b0 [ 870.149266][ T7262] ? skb_put+0x10f/0x210 [ 870.153349][ T7262] netlink_broadcast+0x3a/0x50 [ 870.157948][ T7262] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 870.163673][ T7262] kobject_uevent_env+0x540/0x730 [ 870.168536][ T7262] kobject_uevent+0x1f/0x30 [ 870.172875][ T7262] loop_set_size+0x95/0xa0 [ 870.177129][ T7262] loop_configure+0x11c7/0x1640 [ 870.181817][ T7262] lo_ioctl+0x8cd/0x25e0 [ 870.185895][ T7262] ? is_bpf_text_address+0x1a2/0x1c0 [ 870.191015][ T7262] ? lo_release+0x200/0x200 [ 870.195352][ T7262] ? stack_trace_save+0x1f0/0x1f0 [ 870.200218][ T7262] ? __kernel_text_address+0x9a/0x110 [ 870.205424][ T7262] ? unwind_get_return_address+0x4c/0x90 [ 870.210893][ T7262] ? arch_stack_walk+0xf8/0x140 [ 870.215578][ T7262] ? avc_has_perm_noaudit+0x358/0x450 [ 870.220814][ T7262] ? memcpy+0x56/0x70 [ 870.224608][ T7262] ? memset+0x35/0x40 [ 870.228423][ T7262] ? fsnotify+0x5ad/0x2240 [ 870.232674][ T7262] ? __kasan_check_write+0x14/0x20 [ 870.237622][ T7262] ? _raw_spin_lock+0xa3/0x1b0 [ 870.242222][ T7262] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 870.247432][ T7262] ? _raw_spin_unlock+0x4d/0x70 [ 870.252116][ T7262] ? find_inode_fast+0x459/0x480 [ 870.256891][ T7262] ? __kasan_check_write+0x14/0x20 [ 870.261836][ T7262] ? mutex_unlock+0xa2/0x110 [ 870.266265][ T7262] ? __mutex_lock_slowpath+0x10/0x10 [ 870.271387][ T7262] ? is_bpf_text_address+0x1a2/0x1c0 [ 870.276504][ T7262] ? is_module_text_address+0xe1/0x140 [ 870.281801][ T7262] ? stack_trace_save+0x1f0/0x1f0 [ 870.286660][ T7262] ? __kernel_text_address+0x9a/0x110 [ 870.292024][ T7262] ? unwind_get_return_address+0x4c/0x90 [ 870.297484][ T7262] ? arch_stack_walk+0xf8/0x140 [ 870.302175][ T7262] ? stack_trace_save+0x12d/0x1f0 [ 870.307032][ T7262] ? stack_trace_snprint+0x100/0x100 [ 870.312236][ T7262] ? avc_has_extended_perms+0x718/0x1210 [ 870.317719][ T7262] ? memcpy+0x56/0x70 [ 870.321525][ T7262] ? avc_has_extended_perms+0xb9c/0x1210 [ 870.326998][ T7262] ? kasan_set_track+0x4c/0x70 [ 870.331591][ T7262] ? kasan_set_free_info+0x23/0x40 [ 870.336540][ T7262] ? ____kasan_slab_free+0x126/0x160 [ 870.341659][ T7262] ? __kasan_slab_free+0x11/0x20 [ 870.346435][ T7262] ? slab_free_freelist_hook+0xc9/0x1a0 [ 870.351903][ T7262] ? kmem_cache_free+0x11a/0x2e0 [ 870.356689][ T7262] ? putname+0x10b/0x160 [ 870.360756][ T7262] ? avc_flush+0x2b0/0x2b0 [ 870.365010][ T7262] ? do_vfs_ioctl+0xbf3/0x2ac0 [ 870.369622][ T7262] ? blkdev_common_ioctl+0x570/0x1ec0 [ 870.374816][ T7262] ? kasan_quarantine_put+0x34/0x1b0 [ 870.379937][ T7262] ? blkdev_bszset+0x240/0x240 [ 870.384536][ T7262] ? ioctl_has_perm+0x3df/0x560 [ 870.389248][ T7262] ? has_cap_mac_admin+0xb0/0xb0 [ 870.394010][ T7262] ? kmem_cache_free+0x11a/0x2e0 [ 870.398783][ T7262] ? putname+0x10b/0x160 [ 870.402852][ T7262] ? selinux_file_ioctl+0x3c9/0x530 [ 870.407902][ T7262] ? lo_release+0x200/0x200 [ 870.412226][ T7262] blkdev_ioctl+0x2e9/0x620 [ 870.416566][ T7262] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 870.421857][ T7262] ? __fget_files+0x310/0x370 [ 870.426374][ T7262] block_ioctl+0xb0/0xf0 [ 870.430451][ T7262] ? blkdev_iopoll+0x100/0x100 [ 870.435051][ T7262] __se_sys_ioctl+0x115/0x190 [ 870.439566][ T7262] __x64_sys_ioctl+0x7b/0x90 [ 870.443992][ T7262] do_syscall_64+0x44/0xd0 [ 870.448248][ T7262] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 870.453971][ T7262] RIP: 0033:0x7fd49bff9e97 [ 870.458224][ T7262] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 c4 57 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 870.477665][ T7262] RSP: 002b:00007fd49ad2af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 870.485916][ T7262] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd49bff9e97 [ 870.493724][ T7262] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 870.501535][ T7262] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000178 [ 870.509433][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.517244][ T7262] R13: 00007fd49ad2afdc R14: 00007fd49ad2afe0 R15: 0000000020000242 [ 870.525062][ T7262] [ 870.532893][ T7262] erofs: (device loop2): mounted with root inode @ nid 36. 17:24:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 870.596989][ T1723] usb 1-1: new high-speed USB device number 109 using dummy_hcd 17:24:36 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 66) 17:24:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 48) [ 870.706813][ T7267] loop1: detected capacity change from 0 to 16 [ 870.714090][ T7267] erofs: (device loop1): mounted with root inode @ nid 36. [ 870.736906][ T7268] loop5: detected capacity change from 0 to 16 [ 870.743546][ T7268] FAULT_INJECTION: forcing a failure. [ 870.743546][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 870.756166][ T7268] CPU: 0 PID: 7268 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 870.766134][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 870.776028][ T7268] Call Trace: [ 870.779151][ T7268] [ 870.781929][ T7268] dump_stack_lvl+0x151/0x1b7 [ 870.786446][ T7268] ? bfq_pos_tree_add_move+0x43e/0x43e [ 870.791741][ T7268] dump_stack+0x15/0x17 [ 870.795735][ T7268] should_fail+0x3c0/0x510 [ 870.799980][ T7268] ? __se_sys_mount+0x156/0x3c0 [ 870.804756][ T7268] __should_failslab+0x9f/0xe0 [ 870.809356][ T7268] should_failslab+0x9/0x20 [ 870.813695][ T7268] kmem_cache_alloc_trace+0x4a/0x310 [ 870.818815][ T7268] __se_sys_mount+0x156/0x3c0 [ 870.823328][ T7268] ? __x64_sys_mount+0xd0/0xd0 [ 870.827928][ T7268] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 870.833832][ T7268] __x64_sys_mount+0xbf/0xd0 [ 870.838257][ T7268] do_syscall_64+0x44/0xd0 [ 870.842509][ T7268] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 870.848240][ T7268] RIP: 0033:0x7fe9fd6d05da [ 870.852491][ T7268] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 870.867156][ T757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.871930][ T7268] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 870.871958][ T7268] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 870.871971][ T7268] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 870.887281][ T1762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.890971][ T7268] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 870.890988][ T7268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 870.891000][ T7268] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 870.905368][ T757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.906596][ T7268] [ 870.953199][ T1762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.975904][ T1762] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 870.985075][ T1762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.993677][ T1762] usb 5-1: config 0 descriptor?? [ 870.998698][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.009705][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.019512][ T757] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 871.028643][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 871.037771][ T757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.045657][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.055098][ T757] usb 4-1: config 0 descriptor?? [ 871.060668][ T1723] usb 1-1: config 0 descriptor?? [ 871.087968][ T7273] loop2: detected capacity change from 0 to 16 [ 871.105658][ T7273] FAULT_INJECTION: forcing a failure. [ 871.105658][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 871.142550][ T7273] CPU: 0 PID: 7273 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 871.152537][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 871.162430][ T7273] Call Trace: [ 871.165553][ T7273] [ 871.168332][ T7273] dump_stack_lvl+0x151/0x1b7 [ 871.172844][ T7273] ? bfq_pos_tree_add_move+0x43e/0x43e [ 871.178141][ T7273] dump_stack+0x15/0x17 [ 871.182131][ T7273] should_fail+0x3c0/0x510 [ 871.186383][ T7273] __should_failslab+0x9f/0xe0 [ 871.190985][ T7273] should_failslab+0x9/0x20 [ 871.195321][ T7273] kmem_cache_alloc+0x4f/0x2f0 [ 871.199925][ T7273] ? getname_flags+0xba/0x510 [ 871.204438][ T7273] getname_flags+0xba/0x510 [ 871.208780][ T7273] __x64_sys_mkdirat+0x7c/0xa0 [ 871.213380][ T7273] do_syscall_64+0x44/0xd0 [ 871.217630][ T7273] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 871.223355][ T7273] RIP: 0033:0x7fd49bff90c7 [ 871.227612][ T7273] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 871.247049][ T7273] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 871.255295][ T7273] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 871.263104][ T7273] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 871.271025][ T7273] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 871.278831][ T7273] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 871.286644][ T7273] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 871.294460][ T7273] 17:24:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:37 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 67) [ 871.537389][ T1723] hid (null): report_id 0 is invalid [ 871.545025][ T757] lg-g15 0003:046D:C225.008F: item fetching failed at offset 0/1 [ 871.555015][ T1723] lg-g15 0003:046D:C225.0090: report_id 0 is invalid [ 871.566057][ T757] lg-g15: probe of 0003:046D:C225.008F failed with error -22 [ 871.576595][ T1723] lg-g15 0003:046D:C225.0090: item 0 0 1 8 parsing failed [ 871.584954][ T7278] loop5: detected capacity change from 0 to 16 [ 871.591021][ T1762] usbhid 5-1:0.0: can't add hid device: -71 [ 871.596704][ T1762] usbhid: probe of 5-1:0.0 failed with error -71 [ 871.609543][ T7278] FAULT_INJECTION: forcing a failure. [ 871.609543][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 871.623199][ T7279] loop1: detected capacity change from 0 to 16 [ 871.626424][ T1723] lg-g15: probe of 0003:046D:C225.0090 failed with error -22 [ 871.636829][ T7279] erofs: (device loop1): mounted with root inode @ nid 36. [ 871.637075][ T1762] usb 5-1: USB disconnect, device number 46 [ 871.668412][ T7278] CPU: 1 PID: 7278 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 871.678483][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 871.688376][ T7278] Call Trace: [ 871.691509][ T7278] [ 871.694278][ T7278] dump_stack_lvl+0x151/0x1b7 [ 871.698887][ T7278] ? bfq_pos_tree_add_move+0x43e/0x43e [ 871.704440][ T7278] dump_stack+0x15/0x17 [ 871.708431][ T7278] should_fail+0x3c0/0x510 [ 871.712950][ T7278] ? __se_sys_mount+0x156/0x3c0 [ 871.717633][ T7278] __should_failslab+0x9f/0xe0 [ 871.722233][ T7278] should_failslab+0x9/0x20 [ 871.726571][ T7278] kmem_cache_alloc_trace+0x4a/0x310 [ 871.731701][ T7278] __se_sys_mount+0x156/0x3c0 [ 871.736213][ T7278] ? __x64_sys_mount+0xd0/0xd0 [ 871.740809][ T7278] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 871.746711][ T7278] __x64_sys_mount+0xbf/0xd0 [ 871.751135][ T7278] do_syscall_64+0x44/0xd0 [ 871.755389][ T7278] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 871.761117][ T7278] RIP: 0033:0x7fe9fd6d05da [ 871.765369][ T7278] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:24:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 49) [ 871.784814][ T7278] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 871.793054][ T7278] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 871.800866][ T7278] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 871.808678][ T7278] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 871.816488][ T7278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 871.824301][ T7278] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 871.832114][ T7278] [ 871.964884][ T7284] loop2: detected capacity change from 0 to 16 [ 871.981872][ T7284] FAULT_INJECTION: forcing a failure. [ 871.981872][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 872.027631][ T7284] CPU: 1 PID: 7284 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 872.037620][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 872.047511][ T7284] Call Trace: [ 872.050640][ T7284] [ 872.053414][ T7284] dump_stack_lvl+0x151/0x1b7 [ 872.057926][ T7284] ? bfq_pos_tree_add_move+0x43e/0x43e [ 872.063222][ T7284] dump_stack+0x15/0x17 [ 872.067211][ T7284] should_fail+0x3c0/0x510 [ 872.071465][ T7284] __should_failslab+0x9f/0xe0 [ 872.076064][ T7284] should_failslab+0x9/0x20 [ 872.080406][ T7284] kmem_cache_alloc+0x4f/0x2f0 [ 872.085007][ T7284] ? getname_flags+0xba/0x510 [ 872.089518][ T7284] getname_flags+0xba/0x510 [ 872.093857][ T7284] __x64_sys_mkdirat+0x7c/0xa0 [ 872.098459][ T7284] do_syscall_64+0x44/0xd0 [ 872.102714][ T7284] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 872.108437][ T7284] RIP: 0033:0x7fd49bff90c7 [ 872.112694][ T7284] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 872.132133][ T7284] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 872.140378][ T7284] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 872.148190][ T7284] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 872.156000][ T7284] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 872.163814][ T7284] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 872.171624][ T7284] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 872.179460][ T7284] 17:24:38 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 68) 17:24:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x84, {0x84, 0x21, "7d5d3635932ad28f7cb35c1da164a7870fee0795129260fa93227abbfdf2684b3ba554e7195297cebd3a3a4b1ef1623f8286b027166a42c2984e2b6100de4096d026dc04e29339b573bdabaa81f61013770609c520ba868a04a201f2a36517dd437ca4cf2f231b5e8af52ab51aa16e7b8dad4bf783af8498238c8e469ed7f6e010d5"}}, &(0x7f0000000140)={0x0, 0x3, 0x56, @string={0x56, 0x3, "c027c12f904036470c5e3e4e53d3659c0e1a3a67aa2c7cf11c05aebc6352943f90d556e05efadb4a7b90ca34acdbc8591f1eede3799fb8dd2f2a0c699d24230b6a293e6f5e304ad98b972772d938e17065b84294"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "709c51ca16938c1a2aefbbb1464f76b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "45ee2e67a8f4256c186cd7f92415f20e"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0x1, 0x40, 0x7, "1b0442ef", "b08d470a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x8, 0x7b, 0xab, 0x3f, 0x80, 0x401}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x5e, "53700114cffb10bee2a8b0e19f9150a83065999a5177a9cc9941f33efc9dbb659f706d1414cd264ef3b3a6b3b1c9c803d7e0c280f0066369c15b6bc8094c6559e332fdbcb70c4da1d6280d04a059a1781f4fac19ac19210b968da8c101b4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff87}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "98db"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'y]'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 50) 17:24:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x20, 0xc, 0xe1, {0xe1, 0x7, "2e2b7122e2f01d81ca1cc3b637920fc511625e3540242b7c4cffb34be55518e0ebae0e488b11db3e09a5ee17c360e4061008d579da44f0783ce7457bbdc58d2d2fce2ac6158e3c92c16d735ba97f2cb20040c9f59a30d6d80133b09d95d545ad8fdbc60a38f8cb1d563419eba0d75207a5b73a04081b63fb2c7932498ea3e0c9688b92b93538bf87c5371c79ae4dd9f4cdab3411888b16d4c7177baec944834ce2f58ba3fd5d6308b3359463af86320f44f598d677da9e1f88077bd032b286e01c9531f49e99f2f0dbb9e842d6ade01345a6826f9eb6f267e97b6f6046d25d"}}, &(0x7f0000000180)={0x0, 0x3, 0x92, @string={0x92, 0x3, "ea5f1d927d89a3cc723f6ab1626cdfced4b22185c07054fa7fbd0a69a8166052d6facd1e3a55f3e1450e669474afe88acb1b15f67f39137e9740157a5a297d048610f9842bc052129e8f0f8f3d4b5e1ee7469c2fbf23539941b74fccfb10a15b617f14220231c543506c208a31c38fc209b9980af0da9893a72ed9510502dd8f6b2b66fb020e483a2b54c8e4d42c4a2e"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "3c52c894"}, @main=@item_4={0x3, 0x0, 0xb, "fa0609d2"}, @local=@item_012={0x2, 0x2, 0x3, "b5d2"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x1, "29e7"}, @main=@item_4={0x3, 0x0, 0x3, "dfa8a754"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51ea, 0x92, 0x1, {0x22, 0xec1}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x4c, "5e01ec379b535a99c2d4ba0d0ceff52fb07843e2fc195ea18ecbee4a06a080893d52cf9b8fcfd4350909088c3e69603d0ba6dfd96655ee8462c33751ff3e4400e28623f52f8cca241dadff65"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x99, "d45bb6505e6da788b271ae56b54dc2c07ce6e0105e0d23fe64d04fb5a3e572b3273b6227b391cf26b7f3ebb464381db496a8b3fab65a2d904335b392e275d63f4cda185fd8937fa2334262d069cdb745a7d8b0907959b8cc9700c52d71529c5d956d722245a1fb3d415907e8a2281050bd29f79e67c538ff2c944152f9ee8d3ab062ee9dde2008a4f059765b78e4e7c30a4feb275eebd3b0ee"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x20, 0xc, 0xe1, {0xe1, 0x7, "2e2b7122e2f01d81ca1cc3b637920fc511625e3540242b7c4cffb34be55518e0ebae0e488b11db3e09a5ee17c360e4061008d579da44f0783ce7457bbdc58d2d2fce2ac6158e3c92c16d735ba97f2cb20040c9f59a30d6d80133b09d95d545ad8fdbc60a38f8cb1d563419eba0d75207a5b73a04081b63fb2c7932498ea3e0c9688b92b93538bf87c5371c79ae4dd9f4cdab3411888b16d4c7177baec944834ce2f58ba3fd5d6308b3359463af86320f44f598d677da9e1f88077bd032b286e01c9531f49e99f2f0dbb9e842d6ade01345a6826f9eb6f267e97b6f6046d25d"}}, &(0x7f0000000180)={0x0, 0x3, 0x92, @string={0x92, 0x3, "ea5f1d927d89a3cc723f6ab1626cdfced4b22185c07054fa7fbd0a69a8166052d6facd1e3a55f3e1450e669474afe88acb1b15f67f39137e9740157a5a297d048610f9842bc052129e8f0f8f3d4b5e1ee7469c2fbf23539941b74fccfb10a15b617f14220231c543506c208a31c38fc209b9980af0da9893a72ed9510502dd8f6b2b66fb020e483a2b54c8e4d42c4a2e"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "3c52c894"}, @main=@item_4={0x3, 0x0, 0xb, "fa0609d2"}, @local=@item_012={0x2, 0x2, 0x3, "b5d2"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x1, "29e7"}, @main=@item_4={0x3, 0x0, 0x3, "dfa8a754"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51ea, 0x92, 0x1, {0x22, 0xec1}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x4c, "5e01ec379b535a99c2d4ba0d0ceff52fb07843e2fc195ea18ecbee4a06a080893d52cf9b8fcfd4350909088c3e69603d0ba6dfd96655ee8462c33751ff3e4400e28623f52f8cca241dadff65"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x99, "d45bb6505e6da788b271ae56b54dc2c07ce6e0105e0d23fe64d04fb5a3e572b3273b6227b391cf26b7f3ebb464381db496a8b3fab65a2d904335b392e275d63f4cda185fd8937fa2334262d069cdb745a7d8b0907959b8cc9700c52d71529c5d956d722245a1fb3d415907e8a2281050bd29f79e67c538ff2c944152f9ee8d3ab062ee9dde2008a4f059765b78e4e7c30a4feb275eebd3b0ee"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) [ 872.852285][ T1723] usb 1-1: USB disconnect, device number 109 [ 872.858229][ T1762] usb 4-1: USB disconnect, device number 92 [ 872.932989][ T7298] loop1: detected capacity change from 0 to 16 [ 872.939910][ T7300] loop5: detected capacity change from 0 to 16 [ 872.946410][ T7300] FAULT_INJECTION: forcing a failure. [ 872.946410][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 872.960070][ T7298] erofs: (device loop1): mounted with root inode @ nid 36. [ 872.969172][ T7300] CPU: 1 PID: 7300 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 872.979163][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 872.989047][ T7300] Call Trace: [ 872.992168][ T7300] [ 872.994957][ T7300] dump_stack_lvl+0x151/0x1b7 [ 872.999469][ T7300] ? bfq_pos_tree_add_move+0x43e/0x43e [ 873.004755][ T7300] dump_stack+0x15/0x17 [ 873.008747][ T7300] should_fail+0x3c0/0x510 [ 873.012998][ T7300] __should_failslab+0x9f/0xe0 [ 873.017603][ T7300] should_failslab+0x9/0x20 [ 873.021940][ T7300] kmem_cache_alloc+0x4f/0x2f0 [ 873.026540][ T7300] ? exc_page_fault+0x75/0x1a0 [ 873.031138][ T7300] ? getname_flags+0xba/0x510 [ 873.035651][ T7300] getname_flags+0xba/0x510 [ 873.039991][ T7300] user_path_at_empty+0x2e/0x1b0 [ 873.044767][ T7300] __se_sys_mount+0x293/0x3c0 [ 873.049278][ T7300] ? __x64_sys_mount+0xd0/0xd0 [ 873.053879][ T7300] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 873.059780][ T7300] __x64_sys_mount+0xbf/0xd0 [ 873.064206][ T7300] do_syscall_64+0x44/0xd0 [ 873.068460][ T7300] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 873.074186][ T7300] RIP: 0033:0x7fe9fd6d05da [ 873.078441][ T7300] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 873.097882][ T7300] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 873.106242][ T7300] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 873.114055][ T7300] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 873.121865][ T7300] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 873.129673][ T7300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 873.137488][ T7300] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 873.145302][ T7300] [ 873.149302][ T7301] loop2: detected capacity change from 0 to 16 [ 873.157122][ T7301] FAULT_INJECTION: forcing a failure. [ 873.157122][ T7301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.170262][ T7301] CPU: 1 PID: 7301 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 873.180236][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 873.190129][ T7301] Call Trace: [ 873.193245][ T7301] [ 873.196029][ T7301] dump_stack_lvl+0x151/0x1b7 [ 873.200538][ T7301] ? bfq_pos_tree_add_move+0x43e/0x43e [ 873.205841][ T7301] dump_stack+0x15/0x17 [ 873.209826][ T7301] should_fail+0x3c0/0x510 [ 873.214076][ T7301] should_fail_usercopy+0x1a/0x20 [ 873.218998][ T7301] strncpy_from_user+0x24/0x2b0 [ 873.223630][ T7301] getname_flags+0xf2/0x510 [ 873.227974][ T7301] __x64_sys_mkdirat+0x7c/0xa0 [ 873.232565][ T7301] do_syscall_64+0x44/0xd0 [ 873.236819][ T7301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 873.242546][ T7301] RIP: 0033:0x7fd49bff90c7 [ 873.246804][ T7301] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 873.266239][ T7301] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 873.274483][ T7301] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 873.282295][ T7301] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 873.290110][ T7301] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 873.297918][ T7301] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 873.305736][ T7301] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 873.313544][ T7301] [ 873.386986][ T3408] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 873.516997][ T1723] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 873.567047][ T1762] usb 4-1: new high-speed USB device number 93 using dummy_hcd 17:24:39 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 69) 17:24:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 51) [ 873.786013][ T7308] loop5: detected capacity change from 0 to 16 [ 873.797179][ T7310] loop1: detected capacity change from 0 to 16 [ 873.807098][ T3408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.817953][ T7308] FAULT_INJECTION: forcing a failure. [ 873.817953][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 873.830740][ T3408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.840449][ T7310] erofs: (device loop1): mounted with root inode @ nid 36. [ 873.848235][ T7308] CPU: 0 PID: 7308 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 873.853874][ T7311] loop2: detected capacity change from 0 to 16 [ 873.858212][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 873.858228][ T7308] Call Trace: [ 873.858235][ T7308] [ 873.858242][ T7308] dump_stack_lvl+0x151/0x1b7 [ 873.858268][ T7308] ? bfq_pos_tree_add_move+0x43e/0x43e [ 873.858288][ T7308] dump_stack+0x15/0x17 [ 873.858303][ T7308] should_fail+0x3c0/0x510 [ 873.858322][ T7308] __should_failslab+0x9f/0xe0 [ 873.858342][ T7308] should_failslab+0x9/0x20 [ 873.858358][ T7308] kmem_cache_alloc+0x4f/0x2f0 [ 873.877050][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.877325][ T7308] ? exc_page_fault+0x75/0x1a0 [ 873.880201][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.884619][ T7308] ? getname_flags+0xba/0x510 [ 873.884653][ T7308] getname_flags+0xba/0x510 [ 873.896300][ T7311] FAULT_INJECTION: forcing a failure. [ 873.896300][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 873.898161][ T7308] user_path_at_empty+0x2e/0x1b0 [ 873.898185][ T7308] __se_sys_mount+0x293/0x3c0 [ 873.898203][ T7308] ? __x64_sys_mount+0xd0/0xd0 [ 873.898220][ T7308] __x64_sys_mount+0xbf/0xd0 [ 873.910602][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 873.911877][ T7308] do_syscall_64+0x44/0xd0 [ 873.911904][ T7308] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 873.927093][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.927149][ T7308] RIP: 0033:0x7fe9fd6d05da [ 873.944382][ T1762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.945655][ T7308] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 873.945676][ T7308] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 [ 873.972301][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.976442][ T7308] ORIG_RAX: 00000000000000a5 [ 873.976454][ T7308] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 873.976467][ T7308] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 874.000633][ T1762] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 874.005956][ T7308] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 874.005975][ T7308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 874.005986][ T7308] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 874.022787][ T1723] usb 1-1: config 0 descriptor?? [ 874.039201][ T7308] [ 874.041175][ T7311] CPU: 0 PID: 7311 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 874.049478][ T1762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.052910][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 874.052923][ T7311] Call Trace: [ 874.052929][ T7311] [ 874.066339][ T1762] usb 4-1: config 0 descriptor?? [ 874.073043][ T7311] dump_stack_lvl+0x151/0x1b7 [ 874.073069][ T7311] ? bfq_pos_tree_add_move+0x43e/0x43e [ 874.161151][ T7311] ? filename_parentat+0x324/0x6b0 [ 874.166097][ T7311] dump_stack+0x15/0x17 [ 874.170088][ T7311] should_fail+0x3c0/0x510 [ 874.174340][ T7311] __should_failslab+0x9f/0xe0 [ 874.178936][ T7311] should_failslab+0x9/0x20 [ 874.183289][ T7311] kmem_cache_alloc+0x4f/0x2f0 [ 874.187883][ T7311] ? __d_alloc+0x2d/0x6b0 [ 874.192045][ T7311] __d_alloc+0x2d/0x6b0 [ 874.196036][ T7311] d_alloc+0x4b/0x1d0 [ 874.199854][ T7311] __lookup_hash+0xe5/0x290 [ 874.204197][ T7311] filename_create+0x276/0x4f0 [ 874.208795][ T7311] ? kern_path_create+0x1b0/0x1b0 [ 874.213663][ T7311] do_mkdirat+0xc2/0x420 [ 874.217735][ T7311] ? vfs_mkdir+0x580/0x580 [ 874.221986][ T7311] ? getname_flags+0x1fb/0x510 [ 874.226590][ T7311] __x64_sys_mkdirat+0x89/0xa0 [ 874.231189][ T7311] do_syscall_64+0x44/0xd0 [ 874.235439][ T7311] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 874.241171][ T7311] RIP: 0033:0x7fd49bff90c7 [ 874.245512][ T7311] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 874.264946][ T7311] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 874.273277][ T7311] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 874.281088][ T7311] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 874.288899][ T7311] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 874.296719][ T7311] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 874.304522][ T7311] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 874.312336][ T7311] [ 874.316872][ T3408] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 874.326935][ T3408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.335851][ T3408] usb 5-1: config 0 descriptor?? [ 874.387289][ T1723] hid (null): report_id 0 is invalid [ 874.393451][ T1723] lg-g15 0003:046D:C225.0091: report_id 0 is invalid [ 874.408846][ T1723] lg-g15 0003:046D:C225.0091: item 0 0 1 8 parsing failed [ 874.423776][ T1723] lg-g15: probe of 0003:046D:C225.0091 failed with error -22 17:24:40 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 70) 17:24:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 874.579865][ T1762] lg-g15 0003:046D:C225.0092: item fetching failed at offset 0/1 [ 874.599810][ T1762] lg-g15: probe of 0003:046D:C225.0092 failed with error -22 17:24:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 52) [ 874.660971][ T7319] loop5: detected capacity change from 0 to 16 [ 874.672450][ T7319] FAULT_INJECTION: forcing a failure. [ 874.672450][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.685875][ T7322] loop1: detected capacity change from 0 to 16 [ 874.686878][ T7319] CPU: 1 PID: 7319 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 874.701919][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 874.711817][ T7319] Call Trace: [ 874.714939][ T7319] [ 874.717715][ T7319] dump_stack_lvl+0x151/0x1b7 [ 874.722228][ T7319] ? bfq_pos_tree_add_move+0x43e/0x43e [ 874.727525][ T7319] dump_stack+0x15/0x17 [ 874.731522][ T7319] should_fail+0x3c0/0x510 [ 874.735770][ T7319] should_fail_usercopy+0x1a/0x20 [ 874.740628][ T7319] strncpy_from_user+0x24/0x2b0 [ 874.745321][ T7319] getname_flags+0xf2/0x510 [ 874.749658][ T7319] user_path_at_empty+0x2e/0x1b0 [ 874.754428][ T7319] __se_sys_mount+0x293/0x3c0 [ 874.758942][ T7319] ? __x64_sys_mount+0xd0/0xd0 [ 874.763540][ T7319] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 874.769449][ T7319] __x64_sys_mount+0xbf/0xd0 [ 874.773875][ T7319] do_syscall_64+0x44/0xd0 [ 874.778130][ T7319] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 874.783853][ T7319] RIP: 0033:0x7fe9fd6d05da [ 874.788106][ T7319] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 874.807547][ T7319] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 874.815793][ T7319] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 874.823606][ T7319] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 874.831416][ T7319] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 874.839229][ T7319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 874.847040][ T7319] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 874.854080][ T7325] loop2: detected capacity change from 0 to 16 [ 874.854849][ T7319] [ 874.864895][ T7322] erofs: (device loop1): mounted with root inode @ nid 36. [ 874.908457][ T7325] FAULT_INJECTION: forcing a failure. [ 874.908457][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 874.927099][ T3408] usbhid 5-1:0.0: can't add hid device: -71 [ 874.933253][ T3408] usbhid: probe of 5-1:0.0 failed with error -71 [ 874.934917][ T7325] CPU: 1 PID: 7325 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 874.948104][ T3408] usb 5-1: USB disconnect, device number 47 [ 874.949470][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 874.949485][ T7325] Call Trace: [ 874.949490][ T7325] [ 874.949499][ T7325] dump_stack_lvl+0x151/0x1b7 [ 874.975600][ T7325] ? bfq_pos_tree_add_move+0x43e/0x43e [ 874.980900][ T7325] dump_stack+0x15/0x17 [ 874.984883][ T7325] should_fail+0x3c0/0x510 [ 874.989140][ T7325] __should_failslab+0x9f/0xe0 [ 874.993736][ T7325] should_failslab+0x9/0x20 [ 874.998079][ T7325] kmem_cache_alloc+0x4f/0x2f0 [ 875.002680][ T7325] ? security_inode_alloc+0x29/0x140 [ 875.007802][ T7325] security_inode_alloc+0x29/0x140 [ 875.012747][ T7325] inode_init_always+0x717/0x960 [ 875.017531][ T7325] ? ext4_set_test_dummy_encryption+0x220/0x220 [ 875.023680][ T7325] new_inode_pseudo+0x93/0x220 [ 875.028282][ T7325] new_inode+0x28/0x1c0 [ 875.032272][ T7325] __ext4_new_inode+0x29d/0x4780 [ 875.037047][ T7325] ? memset+0x35/0x40 [ 875.040868][ T7325] ? __dquot_initialize+0x241/0xe10 [ 875.045904][ T7325] ? ext4_mark_inode_used+0xc00/0xc00 [ 875.051110][ T7325] ? dquot_initialize+0x20/0x20 [ 875.055798][ T7325] ? may_create+0x647/0x8c0 [ 875.060138][ T7325] ext4_mkdir+0x41a/0xcf0 [ 875.064303][ T7325] ? ext4_symlink+0xfe0/0xfe0 [ 875.068814][ T7325] ? selinux_inode_mkdir+0x22/0x30 [ 875.073778][ T7325] ? security_inode_mkdir+0xf1/0x130 [ 875.078880][ T7325] vfs_mkdir+0x360/0x580 [ 875.082963][ T7325] do_mkdirat+0x1e8/0x420 [ 875.087130][ T7325] ? vfs_mkdir+0x580/0x580 [ 875.091383][ T7325] ? getname_flags+0x1fb/0x510 [ 875.095986][ T7325] __x64_sys_mkdirat+0x89/0xa0 [ 875.100584][ T7325] do_syscall_64+0x44/0xd0 [ 875.104831][ T7325] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 875.110563][ T7325] RIP: 0033:0x7fd49bff90c7 [ 875.114813][ T7325] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 875.134346][ T7325] RSP: 002b:00007fd49ad09f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 875.142597][ T7325] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 875.150404][ T7325] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 875.158211][ T7325] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 875.166025][ T7325] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 875.173832][ T7325] R13: 00000000200001c0 R14: 00007fd49ad09fe0 R15: 0000000020000540 [ 875.181650][ T7325] [ 875.210001][ T7326] udc-core: couldn't find an available UDC or it's busy 17:24:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) [ 875.259771][ T7326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:24:40 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 71) 17:24:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 875.502738][ T7335] loop5: detected capacity change from 0 to 16 [ 875.520748][ T7335] FAULT_INJECTION: forcing a failure. [ 875.520748][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 875.536813][ T7335] CPU: 1 PID: 7335 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 875.546807][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 875.556692][ T7335] Call Trace: [ 875.559817][ T7335] [ 875.562593][ T7335] dump_stack_lvl+0x151/0x1b7 [ 875.567109][ T7335] ? bfq_pos_tree_add_move+0x43e/0x43e [ 875.572410][ T7335] ? avc_has_perm_noaudit+0x2ec/0x450 [ 875.577782][ T7335] dump_stack+0x15/0x17 [ 875.581774][ T7335] should_fail+0x3c0/0x510 [ 875.586027][ T7335] ? alloc_fs_context+0x65/0x830 [ 875.590800][ T7335] __should_failslab+0x9f/0xe0 [ 875.595399][ T7335] should_failslab+0x9/0x20 [ 875.599738][ T7335] kmem_cache_alloc_trace+0x4a/0x310 [ 875.604862][ T7335] alloc_fs_context+0x65/0x830 [ 875.609464][ T7335] ? _raw_read_unlock+0x25/0x40 [ 875.614148][ T7335] ? get_fs_type+0x3f3/0x510 [ 875.618574][ T7335] fs_context_for_mount+0x24/0x30 [ 875.623432][ T7335] do_new_mount+0x15c/0xad0 [ 875.627773][ T7335] ? do_move_mount_old+0x160/0x160 [ 875.632727][ T7335] ? security_capable+0xb2/0xd0 [ 875.637406][ T7335] ? ns_capable+0x8a/0xf0 [ 875.641573][ T7335] path_mount+0x60b/0x1050 [ 875.645828][ T7335] __se_sys_mount+0x2d2/0x3c0 [ 875.650341][ T7335] ? __x64_sys_mount+0xd0/0xd0 [ 875.654940][ T7335] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 875.660844][ T7335] __x64_sys_mount+0xbf/0xd0 [ 875.665267][ T7335] do_syscall_64+0x44/0xd0 [ 875.669526][ T7335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 875.675251][ T7335] RIP: 0033:0x7fe9fd6d05da [ 875.679503][ T7335] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 875.698945][ T7335] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 875.707189][ T7335] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 875.715004][ T7335] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 875.722814][ T7335] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 875.730626][ T7335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 875.738434][ T7335] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 875.746253][ T7335] [ 875.751838][ T7338] loop1: detected capacity change from 0 to 16 [ 875.759721][ T7338] erofs: (device loop1): mounted with root inode @ nid 36. 17:24:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 53) 17:24:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x84, {0x84, 0x21, "7d5d3635932ad28f7cb35c1da164a7870fee0795129260fa93227abbfdf2684b3ba554e7195297cebd3a3a4b1ef1623f8286b027166a42c2984e2b6100de4096d026dc04e29339b573bdabaa81f61013770609c520ba868a04a201f2a36517dd437ca4cf2f231b5e8af52ab51aa16e7b8dad4bf783af8498238c8e469ed7f6e010d5"}}, &(0x7f0000000140)={0x0, 0x3, 0x56, @string={0x56, 0x3, "c027c12f904036470c5e3e4e53d3659c0e1a3a67aa2c7cf11c05aebc6352943f90d556e05efadb4a7b90ca34acdbc8591f1eede3799fb8dd2f2a0c699d24230b6a293e6f5e304ad98b972772d938e17065b84294"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "709c51ca16938c1a2aefbbb1464f76b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "45ee2e67a8f4256c186cd7f92415f20e"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0x1, 0x40, 0x7, "1b0442ef", "b08d470a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x8, 0x7b, 0xab, 0x3f, 0x80, 0x401}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x5e, "53700114cffb10bee2a8b0e19f9150a83065999a5177a9cc9941f33efc9dbb659f706d1414cd264ef3b3a6b3b1c9c803d7e0c280f0066369c15b6bc8094c6559e332fdbcb70c4da1d6280d04a059a1781f4fac19ac19210b968da8c101b4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff87}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "98db"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'y]'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0x5, 0x84, {0x84, 0x21, "7d5d3635932ad28f7cb35c1da164a7870fee0795129260fa93227abbfdf2684b3ba554e7195297cebd3a3a4b1ef1623f8286b027166a42c2984e2b6100de4096d026dc04e29339b573bdabaa81f61013770609c520ba868a04a201f2a36517dd437ca4cf2f231b5e8af52ab51aa16e7b8dad4bf783af8498238c8e469ed7f6e010d5"}}, &(0x7f0000000140)={0x0, 0x3, 0x56, @string={0x56, 0x3, "c027c12f904036470c5e3e4e53d3659c0e1a3a67aa2c7cf11c05aebc6352943f90d556e05efadb4a7b90ca34acdbc8591f1eede3799fb8dd2f2a0c699d24230b6a293e6f5e304ad98b972772d938e17065b84294"}}, &(0x7f00000001c0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "709c51ca16938c1a2aefbbb1464f76b8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "45ee2e67a8f4256c186cd7f92415f20e"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0x1, 0x40, 0x7, "1b0442ef", "b08d470a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x8, 0x7b, 0xab, 0x3f, 0x80, 0x401}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x5e, "53700114cffb10bee2a8b0e19f9150a83065999a5177a9cc9941f33efc9dbb659f706d1414cd264ef3b3a6b3b1c9c803d7e0c280f0066369c15b6bc8094c6559e332fdbcb70c4da1d6280d04a059a1781f4fac19ac19210b968da8c101b4"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x7}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x1, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xff87}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "98db"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, 'y]'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) [ 875.886198][ T1754] usb 1-1: USB disconnect, device number 110 [ 875.926993][ T3408] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 876.002951][ T7344] loop2: detected capacity change from 0 to 16 [ 876.016909][ T7344] FAULT_INJECTION: forcing a failure. [ 876.016909][ T7344] name failslab, interval 1, probability 0, space 0, times 0 [ 876.042523][ T7344] CPU: 1 PID: 7344 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 876.052610][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 876.062501][ T7344] Call Trace: [ 876.065623][ T7344] [ 876.068425][ T7344] dump_stack_lvl+0x151/0x1b7 [ 876.072920][ T7344] ? bfq_pos_tree_add_move+0x43e/0x43e [ 876.078215][ T7344] ? write_boundary_block+0x150/0x150 [ 876.083423][ T7344] dump_stack+0x15/0x17 [ 876.087410][ T7344] should_fail+0x3c0/0x510 [ 876.091664][ T7344] __should_failslab+0x9f/0xe0 [ 876.096263][ T7344] should_failslab+0x9/0x20 [ 876.100605][ T7344] kmem_cache_alloc+0x4f/0x2f0 [ 876.105202][ T7344] ? jbd2__journal_start+0x14f/0x6f0 [ 876.110325][ T7344] jbd2__journal_start+0x14f/0x6f0 [ 876.115269][ T7344] ? __kasan_check_read+0x11/0x20 [ 876.120130][ T7344] __ext4_journal_start_sb+0xf2/0x2a0 [ 876.125340][ T7344] __ext4_new_inode+0x1443/0x4780 [ 876.130205][ T7344] ? ext4_mark_inode_used+0xc00/0xc00 [ 876.135407][ T7344] ? dquot_initialize+0x20/0x20 [ 876.140096][ T7344] ? may_create+0x647/0x8c0 [ 876.144438][ T7344] ext4_mkdir+0x41a/0xcf0 [ 876.148624][ T7344] ? ext4_symlink+0xfe0/0xfe0 [ 876.153119][ T7344] ? selinux_inode_mkdir+0x22/0x30 [ 876.158061][ T7344] ? security_inode_mkdir+0xf1/0x130 [ 876.163181][ T7344] vfs_mkdir+0x360/0x580 [ 876.167264][ T7344] do_mkdirat+0x1e8/0x420 [ 876.171426][ T7344] ? vfs_mkdir+0x580/0x580 [ 876.175680][ T7344] ? getname_flags+0x1fb/0x510 [ 876.180277][ T7344] __x64_sys_mkdirat+0x89/0xa0 [ 876.184886][ T7344] do_syscall_64+0x44/0xd0 [ 876.189134][ T7344] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 876.194862][ T7344] RIP: 0033:0x7fd49bff90c7 [ 876.199113][ T7344] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 876.218554][ T7344] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 876.226800][ T7344] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 876.234618][ T7344] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 876.242422][ T7344] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 876.250233][ T7344] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 876.258134][ T7344] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 876.265947][ T7344] 17:24:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x20, 0xc, 0xe1, {0xe1, 0x7, "2e2b7122e2f01d81ca1cc3b637920fc511625e3540242b7c4cffb34be55518e0ebae0e488b11db3e09a5ee17c360e4061008d579da44f0783ce7457bbdc58d2d2fce2ac6158e3c92c16d735ba97f2cb20040c9f59a30d6d80133b09d95d545ad8fdbc60a38f8cb1d563419eba0d75207a5b73a04081b63fb2c7932498ea3e0c9688b92b93538bf87c5371c79ae4dd9f4cdab3411888b16d4c7177baec944834ce2f58ba3fd5d6308b3359463af86320f44f598d677da9e1f88077bd032b286e01c9531f49e99f2f0dbb9e842d6ade01345a6826f9eb6f267e97b6f6046d25d"}}, &(0x7f0000000180)={0x0, 0x3, 0x92, @string={0x92, 0x3, "ea5f1d927d89a3cc723f6ab1626cdfced4b22185c07054fa7fbd0a69a8166052d6facd1e3a55f3e1450e669474afe88acb1b15f67f39137e9740157a5a297d048610f9842bc052129e8f0f8f3d4b5e1ee7469c2fbf23539941b74fccfb10a15b617f14220231c543506c208a31c38fc209b9980af0da9893a72ed9510502dd8f6b2b66fb020e483a2b54c8e4d42c4a2e"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x0, "3c52c894"}, @main=@item_4={0x3, 0x0, 0xb, "fa0609d2"}, @local=@item_012={0x2, 0x2, 0x3, "b5d2"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_012={0x2, 0x2, 0x1, "29e7"}, @main=@item_4={0x3, 0x0, 0x3, "dfa8a754"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51ea, 0x92, 0x1, {0x22, 0xec1}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0x6, 0x4c, "5e01ec379b535a99c2d4ba0d0ceff52fb07843e2fc195ea18ecbee4a06a080893d52cf9b8fcfd4350909088c3e69603d0ba6dfd96655ee8462c33751ff3e4400e28623f52f8cca241dadff65"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x99, "d45bb6505e6da788b271ae56b54dc2c07ce6e0105e0d23fe64d04fb5a3e572b3273b6227b391cf26b7f3ebb464381db496a8b3fab65a2d904335b392e275d63f4cda185fd8937fa2334262d069cdb745a7d8b0907959b8cc9700c52d71529c5d956d722245a1fb3d415907e8a2281050bd29f79e67c538ff2c944152f9ee8d3ab062ee9dde2008a4f059765b78e4e7c30a4feb275eebd3b0ee"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:41 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 72) 17:24:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 876.302876][ T1723] usb 4-1: USB disconnect, device number 93 [ 876.316007][ T7344] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 876.368138][ T7350] loop5: detected capacity change from 0 to 16 [ 876.377679][ T7350] FAULT_INJECTION: forcing a failure. [ 876.377679][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 876.408699][ T7350] CPU: 1 PID: 7350 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 876.418691][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 876.428595][ T7350] Call Trace: [ 876.431710][ T7350] [ 876.434488][ T7350] dump_stack_lvl+0x151/0x1b7 [ 876.439003][ T7350] ? bfq_pos_tree_add_move+0x43e/0x43e [ 876.444298][ T7350] dump_stack+0x15/0x17 [ 876.448285][ T7350] should_fail+0x3c0/0x510 [ 876.452540][ T7350] ? erofs_init_fs_context+0x98/0x2d0 [ 876.455772][ T7353] loop1: detected capacity change from 0 to 16 [ 876.457747][ T7350] __should_failslab+0x9f/0xe0 [ 876.457774][ T7350] should_failslab+0x9/0x20 [ 876.470044][ T7353] erofs: (device loop1): mounted with root inode @ nid 36. [ 876.473114][ T7350] kmem_cache_alloc_trace+0x4a/0x310 [ 876.485265][ T7350] ? erofs_init_fs_context+0x54/0x2d0 [ 876.490476][ T7350] erofs_init_fs_context+0x98/0x2d0 [ 876.495504][ T7350] alloc_fs_context+0x671/0x830 [ 876.500197][ T7350] fs_context_for_mount+0x24/0x30 [ 876.505051][ T7350] do_new_mount+0x15c/0xad0 [ 876.509390][ T7350] ? do_move_mount_old+0x160/0x160 [ 876.514337][ T7350] ? security_capable+0xb2/0xd0 [ 876.519024][ T7350] ? ns_capable+0x8a/0xf0 [ 876.523191][ T7350] path_mount+0x60b/0x1050 [ 876.527441][ T7350] __se_sys_mount+0x2d2/0x3c0 [ 876.531972][ T7350] ? __x64_sys_mount+0xd0/0xd0 [ 876.536559][ T7350] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 876.542460][ T7350] __x64_sys_mount+0xbf/0xd0 [ 876.546892][ T7350] do_syscall_64+0x44/0xd0 [ 876.551224][ T7350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 876.556951][ T7350] RIP: 0033:0x7fe9fd6d05da [ 876.561208][ T7350] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 876.580650][ T7350] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 876.589068][ T7350] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 876.596884][ T7350] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 876.604689][ T7350] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 876.612503][ T7350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 876.620321][ T7350] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 876.628128][ T7350] [ 876.631655][ T1754] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 876.727234][ T3408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.743637][ T3408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.763076][ T3408] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 17:24:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 54) [ 876.781763][ T3408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.799606][ T3408] usb 5-1: config 0 descriptor?? [ 876.887048][ T1723] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 876.938650][ T7357] loop2: detected capacity change from 0 to 16 [ 876.945239][ T7357] FAULT_INJECTION: forcing a failure. [ 876.945239][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 876.997037][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.010005][ T7357] CPU: 1 PID: 7357 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 877.019982][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 877.029872][ T7357] Call Trace: [ 877.032998][ T7357] [ 877.035776][ T7357] dump_stack_lvl+0x151/0x1b7 [ 877.040287][ T7357] ? bfq_pos_tree_add_move+0x43e/0x43e [ 877.045585][ T7357] dump_stack+0x15/0x17 [ 877.049575][ T7357] should_fail+0x3c0/0x510 [ 877.053828][ T7357] ? sidtab_sid2str_get+0x127/0x2a0 [ 877.058861][ T7357] __should_failslab+0x9f/0xe0 [ 877.063466][ T7357] should_failslab+0x9/0x20 [ 877.067802][ T7357] __kmalloc_track_caller+0x6c/0x350 [ 877.072923][ T7357] kmemdup+0x24/0x50 [ 877.076656][ T7357] sidtab_sid2str_get+0x127/0x2a0 [ 877.081518][ T7357] security_sid_to_context_core+0x2b1/0x490 [ 877.087511][ T7357] security_sid_to_context_force+0x36/0x40 [ 877.093151][ T7357] selinux_inode_init_security+0x705/0xaf0 [ 877.098786][ T7357] ? selinux_inode_free_security+0x200/0x200 [ 877.104604][ T7357] security_inode_init_security+0x16f/0x3c0 [ 877.110329][ T7357] ? ext4_init_security+0x40/0x40 [ 877.115193][ T7357] ? security_dentry_create_files_as+0xd0/0xd0 [ 877.121184][ T7357] ? __ext4_set_acl+0x5f0/0x5f0 [ 877.125867][ T7357] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 877.131336][ T7357] ext4_init_security+0x34/0x40 [ 877.136024][ T7357] __ext4_new_inode+0x37e3/0x4780 [ 877.140885][ T7357] ? ext4_mark_inode_used+0xc00/0xc00 [ 877.146090][ T7357] ? dquot_initialize+0x20/0x20 [ 877.150775][ T7357] ? may_create+0x647/0x8c0 [ 877.155117][ T7357] ext4_mkdir+0x41a/0xcf0 [ 877.159287][ T7357] ? ext4_symlink+0xfe0/0xfe0 [ 877.163793][ T7357] ? selinux_inode_mkdir+0x22/0x30 [ 877.168922][ T7357] ? security_inode_mkdir+0xf1/0x130 [ 877.174036][ T7357] vfs_mkdir+0x360/0x580 [ 877.178116][ T7357] do_mkdirat+0x1e8/0x420 [ 877.182283][ T7357] ? vfs_mkdir+0x580/0x580 [ 877.186536][ T7357] ? getname_flags+0x1fb/0x510 [ 877.191134][ T7357] __x64_sys_mkdirat+0x89/0xa0 [ 877.195734][ T7357] do_syscall_64+0x44/0xd0 [ 877.199993][ T7357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 877.205715][ T7357] RIP: 0033:0x7fd49bff90c7 [ 877.209971][ T7357] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 877.229499][ T7357] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 877.237741][ T7357] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 17:24:42 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 73) [ 877.245553][ T7357] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 877.253366][ T7357] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 877.261176][ T7357] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 877.268987][ T7357] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 877.276804][ T7357] 17:24:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 877.289765][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.311193][ T1754] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 877.333278][ T1754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.341965][ T7360] loop5: detected capacity change from 0 to 16 [ 877.351514][ T7360] FAULT_INJECTION: forcing a failure. [ 877.351514][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 877.359178][ T1754] usb 1-1: config 0 descriptor?? [ 877.390357][ T7360] CPU: 0 PID: 7360 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 877.400340][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 877.410238][ T7360] Call Trace: [ 877.413355][ T7360] [ 877.416141][ T7360] dump_stack_lvl+0x151/0x1b7 [ 877.420656][ T7360] ? bfq_pos_tree_add_move+0x43e/0x43e [ 877.425951][ T7360] dump_stack+0x15/0x17 [ 877.429939][ T7360] should_fail+0x3c0/0x510 [ 877.434190][ T7360] ? vfs_parse_fs_string+0x169/0x2a0 [ 877.439308][ T7360] __should_failslab+0x9f/0xe0 [ 877.443909][ T7360] should_failslab+0x9/0x20 [ 877.448247][ T7360] __kmalloc_track_caller+0x6c/0x350 [ 877.448495][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.453368][ T7360] kmemdup_nul+0x2a/0xa0 [ 877.453393][ T7360] vfs_parse_fs_string+0x169/0x2a0 [ 877.473074][ T7360] ? __init_rwsem+0xd5/0x1c0 [ 877.475075][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.477494][ T7360] ? vfs_parse_fs_param+0x4a0/0x4a0 [ 877.477521][ T7360] do_new_mount+0x22c/0xad0 [ 877.477538][ T7360] ? do_move_mount_old+0x160/0x160 [ 877.477552][ T7360] ? security_capable+0xb2/0xd0 [ 877.499154][ T1723] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 877.501362][ T7360] ? ns_capable+0x8a/0xf0 [ 877.501388][ T7360] path_mount+0x60b/0x1050 [ 877.509374][ T1723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.514903][ T7360] __se_sys_mount+0x2d2/0x3c0 [ 877.514927][ T7360] ? __x64_sys_mount+0xd0/0xd0 [ 877.529529][ T1723] usb 4-1: config 0 descriptor?? [ 877.531132][ T7360] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 877.531161][ T7360] __x64_sys_mount+0xbf/0xd0 [ 877.555450][ T7360] do_syscall_64+0x44/0xd0 [ 877.559702][ T7360] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 877.565426][ T7360] RIP: 0033:0x7fe9fd6d05da [ 877.569679][ T7360] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 877.589126][ T7360] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 877.597460][ T7360] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 877.605362][ T7360] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 877.613172][ T7360] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 877.620987][ T7360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 877.628795][ T7360] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 877.636617][ T7360] [ 877.640846][ T7364] loop1: detected capacity change from 0 to 16 [ 877.648345][ T7364] erofs: (device loop1): mounted with root inode @ nid 36. 17:24:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 55) [ 877.727067][ T3408] usbhid 5-1:0.0: can't add hid device: -71 [ 877.732888][ T3408] usbhid: probe of 5-1:0.0 failed with error -71 [ 877.746683][ T3408] usb 5-1: USB disconnect, device number 48 [ 877.837792][ T1723] lg-g15 0003:046D:C225.0093: item fetching failed at offset 0/1 [ 877.845436][ T1723] lg-g15: probe of 0003:046D:C225.0093 failed with error -22 [ 877.877220][ T1754] hid (null): report_id 0 is invalid [ 877.883296][ T1754] lg-g15 0003:046D:C225.0094: report_id 0 is invalid [ 877.898466][ T1754] lg-g15 0003:046D:C225.0094: item 0 0 1 8 parsing failed [ 877.905574][ T1754] lg-g15: probe of 0003:046D:C225.0094 failed with error -22 17:24:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:43 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 74) 17:24:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 878.181816][ T7369] loop2: detected capacity change from 0 to 16 [ 878.207209][ T7369] FAULT_INJECTION: forcing a failure. [ 878.207209][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 878.221019][ T7374] loop5: detected capacity change from 0 to 16 [ 878.245255][ T7374] FAULT_INJECTION: forcing a failure. [ 878.245255][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 878.271246][ T7369] CPU: 1 PID: 7369 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 878.281239][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 878.291129][ T7369] Call Trace: [ 878.294272][ T7369] [ 878.297032][ T7369] dump_stack_lvl+0x151/0x1b7 [ 878.301569][ T7369] ? bfq_pos_tree_add_move+0x43e/0x43e [ 878.306838][ T7369] ? write_boundary_block+0x150/0x150 [ 878.312046][ T7369] dump_stack+0x15/0x17 [ 878.316037][ T7369] should_fail+0x3c0/0x510 [ 878.320294][ T7369] __should_failslab+0x9f/0xe0 [ 878.324892][ T7369] should_failslab+0x9/0x20 [ 878.329231][ T7369] kmem_cache_alloc+0x4f/0x2f0 [ 878.333831][ T7369] ? jbd2__journal_start+0x14f/0x6f0 [ 878.338956][ T7369] jbd2__journal_start+0x14f/0x6f0 [ 878.343899][ T7369] ? __kasan_check_read+0x11/0x20 [ 878.348765][ T7369] __ext4_journal_start_sb+0xf2/0x2a0 [ 878.353969][ T7369] __ext4_new_inode+0x1443/0x4780 [ 878.358830][ T7369] ? ext4_mark_inode_used+0xc00/0xc00 [ 878.364036][ T7369] ? dquot_initialize+0x20/0x20 [ 878.368720][ T7369] ? may_create+0x647/0x8c0 [ 878.373064][ T7369] ext4_mkdir+0x41a/0xcf0 [ 878.377228][ T7369] ? ext4_symlink+0xfe0/0xfe0 [ 878.381740][ T7369] ? selinux_inode_mkdir+0x22/0x30 [ 878.386687][ T7369] ? security_inode_mkdir+0xf1/0x130 [ 878.391810][ T7369] vfs_mkdir+0x360/0x580 [ 878.395889][ T7369] do_mkdirat+0x1e8/0x420 [ 878.400238][ T7369] ? vfs_mkdir+0x580/0x580 [ 878.404492][ T7369] ? getname_flags+0x1fb/0x510 [ 878.409091][ T7369] __x64_sys_mkdirat+0x89/0xa0 [ 878.413690][ T7369] do_syscall_64+0x44/0xd0 [ 878.417952][ T7369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 878.423765][ T7369] RIP: 0033:0x7fd49bff90c7 [ 878.428015][ T7369] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 878.447639][ T7369] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 878.455881][ T7369] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 878.463695][ T7369] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 878.471506][ T7369] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 878.479316][ T7369] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 878.487135][ T7369] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 878.495030][ T7369] [ 878.498747][ T7377] udc-core: couldn't find an available UDC or it's busy [ 878.506563][ T7379] loop1: detected capacity change from 0 to 16 [ 878.510387][ T7374] CPU: 1 PID: 7374 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 878.513828][ T7377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 878.522518][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 878.530607][ T7379] erofs: (device loop1): mounted with root inode @ nid 36. [ 878.539791][ T7374] Call Trace: [ 878.539803][ T7374] [ 878.539810][ T7374] dump_stack_lvl+0x151/0x1b7 [ 878.539834][ T7374] ? bfq_pos_tree_add_move+0x43e/0x43e [ 878.562531][ T7374] ? avc_has_perm_noaudit+0x358/0x450 [ 878.562756][ T7369] EXT4-fs error (device sda1) in __ext4_new_inode:1085: Out of memory [ 878.568176][ T7374] dump_stack+0x15/0x17 [ 878.568204][ T7374] should_fail+0x3c0/0x510 [ 878.568222][ T7374] __should_failslab+0x9f/0xe0 [ 878.589009][ T7374] should_failslab+0x9/0x20 [ 878.593355][ T7374] kmem_cache_alloc+0x4f/0x2f0 [ 878.597948][ T7374] ? getname_kernel+0x59/0x2e0 [ 878.602546][ T7374] getname_kernel+0x59/0x2e0 [ 878.606984][ T7374] kern_path+0x24/0x1b0 [ 878.610965][ T7374] blkdev_get_by_path+0xc3/0x2d0 [ 878.615743][ T7374] ? bd_finish_claiming+0x230/0x230 [ 878.620774][ T7374] ? vfs_parse_fs_string+0x2a0/0x2a0 [ 878.625981][ T7374] ? vfs_parse_fs_string+0x1dd/0x2a0 [ 878.631102][ T7374] ? __init_rwsem+0xd5/0x1c0 [ 878.635531][ T7374] get_tree_bdev+0xd4/0x680 [ 878.639877][ T7374] ? erofs_release_device_info+0x90/0x90 [ 878.645336][ T7374] erofs_fc_get_tree+0x1c/0x20 [ 878.649937][ T7374] vfs_get_tree+0x88/0x290 [ 878.654189][ T7374] do_new_mount+0x289/0xad0 [ 878.658531][ T7374] ? do_move_mount_old+0x160/0x160 [ 878.663479][ T7374] ? security_capable+0xb2/0xd0 [ 878.668166][ T7374] ? ns_capable+0x8a/0xf0 [ 878.672331][ T7374] path_mount+0x60b/0x1050 [ 878.676585][ T7374] __se_sys_mount+0x2d2/0x3c0 [ 878.681094][ T7374] ? __x64_sys_mount+0xd0/0xd0 [ 878.685694][ T7374] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 878.691598][ T7374] __x64_sys_mount+0xbf/0xd0 [ 878.696027][ T7374] do_syscall_64+0x44/0xd0 [ 878.700278][ T7374] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 878.706003][ T7374] RIP: 0033:0x7fe9fd6d05da [ 878.710261][ T7374] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 878.729703][ T7374] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 878.737945][ T7374] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 878.745843][ T7374] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 878.753657][ T7374] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 878.761465][ T7374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 878.769280][ T7374] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 878.777100][ T7374] [ 878.847032][ T1754] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 878.937013][ T7374] /dev/loop5: Can't open blockdev 17:24:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 56) [ 879.195123][ T7386] loop2: detected capacity change from 0 to 16 [ 879.207071][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.229227][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.234625][ T7386] FAULT_INJECTION: forcing a failure. [ 879.234625][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 879.251392][ T7386] CPU: 0 PID: 7386 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 879.261345][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 879.261753][ T1754] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 879.271233][ T7386] Call Trace: [ 879.271246][ T7386] [ 879.271256][ T7386] dump_stack_lvl+0x151/0x1b7 [ 879.271282][ T7386] ? bfq_pos_tree_add_move+0x43e/0x43e [ 879.271302][ T7386] dump_stack+0x15/0x17 [ 879.300312][ T7386] should_fail+0x3c0/0x510 [ 879.304566][ T7386] __should_failslab+0x9f/0xe0 [ 879.309164][ T7386] should_failslab+0x9/0x20 [ 879.313502][ T7386] kmem_cache_alloc+0x4f/0x2f0 [ 879.318102][ T7386] ? __es_insert_extent+0x800/0x1810 [ 879.319215][ T1754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.323392][ T7386] __es_insert_extent+0x800/0x1810 [ 879.323418][ T7386] ? __kasan_check_write+0x14/0x20 [ 879.341103][ T7386] ? _raw_write_trylock+0x1e0/0x1e0 [ 879.346141][ T7386] ext4_es_insert_extent+0x320/0x2e40 [ 879.351344][ T7386] ? memset+0x35/0x40 [ 879.355347][ T7386] ? ext4_es_scan_clu+0x340/0x340 [ 879.357299][ T1754] usb 5-1: config 0 descriptor?? [ 879.360194][ T7386] ? _raw_read_unlock+0x25/0x40 [ 879.369831][ T7386] ? ext4_es_find_extent_range+0xd2/0x2d0 [ 879.375384][ T7386] ? trace_ext4_ext_convert_to_initialized_fastpath+0x130/0x130 [ 879.382865][ T7386] ext4_ext_map_blocks+0x1f32/0x3cb0 [ 879.387974][ T7386] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 879.393355][ T7386] ? ext4_ext_release+0x10/0x10 [ 879.398041][ T7386] ? __ext4_handle_dirty_metadata+0x2cd/0x820 [ 879.403940][ T7386] ? __kasan_check_write+0x14/0x20 [ 879.408887][ T7386] ? down_read+0xf9/0x230 [ 879.409792][ T1723] usb 4-1: USB disconnect, device number 94 [ 879.413052][ T7386] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 879.413080][ T7386] ext4_map_blocks+0x42c/0x1e20 [ 879.428769][ T7386] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 879.434326][ T7386] ? ext4_issue_zeroout+0x260/0x260 [ 879.439353][ T7386] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 879.444736][ T7386] ext4_append+0x23e/0x5b0 [ 879.448987][ T7386] ? ext4_init_new_dir+0xa10/0xa10 [ 879.453937][ T7386] ext4_init_new_dir+0x337/0xa10 [ 879.458706][ T7386] ? may_create+0x647/0x8c0 [ 879.463049][ T7386] ? ext4_init_dot_dotdot+0x500/0x500 [ 879.468255][ T7386] ext4_mkdir+0x4fa/0xcf0 [ 879.472422][ T7386] ? ext4_symlink+0xfe0/0xfe0 [ 879.476933][ T7386] ? selinux_inode_mkdir+0x22/0x30 [ 879.481879][ T7386] ? security_inode_mkdir+0xf1/0x130 [ 879.487002][ T7386] vfs_mkdir+0x360/0x580 [ 879.491082][ T7386] do_mkdirat+0x1e8/0x420 [ 879.495247][ T7386] ? vfs_mkdir+0x580/0x580 [ 879.499586][ T7386] ? getname_flags+0x1fb/0x510 [ 879.504191][ T7386] __x64_sys_mkdirat+0x89/0xa0 [ 879.508793][ T7386] do_syscall_64+0x44/0xd0 [ 879.513044][ T7386] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 879.518776][ T7386] RIP: 0033:0x7fd49bff90c7 [ 879.523545][ T7386] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 879.542985][ T7386] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 879.551233][ T7386] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 879.559043][ T7386] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 879.566851][ T7386] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 879.574668][ T7386] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 879.582480][ T7386] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 879.590292][ T7386] [ 879.630084][ T7386] erofs: (device loop2): mounted with root inode @ nid 36. 17:24:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x30, 0x5f, {0x5f, 0x7, "f47d1a36b612c9c203796d4f8be37c838afd90fa307cc1575d80be36099100704c55aa9e4d2bf7963aed673c85af8262b890047e6972877b254f9450085bd6d562d3944fca45a5583120ffe396a3d46a4d8728a7ce568d11574699d7c9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x9, "7099f969"}, @main=@item_012={0x1, 0x0, 0xb, "1f"}, @global=@item_012={0x2, 0x1, 0x0, "a961"}, @main=@item_4={0x3, 0x0, 0xc, "62a1ff69"}, @global=@item_4={0x3, 0x1, 0x5, "3c079419"}, @global=@item_4={0x3, 0x1, 0x1, "00d64af3"}, @global=@item_4={0x3, 0x1, 0x2, "f4f4cf32"}, @global=@item_012={0x1, 0x1, 0x8, "cf"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x20}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x44, "404a857540a2962735bc7560a2a8a0df99e9d962383b7dc89ce99cd0153ecb31df1f29070aa579d4e51e81c5257d8ea393abc3e0ed0d76b99531a1751a5b80444c360cdc"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000340)={0x20, 0x1, 0xf3, "3099c1ce09992fb9f1b7d8ee2949473a15a3795ceaa55de4533173f586f8c270a714fc3c6fbbc431f4401049cc0df402ff7639ac3ac321fdb84082b1e313ec1095f3d59cf08900cc54b43f43452021519f023ff9e9779c5ab27f8accd039a01a0d930874be541b83ac96f7ee6695c369e164cfc61c8fd112722c5168cd46d37c89e02f0e15c42b273abd4a76bc46f8c764b6545a128bed4ff274ac82b2619ee1597f87601030063b9f6d8238152c22b447842cb1a514455e1f5a57c1f6b4221e50d657e3cf5bb953f5367fb36303635714d94af625218952e2d34b5092e0bab276ed1c835649a390062248d4cd6dabf755f724"}, &(0x7f0000000440)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:45 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 75) 17:24:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 879.784521][ T3441] usb 1-1: USB disconnect, device number 111 [ 879.860773][ T7396] loop1: detected capacity change from 0 to 16 [ 879.868642][ T7397] loop5: detected capacity change from 0 to 16 [ 879.874887][ T7396] erofs: (device loop1): mounted with root inode @ nid 36. [ 879.881857][ T7397] FAULT_INJECTION: forcing a failure. [ 879.881857][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 879.917044][ T1754] usbhid 5-1:0.0: can't add hid device: -71 [ 879.922934][ T1754] usbhid: probe of 5-1:0.0 failed with error -71 [ 879.929464][ T7397] CPU: 0 PID: 7397 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 879.939443][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 879.947258][ T1754] usb 5-1: USB disconnect, device number 49 [ 879.949420][ T7397] Call Trace: [ 879.949430][ T7397] [ 879.949438][ T7397] dump_stack_lvl+0x151/0x1b7 [ 879.965572][ T7397] ? bfq_pos_tree_add_move+0x43e/0x43e [ 879.970860][ T7397] ? _raw_spin_lock+0xa3/0x1b0 [ 879.975463][ T7397] dump_stack+0x15/0x17 [ 879.979456][ T7397] should_fail+0x3c0/0x510 [ 879.983707][ T7397] ? alloc_super+0x5d/0x7d0 [ 879.988045][ T7397] __should_failslab+0x9f/0xe0 [ 879.992643][ T7397] should_failslab+0x9/0x20 [ 879.996986][ T7397] kmem_cache_alloc_trace+0x4a/0x310 [ 880.002115][ T7397] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 880.007316][ T7397] alloc_super+0x5d/0x7d0 [ 880.011484][ T7397] ? get_tree_bdev+0x680/0x680 [ 880.016086][ T7397] sget_fc+0x236/0x640 [ 880.019984][ T7397] ? test_bdev_super_fc+0x70/0x70 [ 880.024845][ T7397] get_tree_bdev+0x28c/0x680 [ 880.029273][ T7397] ? erofs_release_device_info+0x90/0x90 [ 880.034742][ T7397] erofs_fc_get_tree+0x1c/0x20 [ 880.039340][ T7397] vfs_get_tree+0x88/0x290 [ 880.043597][ T7397] do_new_mount+0x289/0xad0 [ 880.047935][ T7397] ? do_move_mount_old+0x160/0x160 [ 880.052884][ T7397] ? security_capable+0xb2/0xd0 [ 880.057567][ T7397] ? ns_capable+0x8a/0xf0 [ 880.061733][ T7397] path_mount+0x60b/0x1050 [ 880.065989][ T7397] __se_sys_mount+0x2d2/0x3c0 [ 880.070500][ T7397] ? __x64_sys_mount+0xd0/0xd0 [ 880.075100][ T7397] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 880.081002][ T7397] __x64_sys_mount+0xbf/0xd0 [ 880.085431][ T7397] do_syscall_64+0x44/0xd0 [ 880.089681][ T7397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 880.095408][ T7397] RIP: 0033:0x7fe9fd6d05da [ 880.099663][ T7397] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 880.117012][ T1723] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 880.119100][ T7397] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 880.119127][ T7397] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 880.142538][ T7397] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 880.150350][ T7397] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 880.158164][ T7397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 880.165973][ T7397] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 880.173789][ T7397] 17:24:45 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 57) [ 880.366990][ T3441] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 880.477085][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.488429][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.498536][ T1723] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 880.507867][ T1723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.516528][ T1723] usb 4-1: config 0 descriptor?? [ 880.525982][ T7403] loop2: detected capacity change from 0 to 16 [ 880.532708][ T7403] FAULT_INJECTION: forcing a failure. [ 880.532708][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 880.545736][ T7403] CPU: 1 PID: 7403 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 880.555710][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 880.565708][ T7403] Call Trace: [ 880.568819][ T7403] [ 880.571587][ T7403] dump_stack_lvl+0x151/0x1b7 [ 880.576100][ T7403] ? bfq_pos_tree_add_move+0x43e/0x43e [ 880.581394][ T7403] dump_stack+0x15/0x17 [ 880.585393][ T7403] should_fail+0x3c0/0x510 [ 880.589637][ T7403] ? ext4_find_extent+0x249/0xd80 [ 880.594498][ T7403] __should_failslab+0x9f/0xe0 [ 880.599097][ T7403] should_failslab+0x9/0x20 [ 880.603436][ T7403] __kmalloc+0x6d/0x350 [ 880.607438][ T7403] ? __getblk_gfp+0x42/0x7d0 [ 880.611856][ T7403] ext4_find_extent+0x249/0xd80 [ 880.616546][ T7403] ext4_ext_map_blocks+0x22d/0x3cb0 [ 880.621578][ T7403] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 880.626960][ T7403] ? ext4_ext_release+0x10/0x10 [ 880.631656][ T7403] ? __ext4_handle_dirty_metadata+0x2cd/0x820 [ 880.637549][ T7403] ? __kasan_check_write+0x14/0x20 [ 880.642497][ T7403] ? down_read+0xf9/0x230 [ 880.646660][ T7403] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 880.651957][ T7403] ext4_map_blocks+0x42c/0x1e20 [ 880.656644][ T7403] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 880.662283][ T7403] ? ext4_issue_zeroout+0x260/0x260 [ 880.667319][ T7403] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 880.672700][ T7403] ext4_append+0x23e/0x5b0 [ 880.676955][ T7403] ? ext4_init_new_dir+0xa10/0xa10 [ 880.681899][ T7403] ext4_init_new_dir+0x337/0xa10 [ 880.686673][ T7403] ? may_create+0x647/0x8c0 [ 880.691012][ T7403] ? ext4_init_dot_dotdot+0x500/0x500 [ 880.696219][ T7403] ext4_mkdir+0x4fa/0xcf0 [ 880.700389][ T7403] ? ext4_symlink+0xfe0/0xfe0 [ 880.704898][ T7403] ? selinux_inode_mkdir+0x22/0x30 [ 880.709847][ T7403] ? security_inode_mkdir+0xf1/0x130 [ 880.714965][ T7403] vfs_mkdir+0x360/0x580 [ 880.719047][ T7403] do_mkdirat+0x1e8/0x420 [ 880.723223][ T7403] ? vfs_mkdir+0x580/0x580 [ 880.727471][ T7403] ? getname_flags+0x1fb/0x510 [ 880.732185][ T7403] __x64_sys_mkdirat+0x89/0xa0 [ 880.736780][ T7403] do_syscall_64+0x44/0xd0 [ 880.741121][ T7403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 880.746851][ T7403] RIP: 0033:0x7fd49bff90c7 [ 880.751103][ T7403] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:24:46 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 76) 17:24:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 880.770543][ T7403] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 880.778787][ T7403] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 880.786598][ T7403] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 880.794409][ T7403] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 880.802229][ T7403] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 880.810043][ T7403] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 880.817854][ T7403] [ 880.897015][ T1754] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 880.918597][ T7409] loop5: detected capacity change from 0 to 16 [ 880.926843][ T7410] loop1: detected capacity change from 0 to 16 [ 880.936062][ T7409] FAULT_INJECTION: forcing a failure. [ 880.936062][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 880.942507][ T7410] erofs: (device loop1): mounted with root inode @ nid 36. [ 880.980199][ T7409] CPU: 1 PID: 7409 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 880.990188][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 881.000084][ T7409] Call Trace: [ 881.003208][ T7409] [ 881.005987][ T7409] dump_stack_lvl+0x151/0x1b7 [ 881.010503][ T7409] ? bfq_pos_tree_add_move+0x43e/0x43e [ 881.015791][ T7409] ? _raw_spin_lock+0xa3/0x1b0 [ 881.020392][ T7409] dump_stack+0x15/0x17 [ 881.024387][ T7409] should_fail+0x3c0/0x510 [ 881.028639][ T7409] ? alloc_super+0x5d/0x7d0 [ 881.032977][ T7409] __should_failslab+0x9f/0xe0 [ 881.037580][ T7409] should_failslab+0x9/0x20 [ 881.041917][ T7409] kmem_cache_alloc_trace+0x4a/0x310 [ 881.047047][ T7409] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 881.052247][ T7409] alloc_super+0x5d/0x7d0 [ 881.056414][ T7409] ? get_tree_bdev+0x680/0x680 [ 881.061013][ T7409] sget_fc+0x236/0x640 [ 881.064919][ T7409] ? test_bdev_super_fc+0x70/0x70 [ 881.069777][ T7409] get_tree_bdev+0x28c/0x680 [ 881.074206][ T7409] ? erofs_release_device_info+0x90/0x90 [ 881.079678][ T7409] erofs_fc_get_tree+0x1c/0x20 [ 881.084272][ T7409] vfs_get_tree+0x88/0x290 [ 881.088525][ T7409] do_new_mount+0x289/0xad0 [ 881.092867][ T7409] ? do_move_mount_old+0x160/0x160 [ 881.097814][ T7409] ? security_capable+0xb2/0xd0 [ 881.102498][ T7409] ? ns_capable+0x8a/0xf0 [ 881.106666][ T7409] path_mount+0x60b/0x1050 [ 881.110922][ T7409] __se_sys_mount+0x2d2/0x3c0 [ 881.115441][ T7409] ? __x64_sys_mount+0xd0/0xd0 [ 881.120045][ T7409] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 881.125931][ T7409] __x64_sys_mount+0xbf/0xd0 [ 881.130358][ T7409] do_syscall_64+0x44/0xd0 [ 881.134614][ T7409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 881.140339][ T7409] RIP: 0033:0x7fe9fd6d05da [ 881.144598][ T7409] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 881.164052][ T7409] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 881.172282][ T7409] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 881.180093][ T7409] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 881.187906][ T7409] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 881.195723][ T7409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 881.203527][ T7409] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 881.211343][ T7409] [ 881.250138][ T3441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.278530][ T3441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:24:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 58) [ 881.307007][ T3441] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 881.315875][ T3441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.337605][ T3441] usb 1-1: config 0 descriptor?? [ 881.447129][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.463610][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.484429][ T1754] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 881.493693][ T1723] usbhid 4-1:0.0: can't add hid device: -71 [ 881.499676][ T1723] usbhid: probe of 4-1:0.0 failed with error -71 [ 881.514635][ T1723] usb 4-1: USB disconnect, device number 95 [ 881.523828][ T1754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.540517][ T1754] usb 5-1: config 0 descriptor?? [ 881.549180][ T7414] loop2: detected capacity change from 0 to 16 [ 881.559151][ T7414] FAULT_INJECTION: forcing a failure. [ 881.559151][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 881.629103][ T7414] CPU: 0 PID: 7414 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 881.639085][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 881.648976][ T7414] Call Trace: [ 881.652104][ T7414] [ 881.654881][ T7414] dump_stack_lvl+0x151/0x1b7 [ 881.659394][ T7414] ? bfq_pos_tree_add_move+0x43e/0x43e [ 881.664689][ T7414] dump_stack+0x15/0x17 [ 881.668680][ T7414] should_fail+0x3c0/0x510 [ 881.672936][ T7414] __should_failslab+0x9f/0xe0 [ 881.677533][ T7414] should_failslab+0x9/0x20 [ 881.681968][ T7414] kmem_cache_alloc+0x4f/0x2f0 [ 881.686566][ T7414] ? __mark_inode_dirty+0x5fa/0x9d0 [ 881.691607][ T7414] ? ext4_mb_new_blocks+0x4de/0x3c00 [ 881.696719][ T7414] ext4_mb_new_blocks+0x4de/0x3c00 [ 881.701665][ T7414] ? __kasan_kmalloc+0x9/0x10 [ 881.706180][ T7414] ? __kmalloc+0x203/0x350 [ 881.710430][ T7414] ? ext4_mb_pa_callback+0xd0/0xd0 [ 881.715381][ T7414] ? ext4_ext_search_right+0x4d3/0x890 [ 881.720669][ T7414] ? ext4_inode_to_goal_block+0x31e/0x460 [ 881.726235][ T7414] ? ext4_ext_find_goal+0x113/0x200 [ 881.731260][ T7414] ext4_ext_map_blocks+0x17db/0x3cb0 [ 881.736384][ T7414] ? ext4_ext_release+0x10/0x10 [ 881.741069][ T7414] ? ext4_ext_map_blocks+0x2151/0x3cb0 [ 881.746367][ T7414] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 881.751654][ T7414] ext4_map_blocks+0xacd/0x1e20 [ 881.756342][ T7414] ? ext4_issue_zeroout+0x260/0x260 [ 881.761374][ T7414] ? __kasan_check_write+0x14/0x20 [ 881.766323][ T7414] ? up_read+0x14/0x90 [ 881.770228][ T7414] ext4_getblk+0x19c/0x6f0 [ 881.774481][ T7414] ? ext4_get_block_unwritten+0x40/0x40 [ 881.780300][ T7414] ? irqentry_exit+0x30/0x40 [ 881.784724][ T7414] ext4_bread+0x2f/0x180 [ 881.788829][ T7414] ext4_append+0x31b/0x5b0 [ 881.793054][ T7414] ? ext4_init_new_dir+0xa10/0xa10 [ 881.798003][ T7414] ext4_init_new_dir+0x337/0xa10 [ 881.802774][ T7414] ? may_create+0x647/0x8c0 [ 881.807114][ T7414] ? ext4_init_dot_dotdot+0x500/0x500 [ 881.812326][ T7414] ext4_mkdir+0x4fa/0xcf0 [ 881.816489][ T7414] ? ext4_symlink+0xfe0/0xfe0 [ 881.821001][ T7414] ? selinux_inode_mkdir+0x22/0x30 [ 881.825948][ T7414] ? security_inode_mkdir+0xf1/0x130 [ 881.831072][ T7414] vfs_mkdir+0x360/0x580 [ 881.835151][ T7414] do_mkdirat+0x1e8/0x420 [ 881.839314][ T7414] ? vfs_mkdir+0x580/0x580 [ 881.843574][ T7414] ? getname_flags+0x1fb/0x510 [ 881.848170][ T7414] __x64_sys_mkdirat+0x89/0xa0 [ 881.852768][ T7414] do_syscall_64+0x44/0xd0 [ 881.857035][ T7414] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 881.862752][ T7414] RIP: 0033:0x7fd49bff90c7 [ 881.867008][ T7414] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 881.886446][ T7414] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 881.894690][ T7414] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 881.902500][ T7414] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 881.910317][ T7414] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 881.918127][ T7414] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 17:24:47 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 77) 17:24:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 881.925936][ T7414] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 881.933748][ T7414] [ 881.948260][ T3441] lg-g15 0003:046D:C225.0095: item fetching failed at offset 0/1 [ 881.956374][ T3441] lg-g15: probe of 0003:046D:C225.0095 failed with error -22 [ 882.016088][ T7420] loop5: detected capacity change from 0 to 16 [ 882.029830][ T7421] loop1: detected capacity change from 0 to 16 [ 882.040659][ T7420] FAULT_INJECTION: forcing a failure. [ 882.040659][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 882.060414][ T7421] erofs: (device loop1): mounted with root inode @ nid 36. [ 882.078411][ T7420] CPU: 1 PID: 7420 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 882.088400][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 882.098297][ T7420] Call Trace: [ 882.101417][ T7420] [ 882.104194][ T7420] dump_stack_lvl+0x151/0x1b7 [ 882.108708][ T7420] ? bfq_pos_tree_add_move+0x43e/0x43e [ 882.114009][ T7420] ? idr_alloc+0x202/0x2f0 [ 882.118259][ T7420] dump_stack+0x15/0x17 [ 882.122248][ T7420] should_fail+0x3c0/0x510 [ 882.126504][ T7420] ? __list_lru_init+0xae/0x5a0 [ 882.131188][ T7420] __should_failslab+0x9f/0xe0 [ 882.135791][ T7420] should_failslab+0x9/0x20 [ 882.140127][ T7420] kmem_cache_alloc_trace+0x4a/0x310 [ 882.145247][ T7420] __list_lru_init+0xae/0x5a0 [ 882.149768][ T7420] ? prealloc_shrinker+0xeb/0x140 [ 882.154623][ T7420] alloc_super+0x667/0x7d0 [ 882.158876][ T7420] ? get_tree_bdev+0x680/0x680 [ 882.163474][ T7420] sget_fc+0x236/0x640 [ 882.167383][ T7420] ? test_bdev_super_fc+0x70/0x70 [ 882.172243][ T7420] get_tree_bdev+0x28c/0x680 [ 882.176668][ T7420] ? erofs_release_device_info+0x90/0x90 [ 882.182135][ T7420] erofs_fc_get_tree+0x1c/0x20 [ 882.186736][ T7420] vfs_get_tree+0x88/0x290 [ 882.190987][ T7420] do_new_mount+0x289/0xad0 [ 882.195329][ T7420] ? do_move_mount_old+0x160/0x160 [ 882.200276][ T7420] ? security_capable+0xb2/0xd0 [ 882.204974][ T7420] ? ns_capable+0x8a/0xf0 [ 882.209128][ T7420] path_mount+0x60b/0x1050 [ 882.213383][ T7420] __se_sys_mount+0x2d2/0x3c0 [ 882.217911][ T7420] ? __x64_sys_mount+0xd0/0xd0 [ 882.222496][ T7420] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 882.228400][ T7420] __x64_sys_mount+0xbf/0xd0 [ 882.232824][ T7420] do_syscall_64+0x44/0xd0 [ 882.237077][ T7420] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 882.242803][ T7420] RIP: 0033:0x7fe9fd6d05da [ 882.247058][ T7420] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 17:24:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 882.266501][ T7420] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 882.274753][ T7420] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 882.282556][ T7420] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 882.290366][ T7420] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 882.298180][ T7420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 882.305994][ T7420] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 882.313893][ T7420] [ 882.377106][ T1754] usbhid 5-1:0.0: can't add hid device: -71 [ 882.384834][ T1754] usbhid: probe of 5-1:0.0 failed with error -71 [ 882.400362][ T1754] usb 5-1: USB disconnect, device number 50 [ 882.597003][ T3441] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 882.957032][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.969499][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.981518][ T3441] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 882.990760][ T3441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.999535][ T3441] usb 4-1: config 0 descriptor?? 17:24:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x30, 0x5f, {0x5f, 0x7, "f47d1a36b612c9c203796d4f8be37c838afd90fa307cc1575d80be36099100704c55aa9e4d2bf7963aed673c85af8262b890047e6972877b254f9450085bd6d562d3944fca45a5583120ffe396a3d46a4d8728a7ce568d11574699d7c9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x9, "7099f969"}, @main=@item_012={0x1, 0x0, 0xb, "1f"}, @global=@item_012={0x2, 0x1, 0x0, "a961"}, @main=@item_4={0x3, 0x0, 0xc, "62a1ff69"}, @global=@item_4={0x3, 0x1, 0x5, "3c079419"}, @global=@item_4={0x3, 0x1, 0x1, "00d64af3"}, @global=@item_4={0x3, 0x1, 0x2, "f4f4cf32"}, @global=@item_012={0x1, 0x1, 0x8, "cf"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x20}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x44, "404a857540a2962735bc7560a2a8a0df99e9d962383b7dc89ce99cd0153ecb31df1f29070aa579d4e51e81c5257d8ea393abc3e0ed0d76b99531a1751a5b80444c360cdc"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000340)={0x20, 0x1, 0xf3, "3099c1ce09992fb9f1b7d8ee2949473a15a3795ceaa55de4533173f586f8c270a714fc3c6fbbc431f4401049cc0df402ff7639ac3ac321fdb84082b1e313ec1095f3d59cf08900cc54b43f43452021519f023ff9e9779c5ab27f8accd039a01a0d930874be541b83ac96f7ee6695c369e164cfc61c8fd112722c5168cd46d37c89e02f0e15c42b273abd4a76bc46f8c764b6545a128bed4ff274ac82b2619ee1597f87601030063b9f6d8238152c22b447842cb1a514455e1f5a57c1f6b4221e50d657e3cf5bb953f5367fb36303635714d94af625218952e2d34b5092e0bab276ed1c835649a390062248d4cd6dabf755f724"}, &(0x7f0000000440)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 59) 17:24:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:48 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 78) 17:24:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 883.320913][ T3408] usb 1-1: USB disconnect, device number 112 [ 883.398086][ T7436] loop5: detected capacity change from 0 to 16 [ 883.404705][ T7436] FAULT_INJECTION: forcing a failure. [ 883.404705][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 883.418195][ T7437] loop1: detected capacity change from 0 to 16 [ 883.437106][ T7437] erofs: (device loop1): mounted with root inode @ nid 36. [ 883.451833][ T7438] loop2: detected capacity change from 0 to 16 [ 883.458119][ T7436] CPU: 1 PID: 7436 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 883.468131][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 883.468905][ T7438] FAULT_INJECTION: forcing a failure. [ 883.468905][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 883.477987][ T7436] Call Trace: [ 883.478000][ T7436] [ 883.478009][ T7436] dump_stack_lvl+0x151/0x1b7 [ 883.478036][ T7436] ? bfq_pos_tree_add_move+0x43e/0x43e [ 883.478051][ T7436] ? idr_alloc+0x202/0x2f0 [ 883.478070][ T7436] dump_stack+0x15/0x17 [ 883.478083][ T7436] should_fail+0x3c0/0x510 [ 883.478097][ T7436] ? __list_lru_init+0xae/0x5a0 [ 883.478115][ T7436] __should_failslab+0x9f/0xe0 [ 883.527895][ T7436] should_failslab+0x9/0x20 [ 883.532235][ T7436] kmem_cache_alloc_trace+0x4a/0x310 [ 883.537354][ T7436] __list_lru_init+0xae/0x5a0 [ 883.541870][ T7436] ? prealloc_shrinker+0xeb/0x140 [ 883.546728][ T7436] alloc_super+0x667/0x7d0 [ 883.547026][ T3441] usbhid 4-1:0.0: can't add hid device: -71 [ 883.550988][ T7436] ? get_tree_bdev+0x680/0x680 [ 883.551020][ T7436] sget_fc+0x236/0x640 [ 883.551036][ T7436] ? test_bdev_super_fc+0x70/0x70 [ 883.551053][ T7436] get_tree_bdev+0x28c/0x680 [ 883.557147][ T3441] usbhid: probe of 4-1:0.0 failed with error -71 [ 883.561311][ T7436] ? erofs_release_device_info+0x90/0x90 [ 883.561342][ T7436] erofs_fc_get_tree+0x1c/0x20 [ 883.561358][ T7436] vfs_get_tree+0x88/0x290 [ 883.574182][ T3441] usb 4-1: USB disconnect, device number 96 [ 883.575369][ T7436] do_new_mount+0x289/0xad0 [ 883.575396][ T7436] ? do_move_mount_old+0x160/0x160 [ 883.610872][ T7436] ? security_capable+0xb2/0xd0 [ 883.615562][ T7436] ? ns_capable+0x8a/0xf0 [ 883.619748][ T7436] path_mount+0x60b/0x1050 [ 883.623976][ T7436] __se_sys_mount+0x2d2/0x3c0 [ 883.628489][ T7436] ? __x64_sys_mount+0xd0/0xd0 [ 883.633174][ T7436] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 883.639078][ T7436] __x64_sys_mount+0xbf/0xd0 [ 883.643512][ T7436] do_syscall_64+0x44/0xd0 [ 883.647757][ T7436] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 883.653484][ T7436] RIP: 0033:0x7fe9fd6d05da [ 883.657734][ T7436] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 883.677181][ T7436] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 883.685424][ T7436] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 883.693239][ T7436] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 883.701046][ T7436] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 883.708867][ T7436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 883.716670][ T7436] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 883.724486][ T7436] [ 883.727666][ T7438] CPU: 0 PID: 7438 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 883.737645][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 883.747529][ T7438] Call Trace: [ 883.750654][ T7438] [ 883.753439][ T7438] dump_stack_lvl+0x151/0x1b7 [ 883.757953][ T7438] ? bfq_pos_tree_add_move+0x43e/0x43e [ 883.763247][ T7438] ? ext4_mb_initialize_context+0x4c7/0xd80 [ 883.768971][ T7438] dump_stack+0x15/0x17 [ 883.772960][ T7438] should_fail+0x3c0/0x510 [ 883.777219][ T7438] __should_failslab+0x9f/0xe0 [ 883.781821][ T7438] should_failslab+0x9/0x20 [ 883.786155][ T7438] kmem_cache_alloc+0x4f/0x2f0 [ 883.790841][ T7438] ? ext4_mb_new_blocks+0xd81/0x3c00 [ 883.795963][ T7438] ext4_mb_new_blocks+0xd81/0x3c00 [ 883.800910][ T7438] ? __kasan_kmalloc+0x9/0x10 [ 883.805421][ T7438] ? __kmalloc+0x203/0x350 [ 883.809762][ T7438] ? ext4_mb_pa_callback+0xd0/0xd0 [ 883.814710][ T7438] ? ext4_ext_search_right+0x4d3/0x890 [ 883.820001][ T7438] ? ext4_inode_to_goal_block+0x31e/0x460 [ 883.825556][ T7438] ? ext4_ext_find_goal+0x113/0x200 [ 883.830591][ T7438] ext4_ext_map_blocks+0x17db/0x3cb0 [ 883.835715][ T7438] ? ext4_ext_release+0x10/0x10 [ 883.840399][ T7438] ? ext4_ext_map_blocks+0x2151/0x3cb0 [ 883.845694][ T7438] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 883.850990][ T7438] ext4_map_blocks+0xacd/0x1e20 [ 883.855675][ T7438] ? ext4_issue_zeroout+0x260/0x260 [ 883.860720][ T7438] ? __kasan_check_write+0x14/0x20 [ 883.865657][ T7438] ? up_read+0x14/0x90 [ 883.869563][ T7438] ext4_getblk+0x19c/0x6f0 [ 883.873819][ T7438] ? ext4_get_block_unwritten+0x40/0x40 [ 883.879202][ T7438] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 883.884576][ T7438] ext4_bread+0x2f/0x180 [ 883.888662][ T7438] ext4_append+0x31b/0x5b0 [ 883.892908][ T7438] ? ext4_init_new_dir+0xa10/0xa10 [ 883.897861][ T7438] ext4_init_new_dir+0x337/0xa10 [ 883.902644][ T7438] ? may_create+0x647/0x8c0 [ 883.907065][ T7438] ? ext4_init_dot_dotdot+0x500/0x500 [ 883.912363][ T7438] ext4_mkdir+0x4fa/0xcf0 [ 883.916528][ T7438] ? ext4_symlink+0xfe0/0xfe0 [ 883.921037][ T7438] ? selinux_inode_mkdir+0x22/0x30 [ 883.925991][ T7438] ? security_inode_mkdir+0xf1/0x130 [ 883.931107][ T7438] vfs_mkdir+0x360/0x580 [ 883.935188][ T7438] do_mkdirat+0x1e8/0x420 [ 883.939351][ T7438] ? vfs_mkdir+0x580/0x580 [ 883.943603][ T7438] ? getname_flags+0x1fb/0x510 [ 883.948206][ T7438] __x64_sys_mkdirat+0x89/0xa0 [ 883.952806][ T7438] do_syscall_64+0x44/0xd0 [ 883.957058][ T7438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 883.962787][ T7438] RIP: 0033:0x7fd49bff90c7 [ 883.967042][ T7438] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 883.986574][ T7438] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 883.994813][ T7438] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 884.002633][ T7438] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 884.010433][ T7438] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 884.018248][ T7438] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 884.026061][ T7438] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 884.033872][ T7438] [ 884.037315][ T3408] usb 1-1: new high-speed USB device number 113 using dummy_hcd 17:24:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:49 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 79) 17:24:49 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) [ 884.187058][ T1754] usb 5-1: new high-speed USB device number 51 using dummy_hcd 17:24:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 60) [ 884.302765][ T7446] loop1: detected capacity change from 0 to 16 [ 884.311872][ T7446] erofs: (device loop1): mounted with root inode @ nid 36. [ 884.386115][ T7449] loop5: detected capacity change from 0 to 16 [ 884.393063][ T7449] FAULT_INJECTION: forcing a failure. [ 884.393063][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 884.397072][ T3408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.412824][ T7449] CPU: 1 PID: 7449 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 884.426126][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 884.430998][ T3408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.436016][ T7449] Call Trace: [ 884.436024][ T7449] [ 884.436031][ T7449] dump_stack_lvl+0x151/0x1b7 [ 884.456314][ T7449] ? bfq_pos_tree_add_move+0x43e/0x43e [ 884.461537][ T7449] dump_stack+0x15/0x17 [ 884.461809][ T3408] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 884.465523][ T7449] should_fail+0x3c0/0x510 [ 884.478636][ T7449] ? __list_lru_init+0xae/0x5a0 [ 884.483320][ T7449] __should_failslab+0x9f/0xe0 [ 884.487341][ T3408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.487914][ T7449] should_failslab+0x9/0x20 [ 884.500072][ T7449] kmem_cache_alloc_trace+0x4a/0x310 [ 884.504962][ T3408] usb 1-1: config 0 descriptor?? [ 884.505191][ T7449] __list_lru_init+0xae/0x5a0 [ 884.514479][ T7449] alloc_super+0x696/0x7d0 [ 884.517088][ T3441] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 884.518727][ T7449] ? get_tree_bdev+0x680/0x680 [ 884.530709][ T7449] sget_fc+0x236/0x640 [ 884.534615][ T7449] ? test_bdev_super_fc+0x70/0x70 [ 884.539511][ T7449] get_tree_bdev+0x28c/0x680 [ 884.543899][ T7449] ? erofs_release_device_info+0x90/0x90 [ 884.549370][ T7449] erofs_fc_get_tree+0x1c/0x20 [ 884.553969][ T7449] vfs_get_tree+0x88/0x290 [ 884.558219][ T7449] do_new_mount+0x289/0xad0 [ 884.562559][ T7449] ? do_move_mount_old+0x160/0x160 [ 884.567594][ T7449] ? security_capable+0xb2/0xd0 [ 884.572280][ T7449] ? ns_capable+0x8a/0xf0 [ 884.576446][ T7449] path_mount+0x60b/0x1050 [ 884.580700][ T7449] __se_sys_mount+0x2d2/0x3c0 [ 884.585213][ T7449] ? __x64_sys_mount+0xd0/0xd0 [ 884.589814][ T7449] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 884.595713][ T7449] __x64_sys_mount+0xbf/0xd0 [ 884.600145][ T7449] do_syscall_64+0x44/0xd0 [ 884.604393][ T7449] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 884.610120][ T7449] RIP: 0033:0x7fe9fd6d05da [ 884.614393][ T7449] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 884.633969][ T7449] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 884.642205][ T7449] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 884.650018][ T7449] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 884.657827][ T7449] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 884.665637][ T7449] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 884.673544][ T7449] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 884.681353][ T7449] [ 884.687931][ T7451] loop2: detected capacity change from 0 to 16 [ 884.708499][ T7451] FAULT_INJECTION: forcing a failure. [ 884.708499][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 884.747041][ T7451] CPU: 0 PID: 7451 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 884.757028][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 884.766930][ T7451] Call Trace: [ 884.770049][ T7451] [ 884.772823][ T7451] dump_stack_lvl+0x151/0x1b7 [ 884.777335][ T7451] ? bfq_pos_tree_add_move+0x43e/0x43e [ 884.782630][ T7451] ? ext4_mb_initialize_context+0x4c7/0xd80 [ 884.788360][ T7451] dump_stack+0x15/0x17 [ 884.792350][ T7451] should_fail+0x3c0/0x510 [ 884.796604][ T7451] __should_failslab+0x9f/0xe0 [ 884.801205][ T7451] should_failslab+0x9/0x20 [ 884.805544][ T7451] kmem_cache_alloc+0x4f/0x2f0 [ 884.810145][ T7451] ? ext4_mb_new_blocks+0xd81/0x3c00 [ 884.815267][ T7451] ext4_mb_new_blocks+0xd81/0x3c00 [ 884.820221][ T7451] ? __kasan_kmalloc+0x9/0x10 [ 884.824723][ T7451] ? __kmalloc+0x203/0x350 [ 884.828974][ T7451] ? ext4_mb_pa_callback+0xd0/0xd0 [ 884.833929][ T7451] ? ext4_ext_search_right+0x4d3/0x890 [ 884.839217][ T7451] ? ext4_inode_to_goal_block+0x31e/0x460 [ 884.844769][ T7451] ? ext4_ext_find_goal+0x113/0x200 [ 884.849806][ T7451] ext4_ext_map_blocks+0x17db/0x3cb0 [ 884.854928][ T7451] ? ext4_ext_release+0x10/0x10 [ 884.859615][ T7451] ? ext4_ext_map_blocks+0x2151/0x3cb0 [ 884.864908][ T7451] ? ext4_es_lookup_extent+0x3c5/0x9d0 [ 884.870201][ T7451] ext4_map_blocks+0xacd/0x1e20 [ 884.874893][ T7451] ? ext4_issue_zeroout+0x260/0x260 [ 884.879924][ T7451] ? __kasan_check_write+0x14/0x20 [ 884.885043][ T7451] ? up_read+0x14/0x90 [ 884.888948][ T7451] ext4_getblk+0x19c/0x6f0 [ 884.893205][ T7451] ? ext4_get_block_unwritten+0x40/0x40 [ 884.898586][ T7451] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 884.903965][ T7451] ext4_bread+0x2f/0x180 [ 884.908046][ T7451] ext4_append+0x31b/0x5b0 [ 884.912295][ T7451] ? ext4_init_new_dir+0xa10/0xa10 [ 884.917244][ T7451] ext4_init_new_dir+0x337/0xa10 [ 884.922047][ T7451] ? may_create+0x647/0x8c0 [ 884.926358][ T7451] ? ext4_init_dot_dotdot+0x500/0x500 [ 884.931570][ T7451] ext4_mkdir+0x4fa/0xcf0 [ 884.935733][ T7451] ? ext4_symlink+0xfe0/0xfe0 [ 884.940243][ T7451] ? selinux_inode_mkdir+0x22/0x30 [ 884.945190][ T7451] ? security_inode_mkdir+0xf1/0x130 [ 884.950313][ T7451] vfs_mkdir+0x360/0x580 [ 884.954392][ T7451] do_mkdirat+0x1e8/0x420 [ 884.958558][ T7451] ? vfs_mkdir+0x580/0x580 [ 884.962810][ T7451] ? getname_flags+0x1fb/0x510 [ 884.967411][ T7451] __x64_sys_mkdirat+0x89/0xa0 [ 884.972011][ T7451] do_syscall_64+0x44/0xd0 [ 884.976264][ T7451] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 884.981994][ T7451] RIP: 0033:0x7fd49bff90c7 [ 884.986257][ T7451] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 885.005773][ T7451] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 885.014019][ T7451] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 885.021831][ T7451] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 885.029640][ T7451] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 885.037453][ T7451] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 17:24:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 885.045263][ T7451] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 885.053078][ T7451] [ 885.117094][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.134324][ T1754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.155038][ T1754] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 17:24:50 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 80) [ 885.168365][ T7455] loop1: detected capacity change from 0 to 16 [ 885.180092][ T7455] erofs: (device loop1): mounted with root inode @ nid 36. [ 885.190546][ T1754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.210836][ T1754] usb 5-1: config 0 descriptor?? [ 885.288084][ T3408] lg-g15 0003:046D:C225.0096: item fetching failed at offset 0/1 [ 885.297042][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.308844][ T7457] loop5: detected capacity change from 0 to 16 [ 885.310142][ T3408] lg-g15: probe of 0003:046D:C225.0096 failed with error -22 [ 885.315419][ T7457] FAULT_INJECTION: forcing a failure. [ 885.315419][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 885.325489][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.365250][ T3441] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 885.376236][ T7457] CPU: 1 PID: 7457 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 17:24:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 61) [ 885.383783][ T3441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.386210][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 885.386225][ T7457] Call Trace: [ 885.386231][ T7457] [ 885.386238][ T7457] dump_stack_lvl+0x151/0x1b7 [ 885.406429][ T3441] usb 4-1: config 0 descriptor?? [ 885.407215][ T7457] ? bfq_pos_tree_add_move+0x43e/0x43e [ 885.407242][ T7457] dump_stack+0x15/0x17 [ 885.428570][ T7457] should_fail+0x3c0/0x510 [ 885.432821][ T7457] ? kvmalloc_node+0x82/0x130 [ 885.437335][ T7457] __should_failslab+0x9f/0xe0 [ 885.441933][ T7457] should_failslab+0x9/0x20 [ 885.446274][ T7457] __kmalloc+0x6d/0x350 [ 885.450268][ T7457] ? __kasan_kmalloc+0x9/0x10 [ 885.454779][ T7457] kvmalloc_node+0x82/0x130 [ 885.459118][ T7457] __list_lru_init+0x1d6/0x5a0 [ 885.463725][ T7457] ? prealloc_shrinker+0xeb/0x140 [ 885.468606][ T7457] alloc_super+0x667/0x7d0 [ 885.472832][ T7457] ? get_tree_bdev+0x680/0x680 [ 885.477431][ T7457] sget_fc+0x236/0x640 [ 885.481360][ T7457] ? test_bdev_super_fc+0x70/0x70 [ 885.486198][ T7457] get_tree_bdev+0x28c/0x680 [ 885.490626][ T7457] ? erofs_release_device_info+0x90/0x90 [ 885.496095][ T7457] erofs_fc_get_tree+0x1c/0x20 [ 885.500692][ T7457] vfs_get_tree+0x88/0x290 [ 885.504948][ T7457] do_new_mount+0x289/0xad0 [ 885.509285][ T7457] ? do_move_mount_old+0x160/0x160 [ 885.514234][ T7457] ? security_capable+0xb2/0xd0 [ 885.518922][ T7457] ? ns_capable+0x8a/0xf0 [ 885.523085][ T7457] path_mount+0x60b/0x1050 [ 885.527340][ T7457] __se_sys_mount+0x2d2/0x3c0 [ 885.531852][ T7457] ? __x64_sys_mount+0xd0/0xd0 [ 885.536453][ T7457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 885.542354][ T7457] __x64_sys_mount+0xbf/0xd0 [ 885.546780][ T7457] do_syscall_64+0x44/0xd0 [ 885.551046][ T7457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 885.556772][ T7457] RIP: 0033:0x7fe9fd6d05da [ 885.561017][ T7457] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 885.576642][ T7464] loop2: detected capacity change from 0 to 16 [ 885.580452][ T7457] RSP: 002b:00007fe9fc441f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 885.580479][ T7457] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 885.580492][ T7457] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc441fe0 [ 885.580504][ T7457] RBP: 00007fe9fc442020 R08: 00007fe9fc442020 R09: 0000000000000000 [ 885.618213][ T7457] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 885.626109][ T7457] R13: 00000000200001c0 R14: 00007fe9fc441fe0 R15: 0000000020000540 [ 885.633924][ T7457] [ 885.644508][ T7464] FAULT_INJECTION: forcing a failure. [ 885.644508][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 885.657607][ T7464] CPU: 1 PID: 7464 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 885.667608][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 885.677496][ T7464] Call Trace: [ 885.680620][ T7464] [ 885.683395][ T7464] dump_stack_lvl+0x151/0x1b7 [ 885.687909][ T7464] ? bfq_pos_tree_add_move+0x43e/0x43e [ 885.693200][ T7464] ? pagecache_get_page+0xce3/0xdb0 [ 885.698244][ T7464] dump_stack+0x15/0x17 [ 885.702228][ T7464] should_fail+0x3c0/0x510 [ 885.706481][ T7464] __should_failslab+0x9f/0xe0 [ 885.711080][ T7464] should_failslab+0x9/0x20 [ 885.715429][ T7464] kmem_cache_alloc+0x4f/0x2f0 [ 885.720021][ T7464] ? jbd2_journal_add_journal_head+0x84/0x4b0 [ 885.725923][ T7464] ? ext4_inode_journal_mode+0x237/0x470 [ 885.731396][ T7464] jbd2_journal_add_journal_head+0x84/0x4b0 [ 885.737119][ T7464] jbd2_journal_get_create_access+0x48/0x4a0 [ 885.742936][ T7464] __ext4_journal_get_create_access+0xaf/0x550 [ 885.748921][ T7464] ? __ext4_forget+0x850/0x850 [ 885.753529][ T7464] ? __kasan_check_write+0x14/0x20 [ 885.758469][ T7464] ? up_read+0x14/0x90 [ 885.762460][ T7464] ext4_getblk+0x3d9/0x6f0 [ 885.766715][ T7464] ? ext4_get_block_unwritten+0x40/0x40 [ 885.772097][ T7464] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 885.777479][ T7464] ext4_bread+0x2f/0x180 [ 885.781556][ T7464] ext4_append+0x31b/0x5b0 [ 885.785811][ T7464] ? ext4_init_new_dir+0xa10/0xa10 [ 885.790759][ T7464] ext4_init_new_dir+0x337/0xa10 [ 885.795530][ T7464] ? may_create+0x647/0x8c0 [ 885.799872][ T7464] ? ext4_init_dot_dotdot+0x500/0x500 [ 885.805079][ T7464] ext4_mkdir+0x4fa/0xcf0 [ 885.809243][ T7464] ? ext4_symlink+0xfe0/0xfe0 [ 885.813757][ T7464] ? selinux_inode_mkdir+0x22/0x30 [ 885.818703][ T7464] ? security_inode_mkdir+0xf1/0x130 [ 885.823914][ T7464] vfs_mkdir+0x360/0x580 [ 885.827992][ T7464] do_mkdirat+0x1e8/0x420 [ 885.832164][ T7464] ? vfs_mkdir+0x580/0x580 [ 885.836410][ T7464] ? getname_flags+0x1fb/0x510 [ 885.841014][ T7464] __x64_sys_mkdirat+0x89/0xa0 [ 885.845623][ T7464] do_syscall_64+0x44/0xd0 [ 885.849864][ T7464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 885.855591][ T7464] RIP: 0033:0x7fd49bff90c7 [ 885.859846][ T7464] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 885.879287][ T7464] RSP: 002b:00007fd49ad09f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 885.887533][ T7464] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bff90c7 [ 885.895341][ T7464] RDX: 00000000000001ff RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 885.903153][ T7464] RBP: 0000000020000240 R08: 0000000000000000 R09: 0000000000000178 [ 885.910970][ T7464] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000180 [ 885.918786][ T7464] R13: 00000000200001c0 R14: 00007fd49ad09fe0 R15: 0000000020000540 [ 885.926606][ T7464] [ 886.008190][ T7465] udc-core: couldn't find an available UDC or it's busy [ 886.017184][ T1754] usbhid 5-1:0.0: can't add hid device: -71 [ 886.022939][ T1754] usbhid: probe of 5-1:0.0 failed with error -71 [ 886.044212][ T7465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 886.055051][ T1754] usb 5-1: USB disconnect, device number 51 [ 886.137032][ T7464] ENOMEM in journal_alloc_journal_head, retrying. [ 886.187015][ T3441] usbhid 4-1:0.0: can't add hid device: -71 [ 886.192958][ T3441] usbhid: probe of 4-1:0.0 failed with error -71 [ 886.204744][ T3441] usb 4-1: USB disconnect, device number 97 [ 886.211861][ T7464] erofs: (device loop2): mounted with root inode @ nid 36. 17:24:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x30, 0x5f, {0x5f, 0x7, "f47d1a36b612c9c203796d4f8be37c838afd90fa307cc1575d80be36099100704c55aa9e4d2bf7963aed673c85af8262b890047e6972877b254f9450085bd6d562d3944fca45a5583120ffe396a3d46a4d8728a7ce568d11574699d7c9"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000140)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x9, "7099f969"}, @main=@item_012={0x1, 0x0, 0xb, "1f"}, @global=@item_012={0x2, 0x1, 0x0, "a961"}, @main=@item_4={0x3, 0x0, 0xc, "62a1ff69"}, @global=@item_4={0x3, 0x1, 0x5, "3c079419"}, @global=@item_4={0x3, 0x1, 0x1, "00d64af3"}, @global=@item_4={0x3, 0x1, 0x2, "f4f4cf32"}, @global=@item_012={0x1, 0x1, 0x8, "cf"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x20}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x44, "404a857540a2962735bc7560a2a8a0df99e9d962383b7dc89ce99cd0153ecb31df1f29070aa579d4e51e81c5257d8ea393abc3e0ed0d76b99531a1751a5b80444c360cdc"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000340)={0x20, 0x1, 0xf3, "3099c1ce09992fb9f1b7d8ee2949473a15a3795ceaa55de4533173f586f8c270a714fc3c6fbbc431f4401049cc0df402ff7639ac3ac321fdb84082b1e313ec1095f3d59cf08900cc54b43f43452021519f023ff9e9779c5ab27f8accd039a01a0d930874be541b83ac96f7ee6695c369e164cfc61c8fd112722c5168cd46d37c89e02f0e15c42b273abd4a76bc46f8c764b6545a128bed4ff274ac82b2619ee1597f87601030063b9f6d8238152c22b447842cb1a514455e1f5a57c1f6b4221e50d657e3cf5bb953f5367fb36303635714d94af625218952e2d34b5092e0bab276ed1c835649a390062248d4cd6dabf755f724"}, &(0x7f0000000440)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:52 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 81) 17:24:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 62) 17:24:52 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000090400000103010000092100f42b01220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x1f, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xdda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x81, 0x6, 0x20, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x9b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "d0ddaca1386170f8df5686c15c796849add31f517f6ea54e78655f39e715c510d251a817bedb6aa13be2597874f37c34675122cdbf956125eed82cdce319b986537da7c2d57eb1cc0c1f9c225e27589c06566cc230ce625fe61b3ac904d3f8737ec3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x31, &(0x7f0000000340)=@string={0x31, 0x3, "a055f3c03486ab1d3ada39ef7aba0ef63cd7d56e2ee7839157c710de8afe001d0247c342e3e62ae36ab3e260143234"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "7367ab0460c924fed9c3a28859895697f0bf431fe744fb23da318ca60c7ac2c69b8df5737f7efba0d8ab5936d58b4da34808c80eaab001bf8d9420462483140931a0fc799d77b9f79c35a3d21113c4221ba517e574bfafb6a0c109cde9869f418be889e7505d73cfd6676b2b4f9374d035f50752cb92c1938c8e33507ffdf8842397dfbbf0a32a7262b12ad16e268b0d5987c590cac4e767fcf514ed20d0b920756114906a08fe7a5970d43321e9837925c3c218f3cc8edfef547992f9821bcc5b8f50990ea7bf6e92fc47a98cca93c5f241558a93b8715195bf8da3c1640cfce3f115463e70dd7942ac1f063b3b750220bcafa24bf3024206"}}]}) [ 886.645855][ T1754] usb 1-1: USB disconnect, device number 113 [ 886.708087][ T7480] loop5: detected capacity change from 0 to 16 [ 886.714917][ T7482] loop1: detected capacity change from 0 to 16 [ 886.727867][ T7482] erofs: (device loop1): mounted with root inode @ nid 36. [ 886.732643][ T7480] FAULT_INJECTION: forcing a failure. [ 886.732643][ T7480] name failslab, interval 1, probability 0, space 0, times 0 [ 886.765823][ T7483] loop2: detected capacity change from 0 to 16 [ 886.779740][ T7480] CPU: 0 PID: 7480 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 886.781319][ T7483] FAULT_INJECTION: forcing a failure. [ 886.781319][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 886.789729][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 886.789748][ T7480] Call Trace: [ 886.789755][ T7480] [ 886.789762][ T7480] dump_stack_lvl+0x151/0x1b7 [ 886.789789][ T7480] ? bfq_pos_tree_add_move+0x43e/0x43e [ 886.789807][ T7480] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 886.789827][ T7480] dump_stack+0x15/0x17 [ 886.789843][ T7480] should_fail+0x3c0/0x510 [ 886.789861][ T7480] ? __list_lru_init+0xae/0x5a0 [ 886.789878][ T7480] __should_failslab+0x9f/0xe0 [ 886.851374][ T7480] should_failslab+0x9/0x20 [ 886.855730][ T7480] kmem_cache_alloc_trace+0x4a/0x310 [ 886.860836][ T7480] __list_lru_init+0xae/0x5a0 [ 886.865353][ T7480] alloc_super+0x696/0x7d0 [ 886.869603][ T7480] ? get_tree_bdev+0x680/0x680 [ 886.874200][ T7480] sget_fc+0x236/0x640 [ 886.878109][ T7480] ? test_bdev_super_fc+0x70/0x70 [ 886.882967][ T7480] get_tree_bdev+0x28c/0x680 [ 886.888000][ T7480] ? erofs_release_device_info+0x90/0x90 [ 886.893469][ T7480] erofs_fc_get_tree+0x1c/0x20 [ 886.898069][ T7480] vfs_get_tree+0x88/0x290 [ 886.902322][ T7480] do_new_mount+0x289/0xad0 [ 886.906663][ T7480] ? do_move_mount_old+0x160/0x160 [ 886.911781][ T7480] ? security_capable+0xb2/0xd0 [ 886.916476][ T7480] ? ns_capable+0x8a/0xf0 [ 886.920636][ T7480] path_mount+0x60b/0x1050 [ 886.924889][ T7480] __se_sys_mount+0x2d2/0x3c0 [ 886.929415][ T7480] ? __x64_sys_mount+0xd0/0xd0 [ 886.934000][ T7480] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 886.939901][ T7480] __x64_sys_mount+0xbf/0xd0 [ 886.944392][ T7480] do_syscall_64+0x44/0xd0 [ 886.946987][ T1723] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 886.948587][ T7480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 886.948610][ T7480] RIP: 0033:0x7fe9fd6d05da [ 886.965943][ T7480] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 886.985386][ T7480] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 886.993627][ T7480] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 887.001439][ T7480] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 887.009255][ T7480] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 887.017083][ T7480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 887.024874][ T7480] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 887.032691][ T7480] [ 887.036114][ T7483] CPU: 1 PID: 7483 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 887.046083][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 887.055975][ T7483] Call Trace: [ 887.059101][ T7483] [ 887.061879][ T7483] dump_stack_lvl+0x151/0x1b7 [ 887.066391][ T7483] ? bfq_pos_tree_add_move+0x43e/0x43e [ 887.071686][ T7483] dump_stack+0x15/0x17 [ 887.075678][ T7483] should_fail+0x3c0/0x510 [ 887.079932][ T7483] ? __se_sys_mount+0x9b/0x3c0 [ 887.084530][ T7483] __should_failslab+0x9f/0xe0 [ 887.089147][ T7483] should_failslab+0x9/0x20 [ 887.093470][ T7483] __kmalloc_track_caller+0x6c/0x350 [ 887.098590][ T7483] ? strnlen_user+0x130/0x1c0 [ 887.103105][ T7483] strndup_user+0x76/0x150 [ 887.107357][ T7483] __se_sys_mount+0x9b/0x3c0 [ 887.111783][ T7483] ? __x64_sys_mount+0xd0/0xd0 [ 887.116385][ T7483] __x64_sys_mount+0xbf/0xd0 [ 887.120813][ T7483] do_syscall_64+0x44/0xd0 [ 887.125066][ T7483] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 887.130801][ T7483] RIP: 0033:0x7fd49bffb5da [ 887.135047][ T7483] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 887.154572][ T7483] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 887.162817][ T7483] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 887.170628][ T7483] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 887.178440][ T7483] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 887.186252][ T7483] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 887.194063][ T7483] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 887.201880][ T7483] [ 887.205455][ T1754] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 887.207028][ T3409] usb 5-1: new high-speed USB device number 52 using dummy_hcd 17:24:52 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 82) 17:24:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 887.467111][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.483422][ T1723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.511579][ T1723] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 887.531217][ T1723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.552642][ T1723] usb 4-1: config 0 descriptor?? [ 887.554789][ T7489] loop5: detected capacity change from 0 to 16 [ 887.564569][ T7489] FAULT_INJECTION: forcing a failure. [ 887.564569][ T7489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 887.578997][ T7489] CPU: 0 PID: 7489 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 887.588983][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 887.597108][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.598872][ T7489] Call Trace: [ 887.598881][ T7489] [ 887.598889][ T7489] dump_stack_lvl+0x151/0x1b7 [ 887.619811][ T1754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.619961][ T7489] ? bfq_pos_tree_add_move+0x43e/0x43e [ 887.634898][ T7489] ? erofs_fc_fill_super+0xbb/0x1180 [ 887.640013][ T7489] ? ____kasan_kmalloc+0xee/0x110 [ 887.641712][ T1754] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 887.644869][ T7489] ? ____kasan_kmalloc+0xdc/0x110 [ 887.644892][ T7489] ? __kasan_kmalloc+0x9/0x10 [ 887.644907][ T7489] dump_stack+0x15/0x17 17:24:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 63) [ 887.667020][ T1754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.667091][ T7489] should_fail+0x3c0/0x510 [ 887.679168][ T7489] should_fail_alloc_page+0x58/0x70 [ 887.684196][ T7489] __alloc_pages+0x1de/0x7c0 [ 887.687999][ T1754] usb 1-1: config 0 descriptor?? [ 887.688617][ T7489] ? __count_vm_events+0x30/0x30 [ 887.688645][ T7489] do_read_cache_page+0x16d/0xa70 [ 887.703028][ T7489] read_cache_page+0x4d/0x70 [ 887.707463][ T7489] erofs_fc_fill_super+0x1eb/0x1180 [ 887.712489][ T7489] ? sb_set_blocksize+0xb7/0xf0 [ 887.717174][ T7489] get_tree_bdev+0x441/0x680 [ 887.721602][ T7489] ? erofs_release_device_info+0x90/0x90 [ 887.727069][ T7489] erofs_fc_get_tree+0x1c/0x20 [ 887.731670][ T7489] vfs_get_tree+0x88/0x290 [ 887.735923][ T7489] do_new_mount+0x289/0xad0 [ 887.740286][ T7489] ? do_move_mount_old+0x160/0x160 [ 887.745204][ T7489] ? security_capable+0xb2/0xd0 [ 887.749891][ T7489] ? ns_capable+0x8a/0xf0 [ 887.754055][ T7489] path_mount+0x60b/0x1050 [ 887.758310][ T7489] __se_sys_mount+0x2d2/0x3c0 [ 887.762824][ T7489] ? __x64_sys_mount+0xd0/0xd0 [ 887.767424][ T7489] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 887.773327][ T7489] __x64_sys_mount+0xbf/0xd0 [ 887.777754][ T7489] do_syscall_64+0x44/0xd0 [ 887.782007][ T7489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 887.787818][ T7489] RIP: 0033:0x7fe9fd6d05da [ 887.792075][ T7489] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 887.811516][ T7489] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 887.819761][ T7489] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 887.827574][ T7489] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 887.835382][ T7489] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 887.843193][ T7489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 887.851003][ T7489] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 887.858818][ T7489] [ 887.863653][ T7491] loop1: detected capacity change from 0 to 16 [ 887.874278][ T7491] erofs: (device loop1): mounted with root inode @ nid 36. [ 887.882073][ T7489] erofs: (device loop5): erofs_read_superblock: cannot read erofs superblock [ 887.887058][ T3409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.904386][ T3409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.916091][ T3409] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 887.944600][ T3409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.966035][ T3409] usb 5-1: config 0 descriptor?? [ 887.975828][ T7495] loop2: detected capacity change from 0 to 16 [ 887.988150][ T1754] lg-g15 0003:046D:C225.0097: item fetching failed at offset 0/1 [ 888.003793][ T1754] lg-g15: probe of 0003:046D:C225.0097 failed with error -22 [ 888.014871][ T7495] FAULT_INJECTION: forcing a failure. [ 888.014871][ T7495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.059312][ T7495] CPU: 1 PID: 7495 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 888.069296][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 888.079197][ T7495] Call Trace: [ 888.082316][ T7495] [ 888.085094][ T7495] dump_stack_lvl+0x151/0x1b7 [ 888.089694][ T7495] ? bfq_pos_tree_add_move+0x43e/0x43e [ 888.094988][ T7495] dump_stack+0x15/0x17 [ 888.098983][ T7495] should_fail+0x3c0/0x510 [ 888.103242][ T7495] should_fail_usercopy+0x1a/0x20 [ 888.108092][ T7495] _copy_from_user+0x20/0xd0 [ 888.112519][ T7495] strndup_user+0xb3/0x150 [ 888.116771][ T7495] __se_sys_mount+0x9b/0x3c0 [ 888.121198][ T7495] ? __x64_sys_mount+0xd0/0xd0 [ 888.125801][ T7495] __x64_sys_mount+0xbf/0xd0 [ 888.130228][ T7495] do_syscall_64+0x44/0xd0 [ 888.134564][ T7495] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 888.140469][ T7495] RIP: 0033:0x7fd49bffb5da [ 888.144728][ T7495] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 888.164165][ T7495] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 888.172408][ T7495] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 888.180218][ T7495] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 888.188028][ T7495] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 888.195839][ T7495] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 888.203654][ T7495] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 888.211470][ T7495] [ 888.231567][ T1723] lg-g15 0003:046D:C225.0098: hidraw0: USB HID vf4.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 17:24:53 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 83) 17:24:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 888.405371][ T7500] loop5: detected capacity change from 0 to 16 [ 888.426319][ T7500] FAULT_INJECTION: forcing a failure. [ 888.426319][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 888.439736][ T1762] usb 4-1: USB disconnect, device number 98 [ 888.474397][ T7500] CPU: 1 PID: 7500 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 888.484390][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 888.494286][ T7500] Call Trace: [ 888.497407][ T7500] [ 888.500184][ T7500] dump_stack_lvl+0x151/0x1b7 [ 888.504702][ T7500] ? bfq_pos_tree_add_move+0x43e/0x43e [ 888.509998][ T7500] dump_stack+0x15/0x17 [ 888.513986][ T7500] should_fail+0x3c0/0x510 [ 888.518237][ T7500] ? mempool_free+0x310/0x310 [ 888.522750][ T7500] __should_failslab+0x9f/0xe0 [ 888.527353][ T7500] should_failslab+0x9/0x20 [ 888.531690][ T7500] kmem_cache_alloc+0x4f/0x2f0 [ 888.536302][ T7500] ? mempool_alloc_slab+0x1d/0x30 [ 888.541151][ T7500] ? mempool_free+0x310/0x310 [ 888.545664][ T7500] mempool_alloc_slab+0x1d/0x30 [ 888.550351][ T7500] mempool_alloc+0x149/0x580 [ 888.554783][ T7500] ? mempool_resize+0x8e0/0x8e0 [ 888.559493][ T7500] ? __kasan_check_write+0x14/0x20 [ 888.564412][ T7500] ? _raw_spin_lock+0xa3/0x1b0 [ 888.569014][ T7500] bio_alloc_bioset+0x12e/0x960 [ 888.573697][ T7500] submit_bh_wbc+0x1c6/0x6b0 [ 888.578127][ T7500] ? __kasan_check_write+0x14/0x20 [ 888.583073][ T7500] block_read_full_page+0x8a6/0xa70 [ 888.588107][ T7500] ? blkdev_fallocate+0x3e0/0x3e0 [ 888.592966][ T7500] ? block_is_partially_uptodate+0x270/0x270 [ 888.598782][ T7500] ? add_to_page_cache_locked+0x40/0x40 [ 888.604165][ T7500] blkdev_readpage+0x1c/0x20 [ 888.608589][ T7500] do_read_cache_page+0x68b/0xa70 [ 888.613462][ T7500] read_cache_page+0x4d/0x70 [ 888.617885][ T7500] erofs_fc_fill_super+0x1eb/0x1180 [ 888.622918][ T7500] ? sb_set_blocksize+0xb7/0xf0 [ 888.627596][ T7500] get_tree_bdev+0x441/0x680 [ 888.632028][ T7500] ? erofs_release_device_info+0x90/0x90 [ 888.637500][ T7500] erofs_fc_get_tree+0x1c/0x20 [ 888.642094][ T7500] vfs_get_tree+0x88/0x290 [ 888.646345][ T7500] do_new_mount+0x289/0xad0 [ 888.650686][ T7500] ? do_move_mount_old+0x160/0x160 [ 888.655631][ T7500] ? security_capable+0xb2/0xd0 [ 888.660320][ T7500] ? ns_capable+0x8a/0xf0 [ 888.664491][ T7500] path_mount+0x60b/0x1050 [ 888.668743][ T7500] __se_sys_mount+0x2d2/0x3c0 [ 888.673253][ T7500] ? __x64_sys_mount+0xd0/0xd0 [ 888.677854][ T7500] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 888.683754][ T7500] __x64_sys_mount+0xbf/0xd0 [ 888.688181][ T7500] do_syscall_64+0x44/0xd0 [ 888.692447][ T7500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 888.698161][ T7500] RIP: 0033:0x7fe9fd6d05da [ 888.702416][ T7500] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 888.721859][ T7500] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 888.730106][ T7500] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 888.737914][ T7500] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 888.745736][ T7500] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 888.753591][ T7500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 888.761345][ T7500] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 888.769165][ T7500] [ 888.775353][ T7503] loop1: detected capacity change from 0 to 16 [ 888.786860][ T7503] erofs: (device loop1): mounted with root inode @ nid 36. 17:24:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 64) [ 888.820079][ T3409] usbhid 5-1:0.0: can't add hid device: -71 [ 888.825838][ T3409] usbhid: probe of 5-1:0.0 failed with error -71 [ 888.837548][ T7500] erofs: (device loop5): mounted with root inode @ nid 36. [ 888.867066][ T3409] usb 5-1: USB disconnect, device number 52 [ 888.976570][ T7507] loop2: detected capacity change from 0 to 16 [ 888.991903][ T7507] FAULT_INJECTION: forcing a failure. [ 888.991903][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 889.019019][ T7507] CPU: 1 PID: 7507 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 889.029010][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 889.038924][ T7507] Call Trace: [ 889.042024][ T7507] [ 889.044804][ T7507] dump_stack_lvl+0x151/0x1b7 [ 889.049319][ T7507] ? bfq_pos_tree_add_move+0x43e/0x43e [ 889.054624][ T7507] dump_stack+0x15/0x17 [ 889.058606][ T7507] should_fail+0x3c0/0x510 [ 889.062950][ T7507] ? __se_sys_mount+0xde/0x3c0 [ 889.067546][ T7507] __should_failslab+0x9f/0xe0 [ 889.072143][ T7507] should_failslab+0x9/0x20 [ 889.076482][ T7507] __kmalloc_track_caller+0x6c/0x350 [ 889.081607][ T7507] ? strnlen_user+0x130/0x1c0 [ 889.086120][ T7507] strndup_user+0x76/0x150 [ 889.090371][ T7507] __se_sys_mount+0xde/0x3c0 [ 889.094799][ T7507] ? __kasan_check_write+0x14/0x20 [ 889.099743][ T7507] ? fpregs_restore_userregs+0x1f0/0x3a0 [ 889.105215][ T7507] ? __x64_sys_mount+0xd0/0xd0 [ 889.109817][ T7507] __x64_sys_mount+0xbf/0xd0 [ 889.114241][ T7507] do_syscall_64+0x44/0xd0 [ 889.118497][ T7507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 889.124218][ T7507] RIP: 0033:0x7fd49bffb5da [ 889.128475][ T7507] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 889.147916][ T7507] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 889.156421][ T7507] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 889.164234][ T7507] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 889.172048][ T7507] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 889.179856][ T7507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 889.187717][ T7507] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 889.195483][ T7507] 17:24:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xb, 0xa0, {0xa0, 0x22, "2d11fc4610b2e65168c0949b65fa35f8006611fb8b907fc76c4cbe62710267a74dcc2b0b9177aaf88f6ec04be33818ecd07a289545763854818e7e36c63bba6995b47259fad8155cbd0cec24f824e2fef03883b0b06773c1467cc35203240945ad2f9a32208b7e1af3f91ee07c5bb38b15d8ef716351c9077faf1e0b123a614ba88c18d361e315ea1f9d97b0b23f45c82bf6129922242f6273d105a5e512"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "7391c03346bfd27df1f784cda03f9222f59bc93d7b510b4d59fda48fa758d396185ad1e03fc21095b9b24ca6501251f28dafe6261af2d7175af9646391af4f6dbc2a61aa7fcdaee1811be5e7f0e31f4a780f44f88e79da8428d620a728a21d00d6881eb088ed096e"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x80, 0x4, 0x5, "1f724525", "6719e3b5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x3, 0x6, 0x0, 0x2, 0x40}}}, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x40, 0x3, 0x3d, "97eeabdac061e098adedd72f86777104624df0163aaf2e116ccdc5423cf0b15f622e3ec777256ee347ff4153084c03d34a5680826df92b1b135acd8c87"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0xfff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1f7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "ab71"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "dc06"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3f}, 0xfffffffffffffffc, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 17:24:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:55 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 84) 17:24:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000090400000103010000092100f42b01220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x1f, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xdda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x81, 0x6, 0x20, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x9b, &(0x7f0000000500)=ANY=[@ANYBLOB="9b0372d537f2ff3d7372c52e375ac9dae156bcaa25ed213288bc335c55f5a05d4dbbd8492916935f0ac532933bb7b92c05e7a2f08cc711686e9d275f29486a4c6a59206f45f7b9edc9387a9b4737b382ca2264f5a5464d5073ff3060060d5bb5ffdc6e17dccea3ab7b37b70ae4b21199fa5594f4b1e3301a1aa4664b16afd9dad79391b2799bb84b3d33e20c96889751cacd111bc3010d3e395f8b281a0cfac99ab8cdff1eaed89536f622f18295d1cd39d4e902c1ed95df51803783c0813aaf97a3b01a5c31ae92203c685be966c508d1da66e12c5cc0db4c3ebe62dcca683ee114ab4608561d5c85cfa192f5e59d4f3ae1e7b2350ed7caca2cda1aa818ebc5e856873e71646b99a25ecf3a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "d0ddaca1386170f8df5686c15c796849add31f517f6ea54e78655f39e715c510d251a817bedb6aa13be2597874f37c34675122cdbf956125eed82cdce319b986537da7c2d57eb1cc0c1f9c225e27589c06566cc230ce625fe61b3ac904d3f8737ec3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x31, &(0x7f0000000340)=@string={0x31, 0x3, "a055f3c03486ab1d3ada39ef7aba0ef63cd7d56e2ee7839157c710de8afe001d0247c342e3e62ae36ab3e260143234"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "7367ab0460c924fed9c3a28859895697f0bf431fe744fb23da318ca60c7ac2c69b8df5737f7efba0d8ab5936d58b4da34808c80eaab001bf8d9420462483140931a0fc799d77b9f79c35a3d21113c4221ba517e574bfafb6a0c109cde9869f418be889e7505d73cfd6676b2b4f9374d035f50752cb92c1938c8e33507ffdf8842397dfbbf0a32a7262b12ad16e268b0d5987c590cac4e767fcf514ed20d0b920756114906a08fe7a5970d43321e9837925c3c218f3cc8edfef547992f9821bcc5b8f50990ea7bf6e92fc47a98cca93c5f241558a93b8715195bf8da3c1640cfce3f115463e70dd7942ac1f063b3b750220bcafa24bf3024206"}}]}) 17:24:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 65) [ 889.671972][ T1723] usb 1-1: USB disconnect, device number 114 [ 889.749912][ T7521] loop1: detected capacity change from 0 to 16 [ 889.750749][ T7522] loop5: detected capacity change from 0 to 16 [ 889.762232][ T7521] erofs: (device loop1): mounted with root inode @ nid 36. [ 889.774485][ T7522] FAULT_INJECTION: forcing a failure. [ 889.774485][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 889.808693][ T7522] CPU: 1 PID: 7522 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 889.818737][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 889.828574][ T7522] Call Trace: [ 889.831697][ T7522] [ 889.834474][ T7522] dump_stack_lvl+0x151/0x1b7 [ 889.838986][ T7522] ? bfq_pos_tree_add_move+0x43e/0x43e [ 889.844281][ T7522] dump_stack+0x15/0x17 [ 889.848474][ T7522] should_fail+0x3c0/0x510 [ 889.852699][ T7522] __should_failslab+0x9f/0xe0 [ 889.857297][ T7522] should_failslab+0x9/0x20 [ 889.861640][ T7522] kmem_cache_alloc+0x4f/0x2f0 [ 889.866241][ T7522] ? create_task_io_context+0x2c/0x400 [ 889.871534][ T7522] create_task_io_context+0x2c/0x400 [ 889.877815][ T7522] submit_bio_checks+0xb47/0xf40 [ 889.882585][ T7522] ? __submit_bio+0x930/0x930 [ 889.887099][ T7522] ? __kasan_slab_alloc+0xc4/0xe0 [ 889.891966][ T7522] ? __kasan_slab_alloc+0xb2/0xe0 [ 889.896821][ T7522] ? blk_try_enter_queue+0x15c/0x340 [ 889.901939][ T7522] ? read_cache_page+0x4d/0x70 [ 889.906537][ T7522] ? erofs_fc_fill_super+0x1eb/0x1180 [ 889.911746][ T7522] __submit_bio+0x592/0x930 [ 889.916096][ T7522] ? do_syscall_64+0x44/0xd0 [ 889.920511][ T7522] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 889.926442][ T7522] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 889.932665][ T7522] submit_bio_noacct+0x89b/0xa80 [ 889.937436][ T7522] ? mempool_alloc_slab+0x1d/0x30 [ 889.942296][ T7522] ? mempool_free+0x310/0x310 [ 889.946810][ T7522] ? mempool_alloc_slab+0x1d/0x30 [ 889.951678][ T7522] ? blk_put_request+0x20/0x20 [ 889.956268][ T7522] ? memset+0x35/0x40 [ 889.960089][ T7522] ? fscrypt_set_bio_crypt_ctx+0x173/0x500 [ 889.965735][ T7522] ? mempool_resize+0x8e0/0x8e0 [ 889.970420][ T7522] ? __kasan_check_read+0x11/0x20 [ 889.975281][ T7522] submit_bio+0x2d7/0x560 [ 889.979465][ T7522] ? submit_bio_noacct+0xa80/0xa80 [ 889.984477][ T7522] ? bio_add_page+0x2cc/0x450 [ 889.988991][ T7522] ? guard_bio_eod+0xf3/0x140 [ 889.993506][ T7522] submit_bh_wbc+0x5cf/0x6b0 [ 889.997934][ T7522] block_read_full_page+0x8a6/0xa70 [ 890.002969][ T7522] ? blkdev_fallocate+0x3e0/0x3e0 [ 890.007825][ T7522] ? block_is_partially_uptodate+0x270/0x270 [ 890.013641][ T7522] ? add_to_page_cache_locked+0x40/0x40 [ 890.019025][ T7522] blkdev_readpage+0x1c/0x20 [ 890.023447][ T7522] do_read_cache_page+0x68b/0xa70 [ 890.028312][ T7522] read_cache_page+0x4d/0x70 [ 890.032734][ T7522] erofs_fc_fill_super+0x1eb/0x1180 [ 890.037770][ T7522] ? sb_set_blocksize+0xb7/0xf0 [ 890.042458][ T7522] get_tree_bdev+0x441/0x680 [ 890.046883][ T7522] ? erofs_release_device_info+0x90/0x90 [ 890.052350][ T7522] erofs_fc_get_tree+0x1c/0x20 [ 890.056950][ T7522] vfs_get_tree+0x88/0x290 [ 890.061213][ T7522] do_new_mount+0x289/0xad0 [ 890.065547][ T7522] ? do_move_mount_old+0x160/0x160 [ 890.070491][ T7522] ? security_capable+0xb2/0xd0 [ 890.075177][ T7522] ? ns_capable+0x8a/0xf0 [ 890.079347][ T7522] path_mount+0x60b/0x1050 [ 890.083597][ T7522] __se_sys_mount+0x2d2/0x3c0 [ 890.088111][ T7522] ? __x64_sys_mount+0xd0/0xd0 [ 890.092708][ T7522] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 890.098613][ T7522] __x64_sys_mount+0xbf/0xd0 [ 890.103038][ T7522] do_syscall_64+0x44/0xd0 [ 890.107291][ T7522] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 890.113024][ T7522] RIP: 0033:0x7fe9fd6d05da [ 890.117271][ T7522] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 890.136715][ T7522] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 890.144961][ T7522] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 890.152772][ T7522] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 890.160584][ T7522] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 890.168394][ T7522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 890.176202][ T7522] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 890.184025][ T7522] [ 890.199129][ T7524] loop2: detected capacity change from 0 to 16 [ 890.221403][ T7524] FAULT_INJECTION: forcing a failure. [ 890.221403][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 890.256984][ T3441] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 890.269043][ T7524] CPU: 0 PID: 7524 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 890.279035][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 890.288931][ T7524] Call Trace: [ 890.292054][ T7524] [ 890.294831][ T7524] dump_stack_lvl+0x151/0x1b7 [ 890.299342][ T7524] ? bfq_pos_tree_add_move+0x43e/0x43e [ 890.304637][ T7524] dump_stack+0x15/0x17 [ 890.308627][ T7524] should_fail+0x3c0/0x510 [ 890.312876][ T7524] ? __se_sys_mount+0xde/0x3c0 [ 890.317484][ T7524] __should_failslab+0x9f/0xe0 [ 890.322075][ T7524] should_failslab+0x9/0x20 [ 890.326417][ T7524] __kmalloc_track_caller+0x6c/0x350 [ 890.331540][ T7524] ? strnlen_user+0x130/0x1c0 [ 890.336139][ T7524] strndup_user+0x76/0x150 [ 890.340399][ T7524] __se_sys_mount+0xde/0x3c0 [ 890.344816][ T7524] ? __kasan_check_write+0x14/0x20 [ 890.349765][ T7524] ? fpregs_restore_userregs+0x1f0/0x3a0 [ 890.355231][ T7524] ? __x64_sys_mount+0xd0/0xd0 [ 890.360009][ T7524] __x64_sys_mount+0xbf/0xd0 [ 890.364434][ T7524] do_syscall_64+0x44/0xd0 [ 890.368685][ T7524] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 890.374499][ T7524] RIP: 0033:0x7fd49bffb5da [ 890.378754][ T7524] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 890.398291][ T7524] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 890.406528][ T7524] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 890.414343][ T7524] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 890.422149][ T7524] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 890.429961][ T7524] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 890.437772][ T7524] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 890.445592][ T7524] [ 890.449821][ T1762] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 890.449855][ T7522] erofs: (device loop5): mounted with root inode @ nid 36. 17:24:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:56 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 85) [ 890.527031][ T1723] usb 1-1: new high-speed USB device number 115 using dummy_hcd 17:24:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 66) [ 890.624767][ T7530] loop1: detected capacity change from 0 to 16 [ 890.647096][ T7530] erofs: (device loop1): mounted with root inode @ nid 36. [ 890.725743][ T7529] loop5: detected capacity change from 0 to 16 [ 890.732934][ T7529] FAULT_INJECTION: forcing a failure. [ 890.732934][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 890.745356][ T7529] CPU: 0 PID: 7529 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 890.755325][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 890.765225][ T7529] Call Trace: [ 890.768347][ T7529] [ 890.771131][ T7529] dump_stack_lvl+0x151/0x1b7 [ 890.775635][ T7529] ? bfq_pos_tree_add_move+0x43e/0x43e [ 890.780932][ T7529] dump_stack+0x15/0x17 [ 890.784924][ T7529] should_fail+0x3c0/0x510 [ 890.789173][ T7529] ? loop_queue_rq+0x3d8/0xb40 [ 890.793992][ T7529] __should_failslab+0x9f/0xe0 [ 890.798590][ T7529] should_failslab+0x9/0x20 [ 890.802928][ T7529] kmem_cache_alloc_trace+0x4a/0x310 [ 890.808050][ T7529] ? cgroup_get_e_css+0x2b9/0x470 [ 890.812911][ T7529] loop_queue_rq+0x3d8/0xb40 [ 890.817340][ T7529] __blk_mq_issue_directly+0x216/0xab0 [ 890.822649][ T7529] ? __blk_mq_run_hw_queue+0x170/0x170 [ 890.827097][ T1762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.827920][ T7529] ? __kasan_check_write+0x14/0x20 [ 890.843549][ T7529] __blk_mq_try_issue_directly+0x297/0x310 [ 890.847204][ T1762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.849189][ T7529] blk_mq_try_issue_directly+0xe3/0x360 [ 890.864121][ T7529] blk_mq_submit_bio+0xd68/0x1c80 [ 890.868980][ T7529] ? blk_cgroup_bio_start+0x258/0x310 [ 890.874187][ T7529] ? blk_mq_try_issue_list_directly+0x500/0x500 [ 890.877056][ T1762] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 890.880291][ T7529] ? __kasan_slab_alloc+0xc4/0xe0 [ 890.893979][ T7529] ? blk_try_enter_queue+0x15c/0x340 [ 890.897042][ T1762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.899091][ T7529] ? read_cache_page+0x4d/0x70 [ 890.911507][ T7529] ? erofs_fc_fill_super+0x1eb/0x1180 [ 890.916715][ T7529] __submit_bio+0x844/0x930 [ 890.917600][ T1762] usb 5-1: config 0 descriptor?? [ 890.921105][ T7529] ? do_syscall_64+0x44/0xd0 [ 890.930252][ T7529] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 890.936157][ T7529] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 890.942327][ T7529] submit_bio_noacct+0x89b/0xa80 [ 890.947110][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.947175][ T7529] ? mempool_alloc_slab+0x1d/0x30 [ 890.962717][ T7529] ? mempool_free+0x310/0x310 [ 890.967067][ T1723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.967220][ T7529] ? mempool_alloc_slab+0x1d/0x30 [ 890.976783][ T1723] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 890.981635][ T7529] ? blk_put_request+0x20/0x20 [ 890.981662][ T7529] ? memset+0x35/0x40 [ 890.981677][ T7529] ? fscrypt_set_bio_crypt_ctx+0x173/0x500 [ 890.981696][ T7529] ? mempool_resize+0x8e0/0x8e0 [ 890.981711][ T7529] ? __kasan_check_read+0x11/0x20 [ 890.981727][ T7529] submit_bio+0x2d7/0x560 [ 891.017015][ T1723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.018268][ T7529] ? submit_bio_noacct+0xa80/0xa80 [ 891.031023][ T7529] ? bio_add_page+0x2cc/0x450 [ 891.035534][ T7529] ? guard_bio_eod+0xf3/0x140 [ 891.037232][ T1723] usb 1-1: config 0 descriptor?? [ 891.040045][ T7529] submit_bh_wbc+0x5cf/0x6b0 [ 891.049257][ T7529] block_read_full_page+0x8a6/0xa70 [ 891.054281][ T7529] ? blkdev_fallocate+0x3e0/0x3e0 [ 891.059141][ T7529] ? block_is_partially_uptodate+0x270/0x270 [ 891.064961][ T7529] ? add_to_page_cache_locked+0x40/0x40 [ 891.070343][ T7529] blkdev_readpage+0x1c/0x20 [ 891.074765][ T7529] do_read_cache_page+0x68b/0xa70 [ 891.079627][ T7529] read_cache_page+0x4d/0x70 [ 891.084056][ T7529] erofs_fc_fill_super+0x1eb/0x1180 [ 891.089089][ T7529] ? sb_set_blocksize+0xb7/0xf0 [ 891.093775][ T7529] get_tree_bdev+0x441/0x680 [ 891.098200][ T7529] ? erofs_release_device_info+0x90/0x90 [ 891.103672][ T7529] erofs_fc_get_tree+0x1c/0x20 [ 891.108270][ T7529] vfs_get_tree+0x88/0x290 [ 891.112519][ T7529] do_new_mount+0x289/0xad0 [ 891.116867][ T7529] ? do_move_mount_old+0x160/0x160 [ 891.121810][ T7529] ? security_capable+0xb2/0xd0 [ 891.126493][ T7529] ? ns_capable+0x8a/0xf0 [ 891.130669][ T7529] path_mount+0x60b/0x1050 [ 891.134914][ T7529] __se_sys_mount+0x2d2/0x3c0 [ 891.139426][ T7529] ? __x64_sys_mount+0xd0/0xd0 [ 891.144034][ T7529] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 891.149934][ T7529] __x64_sys_mount+0xbf/0xd0 [ 891.154354][ T7529] do_syscall_64+0x44/0xd0 [ 891.158606][ T7529] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 891.164335][ T7529] RIP: 0033:0x7fe9fd6d05da [ 891.168589][ T7529] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 891.177934][ T7536] loop2: detected capacity change from 0 to 16 [ 891.188027][ T7529] RSP: 002b:00007fe9fc441f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 891.188055][ T7529] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 891.188067][ T7529] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc441fe0 [ 891.188078][ T7529] RBP: 00007fe9fc442020 R08: 00007fe9fc442020 R09: 0000000000000000 [ 891.188087][ T7529] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 891.188098][ T7529] R13: 00000000200001c0 R14: 00007fe9fc441fe0 R15: 0000000020000540 [ 891.217503][ T7536] FAULT_INJECTION: forcing a failure. [ 891.217503][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 891.217886][ T7529] [ 891.256601][ T7536] CPU: 1 PID: 7536 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 891.266575][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 891.276477][ T7536] Call Trace: [ 891.279596][ T7536] [ 891.282371][ T7536] dump_stack_lvl+0x151/0x1b7 [ 891.286886][ T7536] ? bfq_pos_tree_add_move+0x43e/0x43e [ 891.292178][ T7536] dump_stack+0x15/0x17 [ 891.296173][ T7536] should_fail+0x3c0/0x510 [ 891.300431][ T7536] ? __se_sys_mount+0x156/0x3c0 [ 891.305139][ T7536] __should_failslab+0x9f/0xe0 [ 891.309709][ T7536] should_failslab+0x9/0x20 [ 891.314050][ T7536] kmem_cache_alloc_trace+0x4a/0x310 [ 891.319263][ T7536] __se_sys_mount+0x156/0x3c0 [ 891.323771][ T7536] ? __x64_sys_mount+0xd0/0xd0 [ 891.328375][ T7536] __x64_sys_mount+0xbf/0xd0 [ 891.332803][ T7536] do_syscall_64+0x44/0xd0 [ 891.337051][ T7536] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 891.342786][ T7536] RIP: 0033:0x7fd49bffb5da [ 891.347123][ T7536] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 891.366567][ T7536] RSP: 002b:00007fd49ad09f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 17:24:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 891.374813][ T7536] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 891.382620][ T7536] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad09fe0 [ 891.390429][ T7536] RBP: 00007fd49ad0a020 R08: 00007fd49ad0a020 R09: 0000000000000000 [ 891.398241][ T7536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 891.406053][ T7536] R13: 00000000200001c0 R14: 00007fd49ad09fe0 R15: 0000000020000540 [ 891.413877][ T7536] [ 891.419120][ T7529] erofs: (device loop5): mounted with root inode @ nid 36. [ 891.467065][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.479879][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.489846][ T3441] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 891.498978][ T3441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.508359][ T3441] usb 4-1: config 0 descriptor?? 17:24:57 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 86) [ 891.518455][ T7540] loop1: detected capacity change from 0 to 16 [ 891.525734][ T7540] erofs: (device loop1): mounted with root inode @ nid 36. 17:24:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 67) [ 891.628330][ T7543] loop5: detected capacity change from 0 to 16 [ 891.639021][ T7543] FAULT_INJECTION: forcing a failure. [ 891.639021][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 891.656107][ T1723] lg-g15 0003:046D:C225.0099: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 891.669042][ T7543] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 891.679291][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 891.689188][ T7543] Call Trace: [ 891.692309][ T7543] [ 891.695085][ T7543] dump_stack_lvl+0x151/0x1b7 [ 891.699609][ T7543] ? bfq_pos_tree_add_move+0x43e/0x43e [ 891.704893][ T7543] ? blkdev_fallocate+0x3e0/0x3e0 [ 891.709759][ T7543] ? block_is_partially_uptodate+0x270/0x270 [ 891.715570][ T7543] dump_stack+0x15/0x17 [ 891.719566][ T7543] should_fail+0x3c0/0x510 [ 891.723817][ T7543] ? erofs_fc_fill_super+0x372/0x1180 [ 891.729020][ T7543] __should_failslab+0x9f/0xe0 [ 891.733621][ T7543] should_failslab+0x9/0x20 [ 891.737961][ T7543] __kmalloc_track_caller+0x6c/0x350 [ 891.743080][ T7543] ? do_read_cache_page+0x941/0xa70 [ 891.748119][ T7543] kmemdup+0x24/0x50 [ 891.751848][ T7543] erofs_fc_fill_super+0x372/0x1180 [ 891.756883][ T7543] get_tree_bdev+0x441/0x680 [ 891.761310][ T7543] ? erofs_release_device_info+0x90/0x90 [ 891.766794][ T7543] erofs_fc_get_tree+0x1c/0x20 [ 891.771377][ T7543] vfs_get_tree+0x88/0x290 [ 891.775632][ T7543] do_new_mount+0x289/0xad0 [ 891.779980][ T7543] ? do_move_mount_old+0x160/0x160 [ 891.784926][ T7543] ? security_capable+0xb2/0xd0 [ 891.789603][ T7543] ? ns_capable+0x8a/0xf0 [ 891.793771][ T7543] path_mount+0x60b/0x1050 [ 891.798026][ T7543] __se_sys_mount+0x2d2/0x3c0 [ 891.802538][ T7543] ? __x64_sys_mount+0xd0/0xd0 [ 891.807143][ T7543] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 891.813040][ T7543] __x64_sys_mount+0xbf/0xd0 [ 891.817465][ T7543] do_syscall_64+0x44/0xd0 [ 891.821721][ T7543] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 891.827448][ T7543] RIP: 0033:0x7fe9fd6d05da [ 891.831745][ T7543] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 891.851142][ T7543] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 891.854697][ T3389] usb 1-1: USB disconnect, device number 115 [ 891.859471][ T7543] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 891.859498][ T7543] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 891.859511][ T7543] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 891.859522][ T7543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 891.859534][ T7543] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 891.904625][ T7543] [ 891.917000][ T1762] usbhid 5-1:0.0: can't add hid device: -71 [ 891.922773][ T1762] usbhid: probe of 5-1:0.0 failed with error -71 [ 891.934632][ T1762] usb 5-1: USB disconnect, device number 53 [ 892.001929][ T3441] lg-g15 0003:046D:C225.009A: hidraw0: USB HID vf4.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 892.016098][ T7549] loop2: detected capacity change from 0 to 16 [ 892.025053][ T7549] FAULT_INJECTION: forcing a failure. [ 892.025053][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.039375][ T7549] CPU: 0 PID: 7549 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 892.049349][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 892.059243][ T7549] Call Trace: [ 892.062367][ T7549] [ 892.065263][ T7549] dump_stack_lvl+0x151/0x1b7 [ 892.069763][ T7549] ? bfq_pos_tree_add_move+0x43e/0x43e [ 892.075065][ T7549] dump_stack+0x15/0x17 [ 892.079049][ T7549] should_fail+0x3c0/0x510 [ 892.083312][ T7549] should_fail_usercopy+0x1a/0x20 [ 892.088161][ T7549] _copy_from_user+0x20/0xd0 [ 892.092592][ T7549] __se_sys_mount+0x179/0x3c0 [ 892.097103][ T7549] ? __kasan_check_write+0x14/0x20 [ 892.102051][ T7549] ? __x64_sys_mount+0xd0/0xd0 [ 892.106650][ T7549] __x64_sys_mount+0xbf/0xd0 [ 892.111076][ T7549] do_syscall_64+0x44/0xd0 [ 892.115329][ T7549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 892.121059][ T7549] RIP: 0033:0x7fd49bffb5da [ 892.125310][ T7549] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 892.144838][ T7549] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 892.153085][ T7549] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 892.160896][ T7549] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 892.168711][ T7549] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 892.176517][ T7549] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 892.184333][ T7549] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 892.192233][ T7549] [ 892.195899][ T7549] erofs: (device loop2): mounted with root inode @ nid 36. 17:24:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:24:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:58 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 87) 17:24:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 68) [ 892.570016][ T7560] loop5: detected capacity change from 0 to 16 [ 892.571237][ T7559] loop1: detected capacity change from 0 to 16 [ 892.577539][ T7560] FAULT_INJECTION: forcing a failure. [ 892.577539][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 892.594737][ T7560] CPU: 1 PID: 7560 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 892.604716][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 892.614610][ T7560] Call Trace: [ 892.617731][ T7560] [ 892.620508][ T7560] dump_stack_lvl+0x151/0x1b7 [ 892.625022][ T7560] ? bfq_pos_tree_add_move+0x43e/0x43e [ 892.630316][ T7560] ? find_inode+0x424/0x4d0 [ 892.634659][ T7560] dump_stack+0x15/0x17 [ 892.638646][ T7560] should_fail+0x3c0/0x510 [ 892.642919][ T7560] ? erofs_getattr+0x120/0x120 [ 892.647600][ T7560] __should_failslab+0x9f/0xe0 [ 892.652197][ T7560] should_failslab+0x9/0x20 [ 892.656526][ T7560] kmem_cache_alloc+0x4f/0x2f0 [ 892.661127][ T7560] ? erofs_alloc_inode+0x1b/0x50 [ 892.665900][ T7560] ? _erofs_info+0x190/0x190 [ 892.670327][ T7560] ? erofs_getattr+0x120/0x120 [ 892.674927][ T7560] ? erofs_ilookup_test_actor+0x70/0x70 [ 892.680311][ T7560] erofs_alloc_inode+0x1b/0x50 [ 892.684908][ T7560] ? _erofs_info+0x190/0x190 [ 892.689340][ T7560] iget5_locked+0xba/0x280 [ 892.693592][ T7560] ? erofs_ilookup_test_actor+0x70/0x70 [ 892.698972][ T7560] erofs_iget+0xae/0x1b0 [ 892.703052][ T7560] ? erofs_inode_init_once+0x20/0x20 [ 892.708177][ T7560] erofs_fc_fill_super+0x7a7/0x1180 [ 892.713384][ T7560] get_tree_bdev+0x441/0x680 [ 892.717815][ T7560] ? erofs_release_device_info+0x90/0x90 [ 892.723358][ T7560] erofs_fc_get_tree+0x1c/0x20 [ 892.727956][ T7560] vfs_get_tree+0x88/0x290 [ 892.732297][ T7560] do_new_mount+0x289/0xad0 [ 892.736641][ T7560] ? do_move_mount_old+0x160/0x160 [ 892.741677][ T7560] ? security_capable+0xb2/0xd0 [ 892.746364][ T7560] ? ns_capable+0x8a/0xf0 [ 892.750528][ T7560] path_mount+0x60b/0x1050 [ 892.754784][ T7560] __se_sys_mount+0x2d2/0x3c0 [ 892.759293][ T7560] ? __x64_sys_mount+0xd0/0xd0 [ 892.763890][ T7560] __x64_sys_mount+0xbf/0xd0 [ 892.768326][ T7560] do_syscall_64+0x44/0xd0 [ 892.772576][ T7560] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 892.778301][ T7560] RIP: 0033:0x7fe9fd6d05da [ 892.782551][ T7560] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 892.802082][ T7560] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 892.810327][ T7560] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 892.818247][ T7560] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 892.826055][ T7560] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 892.833870][ T7560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 892.842030][ T7560] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 892.849839][ T7560] [ 892.853460][ T7559] erofs: (device loop1): mounted with root inode @ nid 36. [ 892.854299][ T7562] loop2: detected capacity change from 0 to 16 [ 892.867307][ T7562] FAULT_INJECTION: forcing a failure. [ 892.867307][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 892.880000][ T7562] CPU: 1 PID: 7562 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 892.889973][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 892.899871][ T7562] Call Trace: [ 892.902990][ T7562] [ 892.905768][ T7562] dump_stack_lvl+0x151/0x1b7 [ 892.910278][ T7562] ? bfq_pos_tree_add_move+0x43e/0x43e [ 892.915574][ T7562] dump_stack+0x15/0x17 [ 892.919562][ T7562] should_fail+0x3c0/0x510 [ 892.923824][ T7562] __should_failslab+0x9f/0xe0 [ 892.928417][ T7562] should_failslab+0x9/0x20 [ 892.932760][ T7562] kmem_cache_alloc+0x4f/0x2f0 [ 892.937357][ T7562] ? exc_page_fault+0x75/0x1a0 [ 892.941969][ T7562] ? getname_flags+0xba/0x510 [ 892.946470][ T7562] getname_flags+0xba/0x510 [ 892.950817][ T7562] user_path_at_empty+0x2e/0x1b0 [ 892.955582][ T7562] __se_sys_mount+0x293/0x3c0 [ 892.960188][ T7562] ? __x64_sys_mount+0xd0/0xd0 [ 892.964782][ T7562] __x64_sys_mount+0xbf/0xd0 [ 892.969210][ T7562] do_syscall_64+0x44/0xd0 [ 892.973464][ T7562] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 892.979189][ T7562] RIP: 0033:0x7fd49bffb5da [ 892.983448][ T7562] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 893.002886][ T7562] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 893.011132][ T7562] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 893.018940][ T7562] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 893.026752][ T7562] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 893.034572][ T7562] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 893.042376][ T7562] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 893.050189][ T7562] 17:24:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000090400000103010000092100f42b01220100090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x1f, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xdda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x81, 0x6, 0x20, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x9b, &(0x7f0000000500)=ANY=[@ANYBLOB="9b0372d537f2ff3d7372c52e375ac9dae156bcaa25ed213288bc335c55f5a05d4dbbd8492916935f0ac532933bb7b92c05e7a2f08cc711686e9d275f29486a4c6a59206f45f7b9edc9387a9b4737b382ca2264f5a5464d5073ff3060060d5bb5ffdc6e17dccea3ab7b37b70ae4b21199fa5594f4b1e3301a1aa4664b16afd9dad79391b2799bb84b3d33e20c96889751cacd111bc3010d3e395f8b281a0cfac99ab8cdff1eaed89536f622f18295d1cd39d4e902c1ed95df51803783c0813aaf97a3b01a5c31ae92203c685be966c508d1da66e12c5cc0db4c3ebe62dcca683ee114ab4608561d5c85cfa192f5e59d4f3ae1e7b2350ed7caca2cda1aa818ebc5e856873e71646b99a25ecf3a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "d0ddaca1386170f8df5686c15c796849add31f517f6ea54e78655f39e715c510d251a817bedb6aa13be2597874f37c34675122cdbf956125eed82cdce319b986537da7c2d57eb1cc0c1f9c225e27589c06566cc230ce625fe61b3ac904d3f8737ec3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x31, &(0x7f0000000340)=@string={0x31, 0x3, "a055f3c03486ab1d3ada39ef7aba0ef63cd7d56e2ee7839157c710de8afe001d0247c342e3e62ae36ab3e260143234"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "7367ab0460c924fed9c3a28859895697f0bf431fe744fb23da318ca60c7ac2c69b8df5737f7efba0d8ab5936d58b4da34808c80eaab001bf8d9420462483140931a0fc799d77b9f79c35a3d21113c4221ba517e574bfafb6a0c109cde9869f418be889e7505d73cfd6676b2b4f9374d035f50752cb92c1938c8e33507ffdf8842397dfbbf0a32a7262b12ad16e268b0d5987c590cac4e767fcf514ed20d0b920756114906a08fe7a5970d43321e9837925c3c218f3cc8edfef547992f9821bcc5b8f50990ea7bf6e92fc47a98cca93c5f241558a93b8715195bf8da3c1640cfce3f115463e70dd7942ac1f063b3b750220bcafa24bf3024206"}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0425c2400000000001090224000100000000090400000103010000092100f42b01220100090581030000000000"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x1f, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xdda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x81, 0x6, 0x20, 0x6}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x9b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x64, &(0x7f0000000240)=@string={0x64, 0x3, "d0ddaca1386170f8df5686c15c796849add31f517f6ea54e78655f39e715c510d251a817bedb6aa13be2597874f37c34675122cdbf956125eed82cdce319b986537da7c2d57eb1cc0c1f9c225e27589c06566cc230ce625fe61b3ac904d3f8737ec3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x31, &(0x7f0000000340)=@string={0x31, 0x3, "a055f3c03486ab1d3ada39ef7aba0ef63cd7d56e2ee7839157c710de8afe001d0247c342e3e62ae36ab3e260143234"}}, {0xfb, &(0x7f0000000380)=@string={0xfb, 0x3, "7367ab0460c924fed9c3a28859895697f0bf431fe744fb23da318ca60c7ac2c69b8df5737f7efba0d8ab5936d58b4da34808c80eaab001bf8d9420462483140931a0fc799d77b9f79c35a3d21113c4221ba517e574bfafb6a0c109cde9869f418be889e7505d73cfd6676b2b4f9374d035f50752cb92c1938c8e33507ffdf8842397dfbbf0a32a7262b12ad16e268b0d5987c590cac4e767fcf514ed20d0b920756114906a08fe7a5970d43321e9837925c3c218f3cc8edfef547992f9821bcc5b8f50990ea7bf6e92fc47a98cca93c5f241558a93b8715195bf8da3c1640cfce3f115463e70dd7942ac1f063b3b750220bcafa24bf3024206"}}]}) (async) 17:24:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xb, 0xa0, {0xa0, 0x22, "2d11fc4610b2e65168c0949b65fa35f8006611fb8b907fc76c4cbe62710267a74dcc2b0b9177aaf88f6ec04be33818ecd07a289545763854818e7e36c63bba6995b47259fad8155cbd0cec24f824e2fef03883b0b06773c1467cc35203240945ad2f9a32208b7e1af3f91ee07c5bb38b15d8ef716351c9077faf1e0b123a614ba88c18d361e315ea1f9d97b0b23f45c82bf6129922242f6273d105a5e512"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "7391c03346bfd27df1f784cda03f9222f59bc93d7b510b4d59fda48fa758d396185ad1e03fc21095b9b24ca6501251f28dafe6261af2d7175af9646391af4f6dbc2a61aa7fcdaee1811be5e7f0e31f4a780f44f88e79da8428d620a728a21d00d6881eb088ed096e"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x80, 0x4, 0x5, "1f724525", "6719e3b5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x3, 0x6, 0x0, 0x2, 0x40}}}, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x40, 0x3, 0x3d, "97eeabdac061e098adedd72f86777104624df0163aaf2e116ccdc5423cf0b15f622e3ec777256ee347ff4153084c03d34a5680826df92b1b135acd8c87"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0xfff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1f7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "ab71"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "dc06"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3f}, 0xfffffffffffffffc, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) [ 893.068270][ T3441] usb 4-1: USB disconnect, device number 99 [ 893.127051][ T3389] usb 5-1: new high-speed USB device number 54 using dummy_hcd 17:24:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:24:58 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 88) 17:24:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 69) [ 893.357005][ T757] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 893.429145][ T7573] loop5: detected capacity change from 0 to 16 [ 893.436297][ T7573] FAULT_INJECTION: forcing a failure. [ 893.436297][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 893.449663][ T7573] CPU: 1 PID: 7573 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 893.450214][ T7574] loop1: detected capacity change from 0 to 16 [ 893.459640][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 893.459660][ T7573] Call Trace: [ 893.459667][ T7573] [ 893.459675][ T7573] dump_stack_lvl+0x151/0x1b7 [ 893.459705][ T7573] ? bfq_pos_tree_add_move+0x43e/0x43e [ 893.459723][ T7573] dump_stack+0x15/0x17 [ 893.459740][ T7573] should_fail+0x3c0/0x510 [ 893.499567][ T7573] __should_failslab+0x9f/0xe0 [ 893.504165][ T7573] should_failslab+0x9/0x20 [ 893.508505][ T7573] kmem_cache_alloc+0x4f/0x2f0 [ 893.513102][ T7573] ? from_kuid_munged+0x7b0/0x7b0 [ 893.517961][ T7573] ? security_inode_alloc+0x29/0x140 [ 893.523089][ T7573] security_inode_alloc+0x29/0x140 [ 893.528031][ T7573] inode_init_always+0x717/0x960 [ 893.532935][ T7573] ? erofs_getattr+0x120/0x120 [ 893.537523][ T7573] ? erofs_ilookup_test_actor+0x70/0x70 [ 893.543045][ T7573] iget5_locked+0xe5/0x280 [ 893.547295][ T7573] ? erofs_ilookup_test_actor+0x70/0x70 [ 893.552765][ T7573] erofs_iget+0xae/0x1b0 [ 893.556848][ T7573] ? erofs_inode_init_once+0x20/0x20 [ 893.561966][ T7573] erofs_fc_fill_super+0x7a7/0x1180 [ 893.566998][ T7573] get_tree_bdev+0x441/0x680 [ 893.571425][ T7573] ? erofs_release_device_info+0x90/0x90 [ 893.576891][ T7573] erofs_fc_get_tree+0x1c/0x20 [ 893.581493][ T7573] vfs_get_tree+0x88/0x290 [ 893.585747][ T7573] do_new_mount+0x289/0xad0 [ 893.590085][ T7573] ? do_move_mount_old+0x160/0x160 [ 893.595643][ T7573] ? security_capable+0xb2/0xd0 [ 893.600327][ T7573] ? ns_capable+0x8a/0xf0 [ 893.604494][ T7573] path_mount+0x60b/0x1050 [ 893.608757][ T7573] __se_sys_mount+0x2d2/0x3c0 [ 893.613264][ T7573] ? __x64_sys_mount+0xd0/0xd0 [ 893.617862][ T7573] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 893.623761][ T7573] __x64_sys_mount+0xbf/0xd0 [ 893.628189][ T7573] do_syscall_64+0x44/0xd0 [ 893.632452][ T7573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 893.638169][ T7573] RIP: 0033:0x7fe9fd6d05da [ 893.642419][ T7573] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 893.661862][ T7573] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 893.670110][ T7573] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 893.677929][ T7573] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 893.685727][ T7573] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 893.693549][ T7573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 893.701359][ T7573] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 893.709168][ T7573] [ 893.713003][ T7574] erofs: (device loop1): mounted with root inode @ nid 36. [ 893.722839][ T3441] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 893.735552][ T7577] loop2: detected capacity change from 0 to 16 [ 893.761406][ T7577] FAULT_INJECTION: forcing a failure. [ 893.761406][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 893.779459][ T3389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.790461][ T3389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.800086][ T7577] CPU: 1 PID: 7577 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 893.800471][ T3389] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 893.809980][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 893.810000][ T7577] Call Trace: [ 893.810007][ T7577] [ 893.810015][ T7577] dump_stack_lvl+0x151/0x1b7 [ 893.810043][ T7577] ? bfq_pos_tree_add_move+0x43e/0x43e [ 893.810062][ T7577] dump_stack+0x15/0x17 [ 893.819465][ T3389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.828724][ T7577] should_fail+0x3c0/0x510 [ 893.828751][ T7577] __should_failslab+0x9f/0xe0 [ 893.828769][ T7577] should_failslab+0x9/0x20 [ 893.828785][ T7577] kmem_cache_alloc+0x4f/0x2f0 [ 893.833169][ T3389] usb 5-1: config 0 descriptor?? [ 893.834642][ T7577] ? exc_page_fault+0x75/0x1a0 [ 893.834664][ T7577] ? getname_flags+0xba/0x510 [ 893.888096][ T7577] getname_flags+0xba/0x510 [ 893.892434][ T7577] user_path_at_empty+0x2e/0x1b0 [ 893.897207][ T7577] __se_sys_mount+0x293/0x3c0 [ 893.901726][ T7577] ? __x64_sys_mount+0xd0/0xd0 [ 893.906325][ T7577] __x64_sys_mount+0xbf/0xd0 [ 893.910746][ T7577] do_syscall_64+0x44/0xd0 [ 893.915001][ T7577] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 893.920726][ T7577] RIP: 0033:0x7fd49bffb5da [ 893.924981][ T7577] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 893.944429][ T7577] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 893.952669][ T7577] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 893.960481][ T7577] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 893.968303][ T7577] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 893.976100][ T7577] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 893.983913][ T7577] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 893.991739][ T7577] [ 894.137143][ T757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.153370][ T757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.172789][ T757] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 17:24:59 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 89) 17:24:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 894.191279][ T757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.209149][ T757] usb 1-1: config 0 descriptor?? [ 894.247729][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.273133][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.282813][ T3441] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 894.292985][ T3441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.300959][ T7580] loop5: detected capacity change from 0 to 16 [ 894.309036][ T7580] FAULT_INJECTION: forcing a failure. [ 894.309036][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 894.321862][ T3441] usb 4-1: config 0 descriptor?? [ 894.327321][ T7580] CPU: 0 PID: 7580 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 894.337298][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 894.347191][ T7580] Call Trace: [ 894.350314][ T7580] [ 894.353092][ T7580] dump_stack_lvl+0x151/0x1b7 [ 894.357605][ T7580] ? bfq_pos_tree_add_move+0x43e/0x43e [ 894.362899][ T7580] ? make_kgid+0x215/0x710 [ 894.367152][ T7580] ? from_kuid_munged+0x7b0/0x7b0 [ 894.372017][ T7580] dump_stack+0x15/0x17 [ 894.376005][ T7580] should_fail+0x3c0/0x510 [ 894.380256][ T7580] __should_failslab+0x9f/0xe0 [ 894.384856][ T7580] should_failslab+0x9/0x20 [ 894.389197][ T7580] kmem_cache_alloc+0x4f/0x2f0 [ 894.393797][ T7580] ? __d_alloc+0x2d/0x6b0 [ 894.397964][ T7580] __d_alloc+0x2d/0x6b0 [ 894.401952][ T7580] ? erofs_inode_init_once+0x20/0x20 [ 894.407079][ T7580] d_make_root+0x4a/0xe0 [ 894.411264][ T7580] erofs_fc_fill_super+0x809/0x1180 [ 894.416279][ T7580] get_tree_bdev+0x441/0x680 [ 894.420706][ T7580] ? erofs_release_device_info+0x90/0x90 [ 894.426171][ T7580] erofs_fc_get_tree+0x1c/0x20 [ 894.430775][ T7580] vfs_get_tree+0x88/0x290 [ 894.435034][ T7580] do_new_mount+0x289/0xad0 [ 894.439367][ T7580] ? do_move_mount_old+0x160/0x160 [ 894.444313][ T7580] ? security_capable+0xb2/0xd0 [ 894.448999][ T7580] ? ns_capable+0x8a/0xf0 [ 894.453949][ T7580] path_mount+0x60b/0x1050 [ 894.458201][ T7580] __se_sys_mount+0x2d2/0x3c0 [ 894.462712][ T7580] ? __x64_sys_mount+0xd0/0xd0 [ 894.467314][ T7580] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 894.473213][ T7580] __x64_sys_mount+0xbf/0xd0 [ 894.477641][ T7580] do_syscall_64+0x44/0xd0 [ 894.481900][ T7580] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 894.487620][ T7580] RIP: 0033:0x7fe9fd6d05da [ 894.491876][ T7580] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 894.511324][ T7580] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 894.519563][ T7580] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 894.527385][ T7580] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 894.535187][ T7580] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 17:25:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFP8kAYx/935YW8xvgBXBwkEWMsbVHDwoCJu4mocZNIJWgBAzUREgc/gKODiYuDX8DRycFvoYM6uTA61/TuoCcR0EET4/MbHn5Hnx7Xh+Q/FARB/Fmen14fT5ezBQPAOJJIqO9fjKiHa/0P54dzZ7mVi+v7q7vaxPFN/34MQBB8/vdjAG7zBny1DoL3dyfVZwG85+vgmFW+CQZT+TY4NpS7YNhSvqd5Pew3zd2K55o7da8UihUWOyxOWDL95+ucMJS08zHterPV3i96ntv4Rhk1v06eI6edT/+/urOxtPnZ4LCVZ8CwpjyLRHc2ciTa80/Gov2NH35+EhKS3yZRPgWXDDNaPsW0/Ej71YN0s9Wer1SLZbfs1hwns2QtWNaikxZBJOuQ/Psv8mlM2//fgN44i+Oo6PsNW9be2pH1o8TlIv84UtNyHWZ/fOBp5HWm7mPCUsaQdoIgCIIgCIIgCIIgCIIgiC8wBSbego7AWRXdbwEAAP//gYN3SA==") (fail_nth: 70) [ 894.543008][ T7580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 894.550810][ T7580] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 894.558625][ T7580] [ 894.569910][ T757] lg-g15 0003:046D:C225.009B: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 894.581677][ T7585] loop1: detected capacity change from 0 to 16 [ 894.623090][ T7585] erofs: (device loop1): mounted with root inode @ nid 36. [ 894.717504][ T757] usb 1-1: USB disconnect, device number 116 [ 894.723776][ T7589] loop2: detected capacity change from 0 to 16 [ 894.749948][ T7589] FAULT_INJECTION: forcing a failure. [ 894.749948][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 894.807191][ T3389] usbhid 5-1:0.0: can't add hid device: -71 [ 894.813158][ T3389] usbhid: probe of 5-1:0.0 failed with error -71 [ 894.824342][ T3389] usb 5-1: USB disconnect, device number 54 [ 894.851083][ T7589] CPU: 0 PID: 7589 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 894.861849][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 894.871745][ T7589] Call Trace: [ 894.874868][ T7589] [ 894.877644][ T7589] dump_stack_lvl+0x151/0x1b7 [ 894.882155][ T7589] ? bfq_pos_tree_add_move+0x43e/0x43e [ 894.887450][ T7589] ? release_firmware_map_entry+0x193/0x193 [ 894.893177][ T7589] ? avc_has_perm_noaudit+0x2ec/0x450 [ 894.898400][ T7589] dump_stack+0x15/0x17 [ 894.902378][ T7589] should_fail+0x3c0/0x510 [ 894.906632][ T7589] ? alloc_fs_context+0x65/0x830 [ 894.911403][ T7589] __should_failslab+0x9f/0xe0 [ 894.916005][ T7589] should_failslab+0x9/0x20 [ 894.920344][ T7589] kmem_cache_alloc_trace+0x4a/0x310 [ 894.925474][ T7589] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 894.930933][ T7589] alloc_fs_context+0x65/0x830 [ 894.935531][ T7589] ? _raw_read_unlock+0x38/0x40 [ 894.940218][ T7589] ? get_fs_type+0x3f3/0x510 [ 894.944647][ T7589] fs_context_for_mount+0x24/0x30 [ 894.949504][ T7589] do_new_mount+0x15c/0xad0 [ 894.953848][ T7589] ? do_move_mount_old+0x160/0x160 [ 894.958792][ T7589] ? security_capable+0xb2/0xd0 [ 894.963481][ T7589] ? ns_capable+0x8a/0xf0 [ 894.967651][ T7589] path_mount+0x60b/0x1050 [ 894.971900][ T7589] __se_sys_mount+0x2d2/0x3c0 [ 894.976412][ T7589] ? __x64_sys_mount+0xd0/0xd0 [ 894.981012][ T7589] __x64_sys_mount+0xbf/0xd0 [ 894.985437][ T7589] do_syscall_64+0x44/0xd0 [ 894.989691][ T7589] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 894.995421][ T7589] RIP: 0033:0x7fd49bffb5da [ 894.999674][ T7589] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 895.019115][ T7589] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 895.027357][ T7589] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 895.035170][ T7589] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 895.042981][ T7589] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 895.050794][ T7589] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 895.058606][ T7589] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 895.066421][ T7589] [ 895.091925][ T3441] lg-g15 0003:046D:C225.009C: hidraw0: USB HID vf4.00 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 895.288854][ T7566] udc-core: couldn't find an available UDC or it's busy [ 895.297052][ T7566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:25:00 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0x28, {0x28, 0x8, "cad374ec40b480be521c4386ec61ee692b205f39d3d83b23bd0136821efb51b0dce0725e9ccc"}}, &(0x7f0000000600)={0x0, 0x3, 0x36, @string={0x36, 0x3, "04465149eff2cd5acd9c8ef6a36809cb9cf48d5f68999363f51a2ebd748c73d48919c5353e1ed2e5151ca6aeb51b8e340417918e"}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@global=@item_4={0x3, 0x1, 0x2, "22ffdf6e"}, @local=@item_4={0x3, 0x2, 0x9, "b660ce8e"}, @global=@item_012={0x2, 0x1, 0x3, "9905"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x9, "d855f930"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x193}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0xa, 0xaa, "2f188452e7d50024afd44f8667b292ef9cba23c19255e89a99dd9b49f6258a8eafd4c618b8692508ab63b8c7be6c7c2262c3388f673dcee856e2442fd61f0d9c105e1e66b3d86dfa78088e7f39516c2289cceb9b8d9f2f1cd2356ef32343bfdefa7dc124ca6c7f2b431a6bb70313dc9fafa16e30e45c20881415cf7f7204d3c7414741171a9728501e52be808e93d6a898d6c05b32570a06240c317ca965f93d60ddb26504b34fd88260"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0xe, "090ab49c246aef1de7225b0cfd06"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3f}}) 17:25:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x20, 0xb, 0xa0, {0xa0, 0x22, "2d11fc4610b2e65168c0949b65fa35f8006611fb8b907fc76c4cbe62710267a74dcc2b0b9177aaf88f6ec04be33818ecd07a289545763854818e7e36c63bba6995b47259fad8155cbd0cec24f824e2fef03883b0b06773c1467cc35203240945ad2f9a32208b7e1af3f91ee07c5bb38b15d8ef716351c9077faf1e0b123a614ba88c18d361e315ea1f9d97b0b23f45c82bf6129922242f6273d105a5e512"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "7391c03346bfd27df1f784cda03f9222f59bc93d7b510b4d59fda48fa758d396185ad1e03fc21095b9b24ca6501251f28dafe6261af2d7175af9646391af4f6dbc2a61aa7fcdaee1811be5e7f0e31f4a780f44f88e79da8428d620a728a21d00d6881eb088ed096e"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1c, 0x80, 0x4, 0x5, "1f724525", "6719e3b5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x3, 0x6, 0x0, 0x2, 0x40}}}, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x40, 0x3, 0x3d, "97eeabdac061e098adedd72f86777104624df0163aaf2e116ccdc5423cf0b15f622e3ec777256ee347ff4153084c03d34a5680826df92b1b135acd8c87"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0xfff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1f7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "ab71"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "dc06"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3f}, 0xfffffffffffffffc, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7}}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) (rerun: 32) 17:25:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:25:00 executing program 5: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 90) [ 895.538074][ T7603] loop1: detected capacity change from 0 to 16 [ 895.545097][ T7602] loop5: detected capacity change from 0 to 16 [ 895.545131][ T7603] erofs: (device loop1): mounted with root inode @ nid 36. [ 895.568616][ T7602] FAULT_INJECTION: forcing a failure. [ 895.568616][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 895.581043][ T7602] CPU: 0 PID: 7602 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 895.590992][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 895.600890][ T7602] Call Trace: [ 895.604010][ T7602] [ 895.606791][ T7602] dump_stack_lvl+0x151/0x1b7 [ 895.611306][ T7602] ? bfq_pos_tree_add_move+0x43e/0x43e [ 895.616600][ T7602] ? _raw_spin_lock+0xa3/0x1b0 [ 895.621200][ T7602] dump_stack+0x15/0x17 [ 895.625190][ T7602] should_fail+0x3c0/0x510 [ 895.629449][ T7602] __should_failslab+0x9f/0xe0 [ 895.634047][ T7602] should_failslab+0x9/0x20 [ 895.638383][ T7602] kmem_cache_alloc+0x4f/0x2f0 [ 895.642988][ T7602] ? erofs_alloc_inode+0x1b/0x50 [ 895.647754][ T7602] ? __kasan_check_write+0x14/0x20 [ 895.652702][ T7602] ? _erofs_info+0x190/0x190 [ 895.657133][ T7602] erofs_alloc_inode+0x1b/0x50 [ 895.661730][ T7602] ? _erofs_info+0x190/0x190 [ 895.666158][ T7602] new_inode_pseudo+0x64/0x220 [ 895.670757][ T7602] new_inode+0x28/0x1c0 [ 895.674749][ T7602] ? _raw_spin_unlock+0x4d/0x70 [ 895.679435][ T7602] ? erofs_shrinker_register+0xfb/0x110 [ 895.684905][ T7602] erofs_fc_fill_super+0x867/0x1180 [ 895.689952][ T7602] get_tree_bdev+0x441/0x680 [ 895.694367][ T7602] ? erofs_release_device_info+0x90/0x90 [ 895.699845][ T7602] erofs_fc_get_tree+0x1c/0x20 [ 895.704493][ T7602] vfs_get_tree+0x88/0x290 [ 895.708686][ T7602] do_new_mount+0x289/0xad0 [ 895.713029][ T7602] ? do_move_mount_old+0x160/0x160 [ 895.717980][ T7602] ? security_capable+0xb2/0xd0 [ 895.722663][ T7602] ? ns_capable+0x8a/0xf0 [ 895.726824][ T7602] path_mount+0x60b/0x1050 [ 895.731093][ T7602] __se_sys_mount+0x2d2/0x3c0 [ 895.735594][ T7602] ? __x64_sys_mount+0xd0/0xd0 [ 895.740193][ T7602] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 895.746097][ T7602] __x64_sys_mount+0xbf/0xd0 [ 895.747020][ T757] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 895.750515][ T7602] do_syscall_64+0x44/0xd0 [ 895.750544][ T7602] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 895.750566][ T7602] RIP: 0033:0x7fe9fd6d05da [ 895.772318][ T7602] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 895.791922][ T7602] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 895.800164][ T7602] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 895.807990][ T7602] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 895.815803][ T7602] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 895.823601][ T7602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 895.831418][ T7602] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 895.839229][ T7602] [ 895.846259][ T7602] ------------[ cut here ]------------ [ 895.851902][ T7602] kobject: '(null)' (ffff8881681e30e8): is not initialized, yet kobject_put() is being called. [ 895.862794][ T7602] WARNING: CPU: 1 PID: 7602 at lib/kobject.c:752 kobject_put+0x7f/0x240 [ 895.880589][ T7602] Modules linked in: [ 895.889091][ T7602] CPU: 1 PID: 7602 Comm: syz-executor.5 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 895.903528][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 895.913806][ T7602] RIP: 0010:kobject_put+0x7f/0x240 [ 895.919128][ T7602] Code: 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 65 e1 2d ff 49 8b 36 48 c7 c7 20 00 89 85 4c 89 f2 31 c0 e8 e1 ee bc fe <0f> 0b eb 0f e8 78 7c eb fe e9 58 01 00 00 e8 6e 7c eb fe 4d 8d 6e [ 895.939083][ T7602] RSP: 0018:ffffc9000040fa58 EFLAGS: 00010246 [ 895.945147][ T7602] RAX: 1f3f0d986af28200 RBX: 0000000000000000 RCX: 0000000000040000 [ 895.953377][ T7602] RDX: ffffc90008afe000 RSI: 000000000003ffff RDI: 0000000000040000 [ 895.962047][ T7602] RBP: ffffc9000040fa88 R08: ffffffff81584ba9 R09: ffffed103ee265e8 [ 895.970233][ T7602] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff8881681e3000 [ 895.978401][ T7602] R13: dffffc0000000000 R14: ffff8881681e30e8 R15: dffffc0000000000 [ 895.986357][ T7602] FS: 00007fe9fc421700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 895.995545][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.997021][ T3441] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 896.002380][ T7602] CR2: 0000001b32522000 CR3: 00000001138f1000 CR4: 00000000003506a0 [ 896.017547][ T7602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.025515][ T7602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.033811][ T7602] Call Trace: [ 896.037255][ T7602] [ 896.040093][ T7602] ? kobject_put+0x88/0x240 [ 896.044490][ T7602] erofs_unregister_sysfs+0x4f/0x70 [ 896.050014][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 896.054840][ T7602] erofs_put_super+0x46/0xa0 [ 896.059641][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 896.064480][ T7602] generic_shutdown_super+0x157/0x2e0 [ 896.070058][ T7602] kill_block_super+0x80/0xe0 [ 896.074713][ T7602] erofs_kill_sb+0x66/0x130 [ 896.079465][ T7602] deactivate_locked_super+0xb0/0x100 [ 896.084828][ T7602] get_tree_bdev+0x45d/0x680 [ 896.089645][ T7602] ? erofs_release_device_info+0x90/0x90 [ 896.095233][ T7602] erofs_fc_get_tree+0x1c/0x20 [ 896.100278][ T7602] vfs_get_tree+0x88/0x290 [ 896.104685][ T7602] do_new_mount+0x289/0xad0 [ 896.109404][ T7602] ? do_move_mount_old+0x160/0x160 [ 896.114504][ T7602] ? security_capable+0xb2/0xd0 [ 896.120565][ T7602] ? ns_capable+0x8a/0xf0 [ 896.124861][ T7602] path_mount+0x60b/0x1050 [ 896.129485][ T7602] __se_sys_mount+0x2d2/0x3c0 [ 896.134139][ T7602] ? __x64_sys_mount+0xd0/0xd0 [ 896.139179][ T7602] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 896.145238][ T7602] __x64_sys_mount+0xbf/0xd0 [ 896.150086][ T7602] do_syscall_64+0x44/0xd0 [ 896.154485][ T7602] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 896.160691][ T7602] RIP: 0033:0x7fe9fd6d05da [ 896.165090][ T7602] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 896.185032][ T7602] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 896.193844][ T7602] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 896.202086][ T757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.213283][ T7602] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 896.221524][ T757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.231460][ T7602] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 896.239640][ T757] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 896.248867][ T7602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 896.256832][ T757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.265110][ T7602] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 896.273715][ T7602] [ 896.277150][ T757] usb 1-1: config 0 descriptor?? [ 896.282066][ T7602] ---[ end trace fd65b46823c276e4 ]--- 17:25:01 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0x4}}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat(r3, &(0x7f0000000180)='./bus\x00', 0x0, 0x20) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r3, r5, 0x0, 0x10000) read$FUSE(r5, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, r6, {0x8000000000000000}}, 0x18) write$UHID_CREATE2(r4, &(0x7f0000002600)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xe3, 0x3, 0x9, 0x401, 0x80, 0x5, "916ded31e54512f4f4f5e432cb924516041e6a4cc193fc337284e3fd4a81d188bbc1e715616a5f374089d8d9a9fa64717b61f2a8047e524550ca6909d4e57007d5f39744d6915bb956f8b98d30a2714655e633b81572dcf55b85ad0365dda682da5de1acc4d3e91fc3345922346761672b351c10abd6e4dcd7d5f97594a3145f4a30ea06aa9d096986e617733dfe0182c40f6462bb4538ec15d0e023215d9605756399ef128c40e80a9a256e1234a32852c8ec8575eaa88495e77fa2d3ffccb3e4304fbfd3f0c8ae5ef6e1ce751331d6841c914b31ba8b8ddfa9cc9bbb2d8d614844c5"}}, 0x1fb) rmdir(&(0x7f0000000100)='./bus/file0\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x6, 0xe67, 0x7}}, 0x30) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x3, 0x46, 0x1, 0x4, 0x97}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc225, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)={0x8b, 0x6f, 0x2, {0xa, [{0x80, 0x4, 0x3}, {0x0, 0x3, 0x2}, {0x10, 0x2, 0x1}, {0x40, 0x0, 0x7}, {0x50f4a24b76f8781, 0x4, 0x1}, {0x8, 0x1, 0x4}, {0x2, 0x2, 0x4}, {0x0, 0x2}, {0x8, 0x3, 0x6}, {0x2, 0x3, 0x4}]}}, 0x8b) 17:25:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") (fail_nth: 71) 17:25:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@un=@abs, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000740)=""/3, 0x3}], 0x4}, 0xffffffff}], 0x1, 0x10066, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x17e, &(0x7f0000000240)="$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") bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf2, &(0x7f0000000900)=""/242, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xcdb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) [ 896.287803][ T7602] ------------[ cut here ]------------ [ 896.293227][ T7602] refcount_t: underflow; use-after-free. [ 896.299170][ T7602] WARNING: CPU: 1 PID: 7602 at lib/refcount.c:28 refcount_warn_saturate+0x165/0x1b0 [ 896.308362][ T3389] usb 4-1: USB disconnect, device number 100 [ 896.320408][ T7602] Modules linked in: [ 896.326306][ T7602] CPU: 1 PID: 7602 Comm: syz-executor.5 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 896.339784][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 896.349989][ T7602] RIP: 0010:refcount_warn_saturate+0x165/0x1b0 [ 896.356237][ T7602] Code: c7 40 60 87 85 31 c0 e8 39 2f e0 fe 0f 0b eb 83 e8 d0 bc 0e ff c6 05 1f 3b 9f 04 01 48 c7 c7 a0 60 87 85 31 c0 e8 1b 2f e0 fe <0f> 0b e9 62 ff ff ff e8 af bc 0e ff c6 05 ff 3a 9f 04 01 48 c7 c7 [ 896.378080][ T7602] RSP: 0018:ffffc9000040fa38 EFLAGS: 00010246 [ 896.395034][ T7602] RAX: 1f3f0d986af28200 RBX: 0000000000000003 RCX: 0000000000040000 [ 896.407136][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.418585][ T7602] RDX: ffffc90008afe000 RSI: 000000000003ffff RDI: 0000000000040000 [ 896.427186][ T7602] RBP: ffffc9000040fa48 R08: ffffffff81584ba9 R09: ffffed103ee265e8 [ 896.429536][ T3441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.448619][ T7613] loop2: detected capacity change from 0 to 16 [ 896.449028][ T7614] loop1: detected capacity change from 0 to 16 [ 896.461143][ T7602] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff8881681e3000 [ 896.465307][ T3441] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.40 [ 896.480987][ T7613] FAULT_INJECTION: forcing a failure. [ 896.480987][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 896.483020][ T7602] R13: ffff8881681e3120 R14: 0000000000000003 R15: dffffc0000000000 [ 896.493860][ T3441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.512727][ T7614] erofs: (device loop1): mounted with root inode @ nid 36. [ 896.532747][ T3441] usb 5-1: config 0 descriptor?? [ 896.541206][ T7613] CPU: 0 PID: 7613 Comm: syz-executor.2 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 896.543196][ T7602] FS: 00007fe9fc421700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 896.552582][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 896.552598][ T7613] Call Trace: [ 896.552604][ T7613] [ 896.552612][ T7613] dump_stack_lvl+0x151/0x1b7 [ 896.552638][ T7613] ? bfq_pos_tree_add_move+0x43e/0x43e [ 896.552656][ T7613] ? avc_has_perm_noaudit+0x2ec/0x450 [ 896.552676][ T7613] dump_stack+0x15/0x17 [ 896.552690][ T7613] should_fail+0x3c0/0x510 [ 896.552705][ T7613] ? alloc_fs_context+0x65/0x830 [ 896.552722][ T7613] __should_failslab+0x9f/0xe0 [ 896.552740][ T7613] should_failslab+0x9/0x20 [ 896.552757][ T7613] kmem_cache_alloc_trace+0x4a/0x310 [ 896.552775][ T7613] alloc_fs_context+0x65/0x830 [ 896.594699][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.596304][ T7613] ? _raw_read_unlock+0x25/0x40 [ 896.596332][ T7613] ? get_fs_type+0x3f3/0x510 [ 896.596352][ T7613] fs_context_for_mount+0x24/0x30 [ 896.603107][ T757] lg-g15 0003:046D:C225.009D: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 896.605940][ T7613] do_new_mount+0x15c/0xad0 [ 896.605968][ T7613] ? do_move_mount_old+0x160/0x160 [ 896.605982][ T7613] ? security_capable+0xb2/0xd0 [ 896.606001][ T7613] ? ns_capable+0x8a/0xf0 [ 896.606017][ T7613] path_mount+0x60b/0x1050 [ 896.621706][ T7602] CR2: 00007fce4e6f0110 CR3: 00000001138f1000 CR4: 00000000003506a0 [ 896.624603][ T7613] __se_sys_mount+0x2d2/0x3c0 [ 896.624630][ T7613] ? __x64_sys_mount+0xd0/0xd0 [ 896.624647][ T7613] __x64_sys_mount+0xbf/0xd0 [ 896.624661][ T7613] do_syscall_64+0x44/0xd0 [ 896.645790][ T7602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.656108][ T7613] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 896.656137][ T7613] RIP: 0033:0x7fd49bffb5da [ 896.656152][ T7613] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 896.656165][ T7613] RSP: 002b:00007fd49ad2af88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 896.656185][ T7613] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fd49bffb5da [ 896.656196][ T7613] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fd49ad2afe0 [ 896.684741][ T7602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.686306][ T7613] RBP: 00007fd49ad2b020 R08: 00007fd49ad2b020 R09: 0000000000000000 [ 896.686322][ T7613] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000180 [ 896.686332][ T7613] R13: 00000000200001c0 R14: 00007fd49ad2afe0 R15: 0000000020000540 [ 896.686348][ T7613] [ 896.850579][ T7602] Call Trace: [ 896.853840][ T7602] [ 896.856715][ T7602] kobject_put+0x206/0x240 [ 896.861657][ T7602] ? kobject_put+0x88/0x240 [ 896.866133][ T7602] erofs_unregister_sysfs+0x4f/0x70 [ 896.871684][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 896.876601][ T7602] erofs_put_super+0x46/0xa0 [ 896.882185][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 896.887162][ T3389] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 896.895299][ T7602] generic_shutdown_super+0x157/0x2e0 [ 896.902115][ T7602] kill_block_super+0x80/0xe0 [ 896.906770][ T7602] erofs_kill_sb+0x66/0x130 [ 896.912409][ T7602] deactivate_locked_super+0xb0/0x100 [ 896.918278][ T7602] get_tree_bdev+0x45d/0x680 [ 896.922967][ T7602] ? erofs_release_device_info+0x90/0x90 [ 896.932120][ T7602] erofs_fc_get_tree+0x1c/0x20 [ 896.937332][ T7602] vfs_get_tree+0x88/0x290 [ 896.941743][ T7602] do_new_mount+0x289/0xad0 [ 896.946209][ T7602] ? do_move_mount_old+0x160/0x160 [ 896.953286][ T7602] ? security_capable+0xb2/0xd0 [ 896.958277][ T7602] ? ns_capable+0x8a/0xf0 [ 896.962718][ T7602] path_mount+0x60b/0x1050 [ 896.967301][ T7602] __se_sys_mount+0x2d2/0x3c0 [ 896.972847][ T7602] ? __x64_sys_mount+0xd0/0xd0 [ 896.977815][ T7602] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 896.983879][ T7602] __x64_sys_mount+0xbf/0xd0 [ 896.989469][ T7602] do_syscall_64+0x44/0xd0 [ 896.994768][ T7602] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 897.001769][ T7602] RIP: 0033:0x7fe9fd6d05da [ 897.006182][ T7602] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 897.027322][ T7602] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 897.035740][ T7602] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 897.045417][ T7602] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 897.061597][ T7602] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 897.081534][ T7602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 897.104804][ T7602] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 897.117051][ T7602] [ 897.121756][ T7602] ---[ end trace fd65b46823c276e5 ]--- [ 897.129269][ T7602] list_add corruption. prev is NULL. [ 897.134475][ T7602] ------------[ cut here ]------------ [ 897.139662][ T7602] kernel BUG at lib/list_debug.c:24! [ 897.144793][ T7602] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 897.150688][ T7602] CPU: 1 PID: 7602 Comm: syz-executor.5 Tainted: G W 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 897.162056][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 897.171956][ T7602] RIP: 0010:__list_add_valid+0xbc/0x100 [ 897.177338][ T7602] Code: c0 74 ed 48 c7 c7 60 a3 87 85 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 0f 95 5b 02 0f 0b 48 c7 c7 60 a1 87 85 31 c0 e8 ff 94 5b 02 <0f> 0b 48 c7 c7 00 a2 87 85 31 c0 e8 ef 94 5b 02 0f 0b 48 c7 c7 60 [ 897.196780][ T7602] RSP: 0018:ffffc9000040f8e0 EFLAGS: 00010046 [ 897.202675][ T7602] RAX: 0000000000000022 RBX: 1ffff92000081f3d RCX: 1f3f0d986af28200 [ 897.210488][ T7602] RDX: ffffc90008afe000 RSI: 000000000003ffff RDI: 0000000000040000 [ 897.218303][ T7602] RBP: ffffc9000040f908 R08: ffffffff81584ba9 R09: ffffed103ee24e93 [ 897.226112][ T7602] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: ffffc9000040f9e8 [ 897.233926][ T7602] R13: 1ffff1102d03c62c R14: ffffc9000040f9e0 R15: ffff8881681e3160 [ 897.241737][ T7602] FS: 00007fe9fc421700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 897.250501][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.256922][ T7602] CR2: 00000000203ab030 CR3: 00000001138f1000 CR4: 00000000003506a0 [ 897.264737][ T7602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.272546][ T7602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.280530][ T7602] Call Trace: [ 897.283658][ T7602] [ 897.286432][ T7602] __prepare_to_swait+0xad/0x140 [ 897.291207][ T7602] wait_for_common+0x257/0x430 [ 897.295810][ T7602] ? exc_invalid_op+0x1b/0x50 [ 897.300322][ T7602] ? wait_for_completion+0x20/0x20 [ 897.305266][ T7602] ? refcount_warn_saturate+0x167/0x1b0 [ 897.310652][ T7602] ? refcount_warn_saturate+0x165/0x1b0 [ 897.316032][ T7602] wait_for_completion+0x18/0x20 [ 897.320804][ T7602] erofs_unregister_sysfs+0x5e/0x70 [ 897.325840][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 897.330524][ T7602] erofs_put_super+0x46/0xa0 [ 897.334955][ T7602] ? erofs_free_inode+0xb0/0xb0 [ 897.339637][ T7602] generic_shutdown_super+0x157/0x2e0 [ 897.344847][ T7602] kill_block_super+0x80/0xe0 [ 897.349358][ T7602] erofs_kill_sb+0x66/0x130 [ 897.353699][ T7602] deactivate_locked_super+0xb0/0x100 [ 897.358915][ T7602] get_tree_bdev+0x45d/0x680 [ 897.363333][ T7602] ? erofs_release_device_info+0x90/0x90 [ 897.368805][ T7602] erofs_fc_get_tree+0x1c/0x20 [ 897.373400][ T7602] vfs_get_tree+0x88/0x290 [ 897.377653][ T7602] do_new_mount+0x289/0xad0 [ 897.381993][ T7602] ? do_move_mount_old+0x160/0x160 [ 897.386940][ T7602] ? security_capable+0xb2/0xd0 [ 897.391631][ T7602] ? ns_capable+0x8a/0xf0 [ 897.395794][ T7602] path_mount+0x60b/0x1050 [ 897.400223][ T7602] __se_sys_mount+0x2d2/0x3c0 [ 897.404735][ T7602] ? __x64_sys_mount+0xd0/0xd0 [ 897.409332][ T7602] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 897.415247][ T7602] __x64_sys_mount+0xbf/0xd0 [ 897.419660][ T7602] do_syscall_64+0x44/0xd0 [ 897.423913][ T7602] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 897.429642][ T7602] RIP: 0033:0x7fe9fd6d05da [ 897.433895][ T7602] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 897.453338][ T7602] RSP: 002b:00007fe9fc420f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 897.461584][ T7602] RAX: ffffffffffffffda RBX: 000000000000017e RCX: 00007fe9fd6d05da [ 897.469396][ T7602] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 00007fe9fc420fe0 [ 897.477210][ T7602] RBP: 00007fe9fc421020 R08: 00007fe9fc421020 R09: 0000000000000000 [ 897.485017][ T7602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000180 [ 897.492832][ T7602] R13: 00000000200001c0 R14: 00007fe9fc420fe0 R15: 0000000020000540 [ 897.500729][ T7602] [ 897.503603][ T7602] Modules linked in: [ 897.507335][ T7602] ---[ end trace fd65b46823c276e6 ]--- [ 897.512618][ T7602] RIP: 0010:__list_add_valid+0xbc/0x100 [ 897.517997][ T7602] Code: c0 74 ed 48 c7 c7 60 a3 87 85 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 0f 95 5b 02 0f 0b 48 c7 c7 60 a1 87 85 31 c0 e8 ff 94 5b 02 <0f> 0b 48 c7 c7 00 a2 87 85 31 c0 e8 ef 94 5b 02 0f 0b 48 c7 c7 60 [ 897.537445][ T7602] RSP: 0018:ffffc9000040f8e0 EFLAGS: 00010046 [ 897.543429][ T7602] RAX: 0000000000000022 RBX: 1ffff92000081f3d RCX: 1f3f0d986af28200 [ 897.551245][ T7602] RDX: ffffc90008afe000 RSI: 000000000003ffff RDI: 0000000000040000 [ 897.559049][ T7602] RBP: ffffc9000040f908 R08: ffffffff81584ba9 R09: ffffed103ee24e93 [ 897.566864][ T7602] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: ffffc9000040f9e8 [ 897.574677][ T7602] R13: 1ffff1102d03c62c R14: ffffc9000040f9e0 R15: ffff8881681e3160 [ 897.582490][ T7602] FS: 00007fe9fc421700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 897.591251][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.597763][ T7602] CR2: 00000000203ab030 CR3: 00000001138f1000 CR4: 00000000003506a0 [ 897.605577][ T7602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.613390][ T7602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.621199][ T7602] Kernel panic - not syncing: Fatal exception [ 897.627247][ T7602] Kernel Offset: disabled [ 897.631386][ T7602] Rebooting in 86400 seconds..