last executing test programs: 25.725828451s ago: executing program 2 (id=308): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 23.799549182s ago: executing program 2 (id=309): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000000000000000000000010000", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000400)={0x3, 0x6}, 0x4) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x210802, &(0x7f0000000340)=ANY=[], 0x1, 0x551b, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000005a40)=0xfffffff9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000005a80)={0x0, 0x0, 0x9, 0x800800}) r3 = openat(0xffffffffffffff9c, &(0x7f0000005ac0)='./file1\x00', 0x141442, 0x40) write$uinput_user_dev(r3, &(0x7f0000005b00)={'syz0\x00', {0x8001, 0x2, 0x9}, 0x26, [0x2, 0x79, 0x2, 0x8, 0x0, 0x4, 0x8, 0x802, 0x4, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0x705, 0xffffffff, 0x1, 0x3, 0x0, 0xe, 0x5, 0x9, 0x9, 0x1, 0x5dcf10b0, 0xfffff075, 0x1, 0xe16, 0x6, 0xe, 0x7, 0x7fffffff, 0x7c, 0x0, 0x4, 0x9, 0x1d49cc9e, 0x5, 0xffff, 0xa93, 0xc, 0x2, 0xfffffff9, 0x5, 0x0, 0x0, 0x54, 0x100, 0x7, 0x1, 0x4000009, 0x1, 0xf, 0x62c4, 0xffff8001, 0x3, 0x6, 0x1, 0x9, 0x80, 0xc, 0x3ff3, 0x5], [0x5, 0x4, 0x0, 0x5, 0x8000, 0x9, 0x21, 0x8, 0xff, 0x4, 0x100001, 0x1200000, 0x71, 0x3, 0xa, 0xffff, 0xffff, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x6, 0xfffffffb, 0x7, 0x145, 0x8, 0x0, 0x6, 0x3ff, 0x2, 0x7, 0xe366, 0x2000000, 0x1, 0x400, 0x2, 0x0, 0x3, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0x7, 0x0, 0xa4, 0x5, 0xc, 0xfffc, 0x5, 0x1, 0xbf, 0x4, 0x5, 0x6, 0x8, 0x3, 0xfffffff0, 0x5, 0x6, 0x5, 0x4], [0x6, 0x2, 0x2, 0x1000, 0x81, 0x9, 0xa887, 0xf085, 0xa, 0xffffefff, 0x9, 0x897, 0xfffffff9, 0x81, 0x6cad, 0x8, 0x8, 0x99a, 0x8, 0x3, 0xffff, 0xb6c2, 0x8, 0x8, 0x10001, 0x2, 0x7, 0x3, 0x2, 0x3, 0x6c, 0xd49, 0xf, 0x401, 0x6, 0x0, 0x8, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2, 0x2e3e1caa, 0x3, 0x800, 0x7fff, 0x0, 0x8001, 0x0, 0xee33, 0x3, 0x1, 0xa9e, 0xfffffffb, 0x7, 0xc, 0x0, 0x4, 0x5, 0xa, 0x4, 0x400], [0x4, 0x7, 0x7, 0xfffffff6, 0x6, 0x9, 0x8001, 0x6, 0x10001, 0x6, 0x2, 0x44, 0x10, 0x7, 0x8, 0xfe, 0x5e, 0x8, 0xeb, 0x4, 0x1, 0x9, 0xc, 0x3, 0x3, 0x3, 0x5, 0x24, 0x1, 0x6, 0x4, 0x81, 0x288, 0xfffffff8, 0x9, 0xacb, 0x8, 0xff, 0x2, 0xb5, 0x10, 0x11, 0x9, 0x8, 0x9cf, 0x0, 0x1, 0x8, 0xfffffc94, 0x3, 0x1e0d, 0x2a, 0x8, 0x8001, 0x447d, 0x9, 0x5, 0xa1d1, 0x8, 0x6, 0x7ff, 0xfff, 0x6, 0x3f6]}, 0x45c) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000480)={0x2, &(0x7f0000000000)=[{0x50, 0x1, 0x7, 0x7ffffffd}, {0x6, 0x7d, 0xfd, 0x3}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000000000000000000000010000", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000400)={0x3, 0x6}, 0x4) (async) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x210802, &(0x7f0000000340)=ANY=[], 0x1, 0x551b, &(0x7f00000004c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0\x00', 0x183b41, 0x12b) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000005a40)=0xfffffff9) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000005a80)={0x0, 0x0, 0x9, 0x800800}) (async) openat(0xffffffffffffff9c, &(0x7f0000005ac0)='./file1\x00', 0x141442, 0x40) (async) write$uinput_user_dev(r3, &(0x7f0000005b00)={'syz0\x00', {0x8001, 0x2, 0x9}, 0x26, [0x2, 0x79, 0x2, 0x8, 0x0, 0x4, 0x8, 0x802, 0x4, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0x705, 0xffffffff, 0x1, 0x3, 0x0, 0xe, 0x5, 0x9, 0x9, 0x1, 0x5dcf10b0, 0xfffff075, 0x1, 0xe16, 0x6, 0xe, 0x7, 0x7fffffff, 0x7c, 0x0, 0x4, 0x9, 0x1d49cc9e, 0x5, 0xffff, 0xa93, 0xc, 0x2, 0xfffffff9, 0x5, 0x0, 0x0, 0x54, 0x100, 0x7, 0x1, 0x4000009, 0x1, 0xf, 0x62c4, 0xffff8001, 0x3, 0x6, 0x1, 0x9, 0x80, 0xc, 0x3ff3, 0x5], [0x5, 0x4, 0x0, 0x5, 0x8000, 0x9, 0x21, 0x8, 0xff, 0x4, 0x100001, 0x1200000, 0x71, 0x3, 0xa, 0xffff, 0xffff, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x6, 0xfffffffb, 0x7, 0x145, 0x8, 0x0, 0x6, 0x3ff, 0x2, 0x7, 0xe366, 0x2000000, 0x1, 0x400, 0x2, 0x0, 0x3, 0x8, 0x6, 0x5, 0x7, 0x5, 0x4, 0x7, 0x0, 0xa4, 0x5, 0xc, 0xfffc, 0x5, 0x1, 0xbf, 0x4, 0x5, 0x6, 0x8, 0x3, 0xfffffff0, 0x5, 0x6, 0x5, 0x4], [0x6, 0x2, 0x2, 0x1000, 0x81, 0x9, 0xa887, 0xf085, 0xa, 0xffffefff, 0x9, 0x897, 0xfffffff9, 0x81, 0x6cad, 0x8, 0x8, 0x99a, 0x8, 0x3, 0xffff, 0xb6c2, 0x8, 0x8, 0x10001, 0x2, 0x7, 0x3, 0x2, 0x3, 0x6c, 0xd49, 0xf, 0x401, 0x6, 0x0, 0x8, 0x0, 0x1, 0x3, 0x2, 0x1, 0x2, 0x2e3e1caa, 0x3, 0x800, 0x7fff, 0x0, 0x8001, 0x0, 0xee33, 0x3, 0x1, 0xa9e, 0xfffffffb, 0x7, 0xc, 0x0, 0x4, 0x5, 0xa, 0x4, 0x400], [0x4, 0x7, 0x7, 0xfffffff6, 0x6, 0x9, 0x8001, 0x6, 0x10001, 0x6, 0x2, 0x44, 0x10, 0x7, 0x8, 0xfe, 0x5e, 0x8, 0xeb, 0x4, 0x1, 0x9, 0xc, 0x3, 0x3, 0x3, 0x5, 0x24, 0x1, 0x6, 0x4, 0x81, 0x288, 0xfffffff8, 0x9, 0xacb, 0x8, 0xff, 0x2, 0xb5, 0x10, 0x11, 0x9, 0x8, 0x9cf, 0x0, 0x1, 0x8, 0xfffffc94, 0x3, 0x1e0d, 0x2a, 0x8, 0x8001, 0x447d, 0x9, 0x5, 0xa1d1, 0x8, 0x6, 0x7ff, 0xfff, 0x6, 0x3f6]}, 0x45c) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000480)={0x2, &(0x7f0000000000)=[{0x50, 0x1, 0x7, 0x7ffffffd}, {0x6, 0x7d, 0xfd, 0x3}]}, 0x10) (async) 22.144346151s ago: executing program 3 (id=314): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200f1100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000940), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000980)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000009c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000a00)={0x2, 0x3}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c250000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRESDEC=r4, @ANYBLOB="c48a136778a56162f7f78aed68f7a390256135a6def9e525430cf44729138eec7a441d8cd5dc76f6416caa488e6dc731aef22a7720e9fd64c0a4d7f9245af2b697f8588997c6f0", @ANYRES64], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000900), 0x1, 0x402) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000b140104cc03000000000000080001000000000008003f0004000000"], 0x20}}, 0x4000) 17.004258904s ago: executing program 2 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000195c0)="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", 0xd0f}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019440)=0x7) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000019480)={0x0, 0x80000001, 0x30}, 0xc) r7 = dup(r6) sendmsg$nl_route(r0, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000200)={0x0, 0xdddd1000, 0x6, 0x5, 0x12}) syz_80211_inject_frame(&(0x7f0000019580)=@device_b, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setns(0xc9, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 16.584777418s ago: executing program 3 (id=323): socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000440)={0x20000014}) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 15.08952565s ago: executing program 4 (id=324): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_SQ_RING(r0, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001480)={{0xffffffffffffffff, &(0x7f0000000000)='q/&', 0x40000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x7]}, {0x400, 0x6, 0x4116, 0x3b}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xb}, 0x4, &(0x7f0000001400)=[{0x3, 0xe5ea, &(0x7f0000000100)='}:\x00', &(0x7f0000000140)="e2b86b04aa928109cf5e05a57b0dac0f730f9f9888e0348ba33ff5b79350ef71aad3a2b40f31067b99bfedc3d650fd754aa2262acbfe41f0ac46cf55fcefc2b1929853008b473332deb6ffe5c9dcf6a0064d7cdcaa09cf74f90b1abfc5318ca974d815b36c033565057a51c9c7757462fdcf641b4501f1af3bb552040b6afd3377bc30ed5db980b71d6cc06d855f6ac720bc8538e600160831ecbab72f495929870c2bff6c6caaa545496fcac36deb344c820703843fd43f5003d840d0f1b3", 0xbf, 0x20}, {0x3, 0x1, &(0x7f0000000200)='\'\x00', &(0x7f0000001e40)="2ff70ffcebd7d0a0b8360eb38545bf1d54e21e495f91a40a4644b3f9134ec94d90a828fbcd085784db41d39231d15975d30617444a326183d97830e9866d4889eb08d215704722c4cda659c6f8a432b684bd3ec56c2003cea36ffbf9dda02bc6e52db32f9dbee6a0a943097a20f7cf098268d17760731c413b9ddc0eb65e5b9278da97f587d06fe56e2f8048b646fb46f91830d2513acb8c10f7377f199d77d56c423958d781", 0xa6, 0x32}, {0x3, 0x9, &(0x7f0000000300)='{#\x00', &(0x7f0000000340)="c2fccdde751d2c6a83ef7429e70610ad873198a6607d7aeaa3f9510f1960bb99d08db6cca0b7be6f1fe0ef1043deb567c1c6f9125c16d07e38dfd2c89e2baaaf6d198463230f8b2dccc2e687b8075e5b99a689d2f9510e0451794dcce88695aa71c1b69496ee6bf03e456e4a0224038540ff477a0bd12350e1f3ef6e3468b5", 0x7f, 0x20}, {0x0, 0xa, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="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", 0x1000}]}) syz_io_uring_setup(0xf00, &(0x7f0000001500)={0x0, 0x0, 0x40000, 0x0, 0xd7}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000001600)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000001640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x1, 0x110, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x94bf, 0x4, 0x40010, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000001700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000016c0)=@new_dev={0x2, 0xe90}}}, &(0x7f0000001780)) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0xd, 0x8010, 0xffffffffffffffff, 0x8000000) r5 = socket$inet6(0xa, 0x2, 0x0) mount(&(0x7f0000001b40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='hpfs\x00', 0x21a0010, &(0x7f0000001e00)='@\x00') setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001b40)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000001b80)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000001d00)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000001d40)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_io_uring_setup(0xf00, &(0x7f00000017c0)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000001840)=0x0, &(0x7f0000001880)=0x0, &(0x7f00000018c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001900)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001980)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(0x0, r4, r8, &(0x7f0000001a00)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xffff, 0x0, 0x1, 0x0, 0x0, {0x0, r9}}) r10 = gettid() timer_create(0x0, &(0x7f0000001a80)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000001ac0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001b00)={0x0, 0x0, 0x10001, 0x5, r10}) 13.061680289s ago: executing program 2 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001800210a000300000000000004000002040010"], 0x18}, 0x1, 0x0, 0x0, 0x4810}, 0x0) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000080)=""/26, 0x1a) getdents64(r4, 0x0, 0x0) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f00000000c0)) r5 = socket$inet(0x2, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/keycreate\x00') write$P9_RSTAT(r6, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x7}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaa8080045dbb29807f3d7e80d09f07cd3a53d93f31aee4b300400001c006400"], 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x6, 0x80000, 0xffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12.678452256s ago: executing program 3 (id=329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 12.12014268s ago: executing program 3 (id=330): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc31, &(0x7f00000006c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write(r0, &(0x7f0000001340)='dir .', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x100008b}, 0x0) r2 = add_key(0x0, &(0x7f0000001440)={'syz', 0x3}, &(0x7f0000001480)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000001500), 0x2, 0x143102) writev(r3, &(0x7f0000001540)=[{&(0x7f0000001580)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000001600)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r5 = open(&(0x7f0000001700)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001740)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf, 0x0, r4}, &(0x7f00000017c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x358, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x80, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x1, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x28d}}], 0x4, &(0x7f0000001a40)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x702219655fdc3d5a, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='rdma.current\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000001bc0)='bind', 0x4) 12.066679593s ago: executing program 1 (id=331): openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0x8, 0x5, 0x2e, 0x3, @tick=0x6, {0x4, 0x5}, {0x6, 0x1}, @quote={{0x39, 0x1}, 0x2, &(0x7f0000000140)={0x4, 0x7, 0x7f, 0x4, @time={0xffff1504, 0x9a1}, {0x1, 0x6}, {0xc, 0x7}, @time=@tick=0x2}}}, {0x8, 0x8, 0x8, 0x8, @tick=0x90000, {0xff, 0x8}, {0x9d, 0x60}, @time=@tick=0x4}, {0x9, 0x43, 0x9, 0x0, @time={0x800, 0xe87b}, {0x0, 0x4}, {0x6, 0x7f}, @connect={{0x1, 0x1}, {0x7, 0x8}}}, {0x5, 0x4, 0xe, 0x0, @time={0x4, 0x9}, {0x7f, 0x8}, {0x4, 0x5}, @queue={0x4, {0xfffffffe, 0xffffffff}}}, {0x4a, 0xc6, 0x85, 0xe1, @time={0x401, 0x7}, {0x5, 0x2}, {0xf6, 0xb7}, @ext={0x0, &(0x7f0000000180)}}], 0x8c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0x20}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)='W', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000300)=0x4, 0x4) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000018c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001900), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x801c, &(0x7f00000019c0)={[{@noacl}, {@acl}, {@noacl}]}, 0x1, 0x1b4, &(0x7f0000001a00)="$eJzsmL9O21AUxr977ThtVVWdu3RopKaq6thOW2XJ0ErskQggNixiohAnQYmRSCQGHoCRAYmFgRdgZGJAvAQMwMSCxILEZmT7Bl9FIfxNQMr5STn5bnx07rnHzjcYBEGMLWenVyfr/3PFQH9ECknx+7kS53Ap/3hz+edGfmJr92jnoP5pda+33jsAvn/54P0/A9g/VOCJte/7vnw9JYoWwSMNYAocP4SeAYMu9Bw4poV2wDAr9KKkG0G+ri9UXEefb7ilQBhBMINgBSEr768CuFhjKEn9Mel6q92p2q7rNIcoBs0v7O8fR17qT75f3dkY0vxMpsIUOguGSaFzSHZnE41EOv8XNa6vxFuP5PzjIxIAXrhy69p1C0NoVRvtfBLiGa3aide/Tc8T3b/nk+toosDbOM5dIjYJf5vhu+RPquRPGa+2lGm1O78qNbvslJ26ZWX/Gr8N44+VCY0oigP8733oTx+k+uJZ0XpzNaZhxfa8phnF27UVxX6Oy0P/40h/i9asX2EJJj48/A5UWhmQThAEQRAEQRAEQRAEQRAE8Qi+goVvQe/BKoTZNwEAAP//UCVsmA==") 11.768603428s ago: executing program 4 (id=333): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x63, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0xc, 0xfffffffffffffffe, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x10000005}]}]}, 0xfc}}, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x8d, 0x2404c081, &(0x7f0000000340)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) 10.953877729s ago: executing program 3 (id=334): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 10.83465343s ago: executing program 0 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000009060500000000000000000006000007140007800600044000080000060005404e20000005000100070000000900020073797a30"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 10.763369199s ago: executing program 1 (id=336): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$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") timerfd_create(0x9, 0x0) syz_open_procfs(0x0, &(0x7f0000001d40)='fdinfo\x00') inotify_init1(0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c0002", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001c00)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$inet6(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003080)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r3, &(0x7f00000030c0)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001cc0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000001d00)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 9.591986479s ago: executing program 3 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x0, &(0x7f0000000200)={[{@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xeb}}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x440, &(0x7f0000000640)="$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") ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000b80)={&(0x7f0000000a80)=""/198, 0xc6}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10003, 0x2, 0x2ffc, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'pim6reg\x00', {}, 0x2800}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r8 = open(&(0x7f0000000580)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000001a80)={0x2020}, 0x2020) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000600)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x5b06, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="911041000000000095"], &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x11e05, &(0x7f0000000580)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x101}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x67, 0x53d, &(0x7f0000000f80)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) 9.504761825s ago: executing program 0 (id=338): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7672732c6e6f6164696e6963622c706172746974696f6e3d303030303030303030300000000000e884f8dcb0bdacbdadd23bb4fb643030b1ceee6e98ebfeed722f6dc71714b37e1849b67488867781361be93f9e02161d4193b3a3079ceb9883ea13183ef2a8e3b8c7d0012dbae860048bec989856a3109802f7ab185e2513a87054d8465e12272a74f6fe85158e94314c3d36000086196c2be4dde70b38ebd19453ff8b77290e5761af8585603cce1844c24705ffffe4483e22c4ffce7a54a9de9cf6c107ced92db9bee41bac66e155ffa667f32227952d336043a278c8e00877effad7ca21bb81b65d4663efeaf98dc64c8b0efb11c2b6a08ad5427f0f3e5699fe5e9aac5d83d14810023502eaad985d2053de76c8233fb3c7e4fdf3d1c42fa3151bba70150b"], 0x1, 0xc31, &(0x7f00000006c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write(r0, &(0x7f0000001340)='dir .', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x100008b}, 0x0) r2 = add_key(0x0, &(0x7f0000001440)={'syz', 0x3}, &(0x7f0000001480)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000001500), 0x2, 0x143102) writev(r3, &(0x7f0000001540)=[{&(0x7f0000001580)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000001600)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r5 = open(&(0x7f0000001700)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001740)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf, 0x0, r4}, &(0x7f00000017c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x358, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x80, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x1, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x28d}}], 0x4, &(0x7f0000001a40)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x702219655fdc3d5a, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='rdma.current\x00', 0x26e1, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000001bc0)='bind', 0x4) 9.413267249s ago: executing program 2 (id=339): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0xe26, @local}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000380)={0x2000005, 0x0, 0x20001ff}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000019c40)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000019c80)=ANY=[], 0x8) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x3000}], 0x1f4, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000080)) 8.247648044s ago: executing program 2 (id=340): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x80000001, 0x37f}) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "e1091d9abca8a10c", "60b8d9b429db61cce77ede61f8abbb9052ba09245ed69f0d41de5b35fdafd4fa", "b328b2de", "14c1c641eb15a067"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendto$inet6(r2, &(0x7f00000003c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000400)=0x2100e6d4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='setgroups\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0xa, 0x1, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[], 0x20) socket$igmp(0x2, 0x3, 0x2) 8.163387789s ago: executing program 1 (id=341): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc31, &(0x7f00000006c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write(r0, &(0x7f0000001340)='dir .', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x100008b}, 0x0) r2 = add_key(0x0, &(0x7f0000001440)={'syz', 0x3}, &(0x7f0000001480)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000001500), 0x2, 0x143102) writev(r3, &(0x7f0000001540)=[{&(0x7f0000001580)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000001600)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r5 = open(&(0x7f0000001700)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001740)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf, 0x0, r4}, &(0x7f00000017c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x358, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x80, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x1, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x28d}}], 0x4, &(0x7f0000001a40)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x702219655fdc3d5a, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='rdma.current\x00', 0x26e1, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000001bc0)='bind', 0x4) 7.538036051s ago: executing program 4 (id=342): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000d080)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0xfffffffffffffffe, 0x0, 0xfa4, 0xffffffff, 0x0, {0x2, 0x2, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, 0x0, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000002440)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300)=0x509, 0x4) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r1, &(0x7f0000000440)="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", 0x507, 0x6000000000000000, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000980)='ext3\x00', &(0x7f00000009c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000a80)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") 6.170659339s ago: executing program 0 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2, 0x7c, 0xffda}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x203, 0xd83, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f00000001c0)='0', 0x1, 0x4000854, &(0x7f0000000240)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000bd}, 0x1c) (fail_nth: 4) 5.744983556s ago: executing program 1 (id=344): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc31, &(0x7f00000006c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write(r0, &(0x7f0000001340)='dir .', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x100008b}, 0x0) r2 = add_key(0x0, &(0x7f0000001440)={'syz', 0x3}, &(0x7f0000001480)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000001500), 0x2, 0x143102) writev(r3, &(0x7f0000001540)=[{&(0x7f0000001580)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000015c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000001600)='./bus\x00') r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) r5 = open(&(0x7f0000001700)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000001740)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf, 0x0, r4}, &(0x7f00000017c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x358, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x80, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x1, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x28d}}], 0x4, &(0x7f0000001a40)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x702219655fdc3d5a, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='rdma.current\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000001bc0)='bind', 0x4) 5.606672375s ago: executing program 0 (id=345): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x80000001, 0x37f}) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "e1091d9abca8a10c", "60b8d9b429db61cce77ede61f8abbb9052ba09245ed69f0d41de5b35fdafd4fa", "b328b2de", "14c1c641eb15a067"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendto$inet6(r2, &(0x7f00000003c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000400)=0x2100e6d4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='setgroups\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0xa, 0x1, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[], 0x20) socket$igmp(0x2, 0x3, 0x2) 5.06973631s ago: executing program 4 (id=346): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/74, 0x4a) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1000, 0x1, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = socket(0x1, 0x5, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000002c0)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000240)={0x7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) 2.737555752s ago: executing program 1 (id=347): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.595713873s ago: executing program 0 (id=348): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x21c, &(0x7f0000000600)="$eJzs3D1rW1cYB/AjWa7tlhZPhXbpoV3a5bb10qVDS3EhRJCQRCEv0zWWEyFFAl8NUsigOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJIs23Fi50VScH6/RQ/nf8/VuTpwEY9eNv++d6u+liVraTuU5guh+E/ohZ1CWAzFMNQLvz28sn334tVrZ/8tl5cvzA7GY/zupyfX7zz4+Wn7m8uPdkcKIYStpecb32/8sPny0s1aFmtZbLbaMY0rrVY7XWlU42otqycxnm9U06waa82sun4gX2u0Rk8dqlkW02Y31qvd2G7F9no3pjfSWjMmSRLnAx+lcn8nz8NWnuf5XC/kef6+JyiMZ11MyrH7PzeNVTEpezf1uHs3fdHrVDqV/mM///9MefmP+NriaNZ2p1OZ2cv/7OfxYD4bvh7kS0fmX4Vff+nnu9l/58qH8oWwOv7LBwAAAACAUymJe4b9/Zn9/f0keSMf9Of71b7PBw7170vhx9JoZGYiVwMAAAAcJeverqeN1dn1ftGoTq2YCwdH/no8WOJx039/dvwxYyq+HRThA8+zEEJ4+zHFMPVNmUwx/B75YGT4+4KTTS99qmUsfCavxrCYD0dFw0baBDYFAAA4XUZv+k88pTjWBQEAAAAAAAAAAAAAAAAAAMAXaBJ/ZjbtawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeJdXAQAA//+FV1S+") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x84) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mount_setattr(r0, 0x0, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x205, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000100)={0x0, 0x2, 0x3, 0xfff, 0x1, 0x81}) 1.399009879s ago: executing program 1 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000009060500000000000000000006000007140007800600044000080000060005404e20000005000100070000000900020073797a30"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 1.303219426s ago: executing program 4 (id=350): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0xe26, @local}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000380)={0x2000005, 0x0, 0x20001ff}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000019c40)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000019c80)=ANY=[], 0x8) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x3000}], 0x1f4, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000080)) 1.125108682s ago: executing program 0 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a2) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000840)='lowerdir', 0x4000, &(0x7f0000000880)={@_ha_fsid={[0xfffffff9, 0x58]}, {0x0, 0xfff3, 0x0, 0x6}}, 0x9, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x16}) openat(r0, &(0x7f0000000980)='./bus\x00', 0x460001, 0x100) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000740)=""/81, 0x51) chdir(&(0x7f00000007c0)='./file0\x00') lseek(r1, 0x3ff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000009c0)=0x9, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fsync(r3) 0s ago: executing program 4 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) kernel console output (not intermixed with test programs): Not tainted syzkaller #0 PREEMPT(full) [ 87.073050][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.073060][ T5845] Call Trace: [ 87.073066][ T5845] [ 87.073074][ T5845] dump_stack_lvl+0xe8/0x150 [ 87.073104][ T5845] should_fail_ex+0x3eb/0x540 [ 87.073129][ T5845] _copy_from_iter+0x1d3/0x18b0 [ 87.073145][ T5845] ? skb_set_owner_w+0x263/0x3d0 [ 87.073169][ T5845] ? sock_alloc_send_pskb+0xc87/0xd90 [ 87.073198][ T5845] ? __pfx__copy_from_iter+0x10/0x10 [ 87.073220][ T5845] ? __lock_acquire+0x747/0x2de0 [ 87.073240][ T5845] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 87.073264][ T5845] skb_copy_datagram_from_iter+0xe6/0x720 [ 87.073290][ T5845] ? skb_put+0x112/0x210 [ 87.073311][ T5845] tun_get_user+0x14fd/0x4450 [ 87.073343][ T5845] ? aa_file_perm+0x18b/0x15f0 [ 87.073364][ T5845] ? aa_file_perm+0x4ed/0x15f0 [ 87.073382][ T5845] ? __pfx_tun_get_user+0x10/0x10 [ 87.073407][ T5845] ? __lock_acquire+0x747/0x2de0 [ 87.073428][ T5845] ? kstrtoull+0x137/0x1d0 [ 87.073460][ T5845] ? ref_tracker_alloc+0x172/0x530 [ 87.073480][ T5845] ? lock_acquire+0x115/0x350 [ 87.073500][ T5845] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 87.073524][ T5845] ? lock_acquire+0x115/0x350 [ 87.073542][ T5845] ? tun_get+0x1c/0x2f0 [ 87.073563][ T5845] ? tun_get+0x1c/0x2f0 [ 87.073579][ T5845] ? tun_get+0x1c/0x2f0 [ 87.073599][ T5845] tun_chr_write_iter+0x113/0x200 [ 87.073628][ T5845] vfs_write+0x612/0xba0 [ 87.073655][ T5845] ? __pfx_vfs_write+0x10/0x10 [ 87.073677][ T5845] ? __fget_files+0x3a2/0x420 [ 87.073692][ T5845] ? __fget_files+0x2a/0x420 [ 87.073713][ T5845] ? fdget+0x1ac/0x250 [ 87.073736][ T5845] ksys_write+0x150/0x270 [ 87.073757][ T5845] ? __pfx_ksys_write+0x10/0x10 [ 87.073786][ T5845] do_syscall_64+0x166/0x520 [ 87.073805][ T5845] ? trace_irq_disable+0x3b/0x140 [ 87.073825][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.073843][ T5845] ? clear_bhb_loop+0x70/0xc0 [ 87.073865][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.073883][ T5845] RIP: 0033:0x7f5958b9e559 [ 87.073899][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.073917][ T5845] RSP: 002b:00007f5959981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.073937][ T5845] RAX: ffffffffffffffda RBX: 00007f5958e25fa0 RCX: 00007f5958b9e559 [ 87.073950][ T5845] RDX: 000000000000003a RSI: 0000200000000680 RDI: 0000000000000003 [ 87.073961][ T5845] RBP: 00007f5959981090 R08: 0000000000000000 R09: 0000000000000000 [ 87.073972][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.073982][ T5845] R13: 00007f5958e26038 R14: 00007f5958e25fa0 R15: 00007ffd806b7ff8 [ 87.074012][ T5845] [ 87.469369][ T5850] 9pnet_virtio: no channels available for device ./proc/thread-self/fail-nth [ 87.637442][ T5852] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11'. [ 88.236776][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.444231][ T5723] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.918187][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 89.921210][ T5723] usb 2-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 89.925301][ T5723] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.925354][ T5723] usb 2-1: config 0 has no interface number 0 [ 89.965958][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.966024][ T5723] usb 2-1: Product: syz [ 89.966038][ T5723] usb 2-1: Manufacturer: syz [ 89.966104][ T5723] usb 2-1: SerialNumber: syz [ 90.214751][ T5723] usb 2-1: config 0 descriptor?? [ 90.323606][ T5723] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 90.323800][ T5723] usb 2-1: selecting invalid altsetting 1 [ 90.323952][ T5723] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 90.361754][ T5737] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.509313][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 90.512625][ T5737] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 90.538812][ T5737] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 90.538914][ T5737] usb 3-1: config 0 has no interface number 0 [ 90.539196][ T5737] usb 3-1: config 0 interface 12 has no altsetting 0 [ 90.602261][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.602317][ T5737] usb 3-1: Product: syz [ 90.602361][ T5737] usb 3-1: Manufacturer: syz [ 90.602411][ T5737] usb 3-1: SerialNumber: syz [ 90.755523][ T5723] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.757173][ T5737] usb 3-1: config 0 descriptor?? [ 90.808596][ T5723] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 90.809069][ T5723] usb 2-1: media controller created [ 91.191725][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.828016][ T5723] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 91.830432][ T5723] zl10353_read_register: readreg error (reg=127, ret==-71) [ 91.873512][ T5723] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 93.212671][ T5737] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 93.212739][ T5737] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 93.212754][ T5737] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 93.212831][ T5737] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 93.411962][ T5723] usb 2-1: USB disconnect, device number 2 [ 93.412972][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.443595][ T5891] loop4: detected capacity change from 0 to 24 [ 93.444920][ T5891] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 93.526592][ T27] usb 3-1: USB disconnect, device number 3 [ 93.529955][ T5891] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 94.071312][ T991] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.190624][ T5891] romfs: read error for inode 0x70040 [ 94.217778][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 94.226786][ T991] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 94.293003][ T991] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.293045][ T991] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.293101][ T991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.293237][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.520599][ T991] usb 2-1: config 0 descriptor?? [ 95.708738][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.726557][ T991] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0001/input/input6 [ 95.865615][ T991] elan 0003:04F3:074D.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 95.878337][ T10] usb 1-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 95.879433][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 95.879459][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 95.879481][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 95.881412][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.881433][ T10] usb 1-1: Product: syz [ 95.881446][ T10] usb 1-1: Manufacturer: syz [ 95.881458][ T10] usb 1-1: SerialNumber: syz [ 95.909807][ T10] usb 1-1: config 0 descriptor?? [ 95.933790][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.975991][ T991] usb 2-1: USB disconnect, device number 3 [ 96.029634][ T5918] Set syz1 is full, maxelem 6117 reached [ 96.112875][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.112924][ T27] usb 3-1: New USB device found: idVendor=05ac, idProduct=0272, bcdDevice=0.40 [ 96.113931][ T27] usb 3-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 21, changing to 8 [ 96.113959][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 96.115840][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.115862][ T27] usb 3-1: Product: syz [ 96.115874][ T27] usb 3-1: Manufacturer: syz [ 96.115888][ T27] usb 3-1: SerialNumber: syz [ 96.227044][ T10] powermate: unknown product id 0240 [ 96.227062][ T10] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 96.227274][ T10] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 96.266656][ T10] usb 1-1: USB disconnect, device number 2 [ 96.329700][ T5934] fido_id[5934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 96.575815][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 97.178805][ T5947] loop3: detected capacity change from 0 to 164 [ 97.244264][ T5947] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 97.287135][ T27] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 97.314918][ T4957] bcm5974 3-1:1.0: could not read from device [ 97.631768][ T4957] bcm5974 3-1:1.0: could not read from device [ 98.105354][ T4957] bcm5974 3-1:1.0: could not read from device [ 98.193116][ T4957] bcm5974 3-1:1.0: could not read from device [ 98.224685][ T27] usb 3-1: USB disconnect, device number 4 [ 99.379236][ T5970] loop1: detected capacity change from 0 to 24 [ 99.388246][ T5970] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.400512][ T5970] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 99.475576][ T5960] loop2: detected capacity change from 0 to 32768 [ 99.514063][ T5960] (syz.2.37,5960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.541814][ T5960] (syz.2.37,5960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.594222][ T5973] loop4: detected capacity change from 0 to 4096 [ 99.620523][ T5970] romfs: read error for inode 0x70040 [ 99.645227][ T5973] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.645442][ T5973] NILFS (loop4): mounting unchecked fs [ 99.646849][ T5960] JBD2: Ignoring recovery information on journal [ 99.788303][ T5973] NILFS (loop4): recovery complete [ 99.801479][ T5960] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.849643][ T5619] udevd[5619]: incorrect nilfs2 checksum on /dev/loop4 [ 99.850285][ T5981] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.964924][ T5963] netlink: 'syz.4.38': attribute type 6 has an invalid length. [ 99.992120][ T5984] loop1: detected capacity change from 0 to 2048 [ 99.995570][ T5984] udf: Unknown parameter 'Ç ª!Ú{±K7iž(�ñÈ᤿f)„-Ö/½ŽdwÊ”8)7[™a3—YÄ¡ÒäüWÛýÖœ>5€|·�_7Á†N…HoqBoOqеåÉÃ8Q§&jV/qñ®�{´�‹í¶ŽT»M?gÒûë' [ 100.026168][ T5984] xt_hashlimit: max too large, truncated to 1048576 [ 100.035851][ T5984] loop1: detected capacity change from 0 to 128 [ 100.045894][ T5984] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.057047][ T5984] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.166217][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 100.187809][ T5737] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.302274][ T45] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.317692][ T5737] usb 3-1: device descriptor read/64, error -71 [ 100.557670][ T5737] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.694559][ T5737] usb 3-1: device descriptor read/64, error -71 [ 100.798116][ T5737] usb usb3-port1: attempt power cycle [ 101.151179][ T5737] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.170915][ T5737] usb 3-1: device descriptor read/8, error -71 [ 101.396519][ T5605] ocfs2: Unmounting device (7,2) on (node local) [ 101.456170][ T6027] loop3: detected capacity change from 0 to 136 [ 101.491509][ T6027] Attempt to read inode for relocated directory [ 101.542015][ T6027] syz.3.49: attempt to access beyond end of device [ 101.542015][ T6027] loop3: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 101.589916][ T6027] syz.3.49: attempt to access beyond end of device [ 101.589916][ T6027] loop3: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 101.593779][ T33] audit: type=1800 audit(1792069724.020:2): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="file1" dev="loop3" ino=1487 res=0 errno=-5 [ 101.763928][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 101.763980][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.000861][ T6041] Bluetooth: MGMT ver 1.23 [ 102.037637][ T991] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.066348][ T6045] loop1: detected capacity change from 0 to 24 [ 102.070527][ T6045] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 102.071228][ T6045] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 102.119751][ T6045] romfs: read error for inode 0x70040 [ 102.190087][ T991] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.191129][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.193586][ T991] usb 1-1: config 0 descriptor?? [ 102.206763][ T6047] loop1: detected capacity change from 0 to 164 [ 102.231330][ T6047] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.328148][ T5737] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.351547][ T5737] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 102.356663][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.356689][ T5737] usb 3-1: Product: syz [ 102.356703][ T5737] usb 3-1: Manufacturer: syz [ 102.356717][ T5737] usb 3-1: SerialNumber: syz [ 102.368003][ T5737] usb 3-1: config 0 descriptor?? [ 102.387086][ T5737] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 102.404401][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.411243][ T5737] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 102.411296][ T5737] usb 3-1: media controller created [ 102.460986][ T6049] loop3: detected capacity change from 0 to 512 [ 102.471080][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.495873][ T991] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 102.528110][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.56'. [ 102.528144][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 102.602532][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.604189][ T6049] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.613083][ T5737] DVB: Unable to find symbol mt352_attach() [ 102.645268][ T6042] loop2: detected capacity change from 0 to 64 [ 102.650281][ T5737] DVB: Unable to find symbol nxt6000_attach() [ 102.650294][ T5737] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 102.672679][ T5737] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 102.683689][ T5737] dvb-usb: schedule remote query interval to 1000 msecs. [ 102.683711][ T5737] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 102.684008][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 102.684022][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 102.790015][ T991] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 102.790038][ T991] [drm] Initialized udl on minor 1 [ 102.885265][ T6042] syz.2.50: attempt to access beyond end of device [ 102.885265][ T6042] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 102.934801][ T6042] dvb-usb: bulk message failed: -22 (7/0) [ 103.005369][ T992] usb 3-1: USB disconnect, device number 8 [ 103.049059][ T5737] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.053959][ T992] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 103.177776][ T5737] usb 4-1: device descriptor read/64, error -71 [ 103.417667][ T5737] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.547686][ T5737] usb 4-1: device descriptor read/64, error -71 [ 103.618592][ T6067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.658895][ T5737] usb usb4-port1: attempt power cycle [ 103.830682][ T33] audit: type=1800 audit(1792069726.240:3): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.60" name="file1" dev="loop2" ino=1368 res=0 errno=-22 [ 103.844508][ T6068] CacheFiles: Failed to register: -95 [ 104.007685][ T5737] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.029498][ T5737] usb 4-1: device descriptor read/8, error -71 [ 104.298175][ T5737] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.320768][ T5737] usb 4-1: device descriptor read/8, error -71 [ 104.452295][ T5737] usb usb4-port1: unable to enumerate USB device [ 104.909916][ T6067] Process accounting resumed [ 105.268868][ T6072] set_capacity_and_notify: 1 callbacks suppressed [ 105.268886][ T6072] loop2: detected capacity change from 0 to 32768 [ 105.270353][ T6070] loop1: detected capacity change from 0 to 32768 [ 105.300311][ T6070] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.61 (6070) [ 105.312109][ T6072] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 56f4b0f8-b9a2-4ed2-862e-0868662981b8 [ 105.312177][ T6072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.62 (6072) [ 105.409748][ T6070] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.409799][ T6070] BTRFS info (device loop1): using sha256 checksum algorithm [ 105.423203][ T6072] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.423233][ T6072] BTRFS info (device loop2): using sha256 checksum algorithm [ 105.585365][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.655558][ T6070] BTRFS info (device loop1): rebuilding free space tree [ 105.671099][ T6072] BTRFS info (device loop2): rebuilding free space tree [ 105.714713][ T6070] BTRFS info (device loop1): disabling free space tree [ 105.714994][ T6070] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.715017][ T6070] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.721055][ T6072] BTRFS info (device loop2): disabling free space tree [ 105.721562][ T6072] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.721587][ T6072] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.760208][ T6072] BTRFS info (device loop2): checking UUID tree [ 105.780679][ T6072] BTRFS info (device loop2): setting nodatasum [ 105.780702][ T6072] BTRFS info (device loop2): setting nodatacow [ 105.780716][ T6072] BTRFS info (device loop2): enabling ssd optimizations [ 105.780731][ T6072] BTRFS info (device loop2): using spread ssd allocation scheme [ 105.780773][ T6072] BTRFS info (device loop2): turning off barriers [ 105.780798][ T6072] BTRFS info (device loop2): turning on flush-on-commit [ 105.780813][ T6072] BTRFS info (device loop2): force clearing of disk cache [ 105.801295][ T6070] BTRFS info (device loop1): setting nodatasum [ 105.801320][ T6070] BTRFS info (device loop1): setting nodatacow [ 105.801335][ T6070] BTRFS info (device loop1): turning off barriers [ 105.801350][ T6070] BTRFS info (device loop1): force clearing of disk cache [ 106.079831][ T6110] loop4: detected capacity change from 0 to 24 [ 106.084929][ T6110] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 106.087187][ T6110] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 106.237115][ T6110] romfs: read error for inode 0x70040 [ 106.442692][ T5605] BTRFS info (device loop2): last unmount of filesystem 56f4b0f8-b9a2-4ed2-862e-0868662981b8 [ 107.861626][ T991] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 107.913611][ T991] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 107.977018][ T991] usb 1-1: USB disconnect, device number 3 [ 108.011492][ T6124] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 108.135675][ T5614] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.178692][ T5737] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.304933][ T6130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.327825][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 108.333529][ T5737] usb 5-1: New USB device found: idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 108.336675][ T5737] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 108.336697][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.336715][ T5737] usb 5-1: config 0 has no interface number 0 [ 108.336751][ T5737] usb 5-1: config 0 interface 86 altsetting 16 endpoint 0x6 has invalid wMaxPacketSize 0 [ 108.336771][ T5737] usb 5-1: config 0 interface 86 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.336794][ T5737] usb 5-1: config 0 interface 86 has no altsetting 0 [ 108.354389][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.354414][ T5737] usb 5-1: Product: syz [ 108.354426][ T5737] usb 5-1: Manufacturer: syz [ 108.354439][ T5737] usb 5-1: SerialNumber: syz [ 108.360472][ T5737] usb 5-1: config 0 descriptor?? [ 108.370201][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 108.370258][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72'. [ 108.437726][ T5876] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 108.471473][ T6130] loop3: detected capacity change from 0 to 256 [ 108.556580][ T6126] Set syz1 is full, maxelem 6117 reached [ 108.580352][ T6130] exFAT-fs (loop3): failed to read sector(0x278) [ 108.580377][ T6130] exFAT-fs (loop3): failed to load upcase table [ 108.580387][ T6130] exFAT-fs (loop3): failed to recognize exfat type [ 108.590257][ T6130] netlink: 'syz.3.72': attribute type 11 has an invalid length. [ 108.601603][ T5876] usb 3-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 108.604488][ T6130] tmpfs: Bad value for 'mpol' [ 108.625775][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 108.625806][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 108.625828][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 108.672527][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.672550][ T5876] usb 3-1: Product: syz [ 108.672561][ T5876] usb 3-1: Manufacturer: syz [ 108.672574][ T5876] usb 3-1: SerialNumber: syz [ 108.676565][ T5876] usb 3-1: config 0 descriptor?? [ 108.751527][ T5737] ljca 5-1:0.86: bulk endpoints not found [ 108.770740][ T5737] usb 5-1: USB disconnect, device number 2 [ 108.829160][ T6142] loop0: detected capacity change from 0 to 24 [ 108.830522][ T6142] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 108.843568][ T6142] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 108.922911][ T6142] romfs: read error for inode 0x70040 [ 108.934919][ T5876] powermate: unknown product id 0240 [ 108.934935][ T5876] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 108.935153][ T5876] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 108.967147][ T5876] usb 3-1: USB disconnect, device number 9 [ 109.071367][ T6149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.071455][ T6149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.097391][ T6149] loop0: detected capacity change from 0 to 2048 [ 109.116795][ T6144] macsec1: entered promiscuous mode [ 109.116810][ T6144] bridge0: entered promiscuous mode [ 109.136491][ T6149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.104099][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.208036][ T6185] FAULT_INJECTION: forcing a failure. [ 111.208036][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 111.208066][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.0.81 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.208090][ T6185] Tainted: [L]=SOFTLOCKUP [ 111.208097][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.208106][ T6185] Call Trace: [ 111.208112][ T6185] [ 111.208120][ T6185] dump_stack_lvl+0xe8/0x150 [ 111.208151][ T6185] should_fail_ex+0x3eb/0x540 [ 111.208174][ T6185] should_failslab+0xa8/0x100 [ 111.208196][ T6185] __kmalloc_noprof+0xf9/0x710 [ 111.208220][ T6185] ? rcu_is_watching+0x16/0xb0 [ 111.208242][ T6185] ? tomoyo_realpath_from_path+0xef/0x640 [ 111.208258][ T6185] ? tomoyo_realpath_from_path+0xef/0x640 [ 111.208280][ T6185] tomoyo_realpath_from_path+0xef/0x640 [ 111.208307][ T6185] ? tomoyo_path_number_perm+0x219/0x5f0 [ 111.208327][ T6185] tomoyo_path_number_perm+0x246/0x5f0 [ 111.208352][ T6185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.208373][ T6185] ? __lock_acquire+0x747/0x2de0 [ 111.208430][ T6185] ? __fget_files+0x2a/0x420 [ 111.208451][ T6185] ? __fget_files+0x2a/0x420 [ 111.208468][ T6185] ? __fget_files+0x2a/0x420 [ 111.208490][ T6185] security_file_ioctl+0xc3/0x2a0 [ 111.208516][ T6185] __se_sys_ioctl+0x47/0x170 [ 111.208539][ T6185] do_syscall_64+0x166/0x520 [ 111.208563][ T6185] ? trace_irq_disable+0x3b/0x140 [ 111.208585][ T6185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.208608][ T6185] ? clear_bhb_loop+0x70/0xc0 [ 111.208630][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.208647][ T6185] RIP: 0033:0x7f5958b9e559 [ 111.208664][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.208679][ T6185] RSP: 002b:00007f5959981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.208699][ T6185] RAX: ffffffffffffffda RBX: 00007f5958e25fa0 RCX: 00007f5958b9e559 [ 111.208713][ T6185] RDX: 0000200000000300 RSI: 000000004008ae89 RDI: 0000000000000005 [ 111.208725][ T6185] RBP: 00007f5959981090 R08: 0000000000000000 R09: 0000000000000000 [ 111.208736][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.208747][ T6185] R13: 00007f5958e26038 R14: 00007f5958e25fa0 R15: 00007ffd806b7ff8 [ 111.208775][ T6185] [ 111.208858][ T6185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.246990][ T6173] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.502611][ T6190] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.522362][ T6194] loop1: detected capacity change from 0 to 24 [ 111.534291][ T6194] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 111.535324][ T6194] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.766067][ T6194] romfs: read error for inode 0x70040 [ 112.156515][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 112.440675][ T10] usb 1-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 112.445328][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 112.445348][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 112.445361][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 112.452961][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.452985][ T10] usb 1-1: Product: syz [ 112.452997][ T10] usb 1-1: Manufacturer: syz [ 112.453009][ T10] usb 1-1: SerialNumber: syz [ 112.460399][ T10] usb 1-1: config 0 descriptor?? [ 112.679916][ T10] powermate: unknown product id 0240 [ 112.679928][ T10] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 112.680052][ T10] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 112.682405][ T10] usb 1-1: USB disconnect, device number 4 [ 112.937527][ T6214] comedi comedi2: comedi_config --init_data is deprecated [ 112.970976][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.147675][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 113.149940][ T27] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.153823][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 113.153868][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.153905][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.153958][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.154047][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.579626][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 113.579771][ T27] usbtmc 4-1:16.0: can't read capabilities [ 114.853726][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 114.979649][ T6229] hsr_slave_0: left promiscuous mode [ 114.983053][ T6229] hsr_slave_1: left promiscuous mode [ 115.079116][ T6233] loop0: detected capacity change from 0 to 24 [ 115.100757][ T6233] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 115.114157][ T6233] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 115.224070][ T6234] Cannot find set identified by id 0 to match [ 115.418126][ T6233] romfs: read error for inode 0x70040 [ 116.390000][ T6248] loop2: detected capacity change from 0 to 32768 [ 116.391933][ T6248] xfs: Deprecated parameter 'attr2' [ 116.391950][ T6248] XFS: attr2 mount option is deprecated. [ 116.574662][ T10] usb 4-1: USB disconnect, device number 6 [ 116.624869][ T6248] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.721899][ T6261] rnbd_client L127: Can't parse path /: -93 [ 116.759118][ T6248] XFS (loop2): Ending clean mount [ 116.869985][ T6266] CacheFiles: Failed to register: -95 [ 117.137450][ T6271] loop4: detected capacity change from 0 to 512 [ 117.232859][ T6271] loop4: detected capacity change from 0 to 512 [ 117.969141][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.206712][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 119.595182][ T10] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 120.136195][ T6271] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 120.154465][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 120.154502][ T10] usb 2-1: can't read configurations, error -71 [ 120.284620][ T6271] EXT4-fs: failed to create workqueue [ 120.284637][ T6271] EXT4-fs (loop4): mount failed [ 120.480677][ T6280] loop3: detected capacity change from 0 to 256 [ 120.488253][ T6280] exfat: Deprecated parameter 'namecase' [ 120.488289][ T6280] exfat: Deprecated parameter 'namecase' [ 120.534609][ T6280] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 120.583187][ T5605] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.699901][ T6285] loop4: detected capacity change from 0 to 164 [ 120.740560][ T6285] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 120.757796][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 120.777954][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.928523][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 120.930637][ T10] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 120.933769][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.933791][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.972520][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.972545][ T10] usb 2-1: Product: syz [ 120.972558][ T10] usb 2-1: Manufacturer: syz [ 120.972571][ T10] usb 2-1: SerialNumber: syz [ 121.013982][ T6288] loop2: detected capacity change from 0 to 24 [ 121.014925][ T6288] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 121.034349][ T10] usb 2-1: 0:2 : does not exist [ 121.035834][ T6288] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 121.146134][ T6288] romfs: read error for inode 0x70040 [ 122.327803][ T6302] Cannot find set identified by id 0 to match [ 122.470498][ T5737] usb 2-1: USB disconnect, device number 5 [ 122.928662][ T6295] loop0: detected capacity change from 0 to 32768 [ 122.977739][ T5737] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.137652][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 123.138472][ T5737] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 123.139778][ T5737] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.139807][ T5737] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 123.139831][ T5737] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.139862][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.146375][ T5737] usb 2-1: config 0 descriptor?? [ 123.741354][ T6315] loop2: detected capacity change from 0 to 2048 [ 123.746407][ T5737] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0002/input/input12 [ 123.786296][ T5737] elan 0003:04F3:074D.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 123.978576][ T6315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.121830][ T5737] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.310553][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 124.333012][ T5737] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 124.362637][ T5737] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 124.364616][ T5737] usb 4-1: config 0 has no interface number 0 [ 124.376347][ T5737] usb 4-1: config 0 interface 12 has no altsetting 0 [ 124.436566][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.436608][ T5737] usb 4-1: Product: syz [ 124.436622][ T5737] usb 4-1: Manufacturer: syz [ 124.436635][ T5737] usb 4-1: SerialNumber: syz [ 124.947881][ T33] audit: type=1800 audit(1792069747.370:4): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.122" name="file1" dev="loop2" ino=1368 res=0 errno=-22 [ 124.985438][ T6321] CacheFiles: Failed to register: -95 [ 125.577600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.607602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.717601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.323077][ T5737] usb 4-1: config 0 descriptor?? [ 127.161978][ T27] usb 2-1: USB disconnect, device number 6 [ 127.280322][ T5737] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 127.280375][ T5737] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 127.280391][ T5737] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 127.280468][ T5737] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 127.347202][ T5737] usb 4-1: USB disconnect, device number 7 [ 127.424851][ T6327] fido_id[6327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 127.426886][ T6334] loop1: detected capacity change from 0 to 164 [ 127.530260][ T6338] loop2: detected capacity change from 0 to 24 [ 127.531166][ T6338] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.535843][ T6334] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 127.558010][ T6338] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.571734][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'. [ 127.661774][ T6340] loop4: detected capacity change from 0 to 2048 [ 127.703282][ T6340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.704165][ T6338] romfs: read error for inode 0x70040 [ 127.826886][ T33] audit: type=1800 audit(1792069750.250:5): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.132" name="file1" dev="loop4" ino=1368 res=0 errno=-22 [ 127.854688][ T6341] CacheFiles: Failed to register: -95 [ 128.871237][ T6340] Process accounting resumed [ 129.042433][ T6346] batadv_slave_1: entered promiscuous mode [ 129.044214][ T6346] batadv_slave_1: left promiscuous mode [ 129.307712][ T1230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.457797][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 129.458534][ T1230] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.460612][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.460654][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.466602][ T1230] usb 4-1: config 0 descriptor?? [ 129.631101][ T6349] loop0: detected capacity change from 0 to 32768 [ 129.701721][ T1230] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.241442][ T6349] jfs_mkdir: dtInsert returned -EIO [ 130.243723][ T6349] ERROR: (device loop0): jfs_mkdir: [ 130.243723][ T6349] [ 130.268417][ T6349] ERROR: (device loop0): remounting filesystem as read-only [ 130.498517][ T5737] usb 4-1: USB disconnect, device number 8 [ 131.237356][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.239009][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.317218][ T6375] sctp: [Deprecated]: syz.0.139 (pid 6375) Use of int in max_burst socket option deprecated. [ 131.317218][ T6375] Use struct sctp_assoc_value instead [ 131.347790][ T1230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.419470][ T6373] syzkaller0: entered promiscuous mode [ 131.419492][ T6373] syzkaller0: entered allmulticast mode [ 131.497740][ T1230] usb 5-1: Using ep0 maxpacket: 16 [ 131.499397][ T1230] usb 5-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 131.502600][ T1230] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.502754][ T1230] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.502846][ T1230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.503037][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.332269][ T1230] usb 5-1: config 0 descriptor?? [ 132.391880][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.559176][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 132.567239][ T10] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 132.592082][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 132.592186][ T10] usb 2-1: config 0 has no interface number 0 [ 132.592424][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 132.640464][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.640562][ T10] usb 2-1: Product: syz [ 132.640612][ T10] usb 2-1: Manufacturer: syz [ 132.640665][ T10] usb 2-1: SerialNumber: syz [ 132.750408][ T10] usb 2-1: config 0 descriptor?? [ 132.859916][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.861308][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.549892][ T1230] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0003/input/input13 [ 133.963382][ T6385] loop2: detected capacity change from 0 to 24 [ 134.096625][ T6385] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 134.596860][ T6385] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 134.654694][ T1230] elan 0003:04F3:074D.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 134.787339][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 134.787415][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 134.787431][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 134.787506][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 134.840167][ T992] usb 5-1: USB disconnect, device number 3 [ 134.858453][ T10] usb 2-1: USB disconnect, device number 7 [ 134.861915][ T6385] romfs: read error for inode 0x70040 [ 134.916674][ T6390] loop3: detected capacity change from 0 to 128 [ 135.749355][ T6390] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.935533][ T6390] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.709143][ T5606] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.006955][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.007533][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.076875][ T6414] sctp: [Deprecated]: syz.4.153 (pid 6414) Use of int in max_burst socket option deprecated. [ 137.076875][ T6414] Use struct sctp_assoc_value instead [ 137.168964][ T6414] syzkaller0: entered promiscuous mode [ 137.168979][ T6414] syzkaller0: entered allmulticast mode [ 137.224815][ T6416] loop3: detected capacity change from 0 to 256 [ 137.239927][ T6416] exfat: Deprecated parameter 'namecase' [ 137.239968][ T6416] exfat: Deprecated parameter 'namecase' [ 137.292021][ T6416] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 137.447446][ T6398] loop1: detected capacity change from 0 to 40427 [ 137.511527][ T6398] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 137.511543][ T6398] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 138.124474][ T6398] F2FS-fs (loop1): invalid crc value [ 138.334134][ T6398] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 139.171029][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.397799][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 139.402438][ T10] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 139.740459][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 139.740504][ T10] usb 1-1: config 0 has no interface number 0 [ 139.746175][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 140.698223][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.698252][ T10] usb 1-1: Product: syz [ 140.698266][ T10] usb 1-1: Manufacturer: syz [ 140.698279][ T10] usb 1-1: SerialNumber: syz [ 141.654938][ T10] usb 1-1: config 0 descriptor?? [ 141.975007][ T6435] loop1: detected capacity change from 0 to 24 [ 141.988773][ T6435] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 141.994693][ T6435] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 142.036732][ T10] usb 1-1: can't set config #0, error -71 [ 142.041836][ T10] usb 1-1: USB disconnect, device number 5 [ 142.066967][ T5619] udevd[5619]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 142.207464][ T6437] tipc: Trying to set illegal importance in message [ 142.226930][ T6435] romfs: read error for inode 0x70040 [ 142.278323][ T5706] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.427756][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 142.428464][ T5706] usb 5-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 142.429450][ T5706] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.429476][ T5706] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.429496][ T5706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.429522][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.458944][ T5706] usb 5-1: config 0 descriptor?? [ 142.995686][ T5706] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0004/input/input14 [ 143.165177][ T5706] elan 0003:04F3:074D.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 143.169970][ T6451] comedi comedi2: comedi_config --init_data is deprecated [ 143.446422][ T6452] loop2: detected capacity change from 0 to 256 [ 143.520682][ T6452] exfat: Deprecated parameter 'namecase' [ 143.520868][ T6452] exfat: Deprecated parameter 'namecase' [ 143.793383][ T5706] usb 5-1: USB disconnect, device number 4 [ 144.178487][ T6452] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 144.681327][ T6454] fido_id[6454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 145.444175][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.650320][ T5706] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.964431][ T5706] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 146.944849][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.944882][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.944917][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.948984][ T5706] usb 5-1: config 0 descriptor?? [ 147.019685][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 147.039167][ T10] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 147.040726][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 147.040748][ T10] usb 1-1: config 0 has no interface number 0 [ 147.040787][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 147.089423][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.089449][ T10] usb 1-1: Product: syz [ 147.089463][ T10] usb 1-1: Manufacturer: syz [ 147.089475][ T10] usb 1-1: SerialNumber: syz [ 147.129507][ T10] usb 1-1: config 0 descriptor?? [ 147.229084][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 147.352050][ T6484] loop3: detected capacity change from 0 to 24 [ 147.353181][ T6484] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 147.407881][ T6484] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 147.441394][ T5706] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 147.441429][ T5706] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 147.441465][ T5706] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 147.441489][ T5706] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 147.441504][ T5706] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 147.561294][ T5706] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 147.664468][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 147.664527][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 147.664542][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 147.664610][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 147.712227][ T10] usb 1-1: USB disconnect, device number 6 [ 147.743881][ T6484] romfs: read error for inode 0x70040 [ 147.787029][ T6488] loop2: detected capacity change from 0 to 1024 [ 147.838619][ T5706] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -32 [ 147.838649][ T5706] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -32 [ 147.838677][ T5706] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 147.838687][ T5706] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 147.862442][ T6488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.901764][ T5706] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -32 [ 148.884172][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.991533][ T1230] usb 5-1: USB disconnect, device number 5 [ 149.097359][ T6506] loop2: detected capacity change from 0 to 256 [ 149.116605][ T6506] exfat: Deprecated parameter 'namecase' [ 149.116630][ T6506] exfat: Deprecated parameter 'namecase' [ 149.196007][ T6506] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 150.537854][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.709105][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 150.718422][ T10] usb 4-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 150.721986][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.722017][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.722041][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.722070][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.784469][ T10] usb 4-1: config 0 descriptor?? [ 151.243040][ T10] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0006/input/input15 [ 151.292555][ T10] elan 0003:04F3:074D.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 151.416820][ T1230] usb 4-1: USB disconnect, device number 9 [ 151.494403][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 152.003782][ T5706] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.202182][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 152.222608][ T5706] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.250919][ T5706] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.250976][ T5706] usb 1-1: config 0 has no interface number 0 [ 152.251217][ T5706] usb 1-1: config 0 interface 12 has no altsetting 0 [ 152.337923][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.338027][ T5706] usb 1-1: Product: syz [ 152.338135][ T5706] usb 1-1: Manufacturer: syz [ 152.338179][ T5706] usb 1-1: SerialNumber: syz [ 152.531932][ T5706] usb 1-1: config 0 descriptor?? [ 152.882241][ T6535] loop1: detected capacity change from 0 to 24 [ 152.983157][ T6535] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 153.069221][ T6535] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 154.123785][ T6538] romfs: read error for inode 0x70040 [ 154.604702][ T6543] ip_tables: iptables: counters copy to user failed while replacing table [ 154.709132][ T6544] xfrm0: entered allmulticast mode [ 154.724567][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 154.744192][ T5706] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 154.744241][ T5706] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.744256][ T5706] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.744325][ T5706] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 154.794189][ T5706] usb 1-1: USB disconnect, device number 7 [ 154.949954][ T6554] loop1: detected capacity change from 0 to 764 [ 155.004744][ T6555] loop2: detected capacity change from 0 to 8 [ 155.259173][ T6558] Symlink component flag not implemented [ 155.264907][ T6558] Symlink component flag not implemented (15) [ 155.999105][ T6555] SQUASHFS error: lzo decompression failed, data probably corrupt [ 155.999256][ T6555] SQUASHFS error: Failed to read block 0x91: -5 [ 155.999314][ T6555] SQUASHFS error: Unable to read metadata cache entry [8f] [ 155.999475][ T6555] SQUASHFS error: Unable to read inode 0x11f [ 157.474985][ T6581] FAULT_INJECTION: forcing a failure. [ 157.474985][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 157.475022][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.2.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.475046][ T6581] Tainted: [L]=SOFTLOCKUP [ 157.475053][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.475063][ T6581] Call Trace: [ 157.475071][ T6581] [ 157.475078][ T6581] dump_stack_lvl+0xe8/0x150 [ 157.475114][ T6581] should_fail_ex+0x3eb/0x540 [ 157.475140][ T6581] should_failslab+0xa8/0x100 [ 157.475163][ T6581] __kmalloc_cache_noprof+0x9e/0x600 [ 157.475192][ T6581] ? vt_do_kdsk_ioctl+0x58c/0xc00 [ 157.475212][ T6581] ? vt_do_kdsk_ioctl+0x58c/0xc00 [ 157.475239][ T6581] vt_do_kdsk_ioctl+0x58c/0xc00 [ 157.475273][ T6581] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 157.475295][ T6581] ? bpf_lsm_capable+0x9/0x20 [ 157.475317][ T6581] ? security_capable+0x7e/0x2c0 [ 157.475348][ T6581] vt_ioctl+0x9e2/0x20e0 [ 157.475381][ T6581] ? __pfx_vt_ioctl+0x10/0x10 [ 157.475419][ T6581] ? __fget_files+0x2a/0x420 [ 157.475441][ T6581] ? tty_jobctrl_ioctl+0x378/0xba0 [ 157.475457][ T6581] ? __fget_files+0x2a/0x420 [ 157.475476][ T6581] tty_ioctl+0x920/0xde0 [ 157.475497][ T6581] ? __pfx_tty_ioctl+0x10/0x10 [ 157.475518][ T6581] __se_sys_ioctl+0xfc/0x170 [ 157.475542][ T6581] do_syscall_64+0x166/0x520 [ 157.475562][ T6581] ? trace_irq_disable+0x3b/0x140 [ 157.475583][ T6581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.475601][ T6581] ? clear_bhb_loop+0x70/0xc0 [ 157.475624][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.475641][ T6581] RIP: 0033:0x7f112579e559 [ 157.475662][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.475678][ T6581] RSP: 002b:00007f11239f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.475702][ T6581] RAX: ffffffffffffffda RBX: 00007f1125a25fa0 RCX: 00007f112579e559 [ 157.475715][ T6581] RDX: 0000200000000200 RSI: 0000000000004b47 RDI: 0000000000000003 [ 157.475727][ T6581] RBP: 00007f11239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.475738][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.475749][ T6581] R13: 00007f1125a26038 R14: 00007f1125a25fa0 R15: 00007ffcbe5f44b8 [ 157.475776][ T6581] [ 157.925789][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 158.624643][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.822103][ T5746] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.837396][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 158.847756][ T5876] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 158.886657][ T5876] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.886783][ T5876] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 158.886823][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.886956][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.049440][ T5876] usb 2-1: config 0 descriptor?? [ 159.098014][ T5746] usb 5-1: Using ep0 maxpacket: 32 [ 159.105687][ T5746] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 159.131248][ T5746] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 159.131303][ T5746] usb 5-1: config 0 has no interface number 0 [ 159.131467][ T5746] usb 5-1: config 0 interface 12 has no altsetting 0 [ 159.192549][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.192590][ T5746] usb 5-1: Product: syz [ 159.192746][ T5746] usb 5-1: Manufacturer: syz [ 159.192795][ T5746] usb 5-1: SerialNumber: syz [ 159.382567][ T5746] usb 5-1: config 0 descriptor?? [ 160.051451][ T5876] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0007/input/input16 [ 161.392548][ T5876] elan 0003:04F3:074D.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 161.442587][ T6601] loop3: detected capacity change from 0 to 1024 [ 161.443542][ T6601] EXT4-fs: Ignoring removed oldalloc option [ 161.443561][ T6601] EXT4-fs: Ignoring removed orlov option [ 161.507525][ T5876] usb 2-1: USB disconnect, device number 8 [ 161.603278][ T6601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.603412][ T6601] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.616545][ T5746] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 161.616596][ T5746] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 161.616610][ T5746] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 161.616688][ T5746] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 161.628642][ T5746] usb 5-1: USB disconnect, device number 6 [ 161.737078][ T6601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.204: bg 0: block 112: padding at end of block bitmap is not set [ 161.771271][ T6606] fido_id[6606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 161.775104][ T6610] loop1: detected capacity change from 0 to 512 [ 161.804079][ T6600] input: syz1 as /devices/virtual/input/input17 [ 162.668345][ T6625] comedi comedi2: comedi_config --init_data is deprecated [ 163.490667][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.207678][ T5746] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 164.217727][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.369075][ T5746] usb 2-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 164.370168][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 164.370195][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 164.370218][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 164.372178][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.372199][ T5746] usb 2-1: Product: syz [ 164.372212][ T5746] usb 2-1: Manufacturer: syz [ 164.372225][ T5746] usb 2-1: SerialNumber: syz [ 164.374822][ T5746] usb 2-1: config 0 descriptor?? [ 164.400124][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 164.423595][ T5876] usb 5-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 164.437139][ T5876] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.437170][ T5876] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.437193][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.437244][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.459917][ T5876] usb 5-1: config 0 descriptor?? [ 164.613757][ T6646] loop3: detected capacity change from 0 to 256 [ 164.712279][ T6633] Set syz1 is full, maxelem 6117 reached [ 164.982489][ T6646] exfat: Deprecated parameter 'namecase' [ 164.982795][ T6646] exfat: Deprecated parameter 'namecase' [ 165.102684][ T5746] powermate: unknown product id 0240 [ 165.102701][ T5746] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 165.103741][ T5746] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 165.235069][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.386426][ T5746] usb 2-1: USB disconnect, device number 9 [ 165.404176][ T6646] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 165.420181][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 165.421298][ T10] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 165.445027][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 165.445088][ T10] usb 1-1: config 0 has no interface number 0 [ 165.445235][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 165.500216][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.500257][ T10] usb 1-1: Product: syz [ 165.500305][ T10] usb 1-1: Manufacturer: syz [ 165.500359][ T10] usb 1-1: SerialNumber: syz [ 165.700059][ T10] usb 1-1: config 0 descriptor?? [ 166.032445][ T5876] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0008/input/input19 [ 166.376924][ T5876] elan 0003:04F3:074D.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 166.691403][ T5876] usb 5-1: USB disconnect, device number 7 [ 167.732990][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 167.733045][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 167.733061][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 167.733145][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 167.994109][ T10] usb 1-1: USB disconnect, device number 8 [ 168.189467][ T6651] fido_id[6651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 169.397644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.711647][ T6677] FAULT_INJECTION: forcing a failure. [ 170.711647][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.711678][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.3.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.711701][ T6677] Tainted: [L]=SOFTLOCKUP [ 170.711707][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.711717][ T6677] Call Trace: [ 170.711724][ T6677] [ 170.711732][ T6677] dump_stack_lvl+0xe8/0x150 [ 170.711766][ T6677] should_fail_ex+0x3eb/0x540 [ 170.711792][ T6677] _copy_to_user+0x31/0xb0 [ 170.711833][ T6677] simple_read_from_buffer+0xe1/0x170 [ 170.711866][ T6677] proc_fail_nth_read+0x1bb/0x230 [ 170.711891][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.711916][ T6677] ? rw_verify_area+0x24a/0x4c0 [ 170.711937][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.711958][ T6677] vfs_read+0x213/0xa80 [ 170.711982][ T6677] ? __pfx___mutex_lock+0x10/0x10 [ 170.712004][ T6677] ? __pfx_vfs_read+0x10/0x10 [ 170.712024][ T6677] ? __fget_files+0x2a/0x420 [ 170.712040][ T6677] ? __fget_files+0x3a2/0x420 [ 170.712056][ T6677] ? __fget_files+0x2a/0x420 [ 170.712077][ T6677] ? fdget+0x1ac/0x250 [ 170.712101][ T6677] ksys_read+0x150/0x270 [ 170.712118][ T6677] ? __fget_files+0x3a2/0x420 [ 170.712137][ T6677] ? __pfx_ksys_read+0x10/0x10 [ 170.712167][ T6677] do_syscall_64+0x166/0x520 [ 170.712186][ T6677] ? trace_irq_disable+0x3b/0x140 [ 170.712207][ T6677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.712225][ T6677] ? clear_bhb_loop+0x70/0xc0 [ 170.712248][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.712266][ T6677] RIP: 0033:0x7fccdad5ed8e [ 170.712283][ T6677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.712298][ T6677] RSP: 002b:00007fccd8fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.712318][ T6677] RAX: ffffffffffffffda RBX: 00007fccd8fd56c0 RCX: 00007fccdad5ed8e [ 170.712337][ T6677] RDX: 000000000000000f RSI: 00007fccd8fd50a0 RDI: 0000000000000004 [ 170.712348][ T6677] RBP: 00007fccd8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 170.712359][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.712370][ T6677] R13: 00007fccdb026128 R14: 00007fccdb026090 R15: 00007ffdd1949a78 [ 170.712400][ T6677] [ 171.537664][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 171.709189][ T10] usb 3-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 171.711066][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 171.711092][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 171.711116][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 171.714134][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.714156][ T10] usb 3-1: Product: syz [ 171.714168][ T10] usb 3-1: Manufacturer: syz [ 171.714181][ T10] usb 3-1: SerialNumber: syz [ 171.728934][ T10] usb 3-1: config 0 descriptor?? [ 171.740604][ T1230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.891787][ T1230] usb 5-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 171.892538][ T1230] usb 5-1: config 0 has no interfaces? [ 171.894999][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.895022][ T1230] usb 5-1: SerialNumber: syz [ 171.903770][ T1230] usb 5-1: config 0 descriptor?? [ 173.187878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.300001][ T10] powermate: unknown product id 0240 [ 173.300019][ T10] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 173.300237][ T10] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 173.310115][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 173.330782][ T10] usb 3-1: USB disconnect, device number 10 [ 173.335276][ T5876] usb 5-1: USB disconnect, device number 8 [ 173.642216][ T6703] loop3: detected capacity change from 0 to 764 [ 173.901048][ T6704] Symlink component flag not implemented [ 173.901558][ T6704] Symlink component flag not implemented (15) [ 176.209833][ T33] audit: type=1326 audit(1792069798.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.210484][ T33] audit: type=1326 audit(1792069798.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.239375][ T33] audit: type=1326 audit(1792069798.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.239584][ T33] audit: type=1326 audit(1792069798.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.247534][ T33] audit: type=1326 audit(1792069798.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.247932][ T33] audit: type=1326 audit(1792069798.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.248133][ T33] audit: type=1326 audit(1792069798.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.250087][ T33] audit: type=1326 audit(1792069798.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.252002][ T33] audit: type=1326 audit(1792069798.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.255220][ T33] audit: type=1326 audit(1792069798.670:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 176.370484][ T6720] Zero length message leads to an empty skb [ 176.727680][ T991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.879297][ T6714] loop4: detected capacity change from 0 to 32768 [ 176.879623][ T991] usb 2-1: New USB device found: idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 176.902030][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.902055][ T991] usb 2-1: Product: syz [ 176.902067][ T991] usb 2-1: Manufacturer: syz [ 176.902080][ T991] usb 2-1: SerialNumber: syz [ 176.931144][ T991] usb 2-1: config 0 descriptor?? [ 176.947802][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.977268][ T6720] loop3: detected capacity change from 0 to 512 [ 177.001487][ T6720] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 177.001535][ T6720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 177.001629][ T6720] System zones: 0-1, 15-15, 18-18, 34-34 [ 177.001960][ T6720] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.002115][ T6720] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 177.002141][ T6720] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 177.002787][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.241: bad orphan inode 16 [ 177.003027][ T6720] loop3: lost filesystem error report for type 5 error -117 [ 177.012843][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 177.012866][ C1] EXT4-fs (loop3): initial error at time 1792069799: ext4_orphan_get:1430 [ 177.012890][ C1] EXT4-fs (loop3): last error at time 1792069799: ext4_orphan_get:1430 [ 177.081674][ T6720] ext4_test_bit(bit=15, block=18) = 1 [ 177.081791][ T6720] is_bad_inode(inode)=0 [ 177.081799][ T6720] NEXT_ORPHAN(inode)=0 [ 177.081806][ T6720] max_ino=32 [ 177.081812][ T6720] i_nlink=2 [ 177.089298][ T6720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.110912][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 177.111829][ T27] usb 1-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 177.113218][ T27] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 177.120331][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.120352][ T27] usb 1-1: Product: syz [ 177.120365][ T27] usb 1-1: Manufacturer: syz [ 177.120377][ T27] usb 1-1: SerialNumber: syz [ 177.137866][ T27] usb 1-1: config 0 descriptor?? [ 177.149240][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 177.149332][ T27] usb 1-1: setting power ON [ 177.149708][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 177.173540][ T6721] 9p: Bad value for 'wfdno' [ 177.186704][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.205315][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 177.205369][ T27] usb 1-1: media controller created [ 177.265577][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.336013][ T27] usb 1-1: selecting invalid altsetting 6 [ 177.336028][ T27] usb 1-1: digital interface selection failed (-22) [ 177.336035][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 177.337505][ T27] usb 1-1: setting power OFF [ 177.337554][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 177.352313][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 177.352335][ T27] (NULL device *): no alternate interface [ 177.358135][ T6726] dvb-usb: bulk message failed: -22 (3/0) [ 177.358154][ T6726] cxusb: i2c wr: len=80 is too big! [ 177.358154][ T6726] [ 177.506857][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 177.518692][ T27] usb 1-1: USB disconnect, device number 9 [ 177.681554][ T6734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.242'. [ 177.685738][ T6734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.242'. [ 178.418918][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.587610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.637613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.787612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 179.859903][ T991] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 179.895780][ T991] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 179.915895][ T991] usb 2-1: USB disconnect, device number 10 [ 180.828242][ T991] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.000205][ T991] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 181.003261][ T991] usb 2-1: config 0 has no interfaces? [ 181.034797][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.034853][ T991] usb 2-1: SerialNumber: syz [ 181.188766][ T991] usb 2-1: config 0 descriptor?? [ 181.189754][ T6757] kAFS: unable to lookup cell '(G' [ 182.576167][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 182.578418][ T5746] usb 2-1: USB disconnect, device number 11 [ 182.614854][ T6767] FAULT_INJECTION: forcing a failure. [ 182.614854][ T6767] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 182.614891][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.0.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.614918][ T6767] Tainted: [L]=SOFTLOCKUP [ 182.614925][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.614936][ T6767] Call Trace: [ 182.614943][ T6767] [ 182.614952][ T6767] dump_stack_lvl+0xe8/0x150 [ 182.614987][ T6767] should_fail_ex+0x3eb/0x540 [ 182.615014][ T6767] prepare_alloc_pages+0x21e/0x5f0 [ 182.615041][ T6767] __alloc_frozen_pages_noprof+0x17c/0x410 [ 182.615066][ T6767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.615094][ T6767] ? policy_nodemask+0x2cc/0x8e0 [ 182.615118][ T6767] ? __lock_acquire+0x747/0x2de0 [ 182.615142][ T6767] alloc_pages_mpol+0x21e/0x390 [ 182.615172][ T6767] folio_alloc_mpol_noprof+0x39/0x160 [ 182.615198][ T6767] vma_alloc_folio_noprof+0xe1/0x1e0 [ 182.615225][ T6767] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 182.615264][ T6767] ? vma_has_anon_rmap+0xc9/0x270 [ 182.615289][ T6767] do_pte_missing+0x16d4/0x3570 [ 182.615339][ T6767] handle_mm_fault+0x1a53/0x3750 [ 182.615375][ T6767] ? handle_mm_fault+0xf1/0x3750 [ 182.615409][ T6767] ? __pfx_handle_mm_fault+0x10/0x10 [ 182.615431][ T6767] ? lock_vma_under_rcu+0x45a/0x500 [ 182.615479][ T6767] do_user_addr_fault+0xb35/0x1480 [ 182.615512][ T6767] ? trace_page_fault_user+0x84/0x1e0 [ 182.615535][ T6767] exc_page_fault+0x6a/0xc0 [ 182.615556][ T6767] asm_exc_page_fault+0x26/0x30 [ 182.615573][ T6767] RIP: 0033:0x7f5958a552a3 [ 182.615591][ T6767] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 182.615607][ T6767] RSP: 002b:00007f5959980470 EFLAGS: 00010202 [ 182.615624][ T6767] RAX: 0000000000003000 RBX: 00007f5959980530 RCX: 00007f594e800000 [ 182.615638][ T6767] RDX: 00007f59599806d0 RSI: 0000000000000015 RDI: 00007f59599805d0 [ 182.615652][ T6767] RBP: 0000000000000004 R08: 000000000000000a R09: 00000000000002d8 [ 182.615663][ T6767] R10: 000000000000031c R11: 00007f5959980530 R12: 0000000000000301 [ 182.615675][ T6767] R13: 00007f5958c55b20 R14: 00000000000000b5 R15: 00007f59599805d0 [ 182.615706][ T6767] [ 182.624591][ T6767] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 184.050151][ T5745] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 184.257378][ T5745] usb 3-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 184.291003][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 184.291094][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 184.291136][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 184.405394][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.405435][ T5745] usb 3-1: Product: syz [ 184.405473][ T5745] usb 3-1: Manufacturer: syz [ 184.405487][ T5745] usb 3-1: SerialNumber: syz [ 184.563880][ T5745] usb 3-1: config 0 descriptor?? [ 185.129662][ T5745] powermate: unknown product id 0240 [ 185.129679][ T5745] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 185.129910][ T5745] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 185.171843][ T5745] usb 3-1: USB disconnect, device number 11 [ 185.452557][ T6790] loop4: detected capacity change from 0 to 256 [ 185.505700][ T6790] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 185.525729][ T6792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.256'. [ 185.572796][ T6794] capability: warning: `syz.1.263' uses 32-bit capabilities (legacy support in use) [ 185.754206][ T33] kauditd_printk_skb: 230 callbacks suppressed [ 185.754225][ T33] audit: type=1326 audit(1792069808.180:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.756380][ T33] audit: type=1326 audit(1792069808.180:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.762577][ T33] audit: type=1326 audit(1792069808.190:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.762624][ T33] audit: type=1326 audit(1792069808.190:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.762660][ T33] audit: type=1326 audit(1792069808.190:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.763550][ T33] audit: type=1326 audit(1792069808.190:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.777116][ T33] audit: type=1326 audit(1792069808.190:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.777174][ T33] audit: type=1326 audit(1792069808.190:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.778687][ T33] audit: type=1326 audit(1792069808.190:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.778728][ T33] audit: type=1326 audit(1792069808.190:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.3.256" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdad9e559 code=0x7ffc0000 [ 185.856118][ T6799] netlink: 'syz.4.262': attribute type 4 has an invalid length. [ 188.344545][ T6810] program syz.1.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.593456][ T6812] loop3: detected capacity change from 0 to 1024 [ 189.347783][ T991] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 190.288019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.577703][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 190.578401][ T991] usb 4-1: New USB device found: idVendor=0582, idProduct=00a3, bcdDevice=0.40 [ 190.579674][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.579695][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.579713][ T991] usb 4-1: config 1 has no interface number 0 [ 190.579739][ T991] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 190.585660][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.585684][ T991] usb 4-1: Product: syz [ 190.585697][ T991] usb 4-1: Manufacturer: syz [ 190.585710][ T991] usb 4-1: SerialNumber: syz [ 190.610132][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.780665][ T5876] usb 5-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 190.781795][ T5876] usb 5-1: config 0 has no interfaces? [ 190.785017][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.785041][ T5876] usb 5-1: SerialNumber: syz [ 190.797170][ T5876] usb 5-1: config 0 descriptor?? [ 190.938456][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.962633][ T5876] usb 4-1: USB disconnect, device number 10 [ 191.057756][ T1230] usb 5-1: USB disconnect, device number 9 [ 191.453161][ T6835] loop2: detected capacity change from 0 to 512 [ 191.834285][ T6835] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 191.862521][ T6835] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 191.862544][ T6835] loop2: lost filesystem error report for type 5 error -12 [ 191.887626][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 191.887648][ C1] EXT4-fs (loop2): initial error at time 1792069814: ext4_process_orphan:346 [ 191.887668][ C1] EXT4-fs (loop2): last error at time 1792069814: ext4_process_orphan:346 [ 191.928840][ T6835] EXT4-fs (loop2): 1 truncate cleaned up [ 191.932342][ T6835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.982342][ T6843] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 192.048106][ T6843] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 192.207672][ T991] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 192.211530][ T6845] FAULT_INJECTION: forcing a failure. [ 192.211530][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.211561][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.2.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.211585][ T6845] Tainted: [L]=SOFTLOCKUP [ 192.211594][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.211604][ T6845] Call Trace: [ 192.211611][ T6845] [ 192.211619][ T6845] dump_stack_lvl+0xe8/0x150 [ 192.211650][ T6845] should_fail_ex+0x3eb/0x540 [ 192.211675][ T6845] _copy_from_user+0x2d/0xb0 [ 192.211698][ T6845] ___sys_sendmsg+0x1c6/0x360 [ 192.211719][ T6845] ? __lock_acquire+0x747/0x2de0 [ 192.211744][ T6845] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.211770][ T6845] ? kstrtouint+0x6e/0xe0 [ 192.211821][ T6845] ? __fget_files+0x3a2/0x420 [ 192.211838][ T6845] ? __fget_files+0x2a/0x420 [ 192.211864][ T6845] __sys_sendmmsg+0x273/0x4d0 [ 192.211890][ T6845] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.211919][ T6845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.211954][ T6845] ? ksys_write+0x242/0x270 [ 192.211976][ T6845] ? __pfx_ksys_write+0x10/0x10 [ 192.212000][ T6845] __x64_sys_sendmmsg+0xa0/0xc0 [ 192.212022][ T6845] do_syscall_64+0x166/0x520 [ 192.212041][ T6845] ? trace_irq_disable+0x3b/0x140 [ 192.212062][ T6845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.212080][ T6845] ? clear_bhb_loop+0x70/0xc0 [ 192.212102][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.212125][ T6845] RIP: 0033:0x7f112579e559 [ 192.212142][ T6845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.212157][ T6845] RSP: 002b:00007f11239b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.212177][ T6845] RAX: ffffffffffffffda RBX: 00007f1125a26180 RCX: 00007f112579e559 [ 192.212190][ T6845] RDX: 040000000000027f RSI: 0000200000001300 RDI: 0000000000000009 [ 192.212202][ T6845] RBP: 00007f11239b4090 R08: 0000000000000000 R09: 0000000000000000 [ 192.212213][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.212224][ T6845] R13: 00007f1125a26218 R14: 00007f1125a26180 R15: 00007ffcbe5f44b8 [ 192.212254][ T6845] [ 192.427698][ T991] usb 5-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 192.435283][ T991] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 192.435314][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 192.435338][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 192.448710][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.448734][ T991] usb 5-1: Product: syz [ 192.448746][ T991] usb 5-1: Manufacturer: syz [ 192.448759][ T991] usb 5-1: SerialNumber: syz [ 192.456583][ T991] usb 5-1: config 0 descriptor?? [ 192.495330][ T6847] loop3: detected capacity change from 0 to 256 [ 192.538836][ T6847] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 192.581364][ T6841] Set syz1 is full, maxelem 6117 reached [ 192.786719][ T991] powermate: unknown product id 0240 [ 192.786736][ T991] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 192.786964][ T991] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 192.809079][ T991] usb 5-1: USB disconnect, device number 10 [ 192.902561][ T6851] netlink: 'syz.3.276': attribute type 4 has an invalid length. [ 193.411222][ T6855] FAULT_INJECTION: forcing a failure. [ 193.411222][ T6855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.411253][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.1.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.411298][ T6855] Tainted: [L]=SOFTLOCKUP [ 193.411311][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.411320][ T6855] Call Trace: [ 193.411352][ T6855] [ 193.411360][ T6855] dump_stack_lvl+0xe8/0x150 [ 193.411392][ T6855] should_fail_ex+0x3eb/0x540 [ 193.411416][ T6855] prepare_alloc_pages+0x21e/0x5f0 [ 193.411439][ T6855] __alloc_frozen_pages_noprof+0x17c/0x410 [ 193.411459][ T6855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.411492][ T6855] alloc_pages_mpol+0x21e/0x390 [ 193.411514][ T6855] ? ipv6_flowlabel_opt+0x104d/0x2b10 [ 193.411536][ T6855] ___kmalloc_large_node+0x7b/0x170 [ 193.411566][ T6855] __kmalloc_large_node_noprof+0x18/0x90 [ 193.411594][ T6855] __kmalloc_noprof+0x3f6/0x710 [ 193.411618][ T6855] ? __kmalloc_cache_noprof+0x148/0x600 [ 193.411641][ T6855] ? ipv6_flowlabel_opt+0xf94/0x2b10 [ 193.411662][ T6855] ? ipv6_flowlabel_opt+0x104d/0x2b10 [ 193.411688][ T6855] ipv6_flowlabel_opt+0x104d/0x2b10 [ 193.411724][ T6855] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 193.411769][ T6855] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.411796][ T6855] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.411825][ T6855] ? do_ipv6_setsockopt+0x956/0x2960 [ 193.411849][ T6855] ? __local_bh_enable_ip+0xd6/0x140 [ 193.411874][ T6855] do_ipv6_setsockopt+0x9cb/0x2960 [ 193.411903][ T6855] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 193.411932][ T6855] ? aa_inet_opt_perm+0x94d/0xcd0 [ 193.411947][ T6855] ? get_pid_task+0x20/0x1f0 [ 193.411970][ T6855] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 193.412003][ T6855] ? ksys_write+0x1e6/0x270 [ 193.412030][ T6855] ? lock_acquire+0x115/0x350 [ 193.412057][ T6855] ? aa_sock_opt_perm+0xe1/0x1e0 [ 193.412088][ T6855] ipv6_setsockopt+0x59/0x170 [ 193.412111][ T6855] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.412138][ T6855] do_sock_setsockopt+0x17c/0x1b0 [ 193.412163][ T6855] __x64_sys_setsockopt+0x13d/0x1b0 [ 193.412188][ T6855] do_syscall_64+0x166/0x520 [ 193.412207][ T6855] ? trace_irq_disable+0x3b/0x140 [ 193.412227][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.412246][ T6855] ? clear_bhb_loop+0x70/0xc0 [ 193.412269][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.412285][ T6855] RIP: 0033:0x7f1fda99e559 [ 193.412304][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.412339][ T6855] RSP: 002b:00007f1fdb7b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.412359][ T6855] RAX: ffffffffffffffda RBX: 00007f1fdac25fa0 RCX: 00007f1fda99e559 [ 193.412373][ T6855] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 193.412384][ T6855] RBP: 00007f1fdb7b8090 R08: 000000000000fe60 R09: 0000000000000000 [ 193.412396][ T6855] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 193.412407][ T6855] R13: 00007f1fdac26038 R14: 00007f1fdac25fa0 R15: 00007fff37eec248 [ 193.412431][ T6855] [ 193.763044][ T6860] FAULT_INJECTION: forcing a failure. [ 193.763044][ T6860] name fail_futex, interval 1, probability 0, space 0, times 0 [ 193.763078][ T6860] CPU: 1 UID: 0 PID: 6860 Comm: syz.0.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.763106][ T6860] Tainted: [L]=SOFTLOCKUP [ 193.763114][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.763125][ T6860] Call Trace: [ 193.763133][ T6860] [ 193.763141][ T6860] dump_stack_lvl+0xe8/0x150 [ 193.763176][ T6860] should_fail_ex+0x3eb/0x540 [ 193.763203][ T6860] get_futex_key+0x1b4/0x1580 [ 193.763233][ T6860] ? __pfx_futex_wake_mark+0x10/0x10 [ 193.763260][ T6860] ? __pfx_get_futex_key+0x10/0x10 [ 193.763298][ T6860] futex_wake+0x119/0x5f0 [ 193.763324][ T6860] ? __pfx_futex_wake+0x10/0x10 [ 193.763345][ T6860] ? ipcget+0xc03/0xd10 [ 193.763378][ T6860] ? ipcget+0x13b/0xd10 [ 193.763416][ T6860] do_futex+0x458/0x4e0 [ 193.763447][ T6860] ? ipcget+0x13b/0xd10 [ 193.763480][ T6860] ? __pfx_do_futex+0x10/0x10 [ 193.763516][ T6860] __se_sys_futex+0x3a8/0x450 [ 193.763548][ T6860] ? __x64_sys_shmget+0x140/0x190 [ 193.763574][ T6860] ? __pfx___se_sys_futex+0x10/0x10 [ 193.763603][ T6860] ? __pfx___x64_sys_shmget+0x10/0x10 [ 193.763635][ T6860] ? __x64_sys_futex+0x21/0xf0 [ 193.763665][ T6860] do_syscall_64+0x166/0x520 [ 193.763686][ T6860] ? trace_irq_disable+0x3b/0x140 [ 193.763709][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.763729][ T6860] ? clear_bhb_loop+0x70/0xc0 [ 193.763752][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.763771][ T6860] RIP: 0033:0x7f5958b9e559 [ 193.763789][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.763806][ T6860] RSP: 002b:00007f59599810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.763828][ T6860] RAX: ffffffffffffffda RBX: 00007f5958e25fa8 RCX: 00007f5958b9e559 [ 193.763842][ T6860] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5958e25fac [ 193.763854][ T6860] RBP: 00007f5958e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 193.763868][ T6860] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 193.763880][ T6860] R13: 00007f5958e26038 R14: 00007ffd806b7f10 R15: 00007ffd806b7ff8 [ 193.763909][ T6860] [ 193.934920][ T6863] Cannot find set identified by id 0 to match [ 194.299427][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299485][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.332723][ T6867] netlink: 180 bytes leftover after parsing attributes in process `syz.0.283'. [ 194.353719][ T6866] loop4: detected capacity change from 0 to 1024 [ 194.568346][ T6869] loop1: detected capacity change from 0 to 1024 [ 194.571969][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.937677][ T992] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 195.129422][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.297877][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 195.308184][ T5876] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.335093][ T5876] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.335131][ T5876] usb 4-1: config 0 has no interface number 0 [ 195.335656][ T5876] usb 4-1: config 0 interface 12 has no altsetting 0 [ 195.388836][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.388883][ T5876] usb 4-1: Product: syz [ 195.388991][ T5876] usb 4-1: Manufacturer: syz [ 195.389036][ T5876] usb 4-1: SerialNumber: syz [ 195.448497][ T992] usb 3-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 195.461345][ T992] usb 3-1: config 0 has no interfaces? [ 195.590383][ T5876] usb 4-1: config 0 descriptor?? [ 195.642200][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.642226][ T992] usb 3-1: SerialNumber: syz [ 195.904507][ T992] usb 3-1: config 0 descriptor?? [ 196.898502][ T992] usb 3-1: USB disconnect, device number 12 [ 197.836612][ T5876] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 197.836649][ T5876] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 197.836658][ T5876] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 197.836701][ T5876] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 197.891291][ T5876] usb 4-1: USB disconnect, device number 11 [ 198.095424][ T6894] loop4: detected capacity change from 0 to 256 [ 198.122699][ T6894] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 198.134138][ T6891] futex_wake_op: syz.1.290 tries to shift op by 144; fix this program [ 198.531238][ T6903] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 199.627539][ T6904] kAFS: unable to lookup cell '(G' [ 199.667692][ T32] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 199.868622][ T32] usb 1-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 199.897101][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 199.897121][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 199.897134][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 199.946989][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.947016][ T32] usb 1-1: Product: syz [ 199.947029][ T32] usb 1-1: Manufacturer: syz [ 199.947043][ T32] usb 1-1: SerialNumber: syz [ 199.985897][ T32] usb 1-1: config 0 descriptor?? [ 200.080325][ T6913] loop2: detected capacity change from 0 to 512 [ 200.103016][ T6913] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 200.106760][ T6913] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 200.106783][ T6913] loop2: lost filesystem error report for type 5 error -12 [ 200.117624][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 200.117645][ C0] EXT4-fs (loop2): initial error at time 1792069822: ext4_process_orphan:346 [ 200.117666][ C0] EXT4-fs (loop2): last error at time 1792069822: ext4_process_orphan:346 [ 200.155550][ T6913] EXT4-fs (loop2): 1 truncate cleaned up [ 200.162229][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.352372][ T32] powermate: unknown product id 0240 [ 200.352398][ T32] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 200.352618][ T32] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 200.391892][ T32] usb 1-1: USB disconnect, device number 10 [ 200.392344][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.540715][ T5876] usb 5-1: New USB device found: idVendor=0a5c, idProduct=21e8, bcdDevice=1.00 [ 200.541564][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.541597][ T5876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 200.541610][ T5876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 200.541630][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.545030][ T6908] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.545104][ T6908] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.632731][ T6926] syz.2.297 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.779953][ T33] kauditd_printk_skb: 20 callbacks suppressed [ 200.780003][ T33] audit: type=1326 audit(1792069823.210:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.4.295" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcc679e559 code=0x0 [ 200.851688][ T6915] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 200.859262][ T6915] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 201.176203][ T6936] loop3: detected capacity change from 0 to 1024 [ 201.207721][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.362137][ T32] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 201.363788][ T32] usb 2-1: config 0 has no interfaces? [ 201.369295][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.369318][ T32] usb 2-1: SerialNumber: syz [ 201.403187][ T32] usb 2-1: config 0 descriptor?? [ 201.567714][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 201.658996][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 201.659033][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 201.659054][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 201.659073][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 201.671525][ T32] usb 2-1: USB disconnect, device number 12 [ 201.930862][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.770772][ T5613] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 203.103549][ T32] usb 5-1: USB disconnect, device number 11 [ 203.149372][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.251860][ T6957] loop4: detected capacity change from 0 to 256 [ 203.276139][ T6958] FAULT_INJECTION: forcing a failure. [ 203.276139][ T6958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.276171][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz.2.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.276193][ T6958] Tainted: [L]=SOFTLOCKUP [ 203.276214][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.276224][ T6958] Call Trace: [ 203.276232][ T6958] [ 203.276239][ T6958] dump_stack_lvl+0xe8/0x150 [ 203.276267][ T6958] should_fail_ex+0x3eb/0x540 [ 203.276291][ T6958] __kvm_read_guest_page+0x18d/0x240 [ 203.276314][ T6958] kvm_fetch_guest_virt+0x10c/0x160 [ 203.276334][ T6958] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 203.276352][ T6958] __do_insn_fetch_bytes+0x53a/0x6c0 [ 203.276381][ T6958] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 203.276403][ T6958] ? __lock_acquire+0x747/0x2de0 [ 203.276426][ T6958] ? trace_kvm_tdp_mmu_spte_changed+0x8a/0x230 [ 203.276452][ T6958] x86_decode_insn+0x374/0x5af0 [ 203.276472][ T6958] ? __handle_changed_spte+0x534/0x12e0 [ 203.276516][ T6958] ? kvm_tdp_mmu_map+0x405/0x1f10 [ 203.276540][ T6958] ? __pfx_x86_decode_insn+0x10/0x10 [ 203.276559][ T6958] ? kvm_tdp_mmu_map+0xe45/0x1f10 [ 203.276594][ T6958] ? __asan_memset+0x22/0x50 [ 203.276617][ T6958] ? init_decode_cache+0xf3/0x160 [ 203.276640][ T6958] ? init_emulate_ctxt+0x4c6/0x630 [ 203.276664][ T6958] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 203.276694][ T6958] x86_emulate_instruction+0x348/0x1e90 [ 203.276726][ T6958] ? kvm_mmu_do_page_fault+0x4e0/0x640 [ 203.276750][ T6958] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 203.276792][ T6958] kvm_mmu_page_fault+0x8f5/0xc00 [ 203.276817][ T6958] vt_handle_exit+0x28/0x160 [ 203.276840][ T6958] vcpu_run+0x4e8a/0x7a90 [ 203.276888][ T6958] ? vcpu_run+0x35f3/0x7a90 [ 203.276940][ T6958] ? __pfx_vcpu_run+0x10/0x10 [ 203.276954][ T6958] ? complete_emulated_mmio+0x1f2/0x910 [ 203.276978][ T6958] ? __asan_memcpy+0x40/0x70 [ 203.277001][ T6958] ? complete_emulated_mmio+0x535/0x910 [ 203.277026][ T6958] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 203.277056][ T6958] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 203.277076][ T6958] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 203.277095][ T6958] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 203.277118][ T6958] kvm_vcpu_ioctl+0xa61/0xfd0 [ 203.277142][ T6958] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.277177][ T6958] ? __fget_files+0x2a/0x420 [ 203.277196][ T6958] ? __fget_files+0x2a/0x420 [ 203.277220][ T6958] ? __fget_files+0x2a/0x420 [ 203.277239][ T6958] ? bpf_lsm_file_ioctl+0x9/0x20 [ 203.277258][ T6958] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 203.277276][ T6958] __se_sys_ioctl+0xfc/0x170 [ 203.277297][ T6958] do_syscall_64+0x166/0x520 [ 203.277316][ T6958] ? trace_irq_disable+0x3b/0x140 [ 203.277334][ T6958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.277351][ T6958] ? clear_bhb_loop+0x70/0xc0 [ 203.277371][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.277387][ T6958] RIP: 0033:0x7f112579e559 [ 203.277404][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.277418][ T6958] RSP: 002b:00007f11239d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.277436][ T6958] RAX: ffffffffffffffda RBX: 00007f1125a26090 RCX: 00007f112579e559 [ 203.277448][ T6958] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 203.277458][ T6958] RBP: 00007f11239d5090 R08: 0000000000000000 R09: 0000000000000000 [ 203.277468][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.277478][ T6958] R13: 00007f1125a26128 R14: 00007f1125a26090 R15: 00007ffcbe5f44b8 [ 203.277506][ T6958] [ 203.304595][ T6957] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 203.420751][ T10] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 203.433176][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.433215][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.433236][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.433276][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.712648][ T6961] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 204.243472][ T10] usb 1-1: config 0 descriptor?? [ 206.753415][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 206.754379][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 206.765882][ T10] usb 1-1: USB disconnect, device number 11 [ 207.543671][ T991] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.783786][ T991] usb 5-1: Using ep0 maxpacket: 16 [ 207.807750][ T991] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 207.828695][ T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.828811][ T991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.887919][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.888188][ T991] usb 5-1: Product: syz [ 207.888203][ T991] usb 5-1: Manufacturer: syz [ 207.888217][ T991] usb 5-1: SerialNumber: syz [ 208.192818][ T991] usb 5-1: 0:2 : does not exist [ 208.307723][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 208.457687][ T1230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.478363][ T10] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 208.490863][ T10] usb 2-1: config 0 has no interfaces? [ 208.535895][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.535923][ T10] usb 2-1: SerialNumber: syz [ 208.541555][ T10] usb 2-1: config 0 descriptor?? [ 208.609242][ T1230] usb 4-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 208.614329][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 208.614356][ T1230] usb 4-1: Product: syz [ 208.614370][ T1230] usb 4-1: SerialNumber: syz [ 208.620838][ T1230] usb 4-1: config 0 descriptor?? [ 208.775657][ T10] usb 2-1: USB disconnect, device number 13 [ 208.807071][ T5745] usb 5-1: USB disconnect, device number 12 [ 208.909580][ T1230] hso 4-1:0.0: Failed to find BULK eps [ 209.062229][ T6997] loop4: detected capacity change from 0 to 256 [ 209.086581][ T6997] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 209.150149][ T6994] loop2: detected capacity change from 0 to 40427 [ 209.170458][ T6994] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384) [ 209.170484][ T6994] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 209.452589][ T7004] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 209.650739][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.651193][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.980583][ T6994] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 209.992416][ T6994] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 209.992650][ T6994] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.225366][ T7012] loop1: detected capacity change from 0 to 2048 [ 210.292665][ T7019] loop4: detected capacity change from 0 to 764 [ 210.361466][ T7012] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.109196][ T33] audit: type=1800 audit(1792069833.540:276): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="file1" dev="loop1" ino=1368 res=0 errno=-22 [ 211.149580][ T7012] CacheFiles: Failed to register: -95 [ 211.323971][ T7026] Symlink component flag not implemented [ 211.324630][ T7026] Symlink component flag not implemented (15) [ 213.354241][ T7022] Process accounting resumed [ 213.403601][ T5605] syz-executor: attempt to access beyond end of device [ 213.403601][ T5605] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 213.438324][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 213.438383][ T5605] Tainted: [L]=SOFTLOCKUP [ 213.438397][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.438418][ T5605] Call Trace: [ 213.438431][ T5605] [ 213.438447][ T5605] dump_stack_lvl+0xe8/0x150 [ 213.438498][ T5605] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 213.438533][ T5605] f2fs_write_end_bio+0x118e/0x15d0 [ 213.438572][ T5605] __submit_merged_bio+0x258/0x6a0 [ 213.438600][ T5605] ? rcu_is_watching+0x16/0xb0 [ 213.438630][ T5605] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 213.438661][ T5605] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 213.438712][ T5605] f2fs_write_data_pages+0x2a13/0x36e0 [ 213.438769][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.438787][ T5605] ? is_bpf_text_address+0x26/0x2b0 [ 213.438817][ T5605] ? arch_stack_walk+0xfb/0x150 [ 213.438861][ T5605] ? add_lock_to_list+0xc7/0x100 [ 213.438884][ T5605] ? lockdep_unlock+0x5c/0xd0 [ 213.438898][ T5605] ? __lock_acquire+0x1511/0x2de0 [ 213.438941][ T5605] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.438973][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 213.438998][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.439018][ T5605] do_writepages+0x338/0x560 [ 213.439045][ T5605] ? preempt_schedule_common+0x7f/0xd0 [ 213.439065][ T5605] ? preempt_schedule_thunk+0x16/0x40 [ 213.439092][ T5605] filemap_fdatawrite+0x1e9/0x2f0 [ 213.439121][ T5605] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 213.439187][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 213.439217][ T5605] f2fs_sync_dirty_inodes+0x471/0x970 [ 213.439252][ T5605] f2fs_write_checkpoint+0x860/0x24d0 [ 213.439309][ T5605] kill_f2fs_super+0x2dc/0x700 [ 213.439335][ T5605] ? rcu_do_enqueue+0x616/0x870 [ 213.439355][ T5605] ? lockdep_hardirqs_on+0x7b/0x110 [ 213.439375][ T5605] ? __pfx_kill_f2fs_super+0x10/0x10 [ 213.439413][ T5605] ? __pfx_call_rcu+0x10/0x10 [ 213.439444][ T5605] ? shrinker_free+0x2a7/0x3b0 [ 213.439472][ T5605] deactivate_locked_super+0xbe/0x110 [ 213.439509][ T5605] cleanup_mnt+0x204/0x2a0 [ 213.439535][ T5605] task_work_run+0x1d9/0x260 [ 213.439559][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 213.439590][ T5605] exit_to_user_mode_loop+0x204/0x770 [ 213.439612][ T5605] ? rcu_is_watching+0x16/0xb0 [ 213.439640][ T5605] do_syscall_64+0x328/0x520 [ 213.439660][ T5605] ? trace_irq_disable+0x3b/0x140 [ 213.439680][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.439699][ T5605] ? clear_bhb_loop+0x70/0xc0 [ 213.439721][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.439740][ T5605] RIP: 0033:0x7f112579f797 [ 213.439758][ T5605] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 213.439774][ T5605] RSP: 002b:00007ffcbe5f3728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 213.439795][ T5605] RAX: 0000000000000000 RBX: 00007f1125834cf3 RCX: 00007f112579f797 [ 213.439808][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe5f37e0 [ 213.439820][ T5605] RBP: 00007ffcbe5f37e0 R08: 00007ffcbe5f47e0 R09: 00000000ffffffff [ 213.439832][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbe5f4870 [ 213.439844][ T5605] R13: 00007f1125834cf3 R14: 000000000003356f R15: 00007ffcbe5f48b0 [ 213.439877][ T5605] [ 213.533847][ T5605] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.533964][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 213.533991][ T5605] Tainted: [L]=SOFTLOCKUP [ 213.533997][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.534018][ T5605] Call Trace: [ 213.534025][ T5605] [ 213.534032][ T5605] dump_stack_lvl+0xe8/0x150 [ 213.534064][ T5605] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 213.534097][ T5605] f2fs_write_end_bio+0x118e/0x15d0 [ 213.534137][ T5605] __submit_merged_bio+0x258/0x6a0 [ 213.534163][ T5605] ? rcu_is_watching+0x16/0xb0 [ 213.534193][ T5605] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 213.534222][ T5605] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 213.534271][ T5605] f2fs_write_data_pages+0x2a13/0x36e0 [ 213.534328][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.534346][ T5605] ? is_bpf_text_address+0x26/0x2b0 [ 213.534383][ T5605] ? arch_stack_walk+0xfb/0x150 [ 213.534432][ T5605] ? add_lock_to_list+0xc7/0x100 [ 213.534457][ T5605] ? lockdep_unlock+0x5c/0xd0 [ 213.534473][ T5605] ? __lock_acquire+0x1511/0x2de0 [ 213.534518][ T5605] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.534555][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 213.534581][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.534602][ T5605] do_writepages+0x338/0x560 [ 213.534630][ T5605] ? preempt_schedule_common+0x7f/0xd0 [ 213.534655][ T5605] ? preempt_schedule_thunk+0x16/0x40 [ 213.534682][ T5605] filemap_fdatawrite+0x1e9/0x2f0 [ 213.534709][ T5605] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 213.534772][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 213.534802][ T5605] f2fs_sync_dirty_inodes+0x471/0x970 [ 213.534837][ T5605] f2fs_write_checkpoint+0x860/0x24d0 [ 213.534893][ T5605] kill_f2fs_super+0x2dc/0x700 [ 213.534918][ T5605] ? rcu_do_enqueue+0x616/0x870 [ 213.534936][ T5605] ? lockdep_hardirqs_on+0x7b/0x110 [ 213.534956][ T5605] ? __pfx_kill_f2fs_super+0x10/0x10 [ 213.534993][ T5605] ? __pfx_call_rcu+0x10/0x10 [ 213.535029][ T5605] ? shrinker_free+0x2a7/0x3b0 [ 213.535056][ T5605] deactivate_locked_super+0xbe/0x110 [ 213.535086][ T5605] cleanup_mnt+0x204/0x2a0 [ 213.535111][ T5605] task_work_run+0x1d9/0x260 [ 213.535133][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 213.535162][ T5605] exit_to_user_mode_loop+0x204/0x770 [ 213.535184][ T5605] ? rcu_is_watching+0x16/0xb0 [ 213.535217][ T5605] do_syscall_64+0x328/0x520 [ 213.535235][ T5605] ? trace_irq_disable+0x3b/0x140 [ 213.535255][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.535274][ T5605] ? clear_bhb_loop+0x70/0xc0 [ 213.535296][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.535313][ T5605] RIP: 0033:0x7f112579f797 [ 213.535331][ T5605] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 213.535347][ T5605] RSP: 002b:00007ffcbe5f3728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 213.535366][ T5605] RAX: 0000000000000000 RBX: 00007f1125834cf3 RCX: 00007f112579f797 [ 213.535379][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe5f37e0 [ 213.535390][ T5605] RBP: 00007ffcbe5f37e0 R08: 00007ffcbe5f47e0 R09: 00000000ffffffff [ 213.535406][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbe5f4870 [ 213.535417][ T5605] R13: 00007f1125834cf3 R14: 000000000003356f R15: 00007ffcbe5f48b0 [ 213.535448][ T5605] [ 213.544221][ T5605] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.666539][ T991] usb 4-1: USB disconnect, device number 12 [ 213.703113][ T5745] loop2: lost filesystem error report for type 5 error -108 [ 214.025956][ T7032] comedi comedi2: comedi_config --init_data is deprecated [ 215.517937][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 215.569767][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 215.657767][ T32] usb 5-1: device descriptor read/64, error -71 [ 215.731630][ T7035] loop1: detected capacity change from 0 to 32768 [ 215.776662][ T7035] gfs2: not a GFS2 filesystem [ 216.379984][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.938429][ T32] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.067964][ T32] usb 5-1: device descriptor read/64, error -71 [ 217.178007][ T32] usb usb5-port1: attempt power cycle [ 217.283409][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 217.547707][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.578810][ T32] usb 5-1: device descriptor read/8, error -71 [ 217.726015][ T7057] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 218.371977][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.372712][ T7068] loop3: detected capacity change from 0 to 2048 [ 218.452450][ T7068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.596489][ T32] usb 5-1: device descriptor read/8, error -71 [ 218.649359][ T7069] loop1: detected capacity change from 0 to 16 [ 218.854869][ T32] usb usb5-port1: unable to enumerate USB device [ 218.974648][ T33] audit: type=1800 audit(1792069841.400:277): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file1" dev="loop3" ino=1368 res=0 errno=-22 [ 219.013285][ T7068] CacheFiles: Failed to register: -95 [ 219.372152][ T7075] Process accounting resumed [ 219.469436][ T7082] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 219.527923][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 220.845689][ T7090] loop1: detected capacity change from 0 to 164 [ 220.872533][ T7090] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 220.892741][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 222.328889][ T7098] CacheFiles: Failed to register: -95 [ 222.862742][ T7099] loop1: detected capacity change from 0 to 2048 [ 223.384009][ T7099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.983285][ T7102] loop4: detected capacity change from 0 to 256 [ 224.092580][ T33] audit: type=1800 audit(1792069846.510:278): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.341" name="file1" dev="loop1" ino=1368 res=0 errno=-22 [ 224.121241][ T7091] Process accounting resumed [ 224.547906][ T7102] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 224.590380][ T7103] Process accounting resumed [ 224.611820][ T7105] FAULT_INJECTION: forcing a failure. [ 224.611820][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 224.611852][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.0.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.611877][ T7105] Tainted: [L]=SOFTLOCKUP [ 224.611883][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.611893][ T7105] Call Trace: [ 224.611901][ T7105] [ 224.611908][ T7105] dump_stack_lvl+0xe8/0x150 [ 224.611943][ T7105] should_fail_ex+0x3eb/0x540 [ 224.611970][ T7105] should_failslab+0xa8/0x100 [ 224.611993][ T7105] __kmalloc_cache_noprof+0x9e/0x600 [ 224.612020][ T7105] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 224.612042][ T7105] ? sctp_association_new+0x89/0x25d0 [ 224.612065][ T7105] ? sctp_association_new+0x89/0x25d0 [ 224.612096][ T7105] sctp_association_new+0x89/0x25d0 [ 224.612124][ T7105] ? __ipv6_addr_type+0x23d/0x2f0 [ 224.612154][ T7105] sctp_connect_new_asoc+0x2e4/0x6b0 [ 224.612183][ T7105] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.612214][ T7105] ? __local_bh_enable_ip+0xd6/0x140 [ 224.612235][ T7105] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 224.612255][ T7105] ? security_sctp_bind_connect+0x7e/0x2c0 [ 224.612282][ T7105] sctp_sendmsg+0x159b/0x2d00 [ 224.612317][ T7105] ? kstrtouint+0x6e/0xe0 [ 224.612348][ T7105] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.612371][ T7105] ? lock_acquire+0x115/0x350 [ 224.612417][ T7105] ? aa_sock_msg_perm+0xf5/0x210 [ 224.612444][ T7105] ? sock_rps_record_flow+0x19/0x350 [ 224.612467][ T7105] ? inet_sendmsg+0x298/0x320 [ 224.612489][ T7105] ? __pfx_inet_sendmsg+0x10/0x10 [ 224.612507][ T7105] sock_sendmsg_nosec+0x10f/0x190 [ 224.612537][ T7105] __sys_sendto+0x408/0x5a0 [ 224.612556][ T7105] ? ksys_write+0x1e6/0x270 [ 224.612578][ T7105] ? __pfx___sys_sendto+0x10/0x10 [ 224.612595][ T7105] ? __mutex_unlock_slowpath+0x731/0x900 [ 224.612629][ T7105] ? fdget+0x1ac/0x250 [ 224.612659][ T7105] ? __pfx_ksys_write+0x10/0x10 [ 224.612684][ T7105] __x64_sys_sendto+0xde/0x100 [ 224.612707][ T7105] do_syscall_64+0x166/0x520 [ 224.612726][ T7105] ? trace_irq_disable+0x3b/0x140 [ 224.612747][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.612766][ T7105] ? clear_bhb_loop+0x70/0xc0 [ 224.612788][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.612807][ T7105] RIP: 0033:0x7f5958b9e559 [ 224.612825][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.612841][ T7105] RSP: 002b:00007f5959981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 224.612861][ T7105] RAX: ffffffffffffffda RBX: 00007f5958e25fa0 RCX: 00007f5958b9e559 [ 224.612875][ T7105] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 224.612886][ T7105] RBP: 00007f5959981090 R08: 0000200000000240 R09: 000000000000001c [ 224.612899][ T7105] R10: 0000000004000854 R11: 0000000000000246 R12: 0000000000000001 [ 224.612909][ T7105] R13: 00007f5958e26038 R14: 00007f5958e25fa0 R15: 00007ffd806b7ff8 [ 224.612941][ T7105] [ 224.899286][ T7110] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 225.169566][ T7107] loop1: detected capacity change from 0 to 2048 [ 225.499398][ T7107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.083722][ T33] audit: type=1800 audit(1792069848.510:279): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="file1" dev="loop1" ino=1368 res=0 errno=-22 [ 226.086529][ T7114] CacheFiles: Failed to register: -95 [ 227.599062][ T7106] Process accounting resumed [ 229.085290][ T7125] loop3: detected capacity change from 0 to 512 [ 229.093650][ T7125] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 229.093667][ T7125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 229.093680][ T7125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.131682][ T7125] EXT4-fs error (device loop3): ext4_init_orphan_info:619: comm syz.3.337: orphan file block 0: bad magic [ 229.131714][ T7125] loop3: lost filesystem error report for type 5 error -117 [ 229.134837][ T7125] EXT4-fs (loop3): mount failed [ 229.137613][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 229.137632][ C0] EXT4-fs (loop3): initial error at time 1792069851: ext4_init_orphan_info:619 [ 229.137653][ C0] EXT4-fs (loop3): last error at time 1792069851: ext4_init_orphan_info:619 [ 230.735475][ T5746] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.157772][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 231.227757][ T5746] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.247034][ T5746] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 231.247084][ T5746] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.247104][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.247126][ T5746] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.247147][ T5746] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.247186][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.995623][ T5746] usb 4-1: can't set config #16, error -71 [ 232.186187][ T7141] [ 232.187796][ T5746] usb 4-1: USB disconnect, device number 13 [ 232.194521][ T7141] ====================================================== [ 232.201527][ T7141] WARNING: possible circular locking dependency detected [ 232.208707][ T7141] syzkaller #0 Tainted: G L [ 232.214884][ T7141] ------------------------------------------------------ [ 232.221891][ T7141] syz.0.351/7141 is trying to acquire lock: [ 232.227768][ T7141] ffff88801cbe14d0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 232.237226][ T7141] [ 232.237226][ T7141] but task is already holding lock: [ 232.244657][ T7141] ffff888056bbcfa0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 232.254379][ T7141] [ 232.254379][ T7141] which lock already depends on the new lock. [ 232.254379][ T7141] [ 232.264765][ T7141] [ 232.264765][ T7141] the existing dependency chain (in reverse order) is: [ 232.273846][ T7141] [ 232.273846][ T7141] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 232.281658][ T7141] __d_alloc_parallel+0xc32/0x1700 [ 232.287275][ T7141] __lookup_slow+0x82/0x2f0 [ 232.292275][ T7141] lookup_slow+0x59/0x80 [ 232.297169][ T7141] link_path_walk+0xd22/0x1910 [ 232.302632][ T7141] path_openat+0x1b7/0x20f0 [ 232.307654][ T7141] do_file_open+0x258/0x570 [ 232.312703][ T7141] do_sys_openat2+0x115/0x200 [ 232.317900][ T7141] __x64_sys_openat+0x138/0x170 [ 232.323284][ T7141] do_syscall_64+0x166/0x520 [ 232.328396][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.334792][ T7141] [ 232.334792][ T7141] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 232.343297][ T7141] __lock_acquire+0x164c/0x2de0 [ 232.348671][ T7141] lock_acquire+0x115/0x350 [ 232.353697][ T7141] down_read+0x45/0x320 [ 232.358379][ T7141] lookup_slow+0x46/0x80 [ 232.363134][ T7141] ovl_lookup_single+0x323/0xe90 [ 232.369989][ T7141] ovl_lookup_layer+0x377/0x440 [ 232.375861][ T7141] ovl_lookup+0x5e5/0x1c80 [ 232.380969][ T7141] lookup_open+0x94b/0x1970 [ 232.386020][ T7141] path_openat+0x70c/0x20f0 [ 232.391306][ T7141] do_file_open+0x258/0x570 [ 232.396601][ T7141] do_sys_openat2+0x115/0x200 [ 232.401940][ T7141] __x64_sys_openat+0x138/0x170 [ 232.407520][ T7141] do_syscall_64+0x166/0x520 [ 232.414398][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.422082][ T7141] [ 232.422082][ T7141] other info that might help us debug this: [ 232.422082][ T7141] [ 232.432942][ T7141] Possible unsafe locking scenario: [ 232.432942][ T7141] [ 232.440396][ T7141] CPU0 CPU1 [ 232.445770][ T7141] ---- ---- [ 232.451118][ T7141] lock(DCACHE_PAR_LOOKUP); [ 232.455867][ T7141] lock(&type->i_mutex_dir_key#5); [ 232.463763][ T7141] lock(DCACHE_PAR_LOOKUP); [ 232.470959][ T7141] rlock(&type->i_mutex_dir_key#5); [ 232.476235][ T7141] [ 232.476235][ T7141] *** DEADLOCK *** [ 232.476235][ T7141] [ 232.484365][ T7141] locks held by syz.0.351/7141: 3, last CPU#1: [ 232.490520][ T7141] #0: ffff888033ce0460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 232.499756][ T7141] #1: ffff888055089740 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_open+0x246/0x1970 [ 232.510177][ T7141] #2: ffff888056bbcfa0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 232.520337][ T7141] [ 232.520337][ T7141] stack backtrace: [ 232.526301][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.0.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.537305][ T7141] Tainted: [L]=SOFTLOCKUP [ 232.541634][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.551691][ T7141] Call Trace: [ 232.554973][ T7141] [ 232.557912][ T7141] dump_stack_lvl+0xe8/0x150 [ 232.562564][ T7141] print_circular_bug+0x2e2/0x300 [ 232.567679][ T7141] check_noncircular+0x12f/0x150 [ 232.572602][ T7141] __lock_acquire+0x164c/0x2de0 [ 232.577452][ T7141] ? lock_acquire+0x115/0x350 [ 232.582474][ T7141] lock_acquire+0x115/0x350 [ 232.587068][ T7141] ? lookup_slow+0x46/0x80 [ 232.591470][ T7141] down_read+0x45/0x320 [ 232.595749][ T7141] ? lookup_slow+0x46/0x80 [ 232.600144][ T7141] ? d_lookup+0x8a/0xa0 [ 232.604491][ T7141] lookup_slow+0x46/0x80 [ 232.608731][ T7141] ovl_lookup_single+0x323/0xe90 [ 232.613875][ T7141] ? __pfx_ovl_lookup_single+0x10/0x10 [ 232.619353][ T7141] ? tomoyo_path_number_perm+0x219/0x5f0 [ 232.624984][ T7141] ? hook_capable+0x1c3/0x5e0 [ 232.629911][ T7141] ? tomoyo_path_number_perm+0x574/0x5f0 [ 232.635794][ T7141] ovl_lookup_layer+0x377/0x440 [ 232.640725][ T7141] ovl_lookup+0x5e5/0x1c80 [ 232.645130][ T7141] ? apparmor_capable+0x126/0x170 [ 232.650773][ T7141] ? generic_permission+0x32e/0x660 [ 232.655981][ T7141] ? __pfx_ovl_lookup+0x10/0x10 [ 232.660821][ T7141] ? __pfx_ovl_permission+0x10/0x10 [ 232.666203][ T7141] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 232.672014][ T7141] ? from_kgid+0x1c6/0x660 [ 232.676420][ T7141] ? bpf_lsm_inode_create+0x9/0x20 [ 232.681744][ T7141] ? security_inode_create+0xc3/0x340 [ 232.687195][ T7141] lookup_open+0x94b/0x1970 [ 232.693058][ T7141] path_openat+0x70c/0x20f0 [ 232.701899][ T7141] do_file_open+0x258/0x570 [ 232.708038][ T7141] ? __pfx_do_file_open+0x10/0x10 [ 232.716007][ T7141] ? _raw_spin_unlock+0x28/0x50 [ 232.722099][ T7141] ? alloc_fd+0x6af/0x760 [ 232.726885][ T7141] do_sys_openat2+0x115/0x200 [ 232.732012][ T7141] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.737425][ T7141] ? kfree+0x4d/0x650 [ 232.741614][ T7141] ? rcu_is_watching+0x16/0xb0 [ 232.746403][ T7141] __x64_sys_openat+0x138/0x170 [ 232.751249][ T7141] do_syscall_64+0x166/0x520 [ 232.755832][ T7141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.761887][ T7141] ? clear_bhb_loop+0x70/0xc0 [ 232.766563][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.772437][ T7141] RIP: 0033:0x7f5958b9e559 [ 232.776833][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.796420][ T7141] RSP: 002b:00007f5956dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.804820][ T7141] RAX: ffffffffffffffda RBX: 00007f5958e26180 RCX: 00007f5958b9e559 [ 232.812772][ T7141] RDX: 000000000000275a RSI: 0000200000000800 RDI: ffffffffffffff9c [ 232.820725][ T7141] RBP: 00007f5958c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 232.829718][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.837798][ T7141] R13: 00007f5958e26218 R14: 00007f5958e26180 R15: 00007ffd806b7ff8 [ 232.845893][ T7141] [ 232.979044][ T7143] overlayfs: failed lookup in lower (newroot/82, name='file0', err=-40): overlapping layers